NZ Cannabis GACP Cultivation Requirements 2026

GACP is the cultivation half of NZ’s quality regime. Get it right at planting and the rest of the compliance stack follows.

Every NZ cultivation licence holder under the Misuse of Drugs (Medicinal Cannabis) Regulations 2019 must comply with Good Agricultural and Collection Practices (GACP). The Medicinal Cannabis Agency (MCA) treats cultivation, traceability, the 31 December stocktake, and security as one connected obligation set. This article walks through what NZ cannabis GACP actually requires, where it sits relative to GMP, what records you must keep, when reporting is due, and how the security and incident-reporting clock starts the moment something goes wrong. NZ cannabis GACP is the foundation every other compliance obligation sits on top of.

For the broader regulatory context across all five MCS licence activity types, our NZ medicinal cannabis compliance checklist covers the full scheme end to end: licence eligibility, GMP, MQS, security, import and export, and the 2024 and 2025 amendments.

What Is GACP Compliance in the NZ Medicinal Cannabis Scheme?

GACP stands for Good Agricultural and Collection Practices. In the NZ Medicinal Cannabis Scheme it is the documented standard every cultivation licence holder must meet for growing, harvesting, drying, and primary handling of cannabis intended for medicinal use. The MCA enforces it as a condition of the cultivation licence under the Misuse of Drugs (Medicinal Cannabis) Regulations 2019. GACP sits upstream of GMP. GACP governs the plant in the field or the controlled-environment room. GMP governs what happens once that biomass enters a Medsafe-licensed manufacturing facility.

The MCS administers five licence activity types under Regulation 22, and not every activity carries a GACP obligation. The split matters because operators frequently misread which standard applies to them.

Most commercial operators will hold cultivation plus possession for manufacture plus supply, which means GACP, GMP, and MQS verification all apply across the same supply chain. The MCA expects a single audit trail that links them. For a deeper dive on the manufacturing layer, see NZ cannabis GMP and Medsafe requirements. For licence eligibility itself, see NZ medicinal cannabis licence requirements.

NZ Cannabis GACP Cultivation SOPs and Documentation: What the MCA Expects

NZ cannabis GACP is a documentation standard as much as a horticultural one. The MCA expects every cultivation licence holder to produce written Standard Operating Procedures (SOPs) and contemporaneous records covering six core areas. Inspectors look for the SOP, then they look for the matching record from the most recent crop cycle, and the two must reconcile.

1. Pesticide, fungicide, and herbicide use

Every application must be recorded with the active ingredient, the application date, the concentration applied, the cultivation area treated, and the withholding period before harvest. The record sits alongside a written SOP describing approved products, application methods, and operator PPE. Pesticide residues are an MQS test panel that gates supply, so an undocumented pesticide application can disqualify an entire harvest from the NZ market.

2. Fertiliser and growth regulator records

Type, batch number, application rate, and schedule must be documented for each cultivation area. Growth regulators receive the same scrutiny as fertilisers because residue carry-over is a known compliance failure mode in regulated cannabis. The SOP should specify approved suppliers, storage conditions, and a procedure for removing expired stock.

3. Irrigation and water quality

Water source documentation, pH monitoring records, and irrigation schedules. GACP-compliant operators test mains, bore, or harvested rainwater on a defined cadence and keep the lab results in the cultivation file. Heavy metals are an MQS panel, so water that fails on lead, cadmium, arsenic, or mercury is a direct compliance risk on the finished product.

4. Growing medium documentation

Substrate type, batch origin, and any sterilisation or quality records. For coco coir, peat, or rockwool, the supplier certificate of analysis goes into the file. For soil-based grows, the SOP must document sterilisation procedures and contamination controls.

5. Harvest SOPs

Documented procedures covering harvest timing, harvest equipment sanitation, drying conditions (temperature, humidity, airflow), and the transition from wet biomass to dried flower. The MCA expects the harvest SOP to specify how lot identifiers are assigned at harvest and how they propagate to drying, trimming, and packaging.

6. Destruction SOPs

Procedures for destruction of unneeded organic material. The destruction must be documented and witnessed. The destruction record is the bookend to the plant count: every plant grown either ends up in a tracked harvest lot, a quarantine lot, or a destruction record. There is no fourth category.

