Alex is Sprintlaw’s co-founder and principal lawyer. Alex previously worked at a top-tier firm as a lawyer specialising in technology and media contracts, and founded a digital agency which he sold in 2015.
How Can A Business Apply For A Medicinal Cannabis Licence?
- Step 1: Confirm Your Business Structure And Who Will Be Responsible
- Step 2: Lock In Your Business Model And Supply Chain
- Step 3: Plan Your Premises, Zoning, And Site Approvals
- Step 4: Prepare Security, Record-Keeping, And “Operational Readiness” Materials
- Step 5: Submit Your Application And Expect Requests For Information
- What Legal Documents Do Medicinal Cannabis Businesses Commonly Need?
- Key Takeaways
Australia’s medicinal cannabis industry is one of the most heavily regulated “high-opportunity” sectors you can enter as a business owner.
On the one hand, demand for medicinal cannabis products continues to grow, and the supply chain needs sophisticated operators across cultivation, manufacturing, research and distribution. On the other hand, the legal and compliance framework is strict, documentation-heavy and (in practice) slow-moving.
If you’re exploring a license to grow medical weed in Australia, it’s worth treating it like any other tightly regulated industry (think: pharmaceuticals, medical devices, or controlled drugs and chemicals). You’ll need the right licence(s) and permits, a compliant facility, strong governance, robust security, and contracts that clearly allocate risk and responsibility.
Below, we’ll walk you through what a medicinal cannabis licence is, what licences may be required, how businesses typically apply, and the practical compliance obligations you’ll need to plan for before you invest heavily in land, equipment and staff.
What Does A “License To Grow Medical Weed In Australia” Actually Mean?
In Australia, “medical weed” usually refers to medicinal cannabis - cannabis cultivated and handled for medical and scientific purposes within a tightly controlled legal framework.
A license to grow medical weed in Australia generally means you’re seeking authorisation to:
- cultivate cannabis plants (often including harvesting); and/or
- produce cannabis or cannabis resin (including processing plant material into a form suitable for manufacturing); and/or
- manufacture medicinal cannabis products under pharmaceutical-grade standards; and/or
- conduct research involving medicinal cannabis.
It’s important to be precise, because “growing” can sit within multiple licensing categories, and the licences you need will depend on your intended activities and where you sit in the supply chain.
Also note: licensing for medicinal cannabis is not just about getting a document approved. It’s about proving your business can safely and consistently operate a controlled, secure, traceable and compliant operation.
Federal Rules vs State/Territory Rules
Most of the key licences for cultivation and production are dealt with at the Commonwealth (federal) level through the Office of Drug Control (ODC) under the Narcotic Drugs Act 1967 and related rules. However, you should also expect state/territory requirements to apply to your site and operations (for example, planning approvals, local council requirements, work health and safety, and state/territory drugs and poisons controls that can affect storage, handling and transport).
From a business planning perspective, you should treat this as a dual-track project:
- licensing and regulatory approvals (federal and sometimes state), and
- site and operational readiness (planning, security build, SOPs, staffing and quality systems).
Which Medicinal Cannabis Licences Might Your Business Need?
There isn’t one single “cannabis growing license Australia” that automatically covers everything. Instead, businesses often need a combination of permissions across cultivation, production and (if relevant) manufacturing.
At a high level, the key licence categories businesses consider include:
1) Cultivation / Production Licences (Medicinal Cannabis Framework)
For many businesses, the core “medicinal cannabis licence” question is whether you need approval to cultivate and/or produce medicinal cannabis. In the Commonwealth scheme, this is typically an ODC licence supported by one or more permits that specify what you can do (for example, what cannabis you can cultivate/produce and in what quantities).
In practice, regulators will assess (among other things):
- your business structure and key personnel
- your proposed site and security controls
- your ability to prevent diversion to illicit markets
- your record-keeping and reporting systems
- how you will manage waste, destruction, and discrepancies
Even if your focus is cultivation only, you’ll likely need to show a complete end-to-end understanding of how the plant material will be handled, stored, transported and supplied into lawful channels.
2) Research-Related Permissions
If you’re cultivating for research purposes, or your operations involve trials, genetics, breeding programs, or product development, you may need additional authorisations and ethics/governance processes (for example, research governance and human/animal ethics approvals where relevant). You should also plan for intellectual property strategy early (for example, branding and documentation around ownership and licensing of genetics and know-how).
