Virginia Cannabis Control Authority — What Operators Need to Know About the Regulator

The Virginia Cannabis Control Authority — the CCA — is the regulatory body that will issue the 2027 adult-use cannabis licenses, conduct compliance inspections, and maintain ongoing oversight of every licensed cannabis operation in the Commonwealth. Understanding how the CCA works is not optional. It is as important as understanding the application requirements themselves.

This guide covers what operators need to know about the CCA: how it is structured, what it prioritizes, how it evaluates applications, and how to engage with it constructively before, during, and after the licensing process.

What the Virginia CCA Is

The Virginia Cannabis Control Authority was established by the Virginia General Assembly to regulate the Commonwealth's cannabis market. It operates independently from the Virginia Department of Health, which previously oversaw the medical cannabis program, and from the Virginia Alcoholic Beverage Control Authority, which some operators incorrectly assume is the cannabis regulator.

The CCA has regulatory authority over:

• Licensing — issuing, renewing, and revoking cannabis licenses
• Compliance — setting operational standards and conducting inspections
• Enforcement — investigating violations and imposing penalties
• Policy — recommending regulatory changes to the General Assembly
• Social equity — administering the social equity licensing program

How the CCA Evaluates Applications

The CCA uses a scored application process. Applications are evaluated across multiple categories, and the operators who score highest in each category receive licenses from the available pool. Virginia will issue approximately 350 retail licenses, phased by the CCA based on market conditions. The application pool is expected to be significantly larger.

The scoring categories that matter most:

Operational Readiness

Does the applicant demonstrate the ability to open and operate a compliant cannabis retail business? This includes the quality of the business plan, the security plan, the SOP library, and evidence of operational capability. The CCA wants to see that you can open on time and operate in compliance from day one.

Community Integration

Does the applicant demonstrate a real connection to the community where they plan to operate? This is not a checkbox — it is a scored component. Operators who have engaged local government, community organizations, and neighborhood associations before the application window score higher than operators whose first community engagement is their application.

Social Equity Commitment

Virginia's adult-use framework includes a social equity licensing component that reserves a portion of licenses for social equity applicants and requires all applicants to demonstrate social equity commitments. The social equity narrative is a scored application component that can differentiate otherwise similar applications.

Security and Compliance

The security plan and compliance infrastructure are evaluated for completeness and specificity. Generic security plans and template compliance programs score below plans that are specific to the applicant's location, facility, and operational model.

Financial Viability

The CCA needs to see that the applicant has the financial resources to build out and sustain the operation. This includes proof of capitalization, realistic financial projections, and evidence that the business can operate through the pre-revenue buildout period.

How to Engage the CCA Before You Apply

The CCA holds public sessions, publishes draft regulations for comment, and maintains open communication channels with prospective licensees. Operators who engage during these processes build visibility with CCA staff before the application window opens.

• Attend CCA public sessions. Show up. Ask questions. Be visible. CCA staff remember operators who engage constructively during the planning phase.
• Submit comments during regulatory drafting. When the CCA publishes draft regulations for public comment, submit substantive comments. Not complaints — constructive feedback that demonstrates you understand the regulatory framework and are thinking about compliance in a real way.
• Engage local government. The CCA considers local government input in the licensing process. Operators who have support from their local elected officials and community boards have an advantage over operators who do not.
• Build community relationships. Partner with community organizations in your target locality. Document those partnerships. They become part of your community integration score.

After You Are Licensed — Ongoing CCA Oversight

Getting the license is the beginning, not the end. The CCA maintains ongoing regulatory oversight of every licensed operation. This includes:

• Compliance inspections. Unannounced inspections during business hours. Frequency varies, but new licensees can expect an inspection within the first 90 days of operation.
• METRC monitoring. The CCA has real-time access to your METRC account. Inventory discrepancies are visible to the regulator without a physical inspection.
• License renewal. Licenses must be renewed periodically. Renewal requires evidence of ongoing compliance, including inspection history, staff certification status, and operational records.
• Reporting requirements. Ongoing reporting obligations including financial reports, inventory reports, and community benefit documentation.

Common Misconceptions About the CCA

• The CCA is not the Virginia ABC. They are separate agencies with separate authority. Do not reference ABC procedures when engaging with the CCA.
• The CCA is not adversarial. The CCA wants successful, compliant operators. Engage constructively and you will find the regulator is a partner, not an obstacle.
• The CCA staff are experienced. The team reviewing your application has reviewed hundreds of applications under the medical framework. They can tell the difference between a real compliance program and a template.
• Political relationships matter but are not sufficient. Virginia's cannabis licensing is a regulatory process, not a political one. Relationships help with community integration scoring. They do not substitute for a competitive application.