Rules for your license
Processor
92 rules
Licensing & registration
- ☐OBN 475:10-1-9(f)–(g)
Beneficial owner disclosure
Disclose every beneficial owner, and anyone else with an ownership interest, to OBN. Arrangements meant to get around state or federal law are prohibited.
- ☐OBN 475:10-1-9; 63 O.S. 2-302
Annual OBN registration
You need an OBN Certificate of Registration before handling medical marijuana. Re-register no later than Nov 1 every year. OBN may allow a 30-day grace period before an expired registration goes inactive. Failing to register violates Oklahoma's Uniform Controlled Dangerous Substances Act.
- ☐OBN 475:10-1-4
Separate registrations and grow locations
Each separate group of activities needs its own registration. A storage-only warehouse can be covered if it's listed on your application; tell OBN within one business day if you add one. Only one grow registration is issued per property (county parcel) unless OBN grants a waiver, and different registrants' grows must be clearly separate.
- ☐DEA 21 CFR 1301.12; 1304.21(b)
One registration and record set per location
Each location that handles product needs its own registration and its own records. Storage-only warehouses may be exempt if nothing is distributed from them.
- ☐DEA 21 CFR 1308.13(g); 1301.13(k)(7)
Schedule III and timely applicants
State-licensed medical marijuana is Schedule III. Dispensers, manufacturers and distributors need DEA registration. Businesses that applied between Apr 28 and Jun 26, 2026 are timely applicants and may keep operating under their state license while DEA reviews them.
- ☐OMMA 442:10-5-1.1; 5-2(e)(2)
License holder responsibilities
Post your current license where it can be seen, keep your OMMA account details accurate, and let inspectors into the whole premises and your vehicles. Get OMMA's approval before a material change, such as a new address or new owners.
- ☐OMMA 442:10-5-16(p)
Don't lend your license
Don't let anyone else use your license number or operate under your license.
- ☐OMMA HB 3143 (2026)
New license moratorium
OMMA isn't issuing new grower, processor or dispensary licenses until Aug 1, 2028.
- ☐OMMA 442:10-5-1.1(7)–(8)
Renewals, fees and account upkeep
Keep your OMMA account information current and renew with fees paid on time.
- ☐OMMA 442:10-5-3.2
Who can't hold a commercial license
No license for owners under 25, anyone with a disqualifying conviction (including corporate officers, directors and stockholders), owners with unpaid marijuana business taxes, law enforcement and OMMA staff, local officials where you're located, caregivers whose authority was revoked, or anyone who ran a business that lost its license for cause within 5 years.
Supply chain
- ☐OBN OBN letter, May 8, 2026
DEA status required from Jan 1, 2027
OBN registrants that manufacture or distribute medical marijuana must hold a DEA registration or a timely DEA application. OBN may start administrative action on Jan 1, 2027, up to revoking the OBN registration.
- ☐DEA Timely-applicant letter, items 7–8
Verify every trading partner by Nov 29
Before trading, collect the partner's DEA submission confirmation or registration certificate and a copy of their active state license, and verify their document control number (DCN) on DEA's website. Document every check. Your supply chain must be fully verified by Nov 29, 2026.
- ☐DEA 21 CFR 1301.74(b)
Suspicious order monitoring
Distributors run a system to flag suspicious orders (unusual size, pattern or frequency) and report them to the local DEA field office.
- ☐DEA 21 CFR 1301.74(a)
Verify registration before you ship
Before distributing to anyone you don't already know is registered, make a good-faith inquiry with DEA or the state to confirm their registration.
- ☐OMMA 442:10-5-16(l)
Only Oklahoma-licensed sources
Never buy or accept product from out of state or from anyone without an OMMA license.
Inventory & Metrc
- ☐DEA 21 CFR 1304.11
Initial and biennial inventory
Registrants take an initial inventory on the day they first handle controlled substances as a registrant, then a new inventory at least every two years.
- ☐OMMA 442:10-5-6(d)(1)
What every transaction must record
Each transaction records the businesses' names, addresses, license and phone numbers; the patient or caregiver license number; item, strain and category; weight or quantity; batch number; dollars; POS records; transport details; test results; waste; excise tax; and tag numbers.
- ☐OMMA 442:10-5-6(d)(2)
Events you must report
Report when seeds or clones are planted, when plants are harvested or destroyed, when product changes form (processing, infusion), and every sample sent to a lab or used internally, plus a complete inventory of all plant material and products.
