they set rules, consider new conditions for which mmj would be legal (though they never have) and provide patient/caregiver status confirmation to law enforcement. how they do this with less than half the patients entered in the system is a mystery!