Obtaining a cannabis license in Maine is only the beginning. Licensed adult-use operators must maintain continuous compliance with OCP regulations under 18-691 C.M.R. Chapter 1 covering every aspect of operations. Non-compliance can result in fines, license suspension, or revocation. This page outlines the key ongoing requirements — and the regulatory gap that makes Maine's compliance landscape uniquely complex.

Metrc Seed-to-Sale Tracking

Every licensed adult-use cannabis business must use Maine's Metrc (Marijuana Enforcement Tracking Reporting Compliance) seed-to-sale tracking system. Metrc is the backbone of regulatory compliance and records:

• Plant tagging — Every cannabis plant must be individually tagged and tracked from seed or clone through harvest
• Inventory management — All inventory movements, processing activities, and transfers between licensees recorded in real time
• Waste disposal — Cannabis waste tracked, documented, and disposed of according to OCP protocols
• Point-of-sale transactions — Retail sales recorded to enforce purchase limits and generate compliance data
• Transport manifests — All shipments between licensed facilities require documented Metrc manifests

Failure to maintain accurate Metrc records is one of the most common compliance violations and can trigger OCP enforcement actions. Staff must be trained on Metrc operations and data entry.

Mandatory Testing

All adult-use cannabis products must be tested by a licensed independent laboratory before sale. Maine has only 4 licensed testing facilities (as of December 2024). Compliance with testing requirements includes:

• Submitting representative samples from every production batch via a licensed sample collector
• Maintaining chain of custody documentation through Metrc
• Quarantining products until test results are received and passed
• Retaining Certificates of Analysis (COAs) for all products sold
• Initiating recalls for any products found non-compliant after sale

Required testing categories include potency, pesticides, heavy metals, microbial contamination, residual solvents, mycotoxins, and moisture content. See Lab Testing for the full testing framework and the medical testing gap.

Security Requirements

Cannabis businesses must maintain comprehensive security systems as specified in their OCP-approved security plans:

Video Surveillance

• Continuous recording of all areas where cannabis is cultivated, stored, processed, or sold
• Camera coverage of all entrances, exits, and loading areas
• Minimum video retention period as specified by the OCP
• Recordings must be made available to the OCP upon request

Access Controls

• Limited-access areas restricted to authorized employees only
• Electronic access control systems (key cards, PIN codes, or biometrics)
• Visitor logs for all non-employee access to restricted areas
• Background checks for all employees with cannabis access

Alarm Systems

• Intrusion detection covering all facility perimeters
• Duress/panic alarms accessible to employees
• Integration with a licensed alarm monitoring company

Packaging and Labeling

Cannabis products must meet OCP packaging and labeling standards under Chapter 1:

• Child-resistant packaging — All products must be sold in containers meeting child-resistance standards
• Universal cannabis symbol — Must be clearly displayed on all packaging
• Required label information — Product name, license number, THC/CBD content, Metrc tag, batch number, testing lab, harvest date, ingredients, and warnings (see Reading Labels)
• No appeal to minors — Packaging cannot use cartoons, characters, or imagery that could appeal to individuals under 21
• No misleading health claims — Products cannot be marketed as having specific medical benefits

Advertising and Marketing

Maine cannabis businesses face advertising restrictions:

• No advertising where more than 30% of the expected audience is under 21
• No claims of health benefits in marketing materials
• No imagery or messaging that could appeal to minors
• Required warnings and disclaimers on all advertising
• Digital advertising must include age-gating mechanisms

Record-Keeping and Reporting

Licensed businesses must maintain detailed records and submit regular reports to the OCP:

• Financial records — Income, expenses, tax filings, and bank records
• Employee records — Hiring, training documentation, background checks, terminations
• Inventory records — Metrc reconciliation reports, discrepancy reports, waste disposal logs
• Incident reports — Security incidents, theft, diversion, product recalls
• Compliance records — Documentation demonstrating adherence to SOPs and OCP regulations

Records must be retained for the period specified by the OCP and made available for inspection upon request.

Employee Requirements

• All employees must be at least 21 years old for adult-use operations
• Background checks are required for all employees
• Employees must complete training covering product knowledge, compliance procedures, responsible sales, and ID verification
• Retailers must verify age for every transaction using valid government-issued identification

Tax Compliance

Adult-use cannabis businesses must comply with the tax structure that was restructured effective January 1, 2026:

See Taxes & Revenue for the full tax structure and revenue data.

OCP Enforcement

The OCP conducts compliance inspections, both scheduled and unannounced. Violations can result in:

• Warning letters and corrective action plans
• Monetary fines
• License suspension
• License revocation

Maintaining proactive compliance — including regular internal audits, updated SOPs, and ongoing employee training — is the best defense against enforcement actions.