- ☐OMMA 442:10-5-6(d)–(f)
Metrc reporting and daily reconciliation
Report to the state tracking system (Metrc) in real time or after each sale, directly or through an integrated POS. Reconcile on-hand and in-transit inventory every day at close of business. Report planting, harvest, destruction, transfers, theft or loss, changes in form, full counts and lab samples.
- ☐OMMA 442:10-5-6(a)
Monthly reports by the 15th
Monthly reports are late if OMMA hasn't received them by the 15th of the following month. Reporting through the state system satisfies this requirement.
- ☐OMMA 442:10-5-6(h)
When Metrc is down
If you lose access for reasons outside your control, keep records of all activity and enter them as soon as access returns. If the loss is your fault (unpaid fees, no administrator), stop all reportable activity. Any sale or transfer during that time is an unlawful sale.
- ☐OMMA 442:10-5-6(d)–(e)
Your POS sync and its gaps
Report in real time or after each sale, directly or through a system that integrates with Metrc. If your system doesn't send every required field, enter the missing data in Metrc yourself.
- ☐OMMA 442:10-5-1.1(10)
Shared locations: keep inventory separate
If more than one license operates at the same address, keep each license's inventory physically and digitally separate.
- ☐OMMA 442:10-5-6(f)(3)–(8)
Tags on plants and packages
Tags must show your legal name and license number. Never use another licensee's tags or reuse a tag. Plant tags go on the container until the plant is 12 inches tall, then on a lower branch for the plant's life. Tag mother plants before taking clones. Report missing unused tags within 48 hours. Tag every package, including waste.
- ☐OMMA 442:10-5-6(f)(3)(A)–(C),(H); 5-1.1(9)
Tag supply, missing tags and reuse
Buy tags only from the approved vendor, and keep enough on hand. Report missing tags to OMMA and the vendor within 48 hours. Tags carry your legal name and license number, so never use another licensee's tags. Never reuse a tag that has been on product. You pay for tags and tracking fees.
- ☐OMMA 442:10-5-6(g)(3),(8)
Metrc offboarding deadlines
Name a new administrator within 30 business days of a change, and remove a user's access within 3 business days after they leave or stop using the system.
- ☐OMMA 442:10-5-6(g)
Metrc administrators and user access
At least one owner or manager must be a Metrc administrator. Assign a replacement administrator within 30 business days of a change. Remove a departing user's access within 3 business days. Every user needs their own login; never share credentials.
- ☐OMMA 442:10-5-6(f)(4)–(7)
Wholesale packages and repackaging
A wholesale package holds one harvest batch only. Products may share a package tag only if every unit comes from the same production batch. Anything taken out of a wholesale package needs its own tag or a new package tag.
Records & inspections
- ☐OBN 475:25-1-4(a)
OBN records: 7 years for marijuana
Keep medical marijuana inventories and records at least 7 years and make them available to authorized officers for inspection and copying.
- ☐DEA 21 CFR 1304.21(a),(d)
Complete, current records
Keep a complete and accurate record of every receipt, sale, delivery and disposal, on a current basis, dated when it actually happened.
- ☐DEA 21 CFR 1304.04; letter item 9
DEA records: 2 years, readily retrievable
Keep Schedule III records under 21 CFR part 1304 for at least 2 years, either separate from your other records or readily retrievable from them. Record a partner's DCN wherever a DEA registration number would go.
- ☐OMMA 442:10-5-6(j)
Your Metrc data is confidential
Monthly reports, inventory tracking data and seed-to-sale data are confidential and exempt from the Oklahoma Open Records Act.
- ☐OMMA 442:10-5-6(i)(6)–(7); 5-1.1(4)
30 days to correct, then $500 per violation
Correct any correctable violation within 30 days of written notice and follow any corrective-action directive. Failing to correct within 30 days carries a $500 fine per violation, plus other penalties.
- ☐OMMA 442:10-5-16(g)–(i)
No false statements or threats
Never give OMMA false information. Don't threaten or intimidate OMMA staff, patients or employees. Do what you told OMMA you would do in your application and filings.
- ☐OMMA 442:10-5-4; 5-6(i)
Inspections, audits and correction notices
Applying for a license is consent to on-site inspection during business hours. Answer a written request for records within 10 business days. Fix a correctable violation within 30 days of a written notice, or pay a $500 fine per violation on top of other penalties.
- ☐OMMA 442:10-5-6(b)(6)
Documents kept on the premises
Keep on site: square footage or acreage, a premises diagram, light count and type (growers), equipment type and capacity (processors), employee contact information, and employee manuals and SOPs.
