GMP Cannabis: What Actually Applies for US Operators
Search "GMP cannabis" from a US operator's desk and the answer that comes back is built for someone else. Most of what ranks describes the European medical model, where a product moves from GACP in the field to EU-GMP in the facility before it can reach a pharmacy shelf. That framing is correct for Frankfurt. It is close to useless if you run an operation in Ohio and are restricted from exporting.
So here is the short version, stated once. There is no single federal GMP rule that governs cannabis manufacturing in the United States, because cannabis that isn't in an FDA-approved drug product still sits outside the normal FDA drug pipeline. What fills the gap is a patchwork of state rules, and some states have gotten specific. New York is the clearest example: every adult-use and medical processor has to operate under GMP tied to FDA 21 CFR Part 111 or Part 117, and prove it with a third-party audit within a year of commencing operations.
Why the Answers Feel Like They're for a Different Country
The European material dominates because Europe got there first. Germany's medical program made EU-GMP the price of entry, and a deep body of content grew up around GACP, EU-GMP, and the European Pharmacopoeia. Good content. Wrong jurisdiction for a domestic US operator who just wants to know what an inspector will ask for.
GACP and GMP are Not Two Names for the Same Thing
This trips people up constantly, so it's worth being plain.
GACP
Governs the field
Good Agricultural and Collection Practices covers the plant while it's alive and just after: cultivation, harvest, drying, the primary handling of raw material.
GMP
Governs the room
Good Manufacturing Practice picks up once you're processing, extracting, formulating, packaging. One governs the field. The other governs the room.
GACP is a precondition for GMP, not a substitute. EU Annex 7 is literally the document that marks where post-harvest steps like drying and cutting cross from GACP scope into EU-GMP territory.
As one 2026 compliance breakdown from GrowerIQ put it, without the ability to export to Europe there is little incentive for a US operator to invest in an EU-GMP framework. That could soon change — the export opportunities that come with rescheduling are yet to be tested. Forward-minded US operators that have the capital are rethinking their SOPs and regulatory frameworks to prepare for that day.
GMP also isn't one global standard. Same three letters, different rulebooks:
| Standard | Where it lives | Who it's for |
|---|---|---|
| EU-GMP | EudraLex Volume 4 | European medical market |
| WHO-GMP | WHO publications | International baseline |
| GPP | Health Canada Cannabis Regulations | Canadian producers |
| 21 CFR 111/117 | FDA food & supplement rules | US states requiring GMP |
The US states that require GMP point at FDA's food and dietary-supplement rules rather than any cannabis-specific drug standard.
What New York Actually Requires, in Operator Terms
Under Title 9 of the state's rules, all cannabis processing has to follow GMP standards under either 21 CFR Part 111 or Part 117, whichever fits the product. The split is simple enough: Part 111 is the dietary-supplement rule, Part 117 is the human-food rule. A gummy and a tincture won't necessarily land under the same one.
The audit has to be run by an auditor the Office has authorized. There's a narrow conditional-exemption path for Type 3 processors and microbusinesses doing limited packaging or labeling work, but it's written tightly, it needs written approval, and it doesn't cover grinding your own flower.
New York isn't alone in the direction, just further down the road. The pattern to watch is states borrowing FDA's existing food and supplement GMP framework instead of inventing a cannabis one from scratch. If you operate in more than one state, assume the specifics differ and read each rule on its own terms.
Why this Stopped Being a European Problem
For years a US grower could ignore EU-GMP entirely, because there was no lawful way to ship product to Europe anyway. That's shifting. In April 2026 the Justice Department moved state-licensed medical cannabis, and FDA-approved marijuana drug products, to Schedule III. Recreational cannabis stayed in Schedule I, and a broader rescheduling hearing runs through the summer, so nobody should treat the door as fully open. But the medical side moved.
Operators noticed fast. Glass House Brands, the large California grower, completed its first-ever international sale in July 2026 — smokeable CBD biomass into Europe — and has been open about medical exports being the next target. It restructured as a medical-only entity, applied for a DEA registration and an export license, and said the quiet part in the back of an investor deck: medical cannabis export and interstate commerce between DEA-registered operators "becomes feasible."
Worth noting, the shipment that actually happened was hemp CBD. The medical export is still a filing, not a fact. But the direction is unmistakable, and Europe's front door is stamped EU-GMP.
The Microbial Step Almost Everyone Underestimates
Here's the operational detail that turns an abstract standard into a line item. A big share of GMP and EU-GMP failures aren't paperwork problems. They're microbial: total yeast and mold, coliforms, the pathogens that show up on a certificate of analysis and quietly fail a batch. If your quality system is clean but your flower keeps tripping micro limits, you don't have a documentation problem. You have a kill-step problem.
A non-ionizing kill step that drops into GMP without the baggage
This is the part of the workflow Ziel sits in. The company uses radio frequency — a non-ionizing thermal process, the same broad technique agriculture has leaned on for decades to pasteurize nuts and seeds. Because RF is non-ionizing and chemical-free, it drops into organic, GMP, and EU-GMP operations without the labeling and licensing baggage that follows ionizing methods like X-ray, gamma, or e-beam in the European market.
