How to Get a Cannabis Licence in Europe: Country-by-Country Guide 2026

Why There Is No Single European Cannabis Licence

Cannabis regulation in Europe sits at the intersection of international treaty obligations — chiefly the 1961 Single Convention on Narcotic Drugs — and domestic law. While the European Union sets broad parameters through its pharmaceutical directives and narcotics regulations, the decision to permit commercial cannabis activity remains a member state competence. The result is a patchwork of national regimes that differ fundamentally in scope, procedural requirements and enforcement culture.

For operators, this means that expanding across Europe is not a linear process. A company licenced in Portugal cannot use that authorisation to supply product into Germany. A GMP certificate obtained for one manufacturing site does not automatically transfer regulatory permission to supply in a new jurisdiction without local notification or registration. Each market entry requires its own legal strategy, regulatory engagement and application process.

What follows is a jurisdiction-by-jurisdiction breakdown of the principal licensing frameworks in force as of April 2026, together with a step-by-step approach to navigating the application process.

Licence Types Across European Markets

Regardless of jurisdiction, European cannabis licensing frameworks tend to cluster around five functional categories. Operators must identify which licences they require before commencing any application, as the regulatory and operational requirements differ substantially between them.

Most operators entering the European market require at minimum a cultivation licence and a manufacturing/processing licence to have a complete supply chain. Distribution and wholesale arrangements can sometimes be structured through licenced third-party logistics partners, which reduces the regulatory burden but requires robust contractual and quality agreements.

Country-by-Country Licensing Guide

Germany's Cannabis Act (Cannabisgesetz, CanG), which entered force in April 2024, created two parallel licensing tracks that operators must distinguish carefully.

Track 1 — Cannabis Social Clubs (Anbauvereinigungen): Non-commercial cultivation associations of up to 500 members may apply to the relevant Landesbehörde (state authority) for authorisation to cultivate cannabis for personal use by members. This is not a commercial opportunity — sales are prohibited — but it represents a significant development in the legal landscape. Social club operators must demonstrate secure premises, a track-and-trace system, and compliance with strict cultivation limits (maximum 50 grams per member per month; 25 grams per day for members under 21).

Track 2 — Medical Cannabis (BfArM): Commercial cultivation and manufacturing of cannabis for pharmaceutical use remains under the oversight of the Federal Institute for Drugs and Medical Devices (BfArM). Licences cover cultivation, processing and import/export. EU-GMP certification is mandatory. Applications must include a detailed site security plan, financial capacity demonstration, track-and-trace capability, and qualified personnel with relevant credentials. Historical timelines have ranged from 12 to 24 months.

Germany's pharmaceutical cannabis market — underpinned by mandatory health insurance reimbursement for certain patient groups since 2024 — represents the largest single opportunity in Europe. Operators with existing GMP infrastructure in the Netherlands or Denmark have sought to position product into Germany without establishing domestic cultivation, using import licences alongside their BfArM authorisations.

The Netherlands' regulated cannabis supply experiment (Wietexperiment) selected ten licensed growers in 2023 to supply product to participating municipalities. The experiment is closed to new applicants as of 2025/2026 — those who missed the original tender window cannot join. Results from the experiment continue to inform national policy.

For medical cannabis, the Bureau voor Medicinale Cannabis (BMC) — the government's medicinal cannabis agency — periodically opens tenders for new supply contracts. These are highly competitive and technically demanding, with mandatory Dutch Pharmacopoeia compliance and GMP certification. Operators should monitor BMC announcements closely; historical tender cycles have run every three to five years.

The UK operates a Controlled Drug licensing regime under the Misuse of Drugs Act 1971 and the Misuse of Drugs Regulations 2001. To cultivate, produce, supply, possess or import cannabis in any form for legitimate commercial purposes, operators require a Schedule 2 licence from the Home Office Controlled Drugs Licensing team.

Separate from the narcotics licence, any finished cannabis-based medicinal product (CBMP) intended for patient supply must be authorised by the Medicines and Healthcare products Regulatory Agency (MHRA) under a marketing authorisation or unlicensed specials framework. No botanical cannabis product currently holds a full UK marketing authorisation; Sativex and Epidyolex are the only licenced cannabis-derived medicines.

