Codify — Article

California AB1965 tightens cannabis transport, security, and testing access rules

Creates electronic shipping-manifest and vehicle standards, requires retailers to provide COAs and allow off‑the‑shelf testing, and adds CHP oversight of for‑hire cannabis transport.

The Brief

AB1965 updates California's commercial cannabis rules by codifying chain-of-custody, transportation safety, and retail security requirements and by making product testing more accessible to regulators and customers. The bill requires electronic shipping manifests keyed to each product's unique identifier, mandates who may operate vehicles that move cannabis, and gives the Department of Cannabis Control and the California Highway Patrol clearer authority over transport safety.

The bill matters because it shifts several practical compliance burdens onto distributors, retail licensees, and microbusinesses while expanding regulator access to samples and test data. That changes operational workflows—from vehicle procurement and staffing to recordkeeping and how retailers handle customer requests for certificates of analysis (COAs)—and raises questions about cost, data security, and enforcement capacity for both state agencies and small operators.

At a Glance

What It Does

Requires licensed distributors to create and transmit an electronic shipping manifest that includes each product's unique identifier; limits transportation to licensed persons and directly employed drivers; and obligates for‑hire transporters to hold motor carrier permits and submit to CHP terminal inspections. It also mandates minimum security at retail premises, 24‑hour reporting for inventory issues or theft, and immediate customer access to COAs plus department off‑the‑shelf testing.

Who It Affects

Licensed distributors, retailers, microbusinesses, and combined‑activity licensees; delivery‑only retailers and their drivers; third‑party transporters working for hire; licensed testing laboratories; and state enforcement agencies including the Department of Cannabis Control and the California Highway Patrol.

Why It Matters

The bill tightens chain‑of‑custody and on‑road safety rules that can raise operating costs and change logistics choices, while increasing regulator and consumer access to testing data—potentially reducing diversion and unsafe product but raising implementation and privacy questions for small operators.

More articles like this one.

A weekly email with all the latest developments on this topic.

Unsubscribe anytime.

What This Bill Actually Does

AB1965 is a package of operational rules that ties product testing and quality assurance to physical security and transportation hygiene. It starts by restating and clarifying what license types exist (retailer, distributor, microbusiness, combined activities) and then layers in vehicle and driver rules so the chain of custody doesn’t break between the grower, the lab, and the seller.

The bill requires distributors to complete an electronic shipping manifest that includes each item’s statewide unique identifier and to transmit that manifest to both the receiving licensee and the department; a physical copy must travel with the shipment and be produced for inspectors or law enforcement on demand. Receiving licensees must retain and, upon receipt, file records confirming the shipment arrived as manifested.

On transportation, AB1965 draws the California Highway Patrol into cannabis logistics. Any vehicle transporting cannabis for hire must have a motor carrier permit under the Vehicle Code and the CHP may require participation in the Basic Inspection of Terminals (BIT) program.

The bill also imposes minimum standards on vehicles and drivers—criteria the department must set—and insists drivers be directly employed by the licensee moving the product, closing an avenue for purely independent couriers.Retail-level obligations tighten storage and access controls and expand testing access. Retailers, microbusinesses, and combined‑activity licensees must lock finished goods in secured rooms or vaults except for minimal display or sales-ready quantities, establish limited‑access areas, and prohibit loitering by non‑operational visitors.

Retailers must notify the department and law enforcement within 24 hours after discovering significant inventory discrepancies, diversion, theft, loss, or breaches of record integrity. Finally, AB1965 gives customers the right to receive a product’s certificate of analysis on request, and it expressly permits the department to obtain or sample products for off‑the‑shelf laboratory testing under the division’s regulations.Taken together, the bill aims to strengthen product integrity from transport through point of sale and to give regulators better tools to verify lab results and trace product movement.

That creates straightforward compliance milestones—manifests, vehicle permits, locked storage, 24‑hour notifications, COA access—but leaves important implementation choices to the department, such as the minimum insurance and bonding levels, thresholds for reporting inventory variances, and the specific vehicle and operator qualifications the department will adopt.

The Five Things You Need to Know

1

Distributors must complete and securely transmit an electronic shipping manifest that includes the department-issued unique identifier for each cannabis, hemp, or cannabis product before transport.

2

Drivers transporting cannabis must be directly employed by the licensee moving the product; independent couriers are expressly excluded unless they meet the licensed person requirement.

3

Vehicles transporting cannabis for hire must hold a valid motor carrier permit under Vehicle Code Chapter 2 (beginning with Section 34620), and the CHP can require participation in the BIT terminal inspection program.

4

Retailers must notify the department and appropriate law enforcement within 24 hours of discovering significant inventory discrepancies, diversion, theft, loss, breaches of records, or other security breaches.

5

Retailers and other retail licensees must provide a product's certificate of analysis to a customer upon request and must allow the department to obtain or sample products for off‑the‑shelf laboratory testing.

