Thailand’s 2026 medical cannabis rules: an operator checklist

Start with the permitted establishment types

DTAM identifies four main establishment types that may apply to sell or perform initial processing of cannabis flower for medical treatment: medical facilities and clinics, modern pharmacies, herbal product shops, and certified folk-healer practices.

Each business needs the licence for its underlying establishment before it applies for permission to sell or process controlled cannabis. A medical facility needs its healthcare licence, a pharmacy needs its pharmacy licence, and the other categories need the licence or certification that governs their work.

Businesses in Bangkok submit the controlled-herb application through DTAM. Businesses in other provinces apply through the Provincial Public Health Office responsible for their location.

Plan the transition from an existing licence

The DTAM guide says operators holding licences under the previous framework may continue until those licences expire. They must follow the conditions attached to the licence throughout that period.

An operator that wants to continue after expiry must apply under the new rules. A suspension or breach under the controlled-herb requirements may affect the authority’s renewal decision, so check each expiry date, licence condition, and application route now.

Keep qualified staff on site

Each establishment needs a licensed professional suited to its category. Depending on the premises, that person may be a physician, pharmacist, dentist, Thai traditional medicine practitioner, Chinese medicine practitioner, or certified folk healer.

The guide also requires at least one worker who has completed a DTAM-recognized medical cannabis course. That trained worker must remain at the establishment during opening hours and help manage receiving, dispensing, stock accounts, and safety controls. Software can record roles and restrict medical information, but it cannot replace the qualified people required at the premises.

Treat storage and security as medical controls

DTAM expects operators to protect controlled cannabis from deterioration and loss. The guide covers odour and smoke control, suitable temperature and humidity, protection from sunlight, separate storage that keeps cannabis off the floor, and security measures against loss or theft.

The applicant also needs ownership, possession rights, or consent to use the premises for the licence period. DTAM’s guide refers to a period of at least three years and requires a visible sign that identifies the licensed establishment.

A cannabis POS should preserve the digital side of this control. Each received batch should retain its supplier, documents, quantity, storage location, branch, and movement history. PorThorOS connects batch stock to receiving records, transfers, counts, sales, and documented corrections.

Build cannabis flower dispensing around PT33

DTAM states that cannabis flower dispensing must use the controlled-herb prescription form known as PT33 or ภ.ท.33. An authorized practitioner issues PT33 after assessing the patient; counter staff must not create or approve it.

Use the linked Thai-language PT33 for official records.

The prescription records patient identity, clinical information, grams per day, treatment duration, and the total quantity prescribed. One prescription may cover no more than 30 days of treatment, and the dispensing establishment must keep the prescription evidence at the premises for at least one year.

Before checkout, staff need to confirm that the patient matches the prescription, the PT33 supports the transaction, the quantity stays within the allowance, and the selected product comes from sellable recorded stock.

Use Cannabox MD for the patient and clinician handoff

Cannabox MD gives patients a secure intake path for identity details, medical information, supporting documents, consent, and signature. An authorized clinician reviews the submission and decides whether to approve it, request more information, or reject it.

After approval, PorThorOS connects the operational patient record and PT33 status to checkout. Counter staff see the clearance and remaining allowance needed for dispensing without placing private clinical answers in general notes.

Cannabox MD supports the review pathway and does not promise prescription approval. The authorized clinician makes the clinical decision, and dispensary staff must not answer medical questions or issue PT33 themselves.

Create PT27 and PT28 from daily records

DTAM requires operators to keep records covering the source and use of controlled cannabis. PT27 covers source and inbound quantities. PT28 covers use or supply from the establishment.

We recommend a daily check of receiving, dispensing, and stock records. This is an operating routine, not a claim that DTAM requires a fresh printout each day.

• Each day: compare incoming flower with supplier documents and outgoing flower with the recipient, prescription where applicable, and stock movement. Resolve missing details while staff can still check the transaction.
• Before monthly reporting: reconcile the reporting period and quantities, then review PT27 and PT28. DTAM’s guide specifies monthly submission within one month after the end of the reporting month; confirm the current channel with the responsible authority.
• For inspection: keep accounts and supporting evidence available at the store during opening hours. DTAM’s guide specifies retention of at least three years. Confirm the accepted paper or electronic format, and make sure authorized staff can retrieve it.

Use a POS that blocks an incomplete sale

PorThorOS checks the patient, active PT33 allowance, sellable stock, price, payment, and open shift before it records a sale. The completed record keeps the product, prescription reference, stock movement, receipt, payment, employee, and branch context together.

Run one test transaction before launch. Start with a documented supplier batch, send a sample patient through Cannabox MD, connect an approved PT33, sell from the eligible batch, and trace the result into the PT27 and PT28 working records.

PorThorOS supports the operating record. It does not issue licences, make clinical decisions, file reports without operator review, or guarantee regulatory compliance.

Check your operation before applying or renewing

Confirm the establishment category, underlying licence, current expiry date, and responsible application authority. Appoint the required professional, schedule recognized staff training, and document the premises, storage, and security controls.

Map patient intake, clinician review, PT33, dispensing, and record retention. Trace each stock batch from supplier to final movement, test that checkout blocks an incomplete sale, restrict medical information by role, and reconcile the PT27 and PT28 working records each month.

Confirm the rules before changing operations

This article summarizes DTAM guidance for operational planning. It is not legal or medical advice. Confirm the regulation’s status and the requirements for your licence with DTAM, the responsible Provincial Public Health Office, and qualified advisers before changing your process.