An inspection at a CBD store is decided before the inspector walks in
In Spain, a CBD store may receive a visit, without prior notice, from three different authorities: consumer protection, health, and police. What they review is always the same: the product (whether there are ingestible CBD references, which are not authorized), the labeling, the documentation (THC analytics per batch, CPNP notifications for cosmetics, invoices and traceability), commercial communication on websites and social media, and what staff say at the counter. The report they issue has presumption of veracity, and signing it does not mean agreement: it means you have received it. With the documentary file prepared, most visits end in a remediable compliance request; without it, in a sanctioning proceeding.
Few things make a CBD store owner more nervous than the word inspection. And yet, it is the most predictable scenario of all: you know who can come, what they will look at, what documents they will request, and how the visit ends depending on what they find. This guide walks through a real inspection from start to finish: who inspects and with what authority, what exactly they review in products, labeling, and documentation, how staff should act during the visit, what rights you have regarding the report, and what happens in the following weeks. The goal is that if an inspector walks through the door tomorrow, the script is already written.
Who Can Inspect Your CBD Store (and What Each One Is Looking For)
The first common mistake is thinking of “the inspection” as a single thing. Several legal regimes converge on a CBD store, each with its own control authority, and each visit has a different script:
| Who Inspects | What They Review | Main Framework |
|---|---|---|
| Consumer protection inspection (regional or municipal) | Labeling and consumer information, advertising, prices, complaints forms, commercial practices | General Law for the Defense of Consumers and Users |
| Health authorities (public health, AESAN criteria) | Presence of foods or supplements with CBD (unauthorized novel foods), cosmetic conditions, health claims | Law 17/2011 on food safety and health regulations |
| AEMPS | Products presented with therapeutic properties (medicinal product by presentation) and cosmetics surveillance | Medicines legislation and Regulation (EU) 1223/2009 on cosmetics |
| Police (National, Civil Guard, or local) | Flowers and products with THC, indications of drug trafficking, verification of activity | Police actions with possible administrative or criminal consequences |
Each front has its own logic, but all share a starting point: they can show up without prior notice during business hours, because a store is an establishment open to the public. And they also share a frequent trigger that almost no one has on their radar: a complaint from a dissatisfied customer or a competitor, which adds to the scheduled inspection campaigns that regional authorities periodically direct at specific sectors, and CBD is one of them.
The inspection does not begin when the inspector crosses the threshold: it begins on your website weeks earlier. Product pages, featured reviews, and social media posts are frequently reviewed before the visit and guide what the inspector will look for in-store. If your online listing says “sublingual” and your label says “external use,” the contradiction is already documented before anyone greets you.
What Exactly They Review: The Five Blocks of Every Inspection
Regardless of who comes, the content of the review is surprisingly stable. There are five blocks, and it is worth auditing them internally in this same order, because it is the order in which poorly prepared businesses fail:
The Displayed Product
The first thing is the walk through the shelves: what references are there and what regime each one fits into. The presence of oils, capsules, gummies, or infusions with CBD for ingestion is the most serious finding, because they are unauthorized novel foods whose sale is not permitted. Flowers are examined for their presentation and THC content, a terrain redefined by the recent Supreme Court ruling on CBD flowers.
Labeling, Reference by Reference
Spanish language, identification of the responsible party with address, ingredient list (INCI for cosmetics), batch number, net content, conditions of use and warnings. And the two signals that set off all alarms: dosage indications or the word “sublingual,” and any health claim (sleep, anxiety, pain), which can convert the file into a health one for presentation as a medicine.
Documentation
Supplier invoices for each catalog reference, THC analytics per batch, CPNP notification receipts for cosmetics, technical data sheets, and flower traceability. This is where the outcome of the visit is decided: the difference between “I have it, one moment” and “it’s at the accountant’s” is the difference between a verification and a compliance request.
Commercial Communication
Website, social media, store signage, and reviews that the business itself highlights. All of this is part of the commercial presentation of the product, and a claim on Instagram carries the same weight as a claim on the label.
