NZ medicinal cannabis compliance checklist with GACP document, cannabis flower, and silver fern

NZ Medicinal Cannabis Compliance: A Working Guide for Licensees (2026)

Licensed in a market that grew from 4,875 to 265,000 dispensings in five years: what does NZ medicinal cannabis compliance actually require now?

New Zealand’s Medicinal Cannabis Scheme has matured faster than almost any jurisdiction on earth. Dispensings climbed 54-fold between 2020 and 2025, 80+ products now clear the Minimum Quality Standard verification process, and the July 2024 amendments unlocked a NZ$250 million export pathway. If you hold one of the 42 licences the Medicinal Cannabis Agency currently administers, or you are working through an application, the opportunity is real. This page is the operator’s working reference for every obligation the MCA and Medsafe enforce: licence scope, GACP for cultivation, GMP for manufacturing, MQS for product release, security, the annual stocktake, the 5-year retention rule, import and export after the 2024 amendments, and the December 2025 industrial hemp reform. Every number, section reference, and deadline below is drawn from the Misuse of Drugs (Medicinal Cannabis) Regulations 2019, the 2024 amendment regulations, and current MCA guidance.

NZ Medicinal Cannabis Compliance Checklist 2026 PDF cover

What You’ll Find in This Guide

  • Complete licence application checklist across the 5 activity types (Cultivation, Nursery, Possession for Manufacture, Supply, Research)
  • GMP and GACP compliance requirements: SOPs, batch records, environmental monitoring, validated processes
  • Minimum Quality Standard (MQS) verification guide: every test, every assay limit, every lab accreditation requirement
  • Security, traceability, and record-keeping obligations (including the 5-year retention rule and 31 December stocktake)
  • Import and export requirements after the July 2024 amendments, including Regulation 38A personal import ban
  • Pre-scheme vs current scheme comparison and full regulatory timeline from 2020 through the December 2025 hemp reform
NZ Medicinal Cannabis Compliance Checklist 2026 guide cover

Download the Full NZ Compliance Checklist

The 8-page printable PDF includes worked licence-scope examples, the full MQS test matrix with lab-accreditation flags, a ready-to-adapt destruction SOP template, the 31 December stocktake checklist, and the pre-scheme vs current-scheme comparison table. Exactly the reference your QAP, compliance manager, and auditor can print and work from.

How Is New Zealand’s Medicinal Cannabis Scheme Actually Structured?

New Zealand’s Medicinal Cannabis Scheme is governed by the Misuse of Drugs (Medicinal Cannabis) Regulations 2019, which came into force on 1 April 2020. The scheme sits inside a tiered framework of parent legislation: the Misuse of Drugs Act 1975, the Misuse of Drugs Amendment Act 2019, the Medicines Act 1981, and the Medicines Amendment Act 2025. The 2024 Amendment Regulations (SL 2024/129) reshaped export pathways and added the Regulation 38A personal-import ban. Every operator should keep all five instruments within reach.

Three agencies share oversight. The Medicinal Cannabis Agency (MCA), a division of the Ministry of Health (Manatū Hauora), administers licences and enforces product-supply and record-keeping obligations. Medsafe handles Licence to Manufacture Medicines, Licence to Pack Medicines, and medicine-approval pathways separately. Manatū Hauora is the policy owner. In practice this means a typical Possession for Manufacture licensee is working with BOTH the MCA (for the controlled-drug activity licence) and Medsafe (for the GMP manufacturing licence), and must track the obligations of each.

The Five Licence Activity Types

Under Regulation 22 the MCA grants five separate activity types. A single operator can hold multiple activities on one licence but each activity must be spelled out in scope.