- ☐OMMA 442:10-5-6(b)(2)
Operational records to keep
Keep cultivation, processing, transport, sampling and testing records: sample field logs, patient processing logs, safety data sheets and chemical inventory, manifests, agent licenses, COAs, equipment inspections, training materials and SOPs.
- ☐OMMA 442:10-5-4.1
Operational status visits
OMMA visits within 180 days of licensing to confirm you're operating or actively working toward it. Without proof you get a 180-day grace period, possibly one more (never past the license term). Then OMMA must seek revocation.
- ☐OMMA 442:10-5-6(b)
Record retention: 7 years
Keep records on-site and readily accessible, on paper or electronically, for at least seven years from the date they were created. That includes COAs, sampling records, manifests, GPS records and waste records.
- ☐OMMA 442:10-5-6(i)(2)
10 business days to answer a records request
Respond to OMMA's written request for records within 10 business days.
- ☐OMMA 442:10-5-6(b)(3)
Records of sales to other licensees
For every sale, transfer or purchase, keep the other party's name, license number, address and phone; quantity and type; batch number; date; dollar value; POS and tax records; and manifests.
Sales & patients
- ☐OMMA 442:10-5-16(c)–(d)
No delivery; no physician services on-site
Don't deliver to patients or caregivers. Dispensaries can't have physician services at the dispensary's address.
- ☐OMMA 442:10-5-12
Patient verification and sale limits
Verify every patient or caregiver in OMMA's verification system: name, license number, expiration date and photo. In a single transaction a dispensary may sell at most 3 oz (84.9 g) of marijuana, 1 oz (28.3 g) of concentrate, 72 oz (2,037.6 g) of edibles, and 6 mature and 6 seedling plants.
Testing
- ☐DEA Timely-applicant letter, item 10
Lab samples
Send only de minimis quantities for testing, and only to a state-licensed lab. Where no DEA-registered lab is available as the letter describes, a same-state lab without DEA registration may be used if you keep detailed distribution records.
- ☐OMMA 442:10-8-1(b),(l)
Batch size limits
Harvest batches: flower, non-infused pre-rolls and kief up to 15 lb; shake and trim up to 50 lb; plant material sold to a processor for concentrate up to 50 lb. Kief combined from several harvests up to 15 lb, and shake and trim up to 50 lb. Processor batches: 4 liters of liquid concentrate, 9 lb of non-liquid concentrate, or 1,000 g of THC in infused product.
- ☐OMMA 442:10-8-1(d),(h)
COA before any sale or transfer
Get a passing certificate of analysis (COA) for every final batch before any sale or transfer, and keep COAs on-site for 7 years. Never sell or transfer product that failed testing.
- ☐OMMA 442:10-8-2(d)
Lab independence
Owners of a dispensary, grower or processor may not own a lab. A lab may not test for any business in which its owners, employees or agents have a financial interest.
- ☐OMMA 442:10-8-1(o)–(q)
Failures that can't be remediated
Batches that fail for pesticides, heavy metals or mycotoxins must be destroyed. Microbial, solvent, foreign-matter and moisture failures may be remediated.
- ☐OMMA 442:10-8-1(i)
Required test panels
Harvest batches: microbials, heavy metals, pesticides, cannabinoids, terpenes, foreign matter, and water activity and moisture (not fresh-frozen). Production batches: microbials, mycotoxins, residual solvents, heavy metals, pesticides, cannabinoids, terpenes and foreign matter.
- ☐OMMA 442:10-8-1(s)
Reduced testing for pre-rolls and infused products
Non-infused pre-rolls from one passed harvest batch need only heavy metals, cannabinoids and foreign matter. Products made from concentrate that already passed pesticides, solvents and metals don't repeat those tests.
- ☐OMMA 442:10-8-1(k)
Failed batches and remediation
If a batch fails, document re-sampling, re-testing and any decontamination or remediation, and give the lab the decontamination method before it retests.
- ☐OMMA 442:10-8-1(j)
Retests: 30 days, two passes
Request a reserve-sample retest within 30 days. If the first retest fails the same analyte, remediate or destroy. If it passes, a second retest must also pass before sale.
- ☐OMMA 442:10-8-3(a)
Sampling procedure
The sampler needs documented training and the lab's sampling procedure on hand. Collect samples on your premises, tamper-seal them immediately, deliver them to the lab the same day, complete the 16-item field log, and keep sampling records for 7 years.
