Iowa Cannabis Software

How Iowa Regulates Cannabis Licenses

Iowa operates one of the most tightly controlled cannabis programs in the United States. Rather than a broad commercial licensing framework, the state governs cannabis activity under the Medical Cannabidiol Act, codified at Iowa Code Chapter 124E, with operational requirements administered through 641 Iowa Administrative Code (IAC) Chapter 154. The program is overseen by the Iowa Department of Health and Human Services (HHS), specifically through its Bureau of Cannabis Regulation. A nine-member Medical Cannabidiol Board composed of licensed practitioners across neurology, pain management, gastroenterology, oncology, psychiatry, pediatrics, family medicine, and pharmacy, plus one law enforcement representative advises the department on licensing, qualifying conditions, and allowable product forms.

Iowa issues two types of commercial cannabis licenses: the Medical Cannabidiol Manufacturer License and the Medical Cannabidiol Dispensary License. By statute, the state may license no more than two manufacturers and no more than five dispensaries statewide. Adult-use cannabis remains illegal in Iowa. Home cultivation is prohibited for all persons, including registered patients. Smoking or combustion of cannabis is prohibited by statute for any purpose, including medical use. Edible cannabis products are explicitly prohibited from manufacture or sale.

All licensed activity in Iowa must be tracked through the department's secure, statewide sales and inventory tracking system, which operates 24 hours per day, seven days per week. This system tracks inventory, crop inputs, plant material transport, laboratory samples, dispensary sales, and patient purchase totals in real time. Every licensed manufacturer and dispensary is required to use this system and report specified data on the schedules defined in IAC Chapter 154.

Medical Cannabidiol Manufacturer License

The Medical Cannabidiol Manufacturer License authorizes the cultivation, harvesting, processing, packaging, and distribution of medical cannabidiol products to licensed dispensaries within Iowa. Manufacturers may not sell or distribute medical cannabidiol to any entity other than a dispensary licensed by the Iowa Department of HHS. Distribution outside of Iowa is prohibited.

Each entity applying for a manufacturer license must submit a nonrefundable application fee of $7,500 to the department. Applicants are also required to pay a deposit of $10,000 per business owner to the Iowa Department of Public Safety to cover the cost of background investigations and national criminal history background checks. Background investigation costs are deducted from the deposit; any excess is returned or retained as mutually agreed. Licensed manufacturers additionally pay a deposit of $200 per prospective employee for background investigations conducted prior to hire.

Once licensed, manufacturers pay an annual license fee not to exceed $100,000, assessed with the notice of license approval and payable to the department no later than December 1 of each year. Licenses renew annually. To maintain an active license, a manufacturer must submit a renewal application at least six months before the license expires. The department must issue a decision on the renewal by August 1 of the year in which the renewal application is submitted. A manufacturer license is not assignable or transferable to another entity, except in the context of an intra-organization restructuring, which requires department review and approval.

The department evaluates manufacturer license applications based on several statutory factors under Iowa Code section 124E.6, including the applicant's technical expertise with medical cannabidiol, the qualifications of employees, long-term financial stability, the ability to implement appropriate security measures, demonstrated capacity to meet production needs across the range of qualifying debilitating conditions, and the applicant's projection of fees on patients.

Manufacturers must operate in an enclosed, locked facility at a physical address provided to the department during the licensure process. A manufacturer may not operate at the same physical location as a licensed dispensary. No manufacturing, cultivation, harvesting, packaging, or processing facility may be located within 1,000 feet of a public or private school that existed before the date of the manufacturer's licensure.

Iowa law explicitly prohibits manufacturers from producing edible medical cannabidiol products defined as food items containing medical cannabidiol and from introducing synthetic or semisynthetic cannabinoids into any product. This prohibition includes cannabinoids such as delta-8 THC that are derived from hemp through chemical conversion. Allowable product forms are limited to oral forms (tablets, capsules, liquids, tinctures, and sublingual preparations), topical forms (gels, ointments, creams, lotions, and transdermal patches), inhalable forms limited to nebulizable and vaporizable preparations only, and rectal or vaginal suppositories. No smokable or combustible form of medical cannabidiol may be produced.

