There is no California Prop 266. The law people are usually looking for under that name is Assembly Bill 266, a bill signed into law in 2015 that created California’s first statewide licensing system for medical marijuana businesses. It was legislation, not a ballot measure, and it has since been folded into a larger regulatory scheme. If you are trying to understand what “Prop 266” means for a dispensary, a cultivator, or a patient today, you need to know what AB 266 originally did, what replaced it, and which federal rules the state framework cannot touch.
Why “Prop 266” Is a Misnomer
Proposition numbers in California are reserved for measures placed on the statewide ballot. AB 266 never went to voters. It moved through the Assembly and Senate and was signed into law as part of a three-bill package known collectively as the Medical Marijuana Regulation and Safety Act, or MCRSA. Some online explainers also refer to a “California Medical Marijuana Regulation and Safety Board.” No such board exists. The statute created a bureau inside the Department of Consumer Affairs, not a board.
What AB 266 Originally Did
AB 266 established the Bureau of Medical Marijuana Regulation within the Department of Consumer Affairs and gave it authority to license dispensaries, cultivation sites, manufacturers, and transporters. The Department of Justice was directed to run background checks on all applicants, who had to sign their submissions under penalty of perjury. Falsifying a conditional license application could draw a civil fine of up to $35,000 per violation, well above the $1,000-to-$5,000 range sometimes cited online.1California Legislative Information. California Assembly Bill 266 – Medical Cannabis
The bill also required the State Department of Public Health to set standards for certifying laboratories that would perform random testing on medical marijuana products.1California Legislative Information. California Assembly Bill 266 – Medical Cannabis It funded a Special Account for Environmental Enforcement through fees on licensed cultivators, and it directed the Division of Labor Standards Enforcement to certify cannabis employees and maintain training standards.
Legal protection for operators was tied directly to licensure. Licensees acting in compliance with the state framework and with local ordinances were shielded from arrest, prosecution, and other state sanctions.2California Legislative Information. AB-266 Medical Marijuana – Legislative Counsels Digest The older collective-cultivation model was set to be repealed once licensing came online.
How AB 266 Became MAUCRSA
AB 266’s framework did not stand alone for long. In November 2016, voters passed Proposition 64, the Adult Use of Marijuana Act, which legalized recreational cannabis and created a second, parallel regulatory system. In 2017, Senate Bill 94 combined the medical and adult-use rules into a single consolidated statute called the Medicinal and Adult-Use Cannabis Regulation and Safety Act, or MAUCRSA, and deleted the overlapping provisions from both predecessor laws.3California State Assembly. Report on the Condition and Health of the Cannabis Industry
The agencies were consolidated too. The Bureau of Medical Marijuana Regulation that AB 266 created was renamed the Bureau of Cannabis Control, and in 2021 California merged three separate cannabis oversight agencies into a single Department of Cannabis Control (DCC). The DCC now handles all licensing, enforcement, and rulemaking for both medical and adult-use cannabis. So while AB 266 laid the foundation, no one applies for a license under AB 266 today; they apply under MAUCRSA, to the DCC.
What Compliance Looks Like Today
The compliance backbone AB 266 introduced still runs through current law, updated by MAUCRSA and DCC regulations. Applicants must disclose all owners and financial interest holders, and DCC staff review each owner’s criminal history during the application process.4Department of Cannabis Control. How to Apply for a License Before applying for a state license, businesses must obtain any local permits required by their city or county, because the DCC confirms local compliance as part of its review.
The DCC also sets requirements for standard operating procedures, employee training, and facility layout. If an application is incomplete or deficient, DCC staff email the applicant with a list of corrections and a deadline. Nothing moves forward until the application fee is paid.4Department of Cannabis Control. How to Apply for a License Annual licensing fees vary widely by license type and by the scale of the operation.
Product testing, which AB 266 first required, is now handled by a network of state-licensed laboratories that screen for pesticides, heavy metals, and microbial impurities. As of January 2024, those labs must use the DCC’s standardized cannabinoid test method for THC and CBD content.
Track-and-trace is the other piece worth knowing. The California Cannabis Track-and-Trace system, launched in January 2018 on METRC software, assigns unique identifiers to plants and products and follows them through every licensed link in the supply chain. Every licensee has to record their transactions in the system.5Department of Cannabis Control. 5 Steps to Using the Track and Trace System
Penalties Under the Current System
The DCC classifies violations by licensed businesses as minor, moderate, or serious, and penalties scale with the classification.
