Table of contents
Legal Liability and Risk Management
Who is liable in a regulated system, and why that is a feature, not a bug.
Executive Summary
One of the strongest objections to drug legalization is not moral panic. It is a real management question:
If something goes wrong in a regulated market, who is liable?
That question matters because a serious system should have an answer.
This is where the conversation gets backward. Critics often talk as if cannabis product liability, cannabis recall, cannabis labeling requirements, cannabis packaging requirements, and cannabis business insurance are proof that a legal market is dangerous. In reality, those things are proof that a legal market has named actors, records, duties, complaint paths, recalls, sanctions, and financial responsibility. The black market offers almost none of that. A regulated market at least creates someone who can be sued, fined, suspended, revoked, audited, recalled, or insured. That is not a defect. That is what accountability looks like.
Part 26 already argued that youth and family protection gets stronger when the law can actually regulate packaging, labeling, and marketing. Part 27 argued that impaired driving and workplace safety become easier to govern when enforcement targets actual danger. Part 28 warned against corporate capture. Part 29 showed why shrinking the black market requires legal systems people can trust. Part 34 is the legal-risk continuation of those arguments: a regulated system works better because it assigns responsibility where the illegal market leaves only chaos.
So this chapter makes five points:
• cannabis product liability is what turns preventable injury into legal responsibility instead of private tragedy.
• cannabis labeling requirements and cannabis packaging requirements are not red tape. They are part of the liability system.
• cannabis recall is how a regulated market removes dangerous products rather than shrugging at them.
• cannabis business insurance and a surety bond move risk off families and onto firms.
• risk-based drug regulation and the regulated pharmacy model make liability smarter by putting the highest-risk lane under tighter rules, tighter diversion control, and stronger public safety protections.
The Liability Problem This Chapter Solves
The black market has one giant legal advantage over the people it harms:
It is hard to sue someone who never labeled the product, never filed for a license, never carried insurance, never kept a batch record, never reported contamination, and never had a storefront to suspend.
That is why the liability question matters so much.
A serious drug policy reform model should not just make products legal. It should make responsibility legible.
That means creating identifiable points of liability all across the legal chain:
• the manufacturer
• the packager
• the labeler
• the distributor
• the retailer
• the employer
• the operator
• the professional in the highest-risk lane
That is how a market becomes governable.
1. Why Cannabis Product Liability Is the Point, Not the Problem
Under ordinary U.S. tort law, product liability exists so injured people can bring claims when a defective product causes harm. Cornell’s Legal Information Institute says product liability is generally associated with strict liability, meaning defendants can be held liable regardless of intent or knowledge, and that liability can arise from manufacturing defects, design defects, marketing defects, or breach of warranty. Cornell also explains that strict liability applies in tort law when a defective product for which an appropriate defendant holds responsibility causes injury to an appropriate plaintiff.[1][2]
That is the legal backdrop for cannabis product liability.
In plain English, cannabis product liability means that when a regulated cannabis product is defective, contaminated, misleadingly labeled, or sold without adequate warning, the people and firms in the legal chain are exposed to consequences. That alone is a huge improvement over black-market logic, where the supply chain is anonymous until it is violent.
A serious regulated market should assume that cannabis product liability may attach when there is:
• contamination
• inaccurate potency information
• unsafe design or formulation
• misleading warnings
• child-attractive presentation
• defective packaging
• failure to remove a recalled product
That is why cannabis product liability is not a bug in reform. It is one of the main reasons reform is worth doing in the first place.
2. Cannabis Labeling Requirements Decide Who Pays When Things Go Wrong
The easiest way to make liability meaningless is to let labels be vague, misleading, or incomplete.
That is why cannabis labeling requirements matter so much.
California’s Department of Cannabis Control says cannabis products must be labeled so consumers know what they are buying or using, and that required information must appear on the label. The DCC also says licensees who engage in packaging or labeling that is attractive to children may face citations, fines, license suspension, license denial, and license revocation.[4][8]
That makes cannabis labeling requirements part of the legal-risk architecture, not just a consumer-information project.
