It wasn’t that long ago that cannabis was underground, sometimes literally, and operators protected what was theirs any way they knew how. Before legalization, cannabis operators needed to secure their plants, cash, supplies and equipment not just from people who wanted to steal them, but also from law enforcement. The legacy cannabis market is now transitioning into a legal one, and licensed operators are joining the industry at an incredible rate, but security is still part of the success equation. Like before, operators need to protect plants, products, equipment and cash, but they now also need to protect records, privacy and data, and do so in a manner that complies with state regulations.
Cannabis regulatory authorities set security guidelines that cannabis business owners must follow in order to obtain and renew operational licenses. For instance, there are state-specific security regulations regarding video surveillance, camera placement, safes, ID verification, and more. While security measures help protect the business, they also protect the public. It’s a win-win for everyone involved. Here are five best practices and techniques to protect cash, records, products and people.
Hybrid cloud storage
State regulations call for reliable video surveillance footage that is accessible, in most cases, 24/7 and upon demand by cannabis regulatory authorities and local law enforcement acting within the limits of their jurisdiction. SecurityInfoWatch.com reports that video data is the industry’s next big investment, meaning there will be an increased demand and need to store video surveillance footage. Most states require video surveillance