Cal. Bus. & Prof. Code § 26067

(a) The department, in consultation with the bureau, shall establish a track and trace program for reporting the movement of cannabis and cannabis products throughout the distribution chain that utilizes a unique identifier pursuant to Section 26069, secure packaging, and is capable of providing information that captures, at a minimum, all of the following: (1) The licensee receiving the product. (2) The transaction date. (3) The cultivator from which the product originates, including the associated unique identifier pursuant to Section 26069.

(b) (1) The department, in consultation with the California Department of Tax and Fee Administration, shall create an electronic database containing the electronic shipping manifests to facilitate the administration of the track and trace program, which shall include, but not be limited to, the following information: (A) The variety and quantity or weight of products shipped. (B) The estimated times of departure and arrival. (C) The variety and quantity or weight of products received. (D) The actual time of departure and arrival. (E) A categorization of the product. (F) The license number and the unique identifier pursuant to Section 26069 issued by the licensing authority for all licensees involved in the shipping process, including, but not limited to, cultivators, manufacturers, distributors, and dispensaries. (2) (A) The database shall be designed to flag irregularities for all licensing authorities in this division to investigate. All licensing authorities pursuant to this division may access the database and share information related to licensees under this chapter, including social security and individual taxpayer identifications notwithstanding Section 30. (B) The department shall immediately inform the bureau upon the finding of an irregularity or suspicious finding related to a licensee, applicant, or commercial cannabis activity for investigatory purposes. (3) Licensing authorities and state and local agencies may, at any time, inspect shipments and request documentation for current inventory. (4) The bureau shall have 24-hour access to the electronic database administered by the department. The California Department of Tax and Fee Administration shall have read access to the electronic database for the purpose of taxation and regulation of cannabis and cannabis products. (5) The department shall be authorized to enter into memoranda of understandings with licensing authorities for data sharing purposes, as deemed necessary by the department. (6) Information received and contained in records kept by the department or licensing authorities for the purposes of administering this chapter are confidential and shall not be disclosed pursuant to the California Public Records Act (Chapter 3.5 (commencing with Section 6250) of Division 7 of Title 1 of the Government Code), except as necessary for authorized employees of the State of California or any city, county, or city and county to perform official duties pursuant to this division or a local ordinance. (7) Upon the request of a state or local law enforcement agency, licensing authorities shall allow access to or provide information contained within the database to assist law enforcement in their duties and responsibilities pursuant to this division.