It is. Enforcement, though, is another matter. The feds don't have the time to care about individual users. I live in WA state, and typically the feds will only go after medical dispensaries that are seriously breaking their own laws — selling green cards to people without ailments, for instance.