Pennsylvania Cannabis Software

Pennsylvania Cannabis License Requirements

Pennsylvania operates a medical-only cannabis program established by the Medical Marijuana Act, signed into law on April 17, 2016 (35 P.S. §§ 10231.101—10231.2110). The program is administered by the Pennsylvania Department of Health (DOH), Bureau of Medical Marijuana. All commercial permits grower/processor, dispensary, clinical registrant, and approved laboratory are issued by the DOH. Implementing regulations are codified at 28 Pa. Code Part IXa, with final-form regulations published in the Pennsylvania Bulletin on March 4, 2023 and currently in effect. Recreational cannabis remains illegal in Pennsylvania.

Pennsylvania's program uses a tightly capped, regionally distributed permitting structure. The DOH issued permits across six geographic medical marijuana regions covering the entire state, ensuring patient access throughout the Commonwealth. Permit caps were established both in the Act and the final-form regulations, and with the original allotment of permits now largely allocated the program is substantially closed to new market entrants except through permit transfers and changes in ownership of existing permitted entities.

Grower/Processor Permit

A grower/processor permit authorizes a permitted entity to grow and process medical marijuana at its licensed facility and to sell medical marijuana and medical marijuana products to dispensaries, other grower/processors, and approved laboratories. Grower/processors may not sell directly to patients or caregivers. Before a grower/processor may begin any operations, the DOH must inspect the facility and formally determine the entity to be operational; the entity must also submit a full and complete plan of operation at that time covering all cultivation, processing, packaging, labeling, handling, tracking, transporting, storing, and recall procedures.

The DOH may issue permits to no more than 25 applicants for grower/processor permits, and no more than one individual grower/processor permit may be issued to one person. A grower/processor may not employ any individual under 18 years of age at its facility. Additionally, no more than five individual grower/processors may also be issued a dispensary permit, meaning that vertical integration across both license types is available only to a limited number of entities.

All medical marijuana products must be packaged and labeled at the grower/processor facility before sale. Packages must minimize exposure to oxygen, must be child-resistant and tamper-evident, and must clearly distinguish the contents from those of any other package of similar appearance. Packages must list all product ingredients and include warnings for known allergens. Each process lot must receive a unique identifier. The original seal of a package may not be broken except for quality control testing at an approved laboratory, adverse loss investigations by the DOH, or by the purchasing dispensary in DOH-approved circumstances. A grower/processor may use only those pesticides approved by the Secretary of Agriculture and published in the Pennsylvania Bulletin.

Grower/processors must maintain comprehensive inventory controls and conduct monthly inventory reviews of growing plants and stored products. All inventory, receipt, sale, disposal, and recall events must be logged in the DOH-specified electronic tracking system in real time. Grower/processors may transport seeds, immature plants, marijuana plants, postharvest material, and products to other grower/processors, dispensaries, and approved laboratories. All transport must occur between 7 a.m. and 9 p.m. unless otherwise approved by the DOH. Grower/processors may contract with a third-party delivery contractor provided the contractor complies with all transport rules.

Fees under 28 Pa. Code § 1141a.28: The initial permit application fee is $10,000, which is non-refundable. The initial permit fee is $200,000, which is refundable if the permit is not granted. The permit renewal fee is $10,000, which is refundable if the renewal permit is not granted. Capital requirements mandate that a grower/processor demonstrate at least $2,000,000 in capital, with a minimum of $500,000 on deposit in a financial institution. All fees must be submitted by certified or cashier's check or money order payable to the Commonwealth.

Dispensary Permit

A dispensary permit authorizes a permitted entity to purchase medical marijuana products from a grower/processor and to dispense them to registered qualifying patients and their designated caregivers. Dispensaries are the only licensed entities authorized to sell medical marijuana products directly to patients. A dispensary permit may be used to provide medical marijuana at no more than three separate locations, as approved in the initial permit application or through a subsequently approved application for additional dispensary locations.

The DOH may issue permits to no more than 50 applicants for dispensary permits, and no more than five individual dispensary permits may be issued to one person. The DOH distributes dispensary permits across the six medical marijuana regions of the state to promote geographic patient access.

A dispensary must have a medical professional on the premises at all times during operating hours. A "medical professional" as defined in 28 Pa. Code § 1141a.21 means a physician, pharmacist, physician assistant, or certified registered nurse practitioner employed by the dispensary. This individual is responsible for verifying patient certifications and consulting with patients regarding their medical marijuana products. This is a mandatory operational requirement, not discretionary staffing. Dispensaries that fail to maintain a qualified medical professional on-site during operating hours are out of compliance with this regulation.

Dispensaries must verify the validity of a patient's or caregiver's DOH-issued identification card before dispensing any medical marijuana product. A patient may obtain up to a 90-day supply of individual doses of medical marijuana from a dispensary. Medical marijuana products must remain in their original grower/processor packaging; repackaging at the dispensary level is prohibited except in specific circumstances authorized by the DOH. Dispensaries may only sell DOH-approved medical marijuana products obtained from permitted grower/processors. All dispensing transactions must be logged in the DOH's electronic tracking system in real time, including verification of the identification card, product dispensed, and quantity.

Fees under 28 Pa. Code § 1141a.28: The initial permit application fee is $5,000, which is non-refundable. The initial permit fee is $30,000 per dispensary location, which is refundable if the permit is not granted. The permit renewal fee is $5,000, which is refundable if the renewal permit is not granted. Capital requirements mandate that an applicant demonstrate at least $150,000 in capital.

Clinical Registrant

A clinical registrant is a unique permit category that combines grower/processor and dispensary functions with a research mandate. A clinical registrant holds both a grower/processor permit and a dispensary permit, issued through the clinical registrant approval process rather than through the standard permit application tracks. The DOH may approve no more than ten clinical registrants. Each approved clinical registrant may dispense medical marijuana at up to six separate locations, with the total number of dispensing locations across all clinical registrants not to exceed 60. Clinical registrant permits and dispensary locations are issued separately from and in addition to the standard 25 grower/processor permits and 50 dispensary permits.

A clinical registrant must have a contractual relationship with an Academic Clinical Research Center (ACRC) through which the ACRC provides advice regarding patient care, clinical outcomes, and research. A clinical registrant may not begin dispensing until the DOH has inspected and deemed both the grower/processor and dispensary facilities operational, and until the clinical registrant demonstrates that it will be able to begin an approved research program or research study within six months of the DOH determining the dispensary operational. Clinical registrant permits expire upon the non-renewal, revocation, or suspension of the clinical registrant's approval by the DOH.

A clinical registrant is subject to the same rights and obligations as a standard medical marijuana organization holding grower/processor and dispensary permits, except as modified by the clinical registrant-specific provisions of 28 Pa. Code Chapter 1211A and the relevant sections of the Act. A clinical registrant may not hold an additional grower/processor or dispensary permit outside its clinical registrant status.

Approved Laboratory

An approved laboratory is authorized by the DOH to identify, collect, handle, and conduct testing on samples from grower/processors, as well as test samples from the DOH used in the growing and processing of medical marijuana. All medical marijuana products must be tested and approved by a DOH-approved laboratory before they may be sold to a dispensary or distributed to patients. Approved laboratories must maintain accreditation to ISO 17025 standards from an ISO-recognized accreditation body. Laboratories must be operationally independent from grower/processors and dispensaries no common ownership, financial interest, or compensation arrangement with a grower/processor, dispensary, or clinical registrant is permitted.

Required testing under 28 Pa. Code Chapter 1171A includes a full cannabinoid potency profile (THC, THCA, CBD, CBDA, CBG, CBN, and CBC), terpene identification and quantification, residual solvents, pesticides, heavy metals (arsenic, cadmium, lead, and mercury), and microbiological contaminants. Stability testing is required every six months for the duration of a product's labeled expiration date, and again within six months of expiration if the product remains in inventory at a dispensary as confirmed by the seed-to-sale tracking system. Grower/processors must retain a sample from all products obtained from a harvest batch and request that an approved laboratory perform stability testing on that sample on the required schedule.

Application Requirements

All permit applications grower/processor and dispensary must be submitted in accordance with the DOH's application process and include the following at minimum. An application must identify all principals, operators, and financial backers of the applicant, including individuals and entities with direct or indirect ownership or financial interests. All such individuals are subject to criminal background checks. Fingerprints must be submitted to the Pennsylvania State Police, which forwards them to the Federal Bureau of Investigation for federal criminal history review. Background checks are required at initial application and at each renewal.

All applications must demonstrate compliance with local municipal zoning requirements for the proposed facility location. Applicants must establish that they possess or can expeditiously obtain the right to use the proposed site and facility. An applicant must demonstrate the ability to maintain effective security, surveillance, and accounting control measures to prevent diversion, abuse, and other illegal conduct.

Every permit application must include a diversity plan as required under 28 Pa. Code § 1141a.32. The DOH has established diversity goals that apply to the program, and the quality and content of the diversity plan is a factor in permit application evaluation. Applications must also include the capital documentation required for the respective permit type verified proof of the minimum capital threshold with at least the required liquid portion on deposit in a financial institution for grower/processor applicants.

A fee of $250 by certified or cashier's check or money order applies to applications for change in ownership of a medical marijuana organization, applications for change in location of an operational facility, and applications for approval of an alteration of a facility. Any change in ownership or change in control of a permitted medical marijuana organization after the initial permit approval requires a prior application to and approval from the DOH before the change takes effect.