Activity Scope Key Requirements
Cultivation Cultivating cannabis for medicinal products; supplying seeds, plants, or plant material to other licence holders GACP, security, annual stocktake
Nursery (Seed Supply) Acting as a seed merchant only; does not permit cultivation or supply of plants or plant material Security, record-keeping
Possession for Manufacture Processing dried cannabis; extracting cannabis-based ingredients; manufacturing products; lab testing GMP, Medsafe licence
Supply Distributing or exporting starting material, cannabis-based ingredients, or finished products MQS verification, security
Research Supplying or administering a non-CBD medicinal cannabis product to research subjects in a clinical trial Ethics approval, security

Licence Eligibility Requirements

The MCA assesses applicants against five fit-and-proper criteria drawn from both the Misuse of Drugs Act 1975 and the Crimes Act 1961. Applicants must be 18 or older and resident in New Zealand. They must demonstrate the expertise and resources to comply with the 2019 regulations. They must have no prior licence revocations under the Misuse of Drugs Act 1975, no convictions under the Misuse of Drugs Act 1975 for drug-related offences, and no dishonesty offences under the Crimes Act 1961. The same tests apply to directors and partners of body-corporate applicants, and equivalent overseas convictions count. The application fee is NZD $2,587.50 (incl. GST), non-refundable if the application is declined, with annual renewal required.

Choosing the correct activity type at application is the highest-leverage decision in the process. A full walk-through of each activity, the supporting documents the MCA expects, and how scope decisions interact with GACP, GMP, and MQS obligations is in our companion guide on NZ medicinal cannabis licence requirements.

What GACP Requirements Apply to NZ Cannabis Cultivation?

Every cultivation licence holder in NZ medicinal cannabis compliance must operate under Good Agricultural and Collection Practices (GACP). The MCA does not publish a single NZ-specific GACP standard: it requires operators to align with internationally accepted GACP principles (commonly benchmarked to EMA and WHO guidance) and to evidence that alignment in their licence submission and ongoing inspections.

Cultivation SOPs and Documentation

GACP compliance means six documented practice areas. Pesticide use documentation records every pesticide, fungicide, and herbicide with application dates, concentrations, and withholding periods. Fertiliser and growth-regulator records capture type, batch, application rate, and schedule for each cultivation area. Irrigation and water quality logs include water-source testing, pH monitoring, and irrigation schedules. Growing-medium documentation tracks substrate type, batch origin, and sterilisation or quality records. Harvest SOPs cover harvest procedure, drying protocol, and processing method. Destruction SOPs govern any destruction of unneeded organic material (documented and witnessed).

Traceability and Record-Keeping (Regulations 36 to 39)

Regulations 36 to 39 are the traceability backbone of the scheme. Operators must keep accurate records of all cannabis plants at each growth stage, weigh and document harvested material per lot or batch, assign unique identifiers for each lot from propagation through harvest, and document recipient details, quantities, and dates for all material supplied to other licence holders. All cultivation records must be retained for a minimum of 5 years and be accessible to the Director-General on request. This is where spreadsheet-first operators get caught at audit: the MCA expects the records to be both complete and retrievable within minutes, not assembled after the fact.

The Annual Stocktake

On 31 December every year, a licensed cultivator must quantify all cannabis material held at licensed premises. The stocktake results must be reported to the Director-General by 31 January of the following year. Missing either date invites an MCA follow-up and, in serial cases, licence-condition amendments.

Each of the six SOP areas, each traceability field, and the full stocktake workflow are broken down in the companion spoke on NZ cannabis GACP cultivation requirements, including ready-to-adapt SOP outlines and the Regulation 36 to 39 fields mapped to typical cultivation software fields.

How Do Medsafe GMP Requirements Intersect with the Medicinal Cannabis Scheme?

Possession for Manufacture is the activity type where the two regulatory regimes meet. Under the Medicines Act 1981, manufacturing must comply with the NZ Code of Good Manufacturing Practice for Manufacture and Distribution of Therapeutic Goods. That code is what Medsafe enforces during site inspections and what underpins a Licence to Manufacture Medicines or a Licence to Pack Medicines.

The Core GMP Requirements

Six core obligations define Medsafe GMP for NZ medicinal cannabis compliance. First, complete manufacturing batch records for every production run, maintained as digital records with electronic signatures. Second, a documented Quality Management System (QMS) covering all manufacturing operations, CAPA (corrective and preventive action), change control, and deviations. Third, validated manufacturing processes, cleaning procedures, and analytical methods. Fourth, environmental monitoring of temperature, humidity, and particulates in manufacturing areas. Fifth, the Medsafe licence itself, with scope that matches the manufacturing activity. Sixth, a QAP (Qualified Authorised Person) accountable for product release.