A strong system of cannabis labeling requirements should do at least four things:
identify the product clearly
identify potency and ingredient information accurately
warn about foreseeable risks
create a record that allows blame to be assigned when the label is wrong
This is where cannabis product liability and cannabis labeling requirements merge. If a label understates potency, omits a relevant warning, or otherwise misrepresents the product, the labeling problem is not just regulatory. It can become the basis for civil liability, licensing sanctions, or both. Cornell’s LII explicitly includes “marketing defect” and inadequate warning as classic product-liability categories.[1]
California recall notices show this is not hypothetical. The DCC has issued mandatory recalls where products had inaccurate labeling that reported more THC than the product actually contained, alongside contamination concerns.[6][7] Once labels are wrong, someone in the legal chain owns that mistake.
That is why cannabis labeling requirements belong in any serious liability discussion.
3. Cannabis Packaging Requirements Protect Families and Create Accountability
The same thing is true for packaging.
People often talk about cannabis packaging requirements as if they are mostly about branding aesthetics. They are not. They are a safety and liability system.
California’s DCC says manufactured cannabis products must be packaged to prevent contamination and that packaging requirements include being child-resistant, tamper-evident, and resealable. The DCC also says all cannabis goods are required to be sold in child-resistant packaging and that it is the responsibility of the licensee who packaged the good to make sure the package meets child-resistant requirements.[3]
That makes cannabis packaging requirements part of the chain of legal responsibility.
A strong set of cannabis packaging requirements should support:
• contamination control
• child protection
• tamper visibility
• traceability
• clearer warnings
• easier recall execution
• easier blame assignment when the package fails
The family-protection side matters here too. California says products attractive to children are prohibited and that child-attractive packaging or labeling can trigger citations, fines, suspension, denial, revocation, embargo, or recall.[8]
That is why cannabis packaging requirements are part of the liability architecture. They reduce predictable risk, and they tell firms in advance that if they ignore those risks, the law has someone specific to punish.
This is exactly the opposite of the illegal market, where youth-appealing packaging, contamination, or lookalike products often appear without any meaningful route to redress.
4. Cannabis Recall Is the Point of a Legal Market
If a legal market cannot pull dangerous product back out of circulation, it is not doing one of the most basic things regulation is supposed to do.
That is why cannabis recall matters so much.
California’s DCC says the cannabis recall process exists to ensure defective or potentially unsafe products are removed from the commercial market. It says mandatory recalls occur when there is an immediate and serious threat to human life or health, and voluntary recalls occur when a licensee identifies that its product is mislabeled, defective, or unsafe for consumption. DCC says licensees in a mandatory cannabis recall must immediately cease distribution and recall the product from the commercial supply chain.[5]
That is what legal accountability looks like:
• identify the affected product
• notify licensees
• notify consumers
• remove product
• document handling and disposal
• create a public record
California’s recall archive shows why this matters. In 2024, DCC issued mandatory recalls for products with Aspergillus contamination and for products with inaccurate THC labeling; it also issued voluntary recalls for products due to methylene chloride or inaccurate cannabinoid labeling.[6][7] Those examples do not prove the legal market is perfect. They prove the legal market has a functioning cannabis recall mechanism that the black market does not.
That is why cannabis recall is not a scandal.
It is a feature.
A market with recalls is a market where unsafe product can at least be named, traced, quarantined, and removed. A market without recalls is just a market where people get harmed in silence.
5. Cannabis Business Insurance and Surety Bond Move Risk Off Families and Onto Firms
A regulated market should also have financial backstops.
That is where cannabis business insurance and a surety bond come in.
NAIC says the division between state and federal status makes it difficult for cannabis businesses to receive inclusive, affordable coverage and often leaves policyholders with restrictive plans. NAIC also says conflicting state and federal laws, emerging standardization of business practices, and rapidly evolving regulations have discouraged many insurers from participating in the market.[11]
That is exactly why cannabis business insurance matters. Without coverage, one contaminated batch, premises claim, or employee injury can shift costs back onto families, workers, hospitals, or taxpayers.