- Minor violations carry fines of $100 to $1,000.
- Moderate violations carry fines of $501 to $10,000.
- Serious violations carry fines of $1,001 to $30,000, and can also result in license suspension or revocation.
The minimum fine for any disciplinary action is $1,000. On top of monetary penalties, the DCC can suspend a license using a formula tied to the licensee’s average daily gross revenue. A Tier 1 disciplinary order may include a 5-to-15-day suspension; Tier 3 starts at 45 days. Revocation is the ceiling at every tier.6Department of Cannabis Control. DCC Current Disciplinary Guidelines Certain record-keeping failures can carry fines of up to $30,000 per individual violation under Business and Professions Code section 26160.
What Still Protects Patients
California’s patient protections predate AB 266 by nearly twenty years. The Compassionate Use Act of 1996 (Proposition 215) provides that state marijuana possession and cultivation laws do not apply to a patient, or a patient’s primary caregiver, who possesses or cultivates marijuana for the patient’s personal medical purposes on a physician’s written or oral recommendation.7California Legislative Information. California Health and Safety Code 11362.5 The Act also protects physicians from punishment for making those recommendations.
That baseline protection is unchanged. What AB 266 did, and what MAUCRSA continues, is bind commercial operator protections to compliance with the state licensing regime.
Federal Limits the State Cannot Fix
State law does not settle the question. Marijuana remains a Schedule I controlled substance under the federal Controlled Substances Act, defined as a drug with no accepted medical use and no accepted safety for use under medical supervision.8Office of the Law Revision Counsel. United States Code Title 21 Section 812 A rescheduling process is underway. The Department of Health and Human Services recommended a move to Schedule III in 2023, the Department of Justice proposed a rule in May 2024, and a December 2025 executive action directed the Attorney General to complete rescheduling as quickly as federal law allows.9The White House. Increasing Medical Marijuana and Cannabidiol Research Until that process finishes, federal law still treats every state-legal cannabis business as trafficking in a Schedule I substance.
The main federal shield for state-compliant medical cannabis operations is the Rohrabacher-Blumenauer Amendment, an appropriations rider renewed annually since 2015. It bars the Department of Justice from spending federal funds to prevent states from implementing their medical marijuana laws, and federal courts, including the Ninth Circuit, have read it to block prosecutions of individuals who strictly comply with state law. It does not cover adult-use cannabis, it does not change marijuana’s federal status, and Congress can decline to renew it in any future appropriations cycle.
Three federal consequences catch California operators and patients off guard:
Taxes. Section 280E of the Internal Revenue Code bars any tax deduction or credit for a business trafficking in Schedule I or II controlled substances.10Office of the Law Revision Counsel. United States Code Title 26 Section 280E California dispensaries and cultivators pay federal income tax on gross revenue minus only the direct cost of goods sold. Some operators have reported effective federal tax rates as high as 80 percent. Rescheduling to Schedule III would end Section 280E’s application to cannabis, but that has not happened yet.
Banking. Because cannabis proceeds can constitute money laundering under federal law, most banks avoid cannabis accounts. Those that serve the industry must follow FinCEN’s 2014 guidance, which requires customer due diligence, ongoing monitoring, and a Suspicious Activity Report for every marijuana-related transaction regardless of state legality.11FinCEN. BSA Expectations Regarding Marijuana-Related Businesses The SAFE and SAFER Banking Acts, which would create a statutory safe harbor, remain stalled in Congress.
Firearms and housing. Federal law prohibits any unlawful user of a controlled substance from shipping, transporting, receiving, or possessing firearms or ammunition.12Office of the Law Revision Counsel. United States Code Title 18 Section 922 Because federal law treats all marijuana use as unlawful, a California medical marijuana cardholder is a federally prohibited person for firearms purposes, and the Ninth Circuit has upheld the prohibition. The Department of Housing and Urban Development has similarly stated that it is required by statute to deny federally assisted housing to marijuana users, even those in full compliance with state law. California’s patient protections do not reach federal housing programs.
So when someone asks about “Prop 266,” the honest answer has three parts. The bill they mean is AB 266. Its rules now live inside MAUCRSA and are enforced by the Department of Cannabis Control. And even perfect compliance with California law leaves a set of federal problems that only Congress or federal rescheduling can resolve.