Dual-Licence Operators

Operators who cultivate AND manufacture carry the compounding weight of BOTH GACP and GMP. The MCA expects the traceability chain to be unbroken across the GACP-to-GMP handover: plant-to-lot to batch-to-bulk to finished product. Lot-level traceability that does not collapse at the harvest-to-manufacture join is what allows an operator to pass an inspection without scrambling.

Digital Batch Records

Paper batch records are still technically permitted, but the NZ Code and current Medsafe expectations lean heavily toward digital. Electronic signatures, tamper-evident audit trails, and on-demand retrieval are all requirements of the modern inspection. Most operators who scale past a single manufacturing room find that digital batch records are the difference between a two-day inspection and a two-week one.

The full Medsafe licence application workflow, including environmental-monitoring frequency, QMS document inventory, and the CAPA-versus-deviation distinction, is broken down in the dedicated guide on NZ cannabis GMP Medsafe requirements.

What Does Minimum Quality Standard (MQS) Verification Actually Test?

The Minimum Quality Standard is the NZ-specific product-release test set that every medicinal cannabis product must pass before supply. The standard is defined in the Part 1 regulations and is enforced at the supply activity: products that fail MQS cannot be supplied in New Zealand. For export products, the MQS has been decoupled from product release (see Section 5 on the July 2024 amendments), but for domestic supply, MQS is non-negotiable.

The MQS Test Matrix

Testing must align with European Pharmacopoeia standards. Eight test categories cover safety, identity, purity, and stability. Six require a GMP-certified lab; two are accepted at an ISO/IEC 17025 accredited lab.

MQS Test Standard Lab Requirement
Microbiological contamination European Pharmacopoeia GMP-certified lab
Heavy metals (As, Cd, Pb, Hg) European Pharmacopoeia GMP-certified lab
Pesticide residues European Pharmacopoeia GMP-certified lab
Aflatoxins and Ochratoxin A European Pharmacopoeia GMP-certified lab
Residual solvents European Pharmacopoeia GMP-certified lab
Active ingredient assay Dried: 80 to 120% | Pharma: 90 to 110% GMP-certified lab
Foreign matter and ash content European Pharmacopoeia ISO 17025 accepted
Shelf life and storage conditions Stability studies ISO 17025 accepted

Assay Limits

The assay limits are where most first-cycle products fail. Dried cannabis products must assay at 80 to 120% of stated THC or CBD content. Pharmaceutical dosage forms must assay at 90 to 110% of stated content. A product that falls outside those limits fails MQS and cannot be supplied domestically. This is stricter than several peer jurisdictions and is one of the strongest arguments for bringing stability studies and pre-release testing forward in the product-development calendar rather than leaving them to the last sprint before supply.

Why the Lab-Accreditation Split Matters

Six tests require a GMP-certified lab because they are safety-critical and their results flow directly into batch release decisions. Two tests (foreign matter and ash, stability) are accepted at an ISO/IEC 17025 accredited lab because they are characterisation rather than safety. Operators planning to use a New Zealand lab for some tests and an Australian or European lab for others should confirm the accreditation status of each test BEFORE sending samples: a report from the wrong accreditation level will not be accepted for MQS verification, regardless of how good the data is.

Stability and the 80+ Verified Products

There are 80+ MQS-verified products currently available on the NZ market. Almost every one of them went through a stability study that dictated its shelf life and storage conditions before the first batch could be released. Stability is not a nice-to-have: it is part of the MQS and it takes time (typically 6 to 12 months of real-time data). Operators who plan product launches need to start stability programs early.

The full MQS workflow, including sample-plan design, CoA requirements, the retest and deviation handling process, and the interface between MQS and Medsafe batch release, is covered in the deep-dive on NZ Minimum Quality Standard (MQS) for medicinal cannabis. This is the highest-complexity area in NZ medicinal cannabis compliance and the most common site of first-cycle failures.

What Changed with the July 2024 Amendment Regulations?

The Amendment Regulations 2024 (SL 2024/129) came into force on 5 July 2024 and shifted the scheme from a domestic-first posture to an export-ready one. Four changes matter most to operators planning beyond the NZ$70 million domestic market.

