Cannabis Marketing Compliance

Most operators assume the constraint is the state regulator. Usually it isn't. State rules set what you can claim, how you must age-gate, and where you can place a billboard — and those you can read and follow.

The harder constraint is that the largest marketing channels are governed by private platform policy written against federal illegality, not against your state's programme. A dispensary can be fully licensed in Michigan and still be unable to buy a search ad, boost a post, or send a text about a sale.

Google Ads broadly prohibits THC and CBD advertising, with narrow exceptions for certain topical hemp-seed-oil products that require pre-authorisation and geo-targeting to permitted jurisdictions.

Meta permits non-ingestible CBD topicals with LegitScript certification, age targeting and no health claims. Ingestible CBD, delta-8, delta-9, edibles, beverages and all THC products remain prohibited. Organic and influencer content is allowed with age-gating and paid-partnership disclosure.

TikTok prohibits paid promotion of ingestible or smokable cannabis entirely.

Vape products are prohibited across all three.

Treat the paid channel as closed and build accordingly. Businesses that plan around this outperform the ones that keep trying to sneak through it.

Text messaging is the highest-performing channel most dispensaries have, and it's also where the enforcement is.

US carriers block SHAFT content — sex, hate, alcohol, firearms, tobacco — and cannabis is treated in that family. Cannabinoid terminology such as THC, CBD, delta-8 and delta-9 commonly triggers content blocking even for federally legal hemp products. Carriers actively detect circumvention through misspellings, emoji substitution and euphemism, so the workaround people reach for first is the one most likely to get them shut off.

Every sender must register a brand and each campaign through The Campaign Registry, supplying an EIN, legal name, website, campaign purpose, sample messages and consent model. Campaigns describing cannabis commerce face heightened scrutiny or outright denial. Violations carry per-message penalties reported in the $1,000–$2,000 range for a first offence and higher for repeats, alongside throttling, pre-delivery blocking and account termination.

What remains workable: non-promotional and educational campaigns, appointment and order-status notifications, loyalty and event messaging that omits product references, with 21+ age-gating, state-level geographic targeting, clean opt-in records and immediate STOP handling.

The practical translation: build the list legitimately, register properly, and write messages that give people a reason to come in without naming a product or a price.

Email is the one large channel with no categorical ban, which is why cannabis operators pile into it — and why their mail lands in spam. The constraint is reputation, not policy.

What matters: authenticate properly with SPF, DKIM and DMARC; send from a subdomain dedicated to the sending programme; keep each business's sending reputation separate rather than sharing an IP pool with unrelated senders; warm new domains slowly; and remove unengaged recipients aggressively. A clean list of 4,000 people who open reaches more inboxes than a purchased list of 40,000.

Owned and organic. Local search and map listings, where the intent is highest and the policy constraint is lightest. Your own site and its content. Directories and menu platforms customers already search. Reviews, which affect both ranking and choice. SMS and email to a list you built yourself, sent within the rules above.

That is a narrower set of channels than other industries get. It is also more durable, because it can't be switched off by a policy update.

Register your brand and campaigns before you send a single message. Age-gate everything, including the website. Keep timestamped consent records you could produce on request. Never make therapeutic or health claims. Geo-target to the states where you're licensed. Read your own state's advertising rules — proximity limits near schools, required warning language and audience-composition requirements vary widely. Re-check platform policies quarterly; they move without notice.