3) Manufacturing and Supply Chain Requirements
Many cultivation businesses ultimately want to move “up the chain” into manufacturing finished products. That’s a different compliance environment, often involving pharmaceutical-grade expectations (for example, quality management systems and controlled batch processes). Depending on the product and pathway, manufacturing and supply may also involve the Therapeutic Goods Administration (TGA) framework (including GMP expectations and therapeutic goods rules).
If your business model depends on selling to manufacturers or pharmacies, your commercial contracts, specifications and quality standards will be as important as the licence itself.
4) Import/Export Considerations
Some businesses plan to import genetics, export product, or operate cross-border supply chains. Those activities can trigger additional permits and controls (including import/export permissions and border controls). If that’s in your growth roadmap, it’s worth building your compliance architecture from day one so you’re not “rebuilding the plane mid-flight”.
How Can A Business Apply For A Medicinal Cannabis Licence?
There isn’t a shortcut here: a successful application is usually the result of a well-prepared business that can demonstrate operational readiness, governance maturity, and a compliant facility plan.
While each application is assessed on its own facts, businesses often follow a similar pathway.
Step 1: Confirm Your Business Structure And Who Will Be Responsible
Because medicinal cannabis is a controlled industry, regulators will look closely at:
- who owns and controls the business
- who will act as directors and officers
- who will be responsible for day-to-day compliance
Many operators choose to run through a company structure to support investment, governance and risk separation. If you’re setting up a company, it’s common to adopt a Company Constitution that matches how you want the business to be governed (and aligns with any investor or co-founder arrangements).
If you have multiple founders, a tailored Shareholders Agreement can also be a key document, because it sets out decision-making, funding obligations, exits and dispute mechanisms. In regulated industries, clear governance is not just “nice to have” - it can be critical when things go wrong or when an urgent compliance decision is needed.
Step 2: Lock In Your Business Model And Supply Chain
Before you apply, you should be able to clearly answer:
- What exactly will you cultivate (and at what scale)?
- Will you also produce/process?
- Who are your intended buyers (manufacturers, researchers, wholesalers)?
- How will product move from your facility to the next lawful stage?
This matters because your compliance obligations (including security controls and record keeping) will depend heavily on your site layout, handling processes, storage arrangements and distribution pathway.
Step 3: Plan Your Premises, Zoning, And Site Approvals
A licence application is far easier to support when you can show a realistic premises plan and that you’ve thought through land use, zoning, and building compliance.
Even with the right federal licensing pathway, you may still need to satisfy local planning rules, building requirements, and operational permits (depending on where and how you operate). In some cases, state/territory controlled drug requirements can also affect site approvals and operational setup.
If you’re taking on a site under a commercial arrangement, it’s also worth making sure your lease terms align with what a regulated facility needs (security upgrades, restricted access, audit rights, compliance obligations, and the ability to terminate or assign in specific circumstances).
Step 4: Prepare Security, Record-Keeping, And “Operational Readiness” Materials
For a cultivation or production business, security is not a one-page plan. Regulators typically expect layered controls, for example:
- physical security (perimeter controls, secure rooms/vaults, restricted access)
- personnel security (who can access what, onboarding/offboarding procedures)
- systems security (logs, traceability systems, incident escalation)
- transport and storage controls (handover procedures, loss prevention)
This is also where many businesses underestimate workload. You’ll need written processes (often called SOPs), training records, incident response processes, and clear accountability lines.
Step 5: Submit Your Application And Expect Requests For Information
Licence applications in regulated industries commonly involve follow-up questions and requests for further documents. Your best “time-saving” strategy is to submit a thorough application from the beginning, supported by:
- governance documentation (entity details, control arrangements)
- site plans and security documentation
- policies and procedures (compliance, reporting, incident response)
- commercial documentation where relevant (supply arrangements, distribution pathway)
If you’re raising funds or entering major supply contracts while the licensing process is underway, carefully draft those agreements so you don’t lock yourself into obligations you can’t legally perform if approvals are delayed.
Ongoing Compliance Obligations For Medicinal Cannabis Growers
Getting a licence is only the beginning. Your real operational risk often sits in the ongoing compliance obligations, because regulators expect you to remain audit-ready and to report issues promptly.
While the exact obligations depend on your licence and conditions, businesses should typically plan for the following operational realities.
Security And Access Controls Must Be Maintained
Once your facility is operating, changes to premises, personnel, security systems, or procedures may trigger internal approvals and potentially regulator notifications.