Home Office application timelines are typically six to 18 months. Operators report the process as operationally intensive, requiring detailed site security documentation, enhanced DBS checks, financial due diligence and inspector visits. Post-Brexit, the UK no longer benefits from EMA regulatory approvals — product must be separately developed through the MHRA pathway.

Portugal has emerged as the preferred cultivation location for many European operators, combining a favourable climate for outdoor and greenhouse production, lower land and labour costs relative to central Europe, and a regulator — INFARMED — that has developed clear processes for cannabis cultivation, transformation and production licences since 2018.

INFARMED licences cover cultivation, extraction and production for medicinal use, and can include export authorisation for GMP-certified product. Application timelines are generally six to 12 months for well-prepared submissions. Portugal's relatively streamlined regulatory environment has attracted operators seeking to establish an EU cultivation base to supply Germany, the UK and other markets via import agreements.

Operators should note that the Portuguese domestic medical market is modest in size — the primary commercial logic for most licensees is export. This requires both INFARMED authorisation and the import permit from the receiving country's competent authority.

Denmark's four-year pilot programme for medical cannabis, launched in 2018, established a licensing framework administered by the Danish Medicines Agency (DKMA). Licences cover cultivation, processing, import, export and distribution of medical cannabis. Denmark allows exports, and licensed operators including Aurora Denmark and Stenocare have built significant production capacity oriented towards European export markets.

The DKMA framework requires GACP for cultivation and EU-GMP for processing. Denmark's regulatory environment is considered technically rigorous but predictable — a combination that has attracted several operators seeking a stable northern European production base.

France's medical cannabis programme expanded following a 2024 decree from the ANSM (Agence nationale de sécurité du médicament et des produits de santé), which authorised a broader set of cultivation and transformation activities. The number of authorised producers remains limited, and the domestic reimbursement framework is still evolving following the end of the initial pilot programme.

France represents a large potential market given its population, but the regulatory pathway for new applicants remains narrow. Operators seeking ANSM authorisation should expect a detailed review of technical dossiers, site inspections and GMP certification requirements consistent with other EU markets.

The Czech Republic passed an adult-use cannabis framework in 2024, making it one of the first EU member states to do so. As of April 2026, the implementing regulations and licensing system are still being operationalised through SUKL (Státní ústav pro kontrolu léčiv — the State Institute for Drug Control). Medical cannabis licences have been available since 2022.

The Czech framework, when fully operational, is expected to include retail licence categories alongside cultivation and processing. Operators seeking early positioning in the Czech market should engage SUKL proactively and monitor implementing legislation, as the regulatory architecture is still being finalised.

Luxembourg legalised adult-use home cultivation in July 2023 — residents may grow up to four plants for personal use. A retail and commercial supply framework is in development. Luxembourg's small domestic market limits its scale as a commercial opportunity, but its position as an EU jurisdiction with progressive cannabis policy makes it a useful test case for advocacy and regulatory intelligence.

Universal Requirements: GACP, GMP and Track-and-Trace

Across virtually all European markets, three sets of requirements appear consistently in cannabis licence applications, regardless of jurisdiction.

GACP — Good Agricultural and Collection Practice

The EU GACP guideline (EMA/HMPC/246816/2005) sets standards for the cultivation, harvesting and primary processing of plants used as starting materials in the manufacture of herbal medicinal products. For cannabis cultivators, GACP compliance covers seed-to-harvest practices, pest management, water quality, worker hygiene and documentation. Most regulators require GACP as the minimum standard for cultivation operations supplying the pharmaceutical supply chain.

EU-GMP — Good Manufacturing Practice

EU-GMP certification — issued by the national competent authority following an inspection of the manufacturing facility — is mandatory for processing cannabis into finished products intended for pharmaceutical use. GMP covers facility design, equipment qualification, process validation, batch record-keeping, analytical testing and quality management systems. A GMP inspection typically follows a pre-inspection application and takes six to 18 months from initial submission to certification. Facility build-out for a compliant GMP cannabis processing site typically requires capital expenditure of €2 million to €10 million depending on scale and complexity.

