TCPA and Cannabis Texting: What Dispensaries Must Know
The Telephone Consumer Protection Act (TCPA) is one of the most important laws affecting dispensary text messaging, yet it is frequently misunderstood.
While cannabis is regulated at the state level, federal consumer protection laws still apply. For dispensaries using SMS, understanding TCPA requirements is essential for compliance, deliverability, and long-term messaging performance.
What Is the TCPA?
The TCPA is a federal law that governs how businesses communicate with consumers via phone calls and text messages.
It applies to all industries, including cannabis.
According to the Federal Communications Commission (FCC), businesses must obtain appropriate consent before sending automated or bulk text messages. You can review the FCC’s official guidance here: FCC TCPA Overview.
Why TCPA Matters for Cannabis Texting
State cannabis legalization does not override federal communication laws.
TCPA enforcement operates independently of cannabis regulations and applies to dispensary texting in the same way it applies to other automated SMS programs.
This means dispensaries must comply with TCPA requirements in addition to carrier rules and state-level cannabis regulations.
Consent Is the Foundation of TCPA Compliance
At its core, TCPA compliance is about consent.
For dispensary text messaging, this means:
- Customers must clearly opt in to receive SMS messages
- Consent must be tied to a specific phone number
- The purpose of messaging must be disclosed at signup
- Consent must be documented and retrievable
Dispensaries that want a deeper breakdown of consent flows should also review SMS opt-in best practices for dispensaries.
How Dispensaries Commonly Collect Consent
Most dispensaries collect SMS consent through operational touchpoints such as:
- Checkout workflows
- Loyalty or rewards enrollment
- Website sign-up forms
- Age-gated landing pages
Consent must be intentional. Pre-checked boxes or implied consent can create compliance and deliverability risk.
Automated Texting and TCPA
TCPA primarily regulates automated messaging systems.
If a dispensary uses software to send messages automatically, including scheduled campaigns or triggered texts, TCPA rules apply.
This includes:
- Bulk promotional campaigns
- Scheduled notifications
- Triggered messages tied to customer activity
Most dispensary texting programs fall into this category.
Opt-Out Is Required
Every TCPA-compliant text message must include a clear opt-out mechanism.
This typically includes language such as:
- “Reply STOP to unsubscribe”
Opt-outs must be honored immediately. Continuing to message opted-out numbers is one of the fastest ways to trigger complaints and carrier enforcement.
TCPA, Carriers, and Deliverability
TCPA compliance is closely tied to deliverability.
Wireless carriers monitor:
- Opt-out rates
- Complaint signals
- Unexpected message volume
- Consent quality over time
Poor consent practices can lead to filtering or blocking, even if messages appear compliant on paper.
This is why TCPA compliance works hand-in-hand with A2P 10DLC registration and monitoring.
What TCPA Does Not Cover
TCPA does not define cannabis advertising rules or product claims.
Those requirements come from:
- State cannabis regulators
- Carrier messaging policies, such as the CTIA messaging principles (CTIA Messaging Principles)
- Platform-specific enforcement rules
Dispensaries must comply with all three layers simultaneously.
Practical TCPA Tips for Dispensaries
Dispensaries can reduce TCPA risk by:
- Using clear opt-in language at signup
- Sending confirmation messages after opt-in
- Keeping message frequency reasonable
- Maintaining records of consent
- Aligning messaging behavior with registered use cases
These practices support both compliance and long-term messaging performance.
Final Takeaway
TCPA applies to cannabis texting regardless of state legalization.
For dispensaries, compliance is not about avoiding SMS. It is about sending messages responsibly, transparently, and with documented consent.
Dispensaries that treat TCPA as a foundational requirement build stronger messaging programs, protect deliverability, and avoid unnecessary risk.