In May 2024, Ziel's radio frequency technology received its first EU-GMP approval as a microbial control step in cannabis, achieved through a medical cannabis processing partner in the EU. That gave operators producing in — or exporting to — the EU an actual documented pathway for the microbial control step rather than a theory. Ziel also holds the first US patent for RF microbial reduction in cannabis, Patent No. 10,517,308, granted in 2020.
US PATENT 10,517,308
NON-IONIZING · CHEMICAL-FREE
The reason to care about the method, not just the outcome, is downstream. Ionizing treatment disqualifies an organic claim and can trigger extra labeling. Germany, for one, requires every strain treated with ionizing radiation to be registered before distribution — a process Ziel says runs six to nine months and costs 5,000 euros per strain. RF doesn't alter the molecular structure of the flower, so it preserves the terpene and sensory profile that a brand is actually selling, and in the German market it avoids that ionizing-registration overhead entirely.
A Short Punch List Before You Spend Anything
If you're a US operator staring at this term and trying to figure out what applies, the order of operations is roughly this:
1
Read your own state's rule first, not the European explainers.
Figure out whether your products fall under FDA's Part 111 or Part 117 — that decides which GMP baseline you're audited against.
Map where your GACP obligations end and GMP begins, so you're not certifying the wrong zone.
4
If export is anywhere in the five-year plan, treat EU-GMP as a design constraint now rather than a retrofit later.
5
Before the auditor shows up, pressure-test the microbial step specifically. It's the failure mode that sinks otherwise-compliant operations — and the one with a clean technical fix.
Questions Operators Actually Ask
Is GMP legally required for cannabis everywhere in the US?
No. That's the whole confusion. Federally there's no blanket GMP mandate for state-legal medical or recreational cannabis, so the requirement lives at the state level and varies. New York mandates it with a third-party audit. Plenty of states are looser. Check yours.
What's the difference between 21 CFR Part 111 and Part 117, and how do I know which one I'm under?
Part 111 is the dietary-supplement rulebook; Part 117 is the human-food one. Which applies comes down to how the product is classified, and in New York the Office makes that call by product type. A supplement-style capsule and a food-style edible can genuinely land in different places — which is exactly why you don't want to guess.
Does GACP certification mean I've handled GMP too?
It doesn't, and treating them as interchangeable is a genuinely expensive mistake. GACP is a precondition for GMP, not a version of it. Think of GACP as covering the plant up through drying and primary handling, then GMP taking over for processing and manufacturing. EU Annex 7 is the reference that pins down where the handoff happens. If you certify only the field and assume the facility is covered, an auditor will find the gap fast.
Will X-ray decontamination hurt my GMP standing or my brand?
Not your GMP standing directly, but it carries costs. Ionizing methods can disqualify an organic claim and, in the EU market, bring extra labeling and registration. German regulators have a strong bias against any product decontaminated with ionizing radiation, requiring a lengthy registration and fee for each strain. If a clean organic or premium sensory position is part of your pitch, the treatment method is a brand decision, not just a compliance checkbox.
If I want to export to Europe eventually, what changes?
The bar moves up to EU-GMP, which is stricter and more detailed than the FDA-based state standards such as New York's. The practical move is to design toward it early rather than bolting it on later. Rescheduling nudged this from hypothetical to plausible in 2026, though lawful US-to-EU medical export is still untested rather than routine at the moment — so plan for it without betting the quarter on it.
Read your state's rule, classify your product under Part 111 or 117, know where GACP ends — and fix the microbial step before it fails you. That last one has a clean technical answer.
References
- New York Office of Cannabis Management, Adult-Use Good Manufacturing Practices (GMP). cannabis.ny.gov/gmp
- N.Y. Comp. Codes R. & Regs. Tit. 9 §123.6, Processor License Facility Operations (Legal Information Institute). law.cornell.edu
- NYS OCM, Adult Use Licensees GMP Audit Guidance (PDF, 2024). cannabis.ny.gov
- GrowerIQ, GPP vs GMP in Cannabis (July 2026). groweriq.ca
- US Department of Justice, order placing state medical cannabis in Schedule III (April 2026). justice.gov
- Cannabis Business Times, Ziel and Portocanna receive first EU-GMP certification for RF microbial control (May 2024). cannabisbusinesstimes.com
- Ziel, Cannabis and Hemp Mold Decontamination. ziel.com/cannabis-and-hemp
- Ziel, Company Profile and US Patent No. 10,517,308. ziel.com/company-profile
- GlobeNewswire, Glass House Brands Completes First International Hemp Sale (July 2026). globenewswire.com
- Forbes, America's Biggest Cannabis Greenhouse Wants To Become 'The Sunkist Of Weed' (Will Yakowicz, June 2026). forbes.com
As of July 2026. Rescheduling status and export rules were moving quickly at the time of writing; verify current status before acting.