Track-and-Trace and Security

All licensed operators must operate a cannabis track-and-trace system — typically seed to sale — and demonstrate physical security infrastructure including CCTV, access controls, alarm systems and stock reconciliation processes. Failure to demonstrate adequate security capability is one of the most common grounds for licence rejection or delay.

Step-by-Step: How to Approach a European Licence Application

Regardless of target jurisdiction, successful applicants typically follow a structured approach. The following sequence reflects best practice observed across multiple European markets.

1. Define your market strategy Identify which jurisdictions are commercially viable for your business model — cultivation, manufacturing, distribution or retail. Consider market size, application timelines, GMP requirements and competitive intensity. Portugal and Denmark may suit cultivators; Germany and the UK offer larger demand pools but higher barriers.
2. Engage local legal counsel and regulatory consultants Appoint a local regulatory lawyer and, where appropriate, a specialist cannabis licensing consultant in each target jurisdiction. Do not attempt to translate a licence application from one market to another without jurisdiction-specific advice. Regulatory nuances — particularly around security requirements and financial capacity demonstrations — differ substantially.
3. Establish your legal entity Incorporate or register a local legal entity in the target jurisdiction. Most regulators require the licence applicant to be a locally registered company. Factor in notarial, legal and registration costs, as well as banking arrangements — cannabis companies continue to face challenges accessing mainstream banking in some European markets.
4. Secure and prepare your facility Site selection and facility preparation should begin in parallel with legal structuring. Regulators will inspect the facility before granting a licence. For GMP applications, the facility must be designed, built and qualified to EU-GMP specifications — a process that cannot be shortcut without risking inspection failure.
5. Prepare and submit the licence application dossier Compile the application dossier in accordance with the competent authority's published requirements. This typically includes: corporate documentation, facility plans and security specifications, standard operating procedures, quality management system documentation, personnel CVs and background check results, financial statements, and a track-and-trace plan. Incomplete submissions are the leading cause of timeline delays.
6. Engage with the regulator during review Most European regulators will issue requests for supplementary information (RSI) during their review of the application. Respond promptly and completely. Where permitted, request a pre-submission meeting with the regulator — this significantly reduces the risk of formal rejection on technical grounds.
7. GMP inspection and certification (if applicable) For manufacturing licences, a GMP inspection will be conducted before authorisation is granted. Prepare a detailed inspection readiness plan. Mock inspections conducted by external consultants are strongly advisable. Address any deficiencies identified in writing before the formal inspection.
8. Post-licence compliance and renewal Cannabis licences in Europe are typically subject to annual renewal, periodic compliance reporting, and regular inspections. Budget for ongoing compliance costs — quality personnel, testing, record-keeping and regulatory reporting — from the outset. Licence suspension for compliance failures is an operationally existential risk.

Indicative Costs and Timelines

Common Mistakes That Derail Licence Applications

Underestimating timelines

The most common and most costly mistake. Operators who plan their supply agreements, investor reporting milestones or commercial launch dates around official regulatory timelines routinely find themselves six to 12 months behind. Regulators in virtually every European jurisdiction have historically exceeded their stated processing targets. Build conservative assumptions into financial models and supply chain planning from day one.

Not engaging local counsel

Regulatory language in cannabis licensing is jurisdiction-specific, and errors in application terminology or format are frequently fatal to the first submission. Operators who rely exclusively on international cannabis consultancies without supplementing them with local legal expertise disproportionately experience avoidable delays.

Underestimating GMP costs

Operators who have not previously built pharmaceutical manufacturing facilities consistently underestimate the capital and time requirements for GMP compliance. A cannabis production line is not a food-grade or cosmetics facility — the documentation burden, personnel requirements and inspection rigour are materially higher.

Inadequate security planning

Security requirements — physical controls, CCTV coverage, access systems, alarm monitoring, staff vetting — are non-negotiable in every European market. Applications that treat security as an afterthought are rejected or returned for significant revision.

No market validation before application

Obtaining a licence does not create demand. Operators who proceed to licence application without having established credible distribution relationships or off-take agreements frequently find, post-licence, that the commercial pathway is more difficult than anticipated.