Cannabis Corporate Governance
Corporate governance for cannabis businesses operates under the same California Corporations Code framework that applies to all companies — but with an additional regulatory layer imposed by the Department of Cannabis Control (DCC) that fundamentally changes how boards, officers, and ownership structures must function.
The Law Office of Shay Aaron Gilmore advises cannabis corporations and LLCs on board composition, fiduciary duties, shareholder and operating agreements, conflict-of-interest policies, and the regulatory cooperation clauses that are unique to the cannabis industry. The firm’s governance work ensures that internal corporate documents satisfy both California corporate law requirements and DCC ownership and operational-control disclosure obligations.
Board Composition Under DCC Rules
The DCC’s ownership disclosure framework under 4 CCR §15003 directly impacts who can serve on a cannabis company’s board of directors. Under the regulation, any individual who “manages, directs, or controls the operations” of a commercial cannabis business must be disclosed as an owner — including every member of the board of directors, regardless of whether they hold any equity.
- This means that every board member must:
Be disclosed to the DCC as an owner on the license application - Complete an individual owner application through the CLEaR or CLS portal
- Submit to Live Scan fingerprinting and pass a background check
- Provide personal history disclosures including prior convictions
These requirements create practical constraints on board composition. Advisory board members, independent directors, and industry consultants who might serve on a traditional company’s board must be willing to undergo DCC background screening before they can be appointed. The firm counsels cannabis companies on structuring boards that satisfy both good-governance principles and DCC disclosure requirements, including the use of advisory boards (without operational control) for individuals who cannot or prefer not to undergo DCC screening.
Fiduciary Duties: Duty of Care and Duty of Loyalty
California Corporations Code §309 establishes the duty of care for corporate directors: a director must act in good faith, in a manner the director believes to be in the best interests of the corporation and its shareholders, and with the care of an ordinarily prudent person in a like position under similar circumstances. Directors are entitled to rely on information and reports presented by officers, counsel, and committees acting within their competence.
The duty of loyalty requires directors to act in the corporation’s interest rather than their own. This includes avoiding self-dealing transactions, disclosing conflicts of interest, and refraining from usurping corporate opportunities.
For cannabis companies, these duties carry heightened significance because of the industry’s regulatory complexity. Directors must understand that decisions about ownership disclosures, compliance with DCC regulations, and social equity obligations are fiduciary matters — not just regulatory ones. A board that fails to ensure accurate DCC ownership disclosures, for example, risks license discipline that directly harms shareholder value.
The business judgment rule — codified in California through §309 — protects directors from personal liability for good-faith business decisions, but it applies only to the duty of care. It does not protect against breaches of the duty of loyalty, and it requires that directors actually inform themselves of material information before acting. Cannabis boards should document their decision-making processes with particular care given the industry’s elevated regulatory risk.
Shareholder Agreements and Operating Agreements
Cannabis companies require governance documents that go beyond standard corporate templates. Shareholder agreements (for corporations) and operating agreements (for LLCs) must address cannabis-specific provisions:
Regulatory Cooperation Clauses. All members or shareholders must agree to cooperate with DCC disclosure requirements, submit to background checks, and provide information necessary for license applications and renewals. Failure by any individual to cooperate can jeopardize the entire company’s license.
Transfer Restrictions. Ownership transfers in cannabis companies trigger DCC notification and approval requirements. Governance documents must include right-of-first-refusal provisions, DCC-approval contingencies on all transfers, and prohibitions on transfers to persons who cannot pass background checks.
Social Equity Preservation. For companies participating in local equity programs, governance documents must include anti-dilution provisions that prevent equity ownership from falling below required local thresholds (typically 51%), restrictions on issuing new equity that would dilute qualifying owners, and tag-along rights ensuring equity owners participate proportionally in any liquidity event.
Deadlock and Dispute Resolution. Cannabis companies face unique deadlock risks because removing a member or director triggers DCC ownership-change notifications. Governance documents should include mediation and arbitration provisions, buy-sell mechanisms with DCC-timeline coordination, and valuation methods that account for the license’s non-transferable nature.
Key-Person Provisions. Because cannabis licenses are tied to specific individuals, the death, incapacity, or departure of a key person creates both a corporate governance event and a regulatory one. Governance documents should cross-reference 4 CCR §15024 successor-in-interest provisions and pre-designate successors who have already undergone DCC background screening.
Cannabis vs. Hemp: Corporate Governance Differences
Hemp businesses registered with the CDFA are subject to standard California corporate governance rules without the additional DCC disclosure overlay. Board members of hemp companies do not need to be disclosed as “owners” to a licensing agency, are not subject to Live Scan fingerprinting, and can be appointed or removed without regulatory notification timelines.
However, dual-license operators — companies that hold both a DCC cannabis license and a CDFA hemp registration — must maintain governance structures that satisfy the more stringent DCC requirements. The firm advises dual operators on consolidated governance frameworks that comply with both regulatory regimes.
Representative Matters
- Drafted governance documents for C-Corp holding three DCC retail licenses in San Francisco, including board charter, conflict-of-interest policy, and regulatory cooperation provisions requiring all directors to maintain current DCC background clearances
- Restructured operating agreement for social equity LLC in Oakland after investor admission threatened to dilute qualifying ownership below 51%, implementing anti-dilution and tag-along provisions preserving equity program eligibility
- Advised board of cannabis manufacturing company on fiduciary obligations related to DCC compliance failures discovered during internal audit, guiding remediation and voluntary disclosure to avoid license discipline
Frequently Asked Questions
Yes. Under 4 CCR §15003, any individual who manages, directs, or controls operations of a cannabis business — including board members — must be disclosed as an “owner” and complete Live Scan fingerprinting and background checks through the DCC’s licensing portal.
Cannabis directors owe the same fiduciary duties as all California corporate directors under Corporations Code §309: a duty of care (act with reasonable inquiry and prudence) and a duty of loyalty (act in the corporation’s interest, not their own). These duties carry heightened significance in cannabis because regulatory compliance failures directly threaten license value and shareholder investment.
No. Because board members are classified as “owners” under DCC regulations regardless of their equity stake, removing a director constitutes an ownership change that must be reported to the DCC within 14 calendar days. The company must update its owner disclosures in the CLEaR or CLS portal.
Cannabis operating agreements should include regulatory cooperation clauses, DCC-contingent transfer restrictions, social equity anti-dilution provisions (if applicable), deadlock resolution mechanisms that account for DCC notification timelines, and key-person provisions cross-referencing 4 CCR §15024 successor-in-interest rules.
Helpful Resources & Related Pages
Locations Served
Related Corporate Law Pages
How cannabis companies form consistent with corporate law and DCC regulations.
Other Services
Annual renewal requirements, CEQA, and equity fee relief.