A practical operator brief on MCA kiosk guidance, agent ID checks at the point of sale, Metrc sales records, camera coverage, and the premises approvals that decide where ordering hardware goes in a Maryland dispensary.
Reviewed November 12, 2026. Figures come from the Maryland Cannabis Administration’s data dashboard extract for September 2026, the latest posted when this page was reviewed. The dispensary count is licenses, not a count of open storefronts.
Dispensary licenses (125 standard, 3 micro) in the license summary of the MCA data dashboard extract for September 2026.
View source1,700,566dispensary transactions in September 2026Adult-use (1,487,927) plus medical (212,639) transactions for the month, from the same MCA extract.
View source77,686registered medical patientsNumber of patients reported for September 2026 in the MCA data dashboard extract.
View sourceRegulatory note: This page summarizes public rules and guidance reviewed November 12, 2026. MCA guidance documents state they are not legal advice, and proposed amendments to COMAR 14.17 are pending. Dispensify provides technology planning, not legal, licensing, or tax advice.
At the point of sale, a dispensary agent must verify that an adult-use consumer is 21 or older from a valid, unexpired government-issued photo ID. An ID scan at a kiosk can assist that step, but the agent still does the check and dispenses the product.
COMAR 14.17.12.04BMCA’s dispensary guidance says a dispensary may use a kiosk for ordering cannabis products in the service area only. A kiosk in the public waiting area is for check-in only, can’t be the only check-in option, and must ask customers to opt in before saving their information. Entry to the service area is limited to verified consumers, patients, and caregivers.
MCA Dispensary Guidance, version 10; COMAR 14.17.12.02MA dispensary must use the seed-to-sale tracking system, Metrc, to track stock from receipt to the sale, and compare a physical inventory against it at least monthly. The licensee owns that reporting through its POS or inventory provider, so settle the reporting path before adding an ordering lane.
COMAR 14.17.12.04C and D; Metrc MarylandSurveillance cameras must capture each area where cannabis is dispensed and each entrance to it, and recordings are retained for at least 90 calendar days. A dispensary also needs MCA approval before modifying or renovating the premises, so review kiosk and POS placement against the camera plan and the approved layout first.
COMAR 14.17.12.02B and LOfficial updates for store security, pending rule changes, Metrc sales reporting, and online order accuracy. Last checked November 12, 2026.
Maryland Cannabis Administration
MCA reported three early-morning forced-entry burglaries at dispensaries in Howard County, Baltimore County, and Baltimore City between October 26 and November 1. No cannabis was reported stolen, but cash was taken in two of them.
Why it matters: Review closing cash procedures, confirm alarms and cameras work, and avoid leaving unnecessary cash on site overnight.
Read official sourceMaryland Cannabis Administration
The proposal would let dispensaries display cannabis for visual and smell inspection under security conditions, raise the micro dispensary employee cap from 10 to 20, and replace Responsible Vendor Training with Cannabis Agent Training. MCA expects it to print in the Maryland Register on November 30 for a 30-day comment period.
Why it matters: These are proposals. MCA says licensees may not use the new display provision before the rule takes effect in early 2027.
Read official sourceMetrc and MCA
From November 18, 2026, Metrc Maryland rejects any sales receipt or sales delivery recorded without a sales tax value. A zero value is accepted only for patient and caregiver sales.
Why it matters: If your POS sends sales to Metrc, confirm with the provider that it passes sales tax before November 18.
Read official sourceMaryland Cannabis Administration
MCA said it has received numerous complaints about advertised website prices or discounts not being honored at the point of sale, and online orders not matching the listed THC percentage or strain at pickup. It cited the advertising law before taking disciplinary action.
Why it matters: Keep the menu, the kiosk, and the POS on one price and product record so the order matches at pickup.
Read official sourceIs the ordering kiosk inside the service area, behind the point where consumers, patients, and caregivers are verified?
Where does a dispensary agent check the government-issued photo ID at the point of sale, and who hands over the product?
Which POS or inventory provider records each sale in Metrc, and will it send a sales tax value from November 18, 2026?
Does the new lane change the approved premises, and has MCA approved the modification before any work starts?
How will the kiosk ask for consent before saving customer information, and can a customer still buy without giving it?
The cash recycler is optional. Cash acceptance, change return, and reconciliation depend on the selected hardware and software configuration. Confirm those options and the staff handoff before finalizing a rollout.
MCA’s dispensary guidance (version 10, updated September 4, 2026) says a dispensary may use a kiosk for ordering cannabis products in the service area only, and a kiosk in the public waiting area for check-in only. That’s operating guidance, not an approval of any product, and it isn’t legal advice. A dispensary agent still verifies age from a government-issued photo ID at the point of sale and dispenses the order.
Dispensify plans and deploys the physical checkout layer. The licensee is responsible for Metrc reporting, which runs through its selected POS, inventory platform, or third-party integrator.
COMAR 14.17.12.04 requires a dispensary agent to verify at the point of sale that an adult-use consumer is 21 or older, using a valid, unexpired government-issued photo ID. Access to the premises is limited to patients, caregivers, and adults 21 or older, and MCA guidance says dispensaries should check ID before admission. The guidance also says ID scanners aren’t required at entry or at the point of sale.
Only with consent. A dispensary may not use an adult-use consumer’s personal information or purchase records to build a customer profile without express permission, and it can’t refuse a sale because the consumer declines. MCA guidance adds that a check-in kiosk must require an opt-in before saving information for any amount of time.
An agent may not knowingly dispense more than the personal use amount in a single day: 1.5 ounces of usable cannabis, 12 grams of concentrate, or edibles, capsules, and tinctures totaling 750 milligrams of THC. MCA guidance treats these as combined limits, and vaporizing devices count as concentrate.
MCA guidance says a dispensary must assess a 12% sales and use tax on adult-use sales. Sales to qualifying patients and caregivers are exempt. State law also bars counties, municipalities, and special taxing districts from adding their own cannabis tax.
Last reviewed . This guide summarizes publicly available sources, and rules and figures can change after that date. Dispensify provides technology planning and deployment support, not legal or licensing advice. Confirm current requirements with the Maryland Cannabis Administration, your advisors, and the applicable local authority.
Tell us what you’re opening, replacing, or standardizing. We’ll map the kiosk, POS hardware, cash, installation, and support path around your operating environment.
