Cannabis marketing compliance is not optional, and it is not simple. Every state with a legal cannabis market has its own advertising and marketing regulations, enforced by different agencies with different interpretations of what's permissible. A marketing campaign that's fully compliant in Massachusetts might violate three regulations in New York. An SMS program that works in New Jersey might need completely different opt-in language in Connecticut.
This checklist covers the marketing compliance requirements for the five states where Gold Standard Solutions operates most actively: New York, New Jersey, Connecticut, Massachusetts, and Pennsylvania. For each state, we outline the regulatory body, the key rules governing cannabis marketing, and the specific requirements that affect email, SMS, advertising, and in-store promotions.
Disclaimer: This guide is for informational purposes and does not constitute legal advice. Cannabis regulations change frequently. Always consult with a cannabis attorney in your state for the most current compliance requirements. This guide reflects regulations as of early 2026.
Universal Federal Requirements
Before diving into state-specific rules, every cannabis marketing program must comply with these federal requirements regardless of state:
- CAN-SPAM Act (email): Every commercial email must include a clear unsubscribe mechanism, your physical business address, honest subject lines, and identification as an advertisement if applicable.
- TCPA (SMS/calls): Prior express written consent is required before sending any marketing text message. Every SMS must include opt-out instructions. You must honor opt-out requests immediately.
- No health or medical claims: Federal law prohibits claiming that cannabis treats, cures, prevents, or mitigates any disease or medical condition. This applies to all marketing channels including email, SMS, social media, and advertising.
- Age verification: All cannabis marketing must be directed at audiences where at least 71.6% of the audience is reasonably expected to be 21 or older (the FTC standard). Most state regulators require even stricter age-gating.
New York (OCM)
New York Compliance Requirements
New York has some of the strictest cannabis marketing regulations in the country. The OCM takes an aggressive approach to enforcement, and violations can result in fines, license conditions, or revocation.
- All advertising must include the state-mandated warning: "For use only by adults 21 years of age and older. Keep out of reach of children."
- No advertising within 500 feet of schools, daycare centers, playgrounds, or houses of worship
- No advertising that appeals to individuals under 21 (no cartoons, no characters, no imagery associated with youth culture)
- No false or misleading claims about product safety, health benefits, or therapeutic effects
- All digital advertising must include age-gate verification before any cannabis content is displayed
- No outdoor advertising (billboards) that is visible from a public road, with limited exceptions
- Marketing materials must not encourage excessive consumption or depict consumption in a motor vehicle
- Loyalty programs and promotional offers must comply with OCM promotional guidelines
- Email and SMS opt-in must verify age 21+ before any marketing message is sent
New Jersey (CRC)
New Jersey Compliance Requirements
New Jersey's CRC has established detailed advertising rules that apply to all forms of cannabis marketing including digital, print, broadcast, and direct-to-consumer communications.
- All advertising must include: "For use only by adults 21 years of age and older" and the licensee's name and license number
- No advertising that is designed to appeal to persons under 21, including use of cartoon characters, toys, or youth-oriented imagery
- No advertising on any medium where more than 15% of the audience is reasonably expected to be under 21
- No health or medical claims in any marketing materials, including testimonials implying therapeutic benefit
- All advertising must be submitted to the CRC for review upon request
- No unsolicited marketing communications; all email and SMS must be opt-in with documented consent
- Cannabis products cannot be offered as free samples or through buy-one-get-one promotions
- Digital advertising must include age-gate functionality
- No advertising on publicly owned property, buses, bus stops, or transit shelters
Connecticut (DCP)
Connecticut Compliance Requirements
Connecticut's adult-use market launched with detailed marketing regulations that reflect lessons learned from other states' rollouts.
- All advertising must include a health warning approved by DCP and a statement that cannabis is for adult use only (21+)
- No advertising within 500 feet of schools, playgrounds, or child care facilities
- No marketing that makes health claims, uses depictions of minors, or uses imagery that appeals to children
- Advertising may not promote excessive consumption or depict cannabis use in conjunction with operating a vehicle
- All digital advertising must use age-gate mechanisms before displaying cannabis content
- Direct marketing (email, SMS) requires explicit opt-in consent with age verification
- Pop-up advertising on websites is prohibited unless age verification is completed first
- Outdoor advertising is limited and subject to DCP approval
- All promotional materials must be retained for a minimum of 4 years for regulatory inspection
Massachusetts (CCC)
Massachusetts Compliance Requirements
Massachusetts was one of the earliest East Coast adult-use markets, and the CCC has had time to refine its marketing regulations through multiple enforcement actions and guidance updates.
- All advertising must include the statement: "Please consume responsibly" and a warning about the intoxicating effects of cannabis
- Advertising must only be placed where at least 85% of the audience is reasonably expected to be 21+
- No advertising within 500 feet of any school or playground, measured property line to property line
- No testimonials or endorsements by anyone under 21, and no use of celebrities or influencers who appeal to minors
- All advertising must include the licensee's name and license number
- No claims that cannabis products are safe because they are regulated or tested
- Digital advertising must include age-gate verification and cannot be targeted to users under 21
- Loyalty programs must not incentivize excessive purchasing or consumption
- Price advertising is permitted but must not imply that lower price means lower quality or risk
Pennsylvania (DOH)
Pennsylvania Compliance Requirements
Pennsylvania operates a medical-only cannabis market, which means marketing regulations are more restrictive than adult-use states. All marketing must be directed at qualified medical patients, not the general public.
- Advertising is limited to dispensaries and must not target the general public for recreational purposes
- All marketing must include: "This product is for medical use only" and applicable health warnings
- No advertising that could be considered appealing to minors (under 18 for medical)
- No claims about specific health outcomes; you may reference qualifying conditions only as defined by DOH
- Patient communications (email, SMS) require HIPAA-compliant consent in addition to standard opt-in
- No price advertising or promotional discounts that could be construed as encouraging increased consumption
- Digital advertising must be age-gated and geo-targeted to Pennsylvania only
- All advertising must be approved by an internal compliance officer before publication
- Marketing records must be maintained and available for DOH inspection at all times
Implementing Compliance in Your Marketing Stack
Compliance is not a one-time audit; it is a system built into every marketing workflow. Here is how to operationalize compliance across your marketing program:
- Template compliance: Build state-specific email and SMS templates with required disclaimers pre-loaded. Never send a campaign without the appropriate warnings and disclosures.
- Age verification: Configure your CRM platform to require age verification before any subscriber receives their first message. Alpine IQ, SpringBig, and Dutchie all support this.
- Content review process: Establish a pre-send review checklist that verifies every campaign against your state's specific requirements before it goes live.
- Record retention: Archive every marketing campaign, including the audience segment, send date, content, and performance data. Most states require 3 to 5 years of marketing records.
- Regular compliance audits: Review your entire marketing program quarterly against current regulations. Rules change, and what was compliant 6 months ago may not be today.
Stay Compliant, Stay in Business
The dispensaries that get compliance right don't see it as a limitation. They see it as a competitive advantage. When your competitors get hit with fines, cease-and-desist orders, or license conditions for marketing violations, your compliant program keeps running and keeps generating revenue.
Gold Standard Solutions builds compliance into every campaign from day one. We maintain current knowledge of marketing regulations in every state where we operate, and our pre-send review process catches compliance issues before they become regulatory problems.