Manufacturers must contract with an independent laboratory accredited to ISO/IEC 17025 and holding both a DEA controlled substance registration certificate and a certificate of registration from the Iowa Board of Pharmacy to conduct spot-check testing of all medical cannabidiol produced. Testing covers cannabinoid content, residual solvents and processing chemicals, pesticides, microbiological impurities, and heavy metals. All testing costs are borne by the manufacturer. Testing results must be reported to both the manufacturer and the department.

Each manufacturer must reconcile its physical inventory with the state tracking system at least every two calendar weeks. Suspected diversion of medical cannabidiol must be reported to the department within 72 hours of discovery. All manifests related to transport must be retained for a minimum of five years. Financial records, personnel records, and quality assurance test results must also be maintained for at least five years and produced to the department upon request. Controlled access system data and visitor manifests must be retained for a minimum of one year.

All manufacturers are subject to reasonable inspection by the department, department-approved independent consultants, or other agencies. Upon notification of a non-inventory deficiency, a manufacturer has up to 30 days to submit a corrective action plan to the department. For inventory reconciliation deficiencies, the timeline compresses to two business days. Civil penalties of up to $1,000 per violation may be assessed for violations of Iowa Code Chapter 124E or IAC Chapter 154, in addition to other applicable penalties including suspension or revocation.

Medical Cannabidiol Dispensary License

The Medical Cannabidiol Dispensary License authorizes the retail dispensing of medical cannabidiol products to registered patients and their designated primary caregivers. Dispensaries are located based on geographical need throughout the state to improve patient access. Each entity applying for a dispensary license must pay a nonrefundable application fee of $5,000 and submit the same $10,000 per-owner deposit to the Department of Public Safety for background investigations, plus $200 per prospective employee.

Licensed dispensaries pay an annual license fee not to exceed $50,000, assessed with the notice of license approval and payable no later than December 1. Like manufacturer licenses, dispensary licenses renew annually, require a renewal application at least six months before expiration, and are not assignable or transferable except through department-approved intra-organization restructuring.

A dispensary may not operate at the same physical location as a manufacturer and may not be located within 1,000 feet of a public or private school that existed before the dispensary's licensure. Dispensaries must employ a licensed pharmacist or pharmacy technician licensed or registered pursuant to Iowa Code Chapter 155A for the purpose of making dosing recommendations to patients.

Prior to dispensing any medical cannabidiol, a dispensary must verify the patient's or primary caregiver's identity using acceptable photo identification, confirm a valid registration card and active status in the state tracking system, and check the patient's 90-day total THC purchase total against their authorized limit. Dispensaries may not dispense more than a combined total of 4.5 grams of total tetrahydrocannabinol to a patient and the patient's primary caregiver in a 90-day period unless the patient's certifying healthcare practitioner has issued a written waiver either because the patient has a terminal illness with a life expectancy under one year, or because the practitioner has determined that 4.5 grams is insufficient to treat the patient's debilitating condition. Each dispensing transaction must be assigned a unique tracking number and recorded in the secure inventory tracking system within one business day of the sale.

Dispensaries must provide access to all product forms produced by each licensed manufacturer. They may not repackage medical cannabidiol or remove a manufacturer's label. They may not receive or distribute medical cannabidiol from any entity other than a department-licensed manufacturer. Transport of medical cannabidiol by a dispensary is prohibited unless specifically approved by the department, and any approved transport must be logged in the state tracking system.

Dispensary inventory must be reconciled with the state tracking system at least once per calendar week. Suspected diversion must be reported to both the department and law enforcement within 24 hours of discovery. Dispensaries must maintain a separate secure storage area for medical cannabidiol awaiting return to a manufacturer including outdated, damaged, mislabeled, or contaminated product until the manufacturer collects it. Dispensaries are required to accept medical cannabidiol waste returned by patients or primary caregivers at no charge.