From a practical perspective, you should keep your security documentation “alive”:
- review access lists regularly
- keep incident registers and escalation logs
- maintain surveillance systems and retention policies
- document visitor management and contractor access
Traceability, Stock Control, And Record Keeping
Medicinal cannabis operations are typically expected to maintain a chain of custody and reconcile stock. That means your business should be able to explain:
- what was planted, harvested, destroyed, processed and supplied
- why discrepancies occurred (and what you did about them)
- how you prevent diversion and loss
When you’re negotiating with buyers, build record-keeping and quality obligations into your commercial terms so there’s no mismatch between what your customers expect and what you can lawfully provide.
Employment And Workplace Compliance (Because You’re Running A High-Risk Facility)
Many medicinal cannabis businesses are people-heavy: growers, security staff, compliance staff, quality personnel, logistics, and corporate operations.
That means you’ll need to get your employment foundations right from the start, including proper Employment Contract documentation and workplace policies suited to a secure, regulated environment.
You should also think carefully about:
- training and competency records
- screening and onboarding processes
- disciplinary processes (especially for security breaches)
- confidentiality and IP ownership clauses
Australian Consumer Law (ACL), TGA Rules And Marketing Claims
Even if you’re not selling directly to the public, your business may still be exposed to Australian Consumer Law (ACL) risks through advertising, B2B supply arrangements, representations about quality, and performance claims.
Health-related claims are heavily scrutinised. Depending on what you’re promoting and to whom, TGA therapeutic goods and advertising rules may apply (including restrictions on advertising prescription medicines to consumers). Your marketing, website copy and sales materials should be carefully reviewed so you don’t overstate efficacy, approvals, or supply capabilities.
Privacy And Data Handling
As soon as you collect personal information (for example, enquiries through your website, employee records, contractor onboarding documents, visitor logs, surveillance footage), privacy obligations become part of your compliance landscape.
If you operate online or collect data from customers and suppliers, you’ll usually need a Privacy Policy that matches what you actually do with personal information.
This is especially important where you’re dealing with sensitive operational security information, controlled site access records, or health-related information in any part of your operations.
What Legal Documents Do Medicinal Cannabis Businesses Commonly Need?
Licensing is one side of risk management. The other side is making sure your commercial relationships, internal governance and operational responsibilities are documented properly.
Not every business will need every document below, but these are commonly relevant when you’re building a compliant medicinal cannabis operation.
- Shareholders Agreement: sets the rules between founders/investors about ownership, decision-making, funding, and exits. This is particularly important where licences, regulatory risk, and significant capital expenditure are involved. (Often used alongside a Shareholders Agreement.)
- Company Constitution: a governance rulebook for your company, which can be customised to suit founder control, investor rights and regulated decision pathways. (Commonly implemented through a Company Constitution.)
- Supply Agreement / Offtake Agreement: documents what you will supply, specifications, testing/quality standards, acceptance criteria, rejection rights, and what happens if licensing timelines slip.
- Services Agreements: for consultants, agronomists, security providers, compliance advisers, labs, and other critical partners. These should include confidentiality, liability allocation and clear deliverables.
- Confidentiality / NDA: protects sensitive information like genetics, cultivation processes, facility security controls and commercial pricing while you negotiate with investors, suppliers or buyers.
- Employment Contracts and Workplace Policies: for your staff, particularly where you have security-sensitive roles, strict SOPs, and the need to manage misconduct quickly and fairly. (Often supported by an Employment Contract.)
- Privacy Policy: if you collect personal information (which most businesses do), this document explains what you collect, how you use it and how individuals can access it. (Usually implemented as a Privacy Policy.)
In a highly regulated industry, well-drafted contracts do more than “set commercial terms” - they can help you demonstrate governance and control, reduce disputes, and ensure your partners support (not undermine) your compliance obligations.
Key Takeaways
- There isn’t one single “cannabis growing license Australia” that fits every business - a license to grow medical weed in Australia usually involves specific ODC cultivation/production licences and permits, plus strict conditions.
- A strong application is less about marketing your idea and more about proving operational readiness, including security, traceability, procedures and responsible personnel.
- Compliance doesn’t stop once you’re approved - you’ll need ongoing security controls, record keeping, incident management and audit readiness.
- Because this is a high-risk, regulated environment, your business structure and governance documents (like a Company Constitution and Shareholders Agreement) are often essential foundations.
- Strong contracts and policies (employment, supply, confidentiality, privacy) help you run the business smoothly and reduce the risk of disputes that can derail licensing or operations.
If you’d like legal help with setting up or scaling a medicinal cannabis business, you can reach us at 1800 730 617 or team@sprintlaw.com.au for a free, no-obligations chat.