Packaging & labeling
- ☐OMMA 63 O.S. § 423(C)(7); HB 4454
Edible and drink labeling (HB 4454)
From Nov 1, 2026, edible packages must state the number of THC servings and the THC per serving, and drinks must show the same on the container. Edibles can't be attractive to children (no cartoons, toys, animals or candy look-alikes) and can't be shaped like people, cartoons or animals. Processors can't transfer noncompliant products to dispensaries from Nov 1; dispensaries may keep selling compliant pre-HB 4454 stock held on Oct 31.
- ☐OMMA 442:10-7-1(e)
Required label contents
Labels need the licensee name and number, product name, batch number, net weight, ingredients, the Oklahoma Uniform Symbol (at least ½ by ½ inch, in color), THC and terpenoid potency, the packaged date, and the warnings: keep out of reach of children, not for use during pregnancy, for licensed patients only, and since Nov 1, 2025, that driving under the influence is illegal.
- ☐OMMA 442:10-7-2(a)
Nothing attractive to children
Don't make, process, sell or give away any product intended to be attractive to children or minors.
- ☐OMMA 442:10-7-1(d); 7-2(a)
Packaging design and claims
Packaging must be child-resistant (resealable where needed, with an opaque exit bag for clear containers) and show only your logo and a product image. No designs that appeal to children, no OMMA logo, no health claims, no other states' symbols, and nothing that imitates a trademarked product. Use “organic” only with National Organic Program authorization and “pesticide-free” only if no pesticide was used at any stage.
- ☐OMMA 442:10-7-1(a); 5-16(s)
Pre-packaged flower to dispensaries
Since Jun 1, 2025, flower-based products (flower, trim, shake, kief and pre-rolls) can only go to dispensaries pre-packaged, in sizes from ½ gram to 3 ounces. Concentrates are excluded.
- ☐OMMA 442:10-5-16(n)–(o)
Pre-roll rules
Pre-rolls can't exceed 1 gram. Growers can't make infused pre-rolls. Processors that make them must test them on the full infused panel under 442:10-8-1(l)(1)(B).
- ☐OMMA 442:10-7-1(f)
Labels between growers and processors
Product moving between growers and processors needs a label with the transferring licensee's name and license number, batch number and harvest or production date.
Processing
- ☐OMMA 442:10-5-16(q)
No marijuana-infused alcohol
Don't make or sell alcoholic beverages infused with marijuana.
- ☐OMMA 442:10-5-8
Edibles and food safety
Processors making edibles must meet food safety standards and can't make them in a home, living or sleeping area, or adjoining space. Edible labels need about 20 elements, including allergens, lot code, nutrition facts where applicable, mg of THC per serving and a poison-control statement.
- ☐OMMA 442:10-5-16(k)
No hazardous extraction at residences
No butane, propane, CO2 or other hazardous extraction on residential property.
- ☐OMMA 442:10-5-5; 5-12(b); 5-6(b)(4)
Processing for patients
A processor may turn a patient's own marijuana into concentrate, up to 1 oz of concentrate per transaction, after verifying the patient's license. Keep a log: license number, date received, weights in and out, and return date.
Transport
- ☐DEA 21 CFR 1301.74(e)
Carriers and plain packaging
Choose carriers and storage with adequate security, and make sure shipping containers don't show they hold controlled substances.
- ☐OMMA 442:10-3-2(a)
Locked, labeled and out of reach
Transport product in a locked container, hidden from view and labeled "Medical Marijuana or Derivative", in a part of the vehicle the driver can't reach. Transfers between licenses at the same address are exempt.
- ☐OMMA 442:10-3-2(d); 3-1(g)
Agent licenses on every run
No one moves product without a valid transporter license and a transporter agent license. During transport, agents carry a copy of the transport license and their own agent license. Fines hit both the agent and the business.
- ☐OMMA 442:10-3-2; 3-6
Transport, GPS and manifests
Vehicles carrying product need an active GPS tracker; a phone doesn't count. Product rides in a locked container, out of sight, labeled “Medical Marijuana or Derivative,” where the driver can't reach it. Every trip needs a Metrc manifest with names, signatures and license numbers, unchanged after departure except for accept or refuse entries. Keep manifests and GPS records 7 years.
- ☐OMMA 442:10-3-1(a)–(b)
Your transport license vs. a commercial transporter
Growers, processors, dispensaries and labs may move their own product. They may not transport, store or distribute for other licensees. That takes a commercial transporter license.
- ☐OMMA 442:10-3-2(b)–(c)
Vehicle GPS, insurance and records
Every transport vehicle needs an active GPS tracker that stores and transmits data (a phone doesn't count) and insurance at or above state minimums. Keep vehicle records and GPS data at the premises for 7 years.
Waste
- ☐DEA 21 CFR Part 1317
DEA disposal rules
DEA's disposal rules for registrants are in part 1317. DEA hasn't said how they apply alongside Oklahoma's waste rules for marijuana.
- ☐DEA 21 CFR 1304.21(e); Part 1317
Destruction on DEA Form 41
Record destruction of controlled substances on DEA Form 41, with the names and signatures of the two employees who witnessed it.
- ☐OMMA 442:10-5-10; 5-6(f)(8); 9-6(b); 9-9(a)
Waste disposal
Root balls, stems, fan leaves, seeds and stalks may be disposed of on-site (burning, burying, composting or another DEQ-approved method) with a disposal log signed under penalty of perjury. Other waste is tagged, reported in Metrc, kept in a locked receptacle, and disposed of through a licensed waste facility within 90 days.
- ☐OMMA 442:10-5-10(b)
On-site disposal log
Root balls, stems, fan leaves, seeds and stalks may be disposed of on site (burning, incineration, burial, mulching, composting). Log the license, material, method, date and time, and employees, with a signed attestation under penalty of perjury. Keep the log 5 years.
- ☐OMMA 442:10-5-6(f)(8)
Tag and report waste
Every waste package gets a tag, and its contents are reported to the state tracking system.
Security & theft
- ☐OBN 475:20-1-8(a)
Report stolen registrations and forms
Immediately report to OBN any theft or significant loss of registration certificates, order forms or other controlled-substance materials.
- ☐OBN 475:20-1-8(b)
Report suspected violations
Immediately report any information about violations of state or federal controlled-substance law to OBN and local law enforcement.
- ☐DEA 21 CFR 1301.72(d)
Minimum people in the vault
Limit access to storage areas to the minimum number of authorized employees.
- ☐DEA 21 CFR 1301.71
Effective controls against diversion
Registrants must keep effective controls against theft and diversion. DEA judges adequacy by factors such as quantity on hand, location and the security system.
- ☐DEA 21 CFR 1301.72(b)
Schedule III storage options
Store product in a safe or steel cabinet (fixed in place if under 750 lb), a vault with an alarm, a building with an alarm and controlled locks and keys, or a cage of 10-gauge steel mesh with an alarm to a central station.
- ☐DEA 21 CFR 1301.76(b)
Theft or significant loss: one business day
Notify your DEA Field Division in writing within one business day of discovering a theft or significant loss, and file DEA Form 106 online within 45 days.
- ☐OMMA 442:10-6-1(a)–(b)
Security measures
Keep security measures that prevent unauthorized entry, theft and diversion at the premises and during transport.
- ☐OMMA 442:10-5-13
Loss and theft: 24-hour report
If you have reason to believe product was lost, stolen or diverted, notify OMMA and law enforcement immediately, and no later than 24 hours after discovery. Submit a signed statement with the time, place and circumstances and an accurate inventory of what's missing.
Employees & premises
- ☐OBN 475:20-1-8(d)
Arrests and charges: 1 business day
Notify OBN within one business day of discovering any charge, arrest or conviction of a beneficial owner, agent, employee, contractor or subcontractor.
- ☐OBN 475:20-1-8(c)
Photo ID on everyone with access
Everyone with access to controlled substances carries a valid government photo ID while on the registered premises.
- ☐DEA 21 CFR 1301.76(a)
Employees with access
Don't give access to controlled substances to anyone convicted of a felony relating to controlled substances, or whose DEA registration was denied, revoked or surrendered for cause.
- ☐OMMA 442:10-6-2
Building, fire and electrical codes
Meet all applicable state and local electrical, fire, plumbing, waste and building codes, including those adopted under OAC 748:20.
- ☐OMMA 442:10-5-1.1(13)
Employee credentials: before day one, through Jan 31
Every employee needs an OMMA credential linked to your license before they start work. Credentials are valid through January 31 of the following year. Employees may surrender them voluntarily.
- ☐OMMA 442:10-5-16(b),(v); 5-1.1(13)
Employee age and credentials
Everyone working on-site must be 18 or older and hold an active OMMA employee credential linked to your license, displayed during work hours.
- ☐OMMA 442:10-5-15
No minors on the premises
No one under 18 may enter a licensed premises unless a parent or legal guardian supervises them the whole time.
- ☐OMMA 442:10-5-16(a); 5-15
Premises conduct
No alcohol use, smoking or vaping on the premises, and no unsupervised minors.
Advertising
- ☐OMMA 442:10-7-3
Advertising limits
No deceptive or curative claims, nothing that promotes overconsumption, nothing that depicts or appeals to minors, and nothing suggesting the product comes from another state.