Dispensary website requirements in Minnesota, 2026

A Minnesota dispensary website answers to rules that go well beyond the storefront. Accepted IDs for age verification. A fixed set of fields on every online order. A ban on pop up ads. An age affirmation gate before any targeted digital message. Chapter 342 of the state's cannabis statute, plus administrative rule 9810.2501, covers the online side directly, current as of the 2025 legislative session updates carried into 2026.

What it is and why it matters

"Dispensary website requirements" in Minnesota covers two overlapping rule sets. One is the retail operating rules that happen to apply to the digital storefront: age verification, order data, hours. The other kicks in the moment a business has a public facing site: pop ups, targeted messaging, geo targeting. The Office of Cannabis Management (OCM) enforces both, and neither is optional for a licensed retailer that takes online orders or runs any kind of site promotion.

Treating the website as an afterthought is the most common compliance gap. A menu system that skips required order fields, or a promo pop up a vendor added without reading the advertising statute, creates the same exposure as a compliance failure at the counter.

How it works in practice

Age verification and the accepted ID list

Before completing any sale, a Minnesota cannabis retailer has to verify the customer is at least 21. The accepted ID list is closed: a valid driver's license, Tribal ID, U.S. passport, instructional permit, or foreign passport, per MN Statutes 342.27, subdivision 4. Sales are also restricted to specific hours, 2:00 a.m. to 8:00 a.m. Monday through Saturday and 2:00 a.m. to 10:00 a.m. Sunday, with local jurisdictions free to set stricter windows. That's a detail worth mirroring accurately anywhere the site lists store hours.

What an online order form has to collect

Under rule 9810.2501, a retailer taking online or phone preorders has to collect five things: the customer's name, address, phone number, email address, and date of birth. Before handing over the order, staff verify an accepted ID matches those details and confirm the customer is 21 or older. One payment method is off the table: electronic benefits transfer cards. Everything else, gift cards and prepayment accounts included, is fine.

The advertising rules that start the moment you have a site

MN Statutes 342.64 reaches a dispensary's own website, not just paid media. Three provisions matter most for a build:

• Unsolicited pop up advertisements on the internet are banned outright. That reaches a site's own promotional pop ups, not only third party ad networks.
• Before sending any direct, individualized digital communication a business controls (email, SMS, on site targeted messaging), the business needs a method of age affirmation, such as user confirmation or birth date disclosure, to verify the recipient is 21 or older.
• Geo targeted or location based mobile advertising is barred unless the device owner is confirmed to be 21 or older, and no ad placement can run where 30 percent or more of the expected audience is under 21.

Brand imagery carries the same youth appeal test as packaging

MN Statutes 342.62 defines "appeal to individuals under 21" for packaging: toy or robot imagery, fruit or vegetable imagery used decoratively rather than to describe an actual ingredient, characters or phrases associated with advertising to children, and brand names that imitate candy, cereal, or other foods marketed to kids. It's written for packaging, but the conservative reading operators use in practice applies the same test to hero images, logos, and social preview cards on the website.

Accessibility is a separate, federal requirement

Title III of the Americans with Disabilities Act applies to any business open to the public. The Department of Justice treats a business website as an extension of that public accommodation, per its web accessibility guidance. The practical baseline: sufficient color contrast, alt text on images, captions on video, accessible form labels and error messages, and full keyboard navigation, benchmarked against WCAG and Section 508 Standards.

The SEO layer sits on top of all of it

None of the rules above require a dispensary to rank in local search. But LocalBusiness structured data is the standard way a location page communicates its name, address, phone number, and hours to search engines, and it needs to match the hours of sale set out in 342.27 exactly. That's the kind of detail that's easy to get right in the initial build and easy to let drift after a menu change, which is one reason a compliant Next.js build for a regulated retailer benefits from dedicated web development support rather than a template that was never built with chapter 342 in mind.

Tradeoffs and edge cases

The statute is specific about online orders and advertising, and silent about a few things operators ask about most. It does not mandate a particular homepage age gate design. It does not define exactly how a site should present the age affirmation step for site wide messaging versus one to one messages. Where the rule is silent, the conservative move is to apply the stricter reading: gate the whole site the same way an order form gates a sale, and treat every on site prompt as "direct, individualized communication" until a lawyer says otherwise.

There is also a gap between what a template SEO checklist covers and what OCM actually enforces. Structured data, page speed, and local SEO signals are useful for visibility, but they are not a substitute for the accepted ID list, the order data fields, or the pop up ban. A studio that pairs SEO and answer engine optimization work with the compliance checklist above is solving two different problems with one build, not treating one as a stand in for the other. Kallos Labs builds both into the same Next.js project for regulated retail clients, rather than bolting compliance on after launch.

Frequently asked questions

Does Minnesota law require an age gate pop up on a dispensary's homepage?

The statute does not mandate a specific homepage age gate interstitial. What it does require is a method of age affirmation before any direct, individualized digital communication the business controls, and a full ID verified 21 plus check before completing an online order. Most operators add a homepage age confirmation anyway, since it is the simplest way to document that affirmation step and it keeps the site consistent with the in store signage requirement.

Can a Minnesota dispensary run banner ads or use pop ups on its own website?

Unsolicited pop up advertisements on the internet are prohibited outright for cannabis and hemp businesses, which reaches a dispensary's own promotional pop ups, not just third party ad networks. Banner style placements are allowed, but only on media where less than 30 percent of the expected audience is under 21, which rules out most general audience ad exchanges without strict targeting controls.

What information has to be collected when a customer places an online order?

Under the state's adult use retail rule, a preorder placed online or by phone must capture the customer's name, address, phone number, email address, and date of birth. Before the order is handed over, the retailer verifies that a state accepted ID matches those details and confirms the customer is 21 or older.

Does a dispensary website need to meet ADA accessibility standards?

Yes. Title III of the ADA applies to any business open to the public, and the Department of Justice treats a business website as an extension of that public accommodation. Practical baseline steps are sufficient color contrast, alt text on images, captioned video, accessible form labels, and full keyboard navigation, benchmarked against WCAG and Section 508 Standards.

Do the packaging rules about appealing to minors apply to a dispensary's website design?

The packaging statute is written for physical product packaging, but the same appeal to minors test (no toy or cartoon imagery, no candy brand imitation) is the working standard regulators apply to a brand's customer facing presentation more broadly. Treating hero images, logos, and social preview cards by the same test is the conservative reading operators use in practice.

Building a compliant dispensary site from this checklist, rather than retrofitting one, is usually the faster path. Get in touch if the current build needs a compliance pass.