Staff
The classic question is as simple as it is devastating: “and how is this taken?” The salesperson’s answer can be reflected in the report as part of the product presentation. A team without a protocol is the weakest link in the entire system.
The Inspection Folder
The most cost-effective tool for a CBD business is not a product: it is a folder, physical and digital, with all documentation organized by reference and accessible within minutes by any team member.
It does not change what you are, it changes how you are seen: an establishment that delivers its analytics with dividers conveys to the inspector that they are dealing with a professional operator, and that conditions the tone of everything that follows.
“Inspections are not won during the visit: they are won in the months before. When I accompany a store after an inspection, I can almost always reconstruct how the visit went just by looking at their documentation. If the inspector asked for analytics and the manager opened a folder with dividers, the report is usually short and the outcome a compliance request. If the answer was ‘the supplier has that,’ the report is long and the file uphill. The inspector is not looking to sink your business: they are looking to know whether they are dealing with a serious operator or an improvised one, and they decide in the first ten minutes.”
How the Visit Unfolds, Step by Step
Demystifying is the best way to lose the fear. A typical administrative inspection follows this sequence:
Arrival and Identification
The inspector identifies themselves with their credentials (you can and should ask for them) and communicates the purpose of the visit. They do not need an appointment or judicial authorization for areas of the establishment open to the public.
Product and Labeling Walkthrough
Review of displayed references and their labeling, with photographs if deemed necessary. This is the moment when the person designated as responsible should attend, not whoever is closest to the counter.
Request for Documentation
Invoices, analytics, CPNP notifications, complaints forms, activity license. What is not available at the moment can be requested with a deadline, but each document that appears instantly reduces pages from the report.
Sample Collection, If Applicable
In consumer protection and health actions, samples are taken in regulatory triplicate: one for analysis, one for the administration, and one that remains in your possession, sealed, for a possible contradictory analysis. Keep it intact: it is your right of defense in pure form.
Inspection Report and Statements
The visit ends with a report stating what was verified. Read it in full, note any discrepancy or nuance in it, request a copy, and sign. The signature certifies receipt, not agreement.
After the Visit
Three possible outcomes: filing, compliance request with deadline, or agreement to initiate a sanctioning proceeding. In the latter case, the objections period opens, usually ten to fifteen business days as specified in the notification. It is a short deadline and this is where the game is played.
Documents formalized by officials recognized as having authority status, observing legal requirements, constitute proof of the facts that motivate their formalization, unless proven otherwise. This is the so-called presumption of veracity of the report: what is written is presumed true, and disproving it later requires contrary evidence.
“If I don’t sign the report, it has no validity. And if I sign, I am acknowledging the infringement, so it’s better to refuse to sign anything.”
The report is equally valid with or without your signature: the inspector will note the refusal and it will proceed. Signing only certifies that you have received it, and the statements section is your first opportunity for defense: what you do not state there will cost much more to prove later, because the report enjoys presumption of veracity.
What to Do and What Not to Do While the Inspector Is in the Store
- Ask for the inspector’s credentials and note the agency they represent: it tells you what legal regime is at stake.
- Have the designated person attend according to your internal protocol, with access to the documentation folder.
- Cooperate and provide what is requested: documentation available immediately shortens the report and improves the tone.
- State your remarks in the report: nuances, documents you will provide, disagreements with what is reflected.
- Request copies of everything (report, proceedings, sample seal) and keep your triplicate sample without opening it.
- Call your lawyer that same day, not when the resolution arrives: the deadlines that start with the report are short.
- Do not obstruct or deny entry: resistance to inspection constitutes an independent infringement that adds to everything else.
- Do not improvise answers about how products are used or “taken”: what is said at the counter can end up in the report.
- Do not sign “in agreement” without reading: read it in full, clarify in statements, and sign as received.
- Do not volunteer extra information with spontaneous comments: answer what is asked, precisely and without speculating.