Security Requirements

Both manufacturers and dispensaries must implement a full suite of security infrastructure under IAC Chapter 154. This includes a computer-controlled, closed-circuit video surveillance system that operates continuously, 24 hours a day, seven days a week, and covers all phases of production (for manufacturers), all areas containing plant material or medical cannabidiol, all points of entry and exit, the entrance to the surveillance control room, and parking areas. Cameras must produce clear color images with an embedded date-and-time stamp, and must continue to operate during a power outage. Video recordings must be retained for a minimum of 60 days and made available to the department upon request.

A professionally monitored security alarm system providing both intrusion and fire detection is required at all facility entrances and exits, rooms with exterior windows or walls, roof hatches, skylights, and storage rooms. The system must remain operational during power outages and must be inspected and tested by a qualified alarm vendor annually, with documentation available to the department upon request.

Access to all restricted areas must be controlled through a system that maintains a log of individuals with approved access, tracks times of entry and exit, stores this data for at least one year, and limits access in the event of a power failure. All employees must carry visible identification badges at all times while on the premises or in a transport vehicle. Employee access must be immediately revoked and identification cards destroyed upon termination or resignation.

A required sign must be posted in capital letters at every entrance: "THESE PREMISES ARE UNDER CONSTANT VIDEO SURVEILLANCE."

Advertising and Marketing Restrictions

Iowa imposes significant restrictions on how manufacturers and dispensaries may market their products. All advertisements must be submitted to the department at or before the time of dissemination, and the department retains the right to require changes or removal of any public advertisement. Neither manufacturers nor dispensaries may engage in any advertising, marketing, or branded educational activities within 1,000 feet of a school.

Advertisements may not include colloquial references to cannabis, names of cannabis plant strains, content that appeals to or depicts individuals under the age of 18, references to recreational use, unsubstantiated medical claims, statements claiming government agency endorsement, or depictions of cannabis paraphernalia. Business names and logos may not include images of cannabis, strain names, or medical symbols resembling established medical associations. Manufacturers and dispensaries must display pricing and hours of operation on their websites.

Key Compliance Considerations for Iowa Operators

Iowa's Medical Cannabidiol Program contains several structural rules that operators must understand before applying for or operating under a license. The manufacturer license cap is set at two statewide by statute, and the dispensary cap is set at five. These limits are not administrative they require a legislative change to expand. Operators should also be aware that a license issued in Iowa is not transferable to another entity; any change in ownership structure requires department review and approval, and attempting to assign or sell a license without authorization is grounds for revocation.

Iowa maintains strict reciprocity rules with an important limitation: while patients holding a valid out-of-state medical cannabis card retain an affirmative defense for possession of allowable forms of medical cannabidiol, out-of-state patients may not purchase medical cannabidiol from Iowa dispensaries. This distinction matters operationally a dispensary that dispenses to an out-of-state cardholder is in violation of the program even if the patient holds an otherwise valid card.

The prohibition on synthetic or semisynthetic cannabinoids is written broadly and explicitly includes any THC created from cannabidiol a direct prohibition on delta-8 THC and similar compounds derived via chemical conversion. No product containing these compounds may be manufactured or sold through the Iowa Medical Cannabidiol Program. Separately, any manufacturer that discontinues operations for more than 30 days without department approval faces potential license suspension, and any manufacturer or dispensary planning a full closure must provide the department with at least six months advance written notice.

Civil penalties under Iowa Code section 124E.16 are set at up to $1,000 per violation for licensed manufacturers and dispensaries, in addition to the department's authority to suspend or revoke a license for a range of grounds including submission of false information, failure to maintain diversion controls, failure to correct deficiencies within required timeframes, or any criminal, civil, or administrative action taken against the license in another state.