Washington Marijuana Businesses: Watch Out for Cyber Attacks!

One of our Washington cannabis clients recently learned that its employee was the target of a cybersecurity attack. The employee, who was following instructions via a messaging app, wired money to an individual at the request of who he believed to be an owner of the company. That was not the case! The employee had fallen…

Read more
A New California Law Will Affect Marijuana and Hemp Businesses Across the Nation

We’ve been writing a lot lately about recent major changes in federal hemp laws that will likely affect every hemp company in the United States (see here, here, and here). While we’re on the topic of dramatic legal changes, it’s probably a good idea to talk about a California privacy law that’s about to take…

Read more
Cannabis Track and Trace Is A Disaster Waiting to Happen—and Not for the Reasons You Might Think

Most states’ regulated cannabis regimes require licensed cannabis companies to use seed-to-sale track-and-trace software. In California, the state has contracted the entire track-and-trace program to the METRC program. The METRC program isn’t yet fully implemented because many operators don’t yet have annual licenses. Our California cannabis attorneys frequently assist clients with track-and-trace compliance and preparation….

Read more
Selling Hemp Products to Europe? Welcome to the GDPR Nightmare.

Ever since the passage of the 2018 Farm Bill, our hemp lawyers have been getting a barrage of questions about the lawful status of hemp and hemp-derived cannabidiol (“Hemp CBD”) in the United States. The hemp laws appear to be changing in favor of a pro-hemp marketplace, but at a much slower pace than the…

Read more
Data Breaches are Coming and Will Wreak Havoc in the Cannabis Industry

Virtually everyone knows about breaches of companies like Equifax. Massive breaches have happened to established, mega-companies who still took major reputational and monetary hits after they were breached. What many people don’t realize is that it doesn’t take a major breach to devastate a business. We don’t want to be dramatic, but we also don’t…

Read more
California Cannabis: Does Your Business Have a Website? If So, You Probably Need a Privacy Policy.
No longer optional for your canna business website. Unless you’ve been living under a rock for the past few months, you’ve probably read about the host of sweeping new laws in California, like its new Internet of Things law, cannabis privacy law, or net neutrality law, to name just... Read more
Breaking News: California Passes First Internet of Things (“IoT”) Law
Cannabis things included. Two years ago, we published a series of posts about the cannabis industry’s embrace of the Internet of Things (“IoT”)—the network of physical objects connected through the Internet—for use in everything from garden sensors to dispensers. In that same series, we also discussed some of the... Read more
Cannabis Cybersecurity: Information Security Standards in Oregon
Last week we discussed the data breach notification laws with which cannabis companies doing business in Oregon must comply following a cyber intrusion. Today, we discuss the safeguards these companies must adopt to protect the security, confidentiality and integrity of customers and employee (collectively, “Consumer”)’s personal information, who reside... Read more
Oregon Cannabis: Data Breach Notification Laws 101
A few weeks ago, we mentioned that cannabis companies that fall victim to a data breach are required, under state law, to inform employees and customers whose data was compromised by the intrusion. However, not every stolen piece of information demands notification. This post further dives into these laws—all... Read more
( ) ( ) ( ) ( ) ( ) ( ) ( ) ( )