- Do not argue with the inspector: the place for disagreement is the report first and objections later, not the counter.
The Counter Also Testifies
The staff protocol fits on one page: who attends an inspection, what can be said about product use, where the folder is, and who to call.
It should be signed by each team member and reviewed when someone new joins. Ten minutes of training deactivates the cheapest risk to eliminate from the entire list.
“Signing the report is not agreeing with anyone, and I repeat this in every training because fear of signing causes chain errors. My guideline is always the same: read it in full even if the inspector is waiting, state in remarks everything that does not fit, sign as received, and request a copy. That paper has presumption of veracity, so the moment to clarify it is then, with the pen in hand. What you did not say in the report you will have to prove later, and believe me it is much harder.”
Your Store’s Traffic Light: Where You Are Right Now
Before anyone comes, this is the honest self-assessment we recommend doing every quarter. If you are setting up the business, in the guide on how to open a CBD store in Spain you have the complete approach from the start; if you are already operating, place yourself in the column that applies:
- Complete and accessible inspection folder: analytics per batch, CPNP, invoices, and technical data sheets
- Catalog without ingestible CBD references and labeling clean of dosages and claims
- Website and social media aligned with in-store presentation
- Staff protocol signed and reviewed
- Oils, capsules, gummies, or infusions with CBD for sale for ingestion
- Dosages, “sublingual,” or therapeutic claims on label, listing, or counter
- Inability to prove supplier, batch, or analytics for a reference
- Flowers without traceability or available THC analytics
What You Are Risking: The Penalty Map
The economic outcome depends on the front from which the proceeding arrives. In consumer protection matters, the 2022 reform of the General Law for the Defense of Consumers and Users significantly raised the regime: fines range from €150 for minor infringements to one million euros for very serious ones, with the possibility of exceeding based on illicit profit obtained. On the food front, the sale of unauthorized novel foods is sanctioned under Law 17/2011, with fines of up to €600,000 in very serious cases, in addition to product immobilization and withdrawal. And if the product is presented with therapeutic properties, the file can shift toward medicines regulations, with AEMPS as the protagonist and an even more severe regime.
To the fine must be added what does not appear in the resolution: the immobilized product, the record that remains in the administrative file for future verifications, and the wear of managing a proceeding for months. This is exactly the scenario that a compliance program for CBD companies and stores is designed to avoid: reviewing catalog, labeling, documentation, and staff protocol before the administration does, and setting up the inspection folder that turns a visit into a formality.
The Inspection Folder, Point by Point
- Activity license, tax registration, and complaints forms in plain view.
- Supplier invoices for each catalog reference, organized and locatable.
- THC content analytics per batch, including for flowers.
- CPNP notification receipts for all CBD cosmetics.
- Supplier technical data sheets consistent with actual in-store presentation.
- Dated screenshots of the website and social media as published.
- Inspection action protocol signed by each team member.
- Record of internal training provided, with date and attendees.
- Lawyer contact information, visible to whoever attends the visit.
“The most expensive mistake I see does not occur during the inspection: it occurs the following week, when the report is put in a drawer waiting to see if something happens. The deadlines that start with that report are short and fly by, and well-constructed objections at that moment resolve proceedings that, left to run, end in a final penalty. The best time to call the lawyer is the same day as the visit, with the report on the table and memory fresh. The worst, when the resolution arrives and all that remains is to appeal.”
Frequently Asked Questions About CBD Store Inspections
Can an inspection show up without warning?
Yes. Consumer protection, health authorities, and police can show up without prior notice during business hours, because a store is an establishment open to the public and they do not need judicial authorization to access its public areas. Prior notice exists in other types of actions, but it is not the rule in retail. That is why preparation cannot depend on “tidying everything up when the time comes”: the folder must always be ready.
Am I required to sign the inspection report?