Regulation 38A: Personal Import Ban

Regulation 38A prohibits personal importation of CBD products via overseas courier or mail. Before the amendment, a small volume of low-THC CBD product was arriving through personal-import channels. Post-amendment, that route is closed. For operators this matters because the domestic distribution channel is now fully intermediated by licensed supply activity holders: the grey-market personal-import substitute has been removed.

Controlled Drug Export Licence

A controlled drug export licence is required for all cannabis material exports (seeds, starting material, cannabis-based ingredients, finished products). The licence is issued by the MCA and sits alongside the operator’s activity licence.

Destination-Country Import Licence Requirement

Before the MCA will issue an export licence, the importing country must have provided a licence to import. This mirrors the international narcotics-control framework and shifts a significant share of the export timeline onto negotiations with the destination regulator. Operators planning to export to Germany, Australia, the UK, or any of the other relevant markets need to run the two licence tracks in parallel rather than sequentially.

Export Quality Standard: Importing Jurisdiction Only

This is the pivotal commercial change. Before the amendment, exports had to meet both NZ MQS AND the destination country’s standards. After the amendment, exports only need to meet the importing jurisdiction’s quality standards. In practice this means an NZ operator exporting to the EU can run against EU GMP specifications without duplicating the MQS verification workload on the same batch. The commercial implication is that products that do not quite meet NZ MQS (for example an assay outside the 80 to 120% window that still meets an importer’s wider allowance) become export-viable. The regulatory implication is that operators need tight product-specification management and a clear export-versus-domestic release SOP so there is no accidental domestic supply of an export-only batch.

Seed and Material Export for Research

Export of cannabis seed, starting material, and cannabis-based ingredients for testing, analysis, and research is now permitted. This unlocks partnerships with overseas research institutions and pharmaceutical developers that were previously blocked.

The full export workflow, including the Import Licence / Export Licence sequencing, the destination-standard translation problem, and an operator-level specification management template, is covered in the companion guide on NZ cannabis export licence requirements 2024.

What Does the December 2025 Industrial Hemp Reform Mean for Medicinal Cultivators?

On 11 December 2025, a set of reforms to the industrial hemp regime came into force. Three changes matter for operators on the medicinal side of the fence even though the reforms themselves are outside the Medicinal Cannabis Scheme.

First, the licence requirement for industrial hemp cultivation has been removed. Before the reform, anyone growing industrial hemp needed a licence and the THC cap on that licence was 0.35% dry weight. After the reform, no licence is required and the THC cap has been raised to 1.0% dry weight. That is almost a threefold increase in allowable THC for a material that no longer requires a controlled-drug licence to grow.

Second, hemp biomass can now be supplied to MCS (Medicinal Cannabis Scheme) producers. This is the supply-chain link that matters: a licensed Possession for Manufacture operator can now source bulk hemp biomass from an unlicensed hemp grower and process it into a medicinal product, provided the downstream manufacturing chain meets GMP and the finished product meets MQS. For CBD-dominant product developers this opens a substantially cheaper starting-material pool than licensed medicinal cultivation.

Third, the reform creates a competitive dynamic. Medicinal cultivators who previously carried a GACP-level cost structure for CBD-oriented biomass are now competing against non-GACP hemp biomass that is cheaper to produce. The right response is usually specialisation: concentrate medicinal cultivation on THC-dominant or mixed-ratio products where the GACP chain is required, and source CBD biomass from hemp suppliers under a controlled inbound-materials SOP.

Security Obligations and Incident Reporting Timelines

The MCA takes a risk-proportionate approach to security: a high-THC cultivation site warrants stricter measures than a small research facility. All licensed premises are inspected before licence approval, and the security file is one of the most common sources of follow-up during the first renewal cycle.

The baseline for all sites includes physical security arrangements sufficient to minimise the risk of diversion to the illicit market, daily security checks verified at the start and end of each working day, detection systems capable of identifying unauthorised activity, diversion, theft, or stock discrepancies, and documented crop-protection measures against both theft and animal damage.

Incident reporting is where operators most often miss a deadline. NZ Police must be notified IMMEDIATELY if cannabis is removed without authority, lost, or stolen. The MCA must be notified within 3 days of any security incident, including the Police-notifiable ones. The 3-day clock starts at the moment the incident is identified, not when the investigation concludes. Operators should have a pre-drafted incident report template and a named responder on call so that the 3-day window is never in doubt.

