Obtaining a Medical Cannabis Licence in Australia: Essential Compliance Guide

Medicinal cannabis is a rapidly growing sector in Australia, offering genuine opportunities for cultivators, manufacturers, researchers and healthcare businesses. But unlike launching a typical retail product, entering this space means operating in a highly regulated environment where patient safety and legal compliance come first.

If you plan to cultivate, manufacture or conduct research involving cannabis for medicinal use, you’ll need the right licence, detailed procedures and robust compliance systems. There are federal requirements, state or territory permissions, strict security standards and ongoing reporting obligations to meet - and getting them right from day one can save you significant time and cost.

In this guide, we’ll explain what a medical (medicinal) cannabis licence is, how licensing works in Australia today, the steps to apply, the laws you must follow, and the legal documents that help your operation run safely and lawfully.

What Is A Medicinal Cannabis Licence?

A medicinal cannabis licence is an authorisation issued by the Australian Government that allows you to lawfully undertake certain activities with cannabis for medicinal or scientific purposes. Licences are administered by the Office of Drug Control (ODC) within the Department of Health and Aged Care under the Narcotic Drugs Act 1967.

Since 2021, the licensing framework has been streamlined. Most commercial activities are now covered by a single Medicinal Cannabis Licence (MCL), which can authorise cultivation, production and/or manufacture. You will still need specific ODC permits that set the scope of your authorised activities (for example, plant varieties, maximum quantities and locations). Separate Research Licences and permits apply if your activities are purely for research.

An MCL is not a blank cheque. It comes with detailed conditions around security, record-keeping, staffing, quality assurance and traceability. You must also comply with related therapeutic goods requirements if you manufacture finished medicinal products.

Is Medicinal Cannabis Legal In Australia?

Yes - for medicinal and scientific purposes only, and under strict controls. Recreational use remains illegal in most of Australia. Patients can access medicinal cannabis through established pathways such as the Special Access Scheme (SAS) or the Authorised Prescriber scheme, typically via their medical practitioner and a dispensing pharmacist.

It’s important to note that licence holders generally do not supply directly to patients. Supply usually occurs through approved channels such as manufacturers, sponsors, wholesalers and pharmacists. The advertising of prescription medicines to the public is also heavily restricted under Therapeutic Goods Administration (TGA) rules (more on this below).

Because both Commonwealth and state or territory laws apply, you need to ensure you have the right combination of licence, permits and local permissions before starting operations.

How To Plan And Structure Your Business

Strong planning makes a real difference in a regulated sector. Before you apply, map out your business model, locations and compliance systems so you can present a credible, complete application to regulators.

• Business model and channels: Will you focus on cultivation, manufacture or both? Will you conduct R&D? Who are you supplying within the authorised supply chain (for example, manufacturers, sponsors or pharmacies via wholesalers)?
• Sites and security: Identify proposed locations and confirm zoning, council approvals and your ability to meet ODC physical security requirements (perimeter, access controls, surveillance, secure storage).
• Quality systems: If you intend to manufacture finished medicinal cannabis products, plan for Good Manufacturing Practice (GMP) controls and any TGA licensing you may need.
• People and governance: Identify “fit and proper” key personnel with relevant experience, and set up internal oversight for compliance and reporting.
• Funding and viability: Prepare realistic budgets and timelines (licensing can take months). Build in contingencies for security upgrades and audits.

Many founders opt to operate through a company for liability protection and governance benefits. If you’re weighing up structures, consider a Company Set Up and, if you have co-founders or investors, a Shareholders Agreement to set out ownership, decision-making and exit terms. Early brand protection is also sensible - registering your trade marks can prevent costly disputes as you scale.

Step-By-Step: Obtaining A Medicinal Cannabis Licence

1) Confirm Your Activities And Licence Type

Decide whether you need an MCL (cultivation/production/manufacture), a Research Licence, or both. Map the full lifecycle of your proposed activities: seed acquisition, cultivation, harvesting, storage, processing/manufacture, waste destruction, release for supply, and distribution within the lawful supply chain.

2) Understand Federal And State/Territory Oversight

In addition to ODC licensing and permits, most businesses require state or territory permissions. These may include controlled drugs/poisons licences, storage approvals, police checks for responsible persons and planning/zoning approvals. Requirements vary by jurisdiction, so contact your local health department early to confirm the exact permissions for your site.

3) Prepare Detailed Documentation

ODC applications are evidence-heavy. Expect to provide:

• Fit and proper person information: Background checks and disclosures for directors, key management and responsible persons.
• Site and security plans: Floor plans, security layers, surveillance coverage, access controls, intrusion detection and secure storage procedures.
• Operational SOPs: Standard operating procedures for cultivation, production or manufacturing, waste handling, recalls, record-keeping and incident response.
• Quality and traceability: End-to-end tracking of plants and products, batch records, deviations and CAPA (corrective actions).
• Personnel and training: Roles, training plans, induction checks and ongoing competency assessment.

At this stage, it’s also wise to draft key contracts you’ll rely on once approved - for example, supply chain terms and confidentiality arrangements. Having these drafted shows you’re ready to operate responsibly from day one, and it helps you avoid delays after licensing.

4) Lodge Your ODC Application And Pay Fees

Submit your application via the ODC portal with all supporting documents and pay the applicable fees. The ODC will conduct a detailed assessment, request clarifications and, where appropriate, arrange site inspections. In parallel, progress your state/territory approvals and any council consents required for your facility.

5) Respond To Requests And Prepare For Inspection

Timely responses to regulator questions can shorten your timeline. Be ready to refine your security design, strengthen SOPs or provide additional evidence about key personnel. Site inspections typically focus on physical security, segregation of activities, record systems and your readiness to comply with permit conditions.