You are not required to, but refusing does not help: the inspector will note the refusal and the report will proceed with the same value. The signature only certifies receipt of the document, not agreement with its content. The correct move is to read it in full, state in the remarks section any discrepancy or nuance, sign as received, and request a copy.
Can they take product from the store?
Yes, by two different means. Regulatory sample collection, which is performed in triplicate (one sample for analysis, one for the administration, and one that remains sealed in your possession for a possible contradictory analysis), and precautionary immobilization or withdrawal of product when a violation is detected, such as ingestible CBD references. Always keep your sample unopened: it is the basis of your technical defense if the official analysis is disputed.
What happens if they ask for analytics and I don’t have them at that moment?
The usual procedure is to formalize a compliance request with a deadline to provide them. It is not the end of the world, but it changes the tone of the action and is reflected in the report. Documentation that appears instantly conveys control; what “is at the accountant’s” conveys the opposite. That is why the inspection folder must be accessible within minutes for any team member, not just the owner.
Can a customer complaint trigger an inspection?
Yes, and it is one of the most frequent origins along with scheduled campaigns that regional authorities periodically direct at specific sectors. A complaints form, a complaint to consumer protection, or even a tip from a competitor can activate the visit. You cannot control who complains; you can control what the inspection finds when it arrives.
Are consumer protection inspection and police action the same thing?
No, and it is worth distinguishing them in the moment. Administrative inspection (consumer protection, health) is documented in a report, operates in the administrative penalty terrain, and its object is labeling, documentation, and product regime. Police action is documented in a police report, usually focuses on flowers and THC, and can have criminal consequences. In both, cooperation and absence of improvised statements apply, but in police action the immediate call to the lawyer is not advisable: it is essential.
How long does it take for the penalty to arrive after the visit?
The penalty is never immediate or automatic. After the report, the administration can file, request remediation, or agree to initiate a sanctioning proceeding, which is notified and opens an objections period, usually ten to fifteen business days as indicated in the notification. Then come the proposed resolution and the resolution, a process measured in months and subject to maximum processing deadlines. Each phase is an opportunity for defense, and the first (initial objections) is the one that resolves the most proceedings.
Can I call my lawyer while the inspector is in the store?
Yes, and it is a good practice that does not bother any professional inspector. You can consult by phone during the visit, especially before signing the report or answering compromising questions about the product regime. What you should not do is use the call to delay or obstruct the action. And whether you call during the visit or not, review of the report with your lawyer should occur that same day.
An inspection is not a lottery: it is an exam with published syllabus. You know who can come, what five blocks they will review, what documents they will request, and what rights you have regarding the report. Everything this article describes can be resolved in a few weeks of orderly work, and from then on the visit stops being a threat to become what it should always be: a formality that your documentation passes on its own.
Sources and rules consulted
- Royal Legislative Decree 1/2007, consolidated text of the General Law for the Defense of Consumers and Users, regarding inspection powers and the penalty regime reformed in 2022.
- Law 17/2011, of July 5, on food safety and nutrition, applicable to the marketing of foods with CBD as unauthorized novel foods.
- Law 39/2015, of October 1, on Common Administrative Procedure, regarding the evidentiary value of reports (art. 77.5), objections, and deadlines of the sanctioning procedure.
- Regulation (EC) 1223/2009, on cosmetic products, regarding CPNP notification, the information file, and labeling of CBD cosmetics.
Would Your Store Pass an Inspection This Week?
Gabriela Sierra, lawyer specializing in CBD companies, audits catalog, labeling, documentation, and staff protocol exactly with the criteria an inspection applies, sets up with you the folder that answers for your business, and accompanies you if the report is already on the table. The difference between a compliance request and a proceeding is prepared before the visit.
Consult on your caseNotice: this article is exclusively informative and educational in nature, reflects the regulatory framework in force on the date of its publication (September 2026), and does not constitute legal advice. Inspection procedures and the penalty regime have particularities depending on the autonomous community and type of action. For an analysis of your specific situation, contact Lawyer Sierra.