Permit Terms and Renewal

All permits grower/processor and dispensary are valid for one year from the date of issuance. An existing permit becomes immediately invalid upon expiration if the medical marijuana organization has not filed a timely permit renewal application and remitted the required renewal fee. Because the DOH requires approximately four months to complete a permit renewal review, permittees should submit renewal applications well in advance of their permit expiration date. If a medical marijuana organization timely submits its renewal application and fee, the DOH may administratively extend the existing permit from the expiration date until the renewal review is complete, preventing an operational gap. If renewal is denied, the organization must cease operations and, depending on permit type, dispose of all remaining marijuana, plant matter, and equipment or return medical marijuana products to the originating grower/processor.

Electronic Tracking System and Seed-to-Sale

All grower/processors, dispensaries, and approved laboratories are required to use the DOH-specified electronic tracking system for seed-to-sale tracking of all medical marijuana from the seed or immature plant stage through final dispensing to a patient or disposal as waste. Grower/processors must log the receipt, use, and sale of all marijuana plant material and products, funds received, waste disposal, and product recalls. Dispensaries must log the receipt of all products from a grower/processor, the verification of each patient and caregiver identification card, all dispensing transactions, waste disposal, and product recalls. The tracking system must account for all inventory movements and maintain chain of custody documentation throughout the supply chain.

Approved Forms of Medical Marijuana

The Medical Marijuana Act and DOH regulations authorize specific product forms. Approved forms include dry leaf or plant material, liquid including tinctures and oils, pills and capsules including orally dissolving formulations (ODFs), topical applications, concentrates, and products designed for vaporization. Nebulization generation of medical marijuana in the form of fine spray for medicinal inhalation is also an authorized delivery method. Dispensaries may not dispense any product that has not been reviewed and approved by the DOH. A grower/processor must obtain DOH approval for each distinct product it proposes to sell, including approvals covering potency, formulation, labeling, and packaging.

As of March 17, 2026, the Commonwealth Court issued a temporary injunction (AES Compassionate Care v. Bogen, No. 176 MD 2025) preventing the DOH from enforcing the provision of 28 Pa. Code § 1151[a].27(f)(iii) that required botanically-derived terpenes added to vaporization products to be permitted by the FDA for the applicable route of administration and dosage. As a result, the DOH will not apply that specific criterion when reviewing requests to approve vaporization products containing botanically-derived terpenes. Operators with vaporization product approvals pending or planned should monitor this litigation, as the injunction remains in effect only until further order of the Court.

Key Compliance Considerations

Several features of Pennsylvania's medical marijuana regulatory environment require careful operational planning by permit holders and prospective entrants.

First, the market is substantially closed to new applicants. The 25 grower/processor permits and up to 50 dispensary permits established under the Act have been largely allocated. No open application period for new standard permits is currently announced by the DOH. New market entrants may access the program only through the acquisition of an existing permitted entity, which requires a change of ownership application and DOH approval. Any change in control defined as acquisition of a controlling interest in a permittee either at once or over a 12-consecutive-month period triggers this process and requires prior DOH approval before the change takes effect. Completing a transaction without prior DOH approval is an independent compliance violation.

Second, the medical professional requirement at dispensaries is an active compliance obligation, not just an employment preference. A physician, pharmacist, PA, or CRNP must be physically present and available to verify patient certifications and consult with patients at all times the dispensary is open. Coverage gaps including unexpected absences, staff turnover, or scheduling errors put a dispensary in violation of 28 Pa. Code § 1161A during the gap. Multi-location dispensaries must maintain this standard independently at each operational location.

Third, the packaging integrity requirement means that dispensaries cannot repackage products, cannot separate product quantities from original G/P packages for sale, and cannot modify labels affixed by the grower/processor. Dispensaries are responsible for maintaining original packaging integrity through the point of sale to the patient. Violations of this requirement can implicate both the dispensary's permit and the grower/processor that supplied the product.

Fourth, the diversity plan is evaluated as part of the application, not simply checked as a box. The quality of the diversity plan is a substantive component of DOH review for any permit application or renewal that requires it. This includes applications for changes in location and ownership.

Fifth, the one-year permit term creates significant operational risk if renewal deadlines are missed. Because a permit becomes immediately invalid on expiration without a timely renewal application, a missed deadline even by a single day requires the organization to cease all operations, including dispensing, growing, and processing, until the situation is resolved. Given the DOH's four-month review window, permittees should treat renewal as a continuous operational priority rather than a year-end task.

Finally, the terpene vaporization product litigation is live and has direct product approval implications. The March 2026 injunction prevents the DOH from using the FDA-permitted-ingredients criterion for botanically-derived terpenes in vaporization products, which had previously been a basis for product approval denials. Grower/processors operating in the vaporization product space should track this litigation and consult with counsel, as the injunction is subject to modification or dissolution on further proceedings.