Buying under a state medical marijuana program comes down to one check: confirm the product is legal where you stand, not where it was made. State law governs who can certify a patient, how much THC a product may contain, how much you may possess at once, and which lab tests a batch must pass. Before you order anything, verify three things: the seller holds a current state license, the product carries a batch-specific certificate of analysis from an independent lab, and your patient certification or card is valid in that state. If any of the three is missing, walk away. The sections below explain how the rules differ and which details matter at checkout.
Medical Cannabis Regulations by State
What to look for before you buy
- License type and status: Dispensaries, delivery services and manufacturers are licensed separately. A cultivation license does not authorize retail sales, so confirm the seller's actual license class.
- Batch-specific lab report: A certificate of analysis should list the batch or lot number, the testing lab, the date, and results for cannabinoids, pesticides, heavy metals, residual solvents, microbials and mycotoxins.
- THC stated two ways: Per serving and per package. A product can look mild per serving and deliver a large total dose across the container.
- Patient documentation: Most medical programs require a physician certification plus a state-issued card or registration number. Keep the certification date in view because it drives renewals.
- Purchase and possession limits: Many states define limits as a 30-day supply rather than a fixed weight, so the rule can change based on product form and potency.
- Packaging and labeling: Medical products generally need child-resistant packaging, a state compliance symbol, and warnings. Missing labels point to an unregulated supply chain.
How state rules differ: the key parameters
There is no single national standard for medical cannabis. Roughly forty states and the District of Columbia permit some form of medical access, and a handful limit programs to low-THC CBD oil. CBD derived from hemp is treated separately under federal law, but state rules on hemp products still vary and can be stricter than the federal floor.
THC caps
Hemp-derived CBD products may not exceed 0.3 percent THC on a dry weight basis under federal hemp law. Medical cannabis flower and concentrates in full programs commonly test between 15 and 30 percent THC. Low-THC state programs often cap products at 0.3 to 5 percent THC or set a daily milligram ceiling that may sit anywhere from 10 to 100 mg per day. Some states also limit the number of milligrams per single serving.
Possession and purchase limits
Common numeric caps fall between 1 and 3 ounces of flower for a set period, with gram-equivalent limits applied to concentrates and edibles. Other states avoid numbers and use a 30-day supply standard, which leaves discretion to the dispensary and the certifying clinician.
Age and caregiver rules
Most medical programs allow patients at 18 with a certification, while a few set the threshold at 21. Minors typically need a parent or legal guardian registered as a caregiver. Caregiver counts per patient range from one to five depending on the state.
Card validity and renewal
Registration periods run from six months to two years. Renewal usually requires a fresh clinician certification, and a lapsed card can void a purchase even when the product itself is compliant.
Testing requirements
Mandatory panels usually include potency, pesticides, heavy metals, residual solvents, microbial contamination, mycotoxins and water activity. Some states publish testing rules and batch results in a public registry, which makes verification straightforward.
Pitfalls to avoid
- Assuming reciprocity. Most states do not accept out-of-state medical cards, and a few offer limited recognition with conditions attached.
- Carrying product across state lines. Federal transport of cannabis remains restricted regardless of both states' medical status.
- Buying unregulated "gift" products or gray-market delta-8 items that sit outside a state's licensed medical channel.
- Trusting a QR code that opens a generic lab page instead of a batch-specific report with matching lot numbers.
- Relying on marketing claims about treating a condition. Licensed medical products are not approved by the FDA as drugs, and sellers who promise cures are signaling risk.
- Ignoring serving size math on edibles or tinctures, where the total package can carry several times a single dose.
Frequently asked questions
Do I need a state card to buy medical cannabis?
In most medical states, yes. A physician certification plus state registration is the standard path. A small number of states allow a certification letter alone for a limited period.
Is CBD legal in states without a medical marijuana program?
Hemp-derived CBD with no more than 0.3 percent THC is generally lawful under federal law, but individual states may impose extra labeling, licensing or age rules. Check your state's agriculture or health department guidance.
Can I use my card in another state?
Only if that state has a reciprocity provision and you meet its conditions, which often include the same qualifying condition and a valid photo ID. Most states do not offer this.
What does a valid lab report include?
Batch or lot number, testing lab name, sample date, full cannabinoid profile, and pass or fail results for contaminants. A report without a matching lot number tells you little about the product in your hand.
Are dispensary staff allowed to give medical advice?
They can explain products and dosing formats, but diagnosis and treatment decisions belong with a licensed clinician. This guide is general information, not legal or medical advice.