A mature risk-management structure should expect cannabis business insurance to include some mix of:
• general liability
• product liability
• property coverage
• workers’ compensation
• commercial auto where relevant
• cyber/privacy coverage where relevant
• directors and officers or professional coverage where relevant
And the law can push firms toward financial responsibility even before the insurance market is perfect.
California’s DCC says an annual commercial cannabis license application must include proof of a surety bond of at least $5,000 for each licensed premises, issued by a corporate surety licensed in California.[12]
That matters because cannabis business insurance and a surety bond are both ways of moving risk off the public and onto the business that chooses to operate in the legal chain.
The broader point is simple: if a firm wants the benefits of legality, it should also carry the costs of financial responsibility.
6. Workplace Safety Is Still Part of Liability
Part 27 already made the broader workplace argument. This add-on only extends it into legal risk.
A legal market does not just create product liability. It also creates employer liability.
OSHA’s General Duty Clause says employers must furnish workers employment and a place of employment free from recognized hazards that are causing or likely to cause death or serious physical harm.[9] CDC/NIOSH says the cannabis industry involves chemical, biological, ergonomic, physical, and safety hazards, including pesticides, volatile organic compounds, allergenic proteins, microbial exposure, heat stress, noise, cuts, electrical safety issues, fire and explosion hazards, slips, trips, falls, and workplace violence.[10]
That means workplace safety is not optional in a regulated market.
It is part of the liability stack.
A company can face legal exposure not only for the product it sells, but also for the workplace it creates. That includes:
• unsafe manufacturing conditions
• poor ventilation or chemical controls
• exposure to mold or particulates
• inadequate training
• bad storage or fire controls
• poor documentation of safety procedures
This matters to the bigger series because drug policy reform is not just about consumers. It is also about what kind of legal obligations the state places on firms that want to grow, process, transport, or sell regulated products. A safer market is one where workplace safety gets taken seriously long before somebody ends up injured, allergic, burned, or killed.
7. Risk-Based Drug Regulation and the Regulated Pharmacy Model Make Liability Smarter
This is where Part 34 connects directly to the architecture built earlier in the series.
The liability regime should not look identical across every lane because the risks are not identical across every lane.
That is why risk-based drug regulation matters here too.
Under risk-based drug regulation, lower-risk products can carry one liability profile, while higher-risk products carry a tighter one. The highest-risk lane belongs in a regulated pharmacy model with stronger documentation, stronger diversion control, and stronger professional oversight. That makes the liability map clearer, not blurrier. The more dangerous the lane, the more explicit the accountability should be.
• Part 9, tiered design
• Part 14, highest-risk lane
That is also why liability is a feature, not a bug.
A serious system should want:
• stricter standards in the highest-risk lane
• tighter documentation where risk is greatest
• clearer professional and operational duties
• stronger public safety protections
• clearer blame assignment when someone ignores those duties
And because the highest-risk lane is also where addiction risk is greatest, this is exactly where treatment on demand belongs. Liability should not only punish failure. It should also push operators toward safer practice, faster referral, and better diversion control.
That is what a serious regulated system does better than the black market:
it creates named responsibility before things go wrong, not just outrage afterward.
The Bottom Line
The strongest answer to “who is liable in a regulated system?” is:
the people and firms who choose to operate in it.
That is exactly the point.
A serious cannabis product liability regime makes manufacturers, packagers, distributors, retailers, and employers legible to the law. A serious cannabis recall system removes dangerous products from circulation. Strong cannabis labeling requirements and cannabis packaging requirements make warnings, dose information, contamination control, and child protection part of the legal architecture. Cannabis business insurance and a surety bond push financial responsibility onto firms. And risk-based drug regulation plus the regulated pharmacy model make the highest-risk lane even tighter.
That is not overregulation.
That is what a market looks like when the public is finally allowed to ask, with force:
Who is responsible when something goes wrong?
Frequently Asked Questions
Why is cannabis product liability a good thing instead of a problem?