Priority Actions for NZ Operators Today

Immediate Actions

  • Review licence scope: confirm your licence covers every intended activity (cultivation, manufacture, supply, export). Gaps in scope are the most common cause of operational blocks.
  • Audit GACP and GMP compliance: gap-analyse against current MCA and Medsafe requirements. Focus on traceability, batch records, and the CAPA log.
  • Implement seed-to-sale traceability: lot tracking, batch records, and supply-chain documentation from propagation through supply.
  • Prepare for MQS verification: confirm every product on the roadmap can meet the assay limits and test matrix BEFORE the first release batch.
  • Review export strategy: assess opportunities under the July 2024 relaxed export standards. Map destination-country import requirements per target market.
  • Review hemp supply opportunities: the December 2025 hemp reform enables new inbound-biomass supply arrangements for CBD-dominant product lines.

Ongoing Compliance

  • Annual licence renewal: submit renewal application and NZD $2,587.50 fee before licence expiry.
  • Annual stocktake: complete 31 December stocktake and report to the Director-General by 31 January.
  • 5-year record retention: maintain all records securely and retrievably for Director-General access.
  • Security incident readiness: keep a pre-drafted Police and MCA notification template on file; the 3-day MCA deadline does not pause for investigation.
Trusted by 200+ licensed cannabis facilities across 10+ countries

Frequently Asked Questions About NZ Medicinal Cannabis Compliance

How many medicinal cannabis operators are licensed in New Zealand?

42 as of 2025. The Medicinal Cannabis Agency publishes the list of licensed operators on the Ministry of Health website, and the list is updated as new licences are granted or renewed.

What does a medicinal cannabis licence cost in New Zealand?

NZD $2,587.50 (incl. GST) application fee, non-refundable if the application is declined. Annual renewal is required at the same fee level. The fee is set by the 2019 regulations and adjusted periodically.

When is the annual stocktake due?

The stocktake itself is carried out as at 31 December every year. Stocktake results must be reported to the Director-General by 31 January of the following year, giving operators a one-month reporting window.

How long do I need to keep cultivation records?

A minimum of 5 years. All cultivation records, including the traceability fields required under Regulations 36 to 39, must be kept accessible to the Director-General on request. Digital records with tamper-evident audit trails are strongly preferred at inspection.

What is the THC limit for NZ industrial hemp after the December 2025 reform?

1.0% THC dry weight, up from the previous 0.35% cap. Industrial hemp cultivation no longer requires a licence after the reform, and hemp biomass can now be supplied to MCS producers for further processing.

Can I import CBD products into NZ for personal use?

No. Regulation 38A, added by the July 2024 amendment regulations, prohibits importing CBD products via overseas courier or mail for personal use. Imports now flow exclusively through licensed supply channels.

NZ Medicinal Cannabis Compliance Checklist 2026 guide cover

Get the Complete Compliance Checklist

Take the printable 8-page PDF into your next QAP meeting or audit prep session. It maps every MCA and Medsafe obligation to a line item your team can sign off, includes the full pre-scheme vs current-scheme comparison, the regulatory timeline through the December 2025 hemp reform, and a Priority Actions checklist for immediate and ongoing compliance work.

Ready to Simplify NZ Medicinal Cannabis Compliance?

GrowerIQ is the seed-to-sale platform built for regulated cannabis. Digital batch records, lot-level traceability, GACP and GMP documentation, 31 December stocktake automation, and one-click MCA reporting: all in one platform, built for NZ operators.

REQUEST DEMO
GrowerIQ quality management platform

About GrowerIQ

GrowerIQ is a complete cannabis production management platform. Ours is the first platform to integrate your facility systems, including sensors, building controls, QMS, and ERP, into a single simplified interface.

GrowerIQ is changing the way producers use software - transforming a regulatory requirement into a robust platform to learn, analyze, and improve performance.

To find out more about GrowerIQ and how we can help, fill out the form to the right, start a chat, or contact us.

Start today.

Let us know how to reach you, and we'll get in touch to discuss your project.

GrowerIQ does not share, sell, rent, or trade personally identifiable information with third parties for promotional purposes. Privacy Policy