(a)
The Department of Food and Agriculture, in consultation with the bureau and the State Board of Equalization, shall expand the track and trace program provided for under Article 7.5 (commencing with Section 19335) of Chapter 3.5 of Division 8 to include the reporting of the movement of marijuana and marijuana products throughout the distribution chain and provide, at a minimum, the same level of information for marijuana and marijuana products as required to be reported for medical cannabis and medical cannabis products, and in addition, the amount of the cultivation tax due pursuant to Part 14.5 (commencing with Section 34010) of Division 2 of the Revenue and Taxation Code. The expanded track and trace program shall include an electronic seed to sale software tracking system with data points for the
different stages of commercial activity including, but not limited to, cultivation, harvest, processing, distribution, inventory, and sale.
(b)
The department, in consultation with the bureau, shall ensure that licensees under this division are allowed to use third-party applications, programs and information technology systems to comply with the requirements of the expanded track and trace program described in subdivision (a) to report the movement of marijuana and marijuana products throughout the distribution chain and communicate such information to licensing agencies as required by law.
(c)
Any software, database or other information technology system utilized by the department to implement the expanded track and trace program shall support interoperability with third-party cannabis business software applications and allow all licensee-facing system activities to be performed
through a secure application programming interface (API) or comparable technology which is well documented, bi-directional, and accessible to any third-party application that has been validated and has appropriate credentials. The API or comparable technology shall have version control and provide adequate notice of updates to third-party applications. The system should provide a test environment for third-party applications to access that mirrors the production environment.