Traceability and Record-Keeping Under Regulations 36-39

Part 4 of the Misuse of Drugs (Medicinal Cannabis) Regulations 2019 covers record-keeping, with Regulations 36-39 setting the cultivation-specific requirements. The headline is that every plant, every kilogram, and every transfer must be traceable to a unique lot or batch identifier, and the records must be retained for a minimum of five years.

The required record categories are concrete and the MCA will request samples on inspection.

• Plant counts at every growth stage. Vegetative, flowering, and any mother stock or clones held for propagation. Counts reconcile across the room or zone, the licence area, and the platform record. A discrepancy of more than a small variance triggers an investigation under the security obligation, not just a record-keeping correction.
• Harvest quantities by lot. Wet weight at harvest, dry weight at completion of drying, and the conversion factor. The MCA does not prescribe a specific moisture target, but the conversion must be reproducible and documented.
• Lot and batch identifiers. Every lot carries a unique identifier from propagation through harvest to supply. The identifier must travel with the material on every internal movement and on every external supply transaction.
• Supply records. Recipient details (licence holder name and licence number), quantities supplied, dates of supply, and the lot or batch identifier of the material supplied. Cultivation licence holders frequently supply other licensees with seeds, plants, plant material, or starting material, and each supply is a transaction the MCA must be able to trace.
• Five-year retention. All cultivation records must be kept for at least five years and must be retrievable on request by the Director-General. Storage can be paper or digital, but digital must be reproducible to a printable inspection-ready format.

The five-year retention clock starts at the date the record was created, not at the date the licence was issued or expired. Operators who change platforms or migrate from spreadsheets to a seed-to-sale system must carry the historical NZ cannabis GACP records forward, not abandon them.

When Is the NZ Annual Stocktake Due and What Does It Cover?

The annual stocktake is fixed: as at 31 December every year, and the result must be reported to the Director-General by 31 January. That gives cultivation licence holders one calendar month between snapshot and submission. The stocktake quantifies all cannabis material held at the licensed premises on the snapshot date, broken down by lot or batch identifier and reconciled against the running platform record.

What “all cannabis material” covers in practice:

• All live plants by growth stage and by lot identifier
• Harvested wet biomass not yet dried
• Dried flower and dried trim, by lot
• Material in quarantine pending investigation or remediation
• Material flagged for destruction but not yet destroyed
• Starting material (seeds, clones, mother stock) held on site
• Any material supplied to another licensee in the snapshot window but not yet collected

The stocktake is not a product count. It is a mass balance: the closing inventory at 31 December must reconcile to the prior year’s closing inventory plus the harvest, less destructions and supplies, less any sampling and testing draws. Discrepancies must be investigated and the investigation outcome must be documented before submission to the Director-General. Reporting an unreconciled stocktake is itself a compliance issue and will draw an MCA follow-up.

Annual licence renewal sits alongside the stocktake on the operator’s calendar. The renewal application and the NZD $2,587.50 fee must be submitted before licence expiry, which is independent of the 31 January stocktake deadline but typically falls in the same quarter.

What Security Obligations Apply to Cultivation Licences?

The MCA takes a risk-proportionate approach to security. Higher-THC cultivars and larger sites attract higher requirements, but every cultivation licence holder must satisfy a baseline. Premises are inspected before licence approval and may be re-inspected at any point during the licence term.

The baseline cultivation security obligations:

• Physical security. Adequate arrangements to minimise the risk of diversion to the illicit market. The MCA does not prescribe a specific perimeter or vault standard, but the operator must demonstrate that the arrangements are proportionate to the risk profile of the cultivars grown and the volume held.
• Daily security checks. Security measures must be verified at the start and end of each working day. The check must be documented contemporaneously, not reconstructed from memory at audit time.
• Detection systems. Systems must be in place to detect unauthorised activity, diversion, theft, or stock discrepancies. CCTV, intrusion alarms, access logs, and platform-level reconciliation alerts all contribute. The detection system must be live, not a documented intent.
• Crop protection. Protection from theft and animal damage must be documented. Outdoor and greenhouse cultivation in particular must address pest and animal exclusion as a security matter, not only a horticultural one.

