Rules for your license
Lab
45 rules
Licensing & registration
- ☐OBN 475:10-1-9(f)–(g)
Beneficial owner disclosure
Disclose every beneficial owner, and anyone else with an ownership interest, to OBN. Arrangements meant to get around state or federal law are prohibited.
- ☐OBN 475:10-1-9; 63 O.S. 2-302
Annual OBN registration
You need an OBN Certificate of Registration before handling medical marijuana. Re-register no later than Nov 1 every year. OBN may allow a 30-day grace period before an expired registration goes inactive. Failing to register violates Oklahoma's Uniform Controlled Dangerous Substances Act.
- ☐OBN 475:10-1-4
Separate registrations and grow locations
Each separate group of activities needs its own registration. A storage-only warehouse can be covered if it's listed on your application; tell OBN within one business day if you add one. Only one grow registration is issued per property (county parcel) unless OBN grants a waiver, and different registrants' grows must be clearly separate.
- ☐OMMA 442:10-5-1.1; 5-2(e)(2)
License holder responsibilities
Post your current license where it can be seen, keep your OMMA account details accurate, and let inspectors into the whole premises and your vehicles. Get OMMA's approval before a material change, such as a new address or new owners.
- ☐OMMA 442:10-5-16(p)
Don't lend your license
Don't let anyone else use your license number or operate under your license.
- ☐OMMA 442:10-5-1.1(7)–(8)
Renewals, fees and account upkeep
Keep your OMMA account information current and renew with fees paid on time.
- ☐OMMA 442:10-5-3.2
Who can't hold a commercial license
No license for owners under 25, anyone with a disqualifying conviction (including corporate officers, directors and stockholders), owners with unpaid marijuana business taxes, law enforcement and OMMA staff, local officials where you're located, caregivers whose authority was revoked, or anyone who ran a business that lost its license for cause within 5 years.
Inventory & Metrc
- ☐OMMA 442:10-5-6(g)(3),(8)
Metrc offboarding deadlines
Name a new administrator within 30 business days of a change, and remove a user's access within 3 business days after they leave or stop using the system.
- ☐OMMA 442:10-5-6(g)
Metrc administrators and user access
At least one owner or manager must be a Metrc administrator. Assign a replacement administrator within 30 business days of a change. Remove a departing user's access within 3 business days. Every user needs their own login; never share credentials.
Records & inspections
- ☐OBN 475:25-1-4(a)
OBN records: 7 years for marijuana
Keep medical marijuana inventories and records at least 7 years and make them available to authorized officers for inspection and copying.
- ☐OMMA 442:10-5-6(j)
Your Metrc data is confidential
Monthly reports, inventory tracking data and seed-to-sale data are confidential and exempt from the Oklahoma Open Records Act.
- ☐OMMA 442:10-5-6(i)(6)–(7); 5-1.1(4)
30 days to correct, then $500 per violation
Correct any correctable violation within 30 days of written notice and follow any corrective-action directive. Failing to correct within 30 days carries a $500 fine per violation, plus other penalties.
- ☐OMMA 442:10-5-16(g)–(i)
No false statements or threats
Never give OMMA false information. Don't threaten or intimidate OMMA staff, patients or employees. Do what you told OMMA you would do in your application and filings.
- ☐OMMA 442:10-5-4; 5-6(i)
Inspections, audits and correction notices
Applying for a license is consent to on-site inspection during business hours. Answer a written request for records within 10 business days. Fix a correctable violation within 30 days of a written notice, or pay a $500 fine per violation on top of other penalties.
- ☐OMMA 442:10-5-6(b)(2)
Operational records to keep
Keep cultivation, processing, transport, sampling and testing records: sample field logs, patient processing logs, safety data sheets and chemical inventory, manifests, agent licenses, COAs, equipment inspections, training materials and SOPs.
- ☐OMMA 442:10-5-6(b)
Record retention: 7 years
Keep records on-site and readily accessible, on paper or electronically, for at least seven years from the date they were created. That includes COAs, sampling records, manifests, GPS records and waste records.
- ☐OMMA 442:10-5-6(i)(2)
10 business days to answer a records request
Respond to OMMA's written request for records within 10 business days.
Testing
- ☐DEA Timely-applicant letter, item 10
Lab samples
Send only de minimis quantities for testing, and only to a state-licensed lab. Where no DEA-registered lab is available as the letter describes, a same-state lab without DEA registration may be used if you keep detailed distribution records.
- ☐OMMA 442:10-8-2(a)–(b)
Lab accreditation and scope
Labs need ILAC-recognized accreditation covering their methods before licensing, and keep it to renew. Report only analytes within your scope, notify OMMA of scope changes, and name any lab you outsource to.
- ☐OMMA 442:10-8-2(g)–(h)
Lab equipment and data retention
Equipment must reach an LOQ at or below 50% of each action limit, with calibration and maintenance records. Keep raw data and reports 7 years, protected from alteration.
- ☐OMMA 442:10-8-2(d)
Lab independence
Owners of a dispensary, grower or processor may not own a lab. A lab may not test for any business in which its owners, employees or agents have a financial interest.
- ☐OMMA 442:10-8-2(c),(k)
Proficiency testing
Join external quality-control testing at least 3 times a year. More than 20% unsatisfactory results is a failure, and two consecutive (or two of three) failures can bring suspension or revocation. Send PT and audit results to OMMA within 30 days.