6) Receive Your Licence, Then Obtain Your Permits

When approved, you’ll receive your MCL (or Research Licence). You must then obtain ODC permits that specify exactly what you can do, where and in what quantities. Permits are time-limited and activity-specific, so plan renewals and variations well in advance, especially if you’re scaling operations.

How Long Does It Take?

Timeframes vary, but several months is common. Complex or incomplete applications, additional security works, and state permissions can extend timelines. Building a complete, accurate application and responding quickly to queries generally speeds up the process.

Can You Buy An Existing Business Or Licence?

Licences are not simply transferable. A change in ownership or control of a licence holder must be disclosed, and the ODC may reassess “fit and proper” persons and compliance systems. If you are considering acquisition, expect extensive due diligence on licences, permits, SOPs, compliance history and supply agreements, plus regulator engagement to approve any change in control.

Compliance Obligations After You’re Licensed

Licensing is just the beginning. Ongoing compliance protects patients and your licence - and it’s central to the ODC’s oversight.

Permits, Security And Reporting

• Permit conditions: Operate strictly within your permits (quantities, strains, canopy size, locations and activities). Track expiry and renewals.
• Security: Maintain the physical and procedural security you proposed. Changes to site layout or systems usually require approval before implementation.
• Record-keeping: Keep complete, contemporaneous records of cultivation, production, manufacture, storage, transport, losses, destruction and returns. Strong data practices support audits and reduce risk.
• Audits and inspections: Expect periodic compliance checks. Rectify findings promptly and document corrective actions.

TGA Requirements (Manufacture And Supply)

• Therapeutic goods controls: If you manufacture finished medicinal cannabis products, TGA requirements may apply, including GMP licensing and quality standards. Most medicinal cannabis products in Australia are supplied as unregistered medicines via SAS/Authorised Prescriber pathways; some products may be included on the ARTG.
• Advertising restrictions: Advertising prescription-only medicines to the general public is prohibited. Medicinal cannabis promotions to consumers (including testimonials, inducements and social media advertising) can breach TGA rules even if the product is legally supplied.

Consumer Law And Representations

Your claims about products, services or research must be accurate and not misleading. This includes your website and investor materials. The Australian Consumer Law applies to businesses broadly, including rules against misleading or deceptive conduct under section 18, so ensure all statements about quality, potency or clinical outcomes are substantiated and consistent with regulatory status.

Privacy, Data And Records

Handling personal information - especially health information - triggers obligations under the Privacy Act 1988 and the Australian Privacy Principles. You’ll generally need a clear, accessible Privacy Policy, data minimisation practices and secure storage. It’s also prudent to set retention schedules that align with your regulatory records and any applicable data retention laws.

Employment And Workplace Safety

If you’re hiring, use a compliant Employment Contract for each staff member and implement workplace policies that reflect your security, safety and confidentiality obligations. Your WHS duties include training, incident reporting and providing suitable PPE where required. Many licence conditions also require background checks and controlled access for personnel.

IP And Brand Protection

Protecting your brand, software, processes and product names reduces the risk of copycats and strengthens your market position. Consider filing trade mark applications for your brand and key product lines, using a classification strategy that fits your activities. You can start with register your trade mark or get advice on trade mark classes as your range evolves.

What Legal Documents Will You Need?

Having the right contracts and policies in place supports your licence application and helps you manage risk as you scale. The exact documents you need will depend on your role in the supply chain, but most medicinal cannabis businesses consider:

• Standard Operating Procedures (SOPs): Detailed documents covering cultivation, production, manufacturing, batch records, deviations, recalls, waste, security and incident response. These are core to your ODC application and day-to-day compliance.
• Quality Management Documentation: Policies covering GMP (if applicable), release for supply, supplier qualification, validation and change control.
• Confidentiality And NDAs: Use a Non‑Disclosure Agreement when sharing sensitive information with consultants, researchers, contractors or potential partners.
• Supply And Distribution Terms: Clear Supply Agreements for raw materials or finished products, including specifications, quality responsibilities, shipping, risk allocation and recalls.
• Employment Agreements And Policies: Tailored contracts and workplace policies setting duties, confidentiality, IP ownership, security requirements, training and conduct standards.
• Privacy And Data Policies: A compliant Privacy Policy, access controls and data-handling procedures for staff and systems that process personal or health information.
• Website And Platform Terms: If you operate online (e.g. B2B ordering portals), consider Website Terms & Conditions and careful content controls to avoid unlawful promotion.
• Founders And Investor Documents: Where relevant, a Shareholders Agreement, option deeds and governance documents to align decision-making and protect the company’s IP.

You may not need every document from day one, but most operations will require several of these early. Getting them tailored to your processes and licence conditions helps prevent gaps that could lead to compliance breaches or disputes.

Key Takeaways

• Most commercial activities are covered by a single Medicinal Cannabis Licence plus specific ODC permits; separate research licences apply for research-only activities.
• Plan thoroughly before applying - confirm your business model, sites, security, people and quality systems so your application is complete and credible.
• Federal licensing sits alongside state or territory permissions, council approvals and (for finished products) TGA controls, including strict bans on consumer advertising of prescription medicines.
• Compliance is ongoing: keep robust records, maintain security, meet permit limits, manage audits and ensure accurate representations under the Australian Consumer Law.
• Core legal documents include SOPs, quality policies, confidentiality agreements, supply terms, employment contracts and privacy documentation - tailored to your licence and operations.
• Buying an existing business doesn’t avoid regulation - changes in control typically require regulator engagement and fresh “fit and proper” assessments.

If you would like a consultation on starting a medicinal cannabis business or obtaining a medical cannabis licence, you can reach us at 1800 730 617 or team@sprintlaw.com.au for a free, no-obligations chat.