Obtaining — or acquiring — a cannabis license in Oregon is only the beginning. Licensed operators must maintain continuous compliance with the Oregon Liquor and Cannabis Commission (OLCC) regulations codified in Oregon Administrative Rules (OAR) Chapter 845. Oregon's compliance framework is among the most detailed in the nation, backed by mandatory Metrc tracking, ORELAP-accredited testing, and the CAMP management platform. Non-compliance can result in fines, license suspension, or revocation.

OAR 845: The Regulatory Framework

Oregon Administrative Rules Chapter 845 contains the comprehensive regulations governing all cannabis business activity in the state. OAR 845 covers:

• Division 25: Cannabis licensing requirements, application procedures, and transfer rules
• Division 26: Producer requirements including canopy limits, cultivation practices, and harvest procedures
• Division 27: Processor requirements including extraction methods, edible manufacturing, and product standards
• Division 28: Retailer requirements including sales procedures, purchase limits, and consumer verification
• Division 29: Laboratory requirements including ORELAP accreditation and testing protocols
• Division 30: Packaging, labeling, and advertising standards

Every cannabis business must be thoroughly familiar with the OAR 845 divisions that apply to their license type. The OLCC publishes the full rules online, and operators are responsible for tracking and implementing any amendments.

Metrc Seed-to-Sale Tracking

Oregon requires all licensed cannabis businesses to use Metrc (Marijuana Enforcement Tracking Reporting and Compliance) to track every cannabis product from cultivation through retail sale. Metrc is not optional — it is the central nervous system of Oregon's compliance infrastructure.

What Must Be Tracked

• Plant tagging: Every cannabis plant must be individually RFID-tagged and tracked from the immature stage through harvest
• Inventory management: All inventory movements, processing activities, and weight changes must be recorded in real time
• Transfer manifests: Every movement of cannabis between licensed facilities requires a Metrc-documented manifest
• Lab sample tracking: Samples sent to ORELAP-accredited labs are tracked through chain of custody
• Retail transactions: Point-of-sale data is recorded to enforce purchase limits (2 oz flower, 10g concentrates per transaction)
• Waste disposal: All cannabis waste must be tracked, documented, and disposed of according to OLCC protocols

Common Metrc Violations

Failure to maintain accurate Metrc records is one of the most common compliance violations. Watch for:

• Late or missing inventory reconciliation reports
• Discrepancies between physical inventory and Metrc records
• Failure to record transfers in real time
• Incomplete waste disposal documentation
• Missing or damaged RFID plant tags

CAMP Platform

The Cannabis Automated Management Platform (CAMP) is the OLCC's centralized management system for cannabis business licensing and worker permits. CAMP currently tracks:

• 19,000+ registered businesses across all license types
• 214,000+ permitted workers with active OLCC worker permits
• License applications, renewals, transfers, and compliance records
• Worker permit applications, background checks, and renewal status

CAMP is distinct from Metrc — CAMP manages the businesses and people in the industry, while Metrc tracks the cannabis products themselves. Both systems are mandatory and integrated into the OLCC's regulatory oversight.

Worker Permit Requirements

Every individual working in Oregon's cannabis industry must hold a valid OLCC worker permit:

• Cost: $100 per permit
• Duration: 5 years (renewable)
• Background check: Required for all applicants — criminal history may disqualify
• Timeline: Permits must be obtained before the employee begins working with cannabis
• Scope: Required for anyone handling cannabis products in any licensed facility, including cultivation, processing, retail, and laboratory staff

Employers are responsible for verifying that all employees hold valid worker permits. Allowing unpermitted individuals to work with cannabis is a serious compliance violation.

Security Requirements

Cannabis businesses must maintain comprehensive security systems as specified in their OLCC-approved security plans:

Video Surveillance

• Continuous recording of all areas where cannabis is cultivated, stored, processed, or sold
• Camera coverage of all entrances, exits, loading areas, and points of sale
• Minimum video retention period as specified by OAR 845
• Recordings must be made available to the OLCC upon request within a defined timeframe

Access Controls

• Limited-access areas restricted to permitted employees only
• Electronic access control systems for cannabis handling areas
• Visitor logs for all non-employee access to restricted areas

Testing and Quality Assurance

All cannabis products must be tested by an ORELAP-accredited laboratory before sale. Compliance with testing requirements includes:

• Submitting representative samples from every production batch per OLCC protocols
• Maintaining Metrc chain of custody documentation for all samples
• Quarantining products until test results are received and passed
• Retaining Certificates of Analysis (COAs) for all products sold
• Initiating recalls for any products found to be non-compliant after sale

Oregon has 13 ORELAP-accredited testing laboratories. See Lab Testing for full details on required testing categories.

Packaging and Labeling

Cannabis products must meet OLCC packaging and labeling standards defined in OAR 845:

• Child-resistant packaging — All products must be sold in containers meeting child-resistance standards
• Universal cannabis symbol — Must be clearly displayed on all packaging
• Required label information — Product name, OLCC license number, THC/CBD content, Metrc UID, testing lab, batch number, ingredients, and warnings (see Reading Labels)
• No appeal to minors — Packaging cannot use cartoons, characters, or imagery that could appeal to individuals under 21
• No misleading health claims — Products cannot be marketed as having specific medical benefits
• Edible limits — Recreational edibles limited to 100 mg THC per package / 10 mg per serving

Advertising Restrictions

• No advertising where more than 30% of the expected audience is under 21
• No health benefit claims in marketing materials
• No imagery or messaging that could appeal to minors
• All advertising must include required warnings and disclaimers
• Digital advertising must include age-gating mechanisms
• No visible signage that depicts cannabis plants, products, or consumption

Tax Compliance

Retailers are responsible for collecting and remitting the 17% state excise tax and any applicable local taxes. Medical OMMP patients are exempt from all cannabis taxes. Records must demonstrate accurate tax collection and remittance. See Starting a Cannabis Business for more on the tax environment.

OLCC Enforcement

The OLCC conducts regular compliance inspections, both scheduled and unannounced. Under the leadership of Chair Dennis Doherty and executive director Tara Wasiak (appointed July 2025), the OLCC has maintained active enforcement. Violations can result in:

• Warning letters and corrective action plans for minor issues
• Monetary fines scaling with the severity and frequency of violations
• License suspension — temporary halt of operations
• License revocation — permanent loss of the license

Maintaining proactive compliance — including regular internal audits, updated SOPs, ongoing employee training, and accurate Metrc records — is the best defense against enforcement actions. Given that licenses cannot be replaced under the permanent moratorium, revocation is effectively permanent market exclusion.