- ☐OMMA 442:10-8-2(e)–(f),(i)
Lab director, safety and staff competency
A qualified lab director (bachelor's degree with 24 chemistry credit hours and 2 years' experience) or written designee is on site during operating hours. Notify OMMA of a director change within 7 business days. Follow OSHA 29 CFR 1910.1450, and assess staff within 6 months of hire, then yearly.
- ☐OMMA 442:10-8-1(o)–(q)
Failures that can't be remediated
Batches that fail for pesticides, heavy metals or mycotoxins must be destroyed. Microbial, solvent, foreign-matter and moisture failures may be remediated.
- ☐OMMA 442:10-8-1(i)
Required test panels
Harvest batches: microbials, heavy metals, pesticides, cannabinoids, terpenes, foreign matter, and water activity and moisture (not fresh-frozen). Production batches: microbials, mycotoxins, residual solvents, heavy metals, pesticides, cannabinoids, terpenes and foreign matter.
- ☐OMMA 442:10-8-1(s)
Reduced testing for pre-rolls and infused products
Non-infused pre-rolls from one passed harvest batch need only heavy metals, cannabinoids and foreign matter. Products made from concentrate that already passed pesticides, solvents and metals don't repeat those tests.
- ☐OMMA 442:10-8-1(j)
Retests: 30 days, two passes
Request a reserve-sample retest within 30 days. If the first retest fails the same analyte, remediate or destroy. If it passes, a second retest must also pass before sale.
Transport
- ☐OMMA 442:10-3-2(a)
Locked, labeled and out of reach
Transport product in a locked container, hidden from view and labeled "Medical Marijuana or Derivative", in a part of the vehicle the driver can't reach. Transfers between licenses at the same address are exempt.
- ☐OMMA 442:10-3-2(d); 3-1(g)
Agent licenses on every run
No one moves product without a valid transporter license and a transporter agent license. During transport, agents carry a copy of the transport license and their own agent license. Fines hit both the agent and the business.
- ☐OMMA 442:10-3-1(a)–(b)
Your transport license vs. a commercial transporter
Growers, processors, dispensaries and labs may move their own product. They may not transport, store or distribute for other licensees. That takes a commercial transporter license.
- ☐OMMA 442:10-3-2(b)–(c)
Vehicle GPS, insurance and records
Every transport vehicle needs an active GPS tracker that stores and transmits data (a phone doesn't count) and insurance at or above state minimums. Keep vehicle records and GPS data at the premises for 7 years.
Waste
- ☐OMMA 442:10-5-10; 5-6(f)(8); 9-6(b); 9-9(a)
Waste disposal
Root balls, stems, fan leaves, seeds and stalks may be disposed of on-site (burning, burying, composting or another DEQ-approved method) with a disposal log signed under penalty of perjury. Other waste is tagged, reported in Metrc, kept in a locked receptacle, and disposed of through a licensed waste facility within 90 days.
- ☐OMMA 442:10-5-6(f)(8)
Tag and report waste
Every waste package gets a tag, and its contents are reported to the state tracking system.
Security & theft
- ☐OBN 475:20-1-8(a)
Report stolen registrations and forms
Immediately report to OBN any theft or significant loss of registration certificates, order forms or other controlled-substance materials.
- ☐OBN 475:20-1-8(b)
Report suspected violations
Immediately report any information about violations of state or federal controlled-substance law to OBN and local law enforcement.
- ☐OMMA 442:10-6-1(a)–(b)
Security measures
Keep security measures that prevent unauthorized entry, theft and diversion at the premises and during transport.
- ☐OMMA 442:10-5-13
Loss and theft: 24-hour report
If you have reason to believe product was lost, stolen or diverted, notify OMMA and law enforcement immediately, and no later than 24 hours after discovery. Submit a signed statement with the time, place and circumstances and an accurate inventory of what's missing.
Employees & premises
- ☐OBN 475:20-1-8(d)
Arrests and charges: 1 business day
Notify OBN within one business day of discovering any charge, arrest or conviction of a beneficial owner, agent, employee, contractor or subcontractor.
- ☐OBN 475:20-1-8(c)
Photo ID on everyone with access
Everyone with access to controlled substances carries a valid government photo ID while on the registered premises.
- ☐OMMA 442:10-6-2
Building, fire and electrical codes
Meet all applicable state and local electrical, fire, plumbing, waste and building codes, including those adopted under OAC 748:20.
- ☐OMMA 442:10-5-1.1(13)
Employee credentials: before day one, through Jan 31
Every employee needs an OMMA credential linked to your license before they start work. Credentials are valid through January 31 of the following year. Employees may surrender them voluntarily.
- ☐OMMA 442:10-5-16(b),(v); 5-1.1(13)
Employee age and credentials
Everyone working on-site must be 18 or older and hold an active OMMA employee credential linked to your license, displayed during work hours.
- ☐OMMA 442:10-5-15
No minors on the premises
No one under 18 may enter a licensed premises unless a parent or legal guardian supervises them the whole time.
- ☐OMMA 442:10-5-16(a); 5-15
Premises conduct
No alcohol use, smoking or vaping on the premises, and no unsupervised minors.
Advertising
- ☐OMMA 442:10-7-3
Advertising limits
No deceptive or curative claims, nothing that promotes overconsumption, nothing that depicts or appeals to minors, and nothing suggesting the product comes from another state.