Because cannabis product liability means there are named defendants, identifiable duties, and real remedies when a product is defective, contaminated, mislabeled, or inadequately warned. Cornell’s LII says product liability can arise from manufacturing defects, design defects, marketing defects, and breach of warranty, and that it is generally associated with strict liability.[1][2]
How does cannabis recall make a legal market safer?
A cannabis recall allows the regulator and the licensee to remove unsafe or mislabeled products from the market. California’s DCC says mandatory recalls are used when there is an immediate and serious threat to human life or health, and voluntary recalls are used when a licensee identifies a mislabeled, defective, or unsafe product.[5]
Why do cannabis labeling requirements matter so much for liability?
Because cannabis labeling requirements decide whether consumers get accurate potency, warning, and product information. California says products must be labeled so consumers know what they are buying or using, and Cornell’s products-liability guidance treats inadequate warnings as a classic marketing defect.[1][4]
What do cannabis packaging requirements protect against?
Cannabis packaging requirements protect against contamination, tampering, accidental child access, and confusion. California says packaged goods must be child-resistant, tamper-evident, and resealable, and it places responsibility on the licensee that packaged the good.[3]
Why bring up cannabis business insurance and a surety bond?
Because cannabis business insurance and a surety bond are ways of making sure the financial cost of mistakes falls on firms rather than only on families, workers, and the public. NAIC says coverage gaps remain a major issue, and California requires a surety bond for annual license applications.[11][12]
How does this connect to the rest of the series?
It connects through drug policy reform, risk-based drug regulation, the regulated pharmacy model, diversion control, public safety, and accountability. The safer and more transparent the legal chain becomes, the more the black market loses its biggest advantage: anonymity.
References
[1] Cornell Legal Information Institute. Product Liability. https://www.law.cornell.edu/wex/product_liability
[2] Cornell Legal Information Institute. Strict Liability. https://www.law.cornell.edu/wex/strict_liability
[3] California Department of Cannabis Control. Packaging. https://www.cannabis.ca.gov/licensees/cannaconnect-compliance-hub/packaging/
[4] California Department of Cannabis Control. Labeling. https://www.cannabis.ca.gov/licensees/cannaconnect-compliance-hub/advertising-marketing-packaging-and-labeling/
[5] California Department of Cannabis Control. Cannabis Recalls and Safety Notices. https://www.cannabis.ca.gov/consumers/cannabis-recalls-and-safety-notices/
[6] California Department of Cannabis Control. C CREME Infused Pre-Roll Recall. https://recalls.cannabis.ca.gov/recalls/6761bc23449a15805975db04
[7] California Department of Cannabis Control. Flavorz Integrated Vaporizer Recall. https://recalls.cannabis.ca.gov/recalls/676352eb82281c7c02888fb4
[8] California Department of Cannabis Control. Cannabis Products That Are Attractive to Children Are Prohibited. https://www.cannabis.ca.gov/licensees/cannaconnect-compliance-hub/cannabis-products-attractive-to-children-prohibited/
[9] Occupational Safety and Health Administration. OSH Act of 1970, Section 5 Duties. https://www.osha.gov/laws-regs/oshact/section5-duties
[10] CDC / NIOSH. Workplace Safety and Health Hazards | Cannabis. https://www.cdc.gov/niosh/cannabis/about/index.html
[11] National Association of Insurance Commissioners. Cannabis and Insurance. https://content.naic.org/insurance-topics/cannabis-and-insurance
[12] California Department of Cannabis Control. Form 8113: Commercial Cannabis Licensee Bond. https://www.cannabis.ca.gov/resources/dcc-forms/form-8113/
[13] California Department of Cannabis Control. Appealing a Compliance or Licensing Action: FAQs. https://www.cannabis.ca.gov/cannabis-laws/compliance-action-records/appealing-a-compliance-or-licensing-action-faq/
If you want to follow the full series as it publishes, visit the full Drug Legalization Series. If you prefer audio conversations on recovery, reentry, and purpose, check the podcast page. For program directors building reentry and transition programming, see ReturnPath reentry curriculum. For the personal story behind this work, read A Vision of Hope. To invite Andrew for a keynote or panel, see speaking.