The incident-reporting obligation runs on two clocks. NZ Police must be notified immediately if cannabis is removed without authority, lost, or stolen. The Medicinal Cannabis Agency must be notified within 3 days of any security incident. The two notifications are not interchangeable. Police get the immediate call because of the criminal-investigation aspect. The MCA gets the formal incident report within 72 hours because of the licensing-oversight aspect. Operators who notify only the MCA, only the Police, or who collapse the two timelines into a single late report are out of compliance even when the underlying incident was minor.

The MCA expects the security SOP, the daily check log, the detection-system service records, and any incident reports from the prior year to be available on inspection. A clean record of a small incident, properly notified to both Police and MCA, properly investigated, and properly remediated is a quality system working as designed. A missing incident report is the audit finding, not the incident itself. Security records sit alongside the cultivation records as part of the full NZ cannabis GACP audit pack.

Frequently Asked Questions

Does GACP apply to all NZ medicinal cannabis licence holders?

No. GACP applies specifically to cultivation licence holders under the Misuse of Drugs (Medicinal Cannabis) Regulations 2019. Nursery (seed supply), possession for manufacture, supply, and research licence holders have different obligations. Manufacturing licence holders must meet the NZ Code of Good Manufacturing Practice through Medsafe rather than GACP through the MCA. Operators who hold multiple licence types must meet each standard separately for the relevant scope of work, with a single audit trail linking them.

What records does NZ cannabis GACP require and how long must they be kept?

Cultivation licence holders must keep records of plant counts at every growth stage, harvest quantities by lot, lot and batch identifiers from propagation through supply, and supply records covering recipient details, quantities, and dates. Cultivation SOPs and the matching contemporaneous records for pesticides, fertilisers, irrigation, growing medium, harvest, and destruction are also mandatory. All records must be retained for a minimum of five years from the date the record was created and must be retrievable on request by the Director-General under Regulations 36-39.

When is the annual stocktake due in New Zealand and what happens if it is late?

The annual stocktake is conducted as at 31 December and the results must be submitted to the Director-General by 31 January. Late submission is a breach of the licence conditions and draws an MCA follow-up. Submitting an unreconciled stocktake (where harvest, destruction, supply, and sampling do not balance to the closing inventory) is also a compliance issue. Operators must investigate and document any discrepancy before submission, not after.

What is the difference between GACP and GMP in the NZ Medicinal Cannabis Scheme?

GACP governs cultivation: the plant in the field or controlled-environment room, harvest, drying, and primary handling. GMP governs manufacturing: extraction, formulation, packaging, and analytical testing inside a Medsafe-licensed facility. The boundary is the point at which dried cannabis enters the manufacturing facility for further processing. A vertically integrated operator must meet both standards, with separate SOPs and separate audit trails that reconcile at the handover. GMP is enforced by Medsafe under the Medicines Act 1981. GACP is enforced by the MCA under the Misuse of Drugs (Medicinal Cannabis) Regulations 2019.

Related NZ Compliance Resources

This NZ cannabis GACP spoke is part of a broader cluster covering the full NZ Medicinal Cannabis Scheme. Read alongside:

• NZ medicinal cannabis licence requirements: the five activity types, eligibility, fees, and renewal cycle.
• NZ cannabis GMP and Medsafe requirements: the manufacturing-side compliance regime that takes over where GACP ends.
• NZ Minimum Quality Standard for cannabis: the European Pharmacopoeia testing panels every product must pass before supply.
• NZ cannabis export licence requirements: the controlled-drug export licence regime and the July 2024 amendments.

For the printable, audit-ready version of every checklist in this cluster, download the full NZ medicinal cannabis compliance checklist guide.

Get the Full NZ Medicinal Cannabis Compliance Checklist

Everything in this article on NZ cannabis GACP, plus the full GMP and MQS requirements, the security and incident-reporting matrix, the July 2024 export amendments, and a printable 31 December stocktake template. Built for compliance officers, QAPs, and licence applicants in the NZ Medicinal Cannabis Scheme.

Download Free Guide