Cal. Health & Safety Code § 123315
(a) The department, under any program established pursuant to this article, shall ensure that, at a minimum, the authorized vendor shall do all of the following:
(6) Maintain for a period of at least three years records that shall include, but not be limited to, all of the following: