• Skip to primary navigation
  • Skip to content
  • Skip to primary sidebar
  • Skip to footer
  • Advertise
  • Business Directory
    • Buyers | Licensees
    • Sellers | Ancillary Businesses
    • Submit Product & Service Press Release
  • CBE Exchange
  • CBE Jobs Exchange
  • Events
  • Featured Videos
  • Product & Service Press Releases
  • Sponsored Polls
  • Webinars
    • Upcoming Webinars
    • Archived Webinars
  • Whitepapers

Cannabis Business Executive - Cannabis and Marijuana industry news

Recreational, Medical, Marijuana, Cannabis, And Hemp News for Cannabis Businesses

  • Follow on Facebook
  • Follow on Twitter
  • Follow on Google+
  • Follow on LinkedIn
  • Subscribe to our RSS feed
Newsletter 2
  • Home
  • Policy & Legal
    • Hemp Business Executive
    • International
      • Canada
      • Mexico
      • Israel
    • US A to F
      • Alabama
      • Alaska
      • Arizona
      • Arkansas
      • California
      • Colorado
      • Connecticut
      • Delaware
      • District of Columbia
      • Florida
    • US G to M
      • Georgia
      • Hawaii
      • Illinois
      • Indiana
      • Idaho
      • Iowa
      • Kansas
      • Kentucky
      • Louisiana
      • Maine
      • Maryland
      • Massachusetts
    • US M to N
      • Michigan
      • Minnesota
      • Mississippi
      • Missouri
      • Montana
      • Nebraska
      • Nevada
      • New Hampshire
      • New Jersey
      • New Mexico
      • New York
      • North Carolina
      • North Dakota
    • US O to V
      • Ohio
      • Oklahoma
      • Oregon
      • Pennsylvania
      • Rhode Island
      • South Carolina
      • South Dakota
      • Tennessee
      • Texas
      • Utah
      • Vermont
    • US V to W
      • Virginia
      • Washington
      • Wisconsin
      • Wyoming
      • Guam
      • Puerto Rico
  • News & Insights
    • Advertising, Marketing, PR & Research
    • Banking, Finance & Real Estate
    • Compliance and Regulations
    • Corporate Social Responsibility
    • Retailers
    • Hemp Business Executive
    • HR and Staffing
    • North Of The Border
    • Industry People/On the Move
    • Packaging and Supplies
    • Press Releases
    • Processors
    • Producers
    • Security Solutions
    • Science and Technology
    • South Of The Border
  • CBE Lists
    • Ancillary Businesses
      • 2019 CBE Ancillary Business Survey CLICK HERE
      • 2018 CBE 155 A/B
      • 2017 CBE 150 A/B
      • 2016 CBE 100 A/B
    • Producers, Processors, Retailers
      • 2017 CBE 200 PPRs
      • 2015 CBE 100 PPRs
    • Industry Women
      • Glass Ceiling Wreckers: 2019 CBE Power Women of Cannabis
      • 2017 CBE 75 Most Important Women
      • 2016 CBE Top 50 Women
      • 2014 CBE Most Influential Women
    • Most Important Companies
      • 2016 CBE 10 Most Important Companies
      • 2014 CBE 10 Most Important Companies
    • Political 100
      • 2017 CBE Political 100
      • 2016 CBE 100 Political
      • 2014 CBE Political 50
    • 2014 CBE 100 Most Important People
    • CBE RFP Hotlists
      • 2014 CBE Lab Testing Services HotList
      • 2016 BHO Extraction Equipment
      • 2016 CBE Supercritical CO2 Extraction Equipment
      • 2016 CBE Security Solutions
      • 2016 Edibles & Infused Products
  • Company Stories
    • Up and Comers
  • Hemp Business Executive
    • Hemp Policy & Legal
    • Hemp Industry News
    • Hemp State Regulatory Agencies
  • Newsletters
    • CBE News & Insights (Formerly CBE Week)
    • CBE Human Capital Management
    • CBE Technology & Solutions
    • CBE Policy and Legal
    • CBE Product and Service Announcements
  • Op-Ed
    • Cartoons
    • The Buck Stops Here
    • Opinions
    • Comments
  • Associations
  • State Regulatory Agencies
    • Marijuana
    • Hemp
  • Contact
  • AB Survey
  • About Us
  • Account
  • Accounting Services
  • Advertise
  • Advertising, PR & Marketing
  • All Cannabis News
  • Ancillary Business Survey 2018
  • Ancillary Business Survey 2019
  • Archived Webinars
  • Associations & Organizations
  • Banking & Payment Processing
  • Better Start for the Glass Ceiling in this Industry, CBE’s Most Influential Women
  • Book Reviews
  • Business Directory
  • Business Directory Introduction
  • Business Directory Listing
  • Business Directory Manage
  • Business Directory Registration Info
  • Business Directory Welcome
  • Call for speakers
  • Cannabis Investments
  • Cart
  • CBE Exchange
  • CBE HotLists
    • CBE Lab Testing Services HotList 2014
  • CBE Lists
  • CBE Political 50
  • CBE Press LLC Privacy Statement
  • CBE Press News
  • Checkout
  • Consulting Services
  • Consumption Gear
  • Contact
  • Contribute
  • Contributors
  • Create Your Product & Service Press Release
  • Creative Submission
  • Cultivation Products & Services
  • Current Poll
  • Edible & Infused Products
  • Editor’s Page
  • Email Whitelisting Instructions
  • Event Listing Questionaire
  • Featured Videos
  • Funding Options
  • Hemp State Regulatory List
  • Home
  • Human Capital Management Newsletters
  • Industry Jobs
  • Join the CBE Business Directory
  • Join the Directory
  • Lab Testing Regulations
  • Lab Testing Services
  • Login
  • Logout
  • Marijuana State Regulatory Contacts
  • Marijuana Tax Facts
  • Media Kit
  • Media Kit
  • Medical Marijuana Qualifying Conditions
  • Members
  • MJ Media Kit
  • Most Popular Stories
  • Most Read Stories
  • New Product & Service Listings Welcome
  • Newsletters
    • Ask CBE
    • CBE Human Capital Management
    • CBE News & Insights (Formerly CBE Week)
    • CBE Policy and Legal
    • CBE Product and Service Announcements
    • CBE Technology & Solutions
  • On the Move
  • Organizations & Associations
  • Packaging & Supplies
  • Password Reset
  • Policy & Legal
  • PPR Survey
  • PR Newswire
  • Product Releases
  • Profile Update
  • Register
  • Security Solutions
  • Software & Technology
  • Sponsored Polls
  • State Cannabis Product Packaging Requirements
  • Terms of Service
  • Thank You
  • The Most Influential People in the Cannabis Industry, The Cannabis Business Executive 100
  • Training & Educational Services
  • Upcoming Webinars
  • User
  • Whitepapers
  • WV Senate passes medical marijuana bill to House
  • Categories
  • Locations
  • My Bookings
You are here: Home / News & Insights / Science and Technology / Cannabis Track and Trace Is A Disaster Waiting to Happen—and Not for the Reasons You Might Think
Franwell Metrc

Cannabis Track and Trace Is A Disaster Waiting to Happen—and Not for the Reasons You Might Think

May 29, 2019 by AggregatedNews Leave a Comment

By Griffen Thorne, Attorney at Harris Bricken

Most states’ regulated cannabis regimes require licensed cannabis companies to use seed-to-sale track-and-trace software. In California, the state has contracted the entire track-and-trace program to the METRC program. The METRC program isn’t yet fully implemented because many operators don’t yet have annual licenses. Our California cannabis attorneys frequently assist clients with track-and-trace compliance and preparation. We know that most California cannabis licensees are just trying to get a handle on how they will use METRC and what that will require from an operational standpoint. What nobody seems to be focusing on is the fact that some apparent oversights in California’s regulations could lead to widespread chaos for operators across the state.

The aspect of track-and-trace with the biggest potential for disaster isn’t the fact that it’s so complex, but rather the fact that loss of access to the system could be devastating for licensees. Each of the three California cannabis agencies’ track-and-trace rules prohibit licensees from transferring cannabis to other licensees in the event of loss of access to the track-and-trace system. This effectively means that businesses have to stop doing business until access is restored—no matter what—and every day waiting could cost thousands of dollars in lost revenues. It doesn’t matter if the loss of access was caused by a licensee, a third party, or even issues with METRC or a third-party application integrated with METRC.

This leads me to a post I wrote several months ago on how data breaches are likely to ravage the cannabis industry. One of the things I talked about is the potential for “ransomware” or similar attacks—situations where hackers encrypt files or even in some cases lock users out of systems and demand money (the ransom) in exchange for giving access back to the user.

If a ransomware or similar attack causes loss of access to a licensee’s track-and-trace software, the licensee will be at the mercy of hackers and won’t be able to conduct business until they either pay the ransom (which may pose legal problems in and of itself, see here) or figure out how to gain back access themselves (which may be impossible). If there’s an attack to or even simply unintended downtime in the METRC system or integrated applications, that could cause chaos for operators across the state.

While loss of access to the entire METRC system could happen, it’s probably not very likely. What is virtually guaranteed to occur is individualized loss of access to the track-and-trace system following routine computer incidents or malicious hacking. There’s not much that the industry can do if METRC is breached and there’s widespread loss of access. But there is a lot that companies can do to protect themselves from individualized breaches or at least minimize the damage caused by breaches—from cyber insurance to breach planning to privacy policy compliance.

In our experience, these are issues that the average cannabis company just isn’t even considering. Because of the expense and difficulty of complying with cannabis laws, data make cannabis companies take a very hard look at how they operate.

Cannabis companies have a lot more to lose than regular companies given the federal status of cannabis (would cannabis companies want to report data breaches to the FBI?) and the fact that data breaches can already be tremendously expensive for companies that don’t have to spend tens (or hundreds) of thousands of dollars on permits and deal with Internal Revenue Code section 280E. Cannabis companies should consult with their counsel to figure out solid ways to protect themselves in the event of loss of access to the track-and-trace system or from other data security problems.

Re-published with the permission of Harris Bricken and The Canna Law Blog

Contextual Links

Filed Under: Science and Technology Tagged With: california cannabis tracking, IRS 280E tax code, METRC, ransomware

Primary Sidebar

Ad: Sidebar 1

Featured Video

Associations & Organizations

clearing div

Ad: Sidebar 2

Business Directory

Ad: Skyscraper 1

CBE Jobs Exchange


Featured Jobs
Go
Post a Job
More jobs
Powered by CBEJobsExchange.com

RSS Recent Jobs

  • Brand & Show Marketing Director - Marijuana Business Daily - Lakewood, CO
  • GC/MS Scientist - VRS Recruitment - , OR
  • Brand & Show Marketing Director - Marijuana Business Daily - Lakewood, CO

Product & Service Press Releases

Ad: Sidebar 3

CBE Events

Ad: Sidebar 4

State Regulatory Agencies

Ad: Skyscraper 2

Webinars

Ad: Sidebar 5

Associations & Organizations

Ad: Sidebar 6

Featured Video

Ad: Skyscraper 3

Business Directory

Ad: Sidebar 7

CBE Jobs Exchange

Ad: Sidebar 8

CBE Events

Ad: Skyscraper 4

Footer

  • Home
  • About Us
  • Advertise
  • Contact
  • CBE Press LLC Privacy Statement
  • Contribute
  • Contributors
  • Newsletters
  • Terms of Service
  • Contributor Login
  • Follow on Facebook
  • Follow on Twitter
  • Follow on Google+
  • Follow on LinkedIn
  • Subscribe to our RSS feed
Newsletter 2

© Copyright 2020 CBE PRESS LLC. - All Rights Reserved. Cannabis Business Executive Is A Trademark Of CBE PRESS LLC. · All Rights Reserved · And Our Sitemap · All Logos & Trademarks Belong To Their Respective Owners·