Cannabis website compliance checklist, 2026

A real cannabis website compliance checklist has five parts: license display, an age gate, the exact warning statement text your state requires, your advertising audience age threshold, and a clear list of what the site must never do. None of these transfer cleanly between states. Copy a checklist from one market into another and you'll leave gaps.

The checklist

1. License number and verification link

New York requires retail dispensary licensees to display their license prominently visible to customers, alongside hours of operation and the required public health notifications. Compliant shops go a step further and link the state's own dispensary verification tool, so a visitor can confirm the license independently instead of taking the site's word for it. Put this on a dedicated compliance section or the footer, not buried inside a terms of service page nobody opens.

2. Age gate and age affirmation before direct marketing

An age gate on the homepage is the common baseline. But some states regulate the marketing itself, not just the landing page. Minnesota requires a method of age affirmation, such as user confirmation or birth date disclosure, before any direct digital advertising reaches a recipient, and that includes location based ads on devices, not only the front door of the site.

3. Warning statement text, state by state

This is the item most checklists get wrong, because the wording is state specific and none of it can be paraphrased.

Washington requires four warning statements on all cannabis advertising, set in type at least 10 percent of the largest type size used: that the product has intoxicating effects and may be habit forming, that it can impair concentration, coordination and judgment, that there may be health risks associated with consumption, and that it's for use only by adults 21 and older. The Washington State Liquor and Cannabis Board's advertising FAQ also calls for a clearly visible 21 plus purchase restriction statement on nearly every format except trade name signs.

Minnesota mandates specific wording: "Cannabis products are not for use by anyone under the age of 21. Cannabis use may cause drowsiness, affect focus, reaction time, and decision making. These products are not evaluated or approved by the FDA. Pregnant people should avoid cannabis due to the risk of low birth weight, premature birth, stillbirth, and harm to fetal brain development." The Office of Cannabis Management publishes a parallel version for hemp products that swaps in hemp specific language throughout.

Colorado takes a narrower approach. Since January 1, 2022, under HB21-1317, licensees advertising concentrate products must include four state defined warning statements, drawn from the state's tangible educational resource, on top of whatever general cannabis warnings already apply.

New York requires four public health notifications: that consuming cannabis isn't allowed on the premises, that cannabis can impair concentration, coordination and judgment, a pregnancy and breastfeeding warning, and a 21 plus keep out of reach of children line. For a sense of how one state packages all of this into a single compliance page, see Minnesota's own website requirements.

The rule to take from all four states: copy the regulator's exact wording, store it per state, and never let one global disclaimer block stand in for four different legal texts.

4. Advertising audience age thresholds

States also set a minimum share of an ad's expected audience that must be 21 or older, and the numbers aren't interchangeable. New York requires evidence that at least 90 percent of the audience for most digital and physical advertisements is 21 or older. California sets its own threshold at 71.6 percent, a meaningfully lower bar than New York's. Minnesota frames the same idea in reverse, capping advertising audiences at no more than 30 percent under 21. A campaign that clears California's threshold can still fail New York's. Multi state operators need to track this per market, not as one company wide rule.

5. What a cannabis website can't do

Washington's rule is explicit: a website cannot complete a cannabis sale. It can promote products, take reservations without online payment, and collect email signups for announcements. But the regulated transaction has to happen at the licensed premises or through a compliant delivery flow. See online ordering, pickup and delivery rules for where that line sits. Minnesota adds its own prohibitions: no pop up advertising for cannabis or hemp businesses, no imagery or language likely to appeal to minors, and no depiction of anyone under 21 using the product.

6. Disclosures for reviews, affiliate links and paid placements

If the site runs product reviews, accessory affiliate links or sponsored placements, the FTC's clear and conspicuous standard applies. A single disclosure on the homepage isn't enough, since a visitor can land on an individual review or product page without ever seeing it. A hyperlinked disclaimer counts as easily avoidable. The disclosure has to sit close to the claim it qualifies, on every page where that claim shows up.

How to prioritize

Start with the two items regulators enforce most often in your home state: license display and the exact warning statement text. Build the warning block as a state keyed template, one entry per state, rather than hardcoding a single paragraph. Four states already diverge on wording, and a fifth will too. Layer in the age gate and audience threshold tracking next. Both need ongoing evidence retention, not a one time build you can forget about.

None of this works against ranking, either. A compliant site that loads fast and states its rules clearly is also easier for regulators, reviewers and search engines to trust, which is part of why ranking a compliant dispensary site locally starts with the same groundwork as this checklist. Kallos Labs builds this kind of state aware compliance layer directly into the site instead of bolting it on after launch, worth a look if your current template still treats every state the same way. For a compliance focused rebuild, see /services/seo-aeo or get in touch.

Frequently asked questions

Does every state require the same cannabis website warning statement text?

No. New York, Washington, Minnesota and Colorado each mandate their own wording, and some, like Colorado's concentrate warning, apply only to specific product categories. A multi state site needs a state aware template, not one global disclaimer block.

Can a dispensary website process cannabis sales directly?

In states like Washington, no. The website can promote products and take reservations without online payment, but the regulated sale has to happen at the licensed premises or through a compliant delivery transaction. Check the specific state's rule before wiring up checkout.

What counts as an acceptable age gate for a cannabis website?

Minnesota requires an age affirmation method, such as user confirmation or birth date disclosure, before any direct digital advertising reaches a visitor. A simple 21 plus click through is the common baseline, but some states tie the requirement to the advertising itself, not just the homepage.

Do I need to display my cannabis license number on my website?

New York requires the retail license to be prominently visible to customers alongside hours and public health notifications. Treat license display as a near universal best practice even where it isn't explicitly mandated. It supports the dispensary verification tools several regulators now publish.

How do advertising audience age thresholds differ by state?

They aren't interchangeable. New York requires evidence that at least 90 percent of an ad's audience is 21 or older, California sets 71.6 percent, and Minnesota caps the under 21 share at 30 percent. A campaign that clears one state's bar can still fail another's.