Section-by-Section Breakdown

Every bill we cover gets an analysis of its key sections. Expand all ↓

Section 26070(a)

License types and microbusiness compliance path

This subsection restates the primary license categories (retailer, distributor, microbusiness, combined activities) and clarifies operational options—retailers may operate closed to the public and by delivery only. It requires distributors to carry bonding and insurance at minimum thresholds the department will set, and it directs the department to create a compliance demonstration process for microbusiness or combined‑activity applicants that include cultivation. Practically, this allocates decision‑making authority to the department for insurance levels and application verification rather than prescribing fixed numeric standards in statute.

Section 26070(b)–(d)

Transportation safety, vehicle standards, and CHP oversight

The bill charges the department with minimum security and transportation safety rules covering vehicles and personnel, then ties statutory enforcement to the Vehicle Code by requiring motor carrier permits for for‑hire transporters and granting the CHP authority over safe operation, including BIT participation. That creates a two‑agency compliance environment: the department sets cannabis‑specific vehicle and operator criteria while the CHP enforces roadworthiness and terminal inspection requirements tied to the Vehicle Code.

Section 26070(e)–(h)

Electronic shipping manifests and shipment records

These clauses require distributors to complete an electronic manifest before transport, include the department’s unique identifier for each product, securely transmit the manifest to both the receiving licensee and the department, and carry a physical copy during transport. Receiving licensees must retain the electronic manifest and file a receipt record to the department upon delivery. This creates explicit pre‑transport and post‑receipt recordkeeping checkpoints designed to preserve traceability and provide auditors immediate documentation during inspections.

2 more sections
Section 26070(i)–(k)

Disciplinary triggers, retail security, and 24‑hour reporting

The bill makes violations of the transport and manifest rules grounds for discipline and sets more prescriptive security duties for retail and retail‑authorized licensees: limit access to authorized personnel, secure finished goods in locked storage, and prevent non‑operational individuals from lingering on premises. It also imposes a strict notification duty—retailers must alert the department and law enforcement within 24 hours where specified inventory variances, diversion, employee criminality, or record loss occur—placing a short, measurable timeline on incident responses.

Section 26070(l)–(m)

Customer access to COAs and department off‑the‑shelf testing

This portion requires retailers to provide a product’s certificate of analysis to customers or the department on request and explicitly authorizes the department to obtain or access products for off‑the‑shelf laboratory testing. That last clause empowers agencies to independently verify laboratory results in the market rather than relying solely on submitted test data, which can change enforcement dynamics for both producers and labs.

At scale

This bill is one of many.

Codify tracks hundreds of bills on Government across all five countries.

Explore Government in Codify Search →

Who Benefits and Who Bears the Cost

Every bill creates winners and losers. Here's who stands to gain and who bears the cost.

Who Benefits

  • Consumers and patients — gain immediate access to certificates of analysis on request and the department can sample products directly, improving transparency about potency and contaminants.
  • Regulators and law enforcement — receive standardized electronic manifests and a clear statutory basis for CHP involvement, improving traceability and easing investigations into diversion or adulteration.
  • Compliant licensees and testing labs — benefit from clearer chain‑of‑custody rules that, when followed, raise market confidence in legitimate operators and may reduce false positives in enforcement.

Who Bears the Cost

  • Distributors and for‑hire transporters — face new insurance/bonding minimums, vehicle standards, motor carrier permit requirements, and potential BIT participation, increasing operating costs and administrative burden.
  • Small retailers and microbusinesses — must implement locked storage, limited‑access areas, 24‑hour incident reporting procedures, and handle customer COA requests, which strains staff time and may require capital investment.
  • The Department of Cannabis Control and CHP — take on additional enforcement, inspection, and data‑handling responsibilities without spelled‑out funding in the text, meaning operational costs could rise if resources are not provided.

Key Issues

The Core Tension

AB1965 pits a stronger, inspectable chain of custody and more aggressive sampling authority—both aimed at preventing diversion and unsafe product—against increased compliance costs, operational complexity, and data‑security risks that could disproportionately burden small retailers, microbusinesses, and independent transporters.

AB1965 centralizes many important operational requirements but leaves critical implementation details to the department and to cross‑agency coordination with the CHP. The statute does not set numeric thresholds for key items—such as the minimum bonding and insurance amounts for distributors, the minimum vehicle standards and operator qualifications, or what level of inventory variance counts as a “significant discrepancy.” Those choices will determine how burdensome compliance is in practice and will materially affect small operators’ ability to compete.

The bill also raises data handling and privacy questions. Electronic manifests that include unique identifiers and are transmitted to the department create a trove of logistics data; how the department stores, secures, and limits access to that information will shape privacy and competitive risks.

Finally, giving the department authority to perform off‑the‑shelf testing strengthens verification but could increase demand on contract labs and shift costs and timing for dispute resolution when test results conflict, with no statutory guidance here on retesting protocols, turnaround times, or who pays for confirmatory tests.

Try it yourself.

Ask a question in plain English, or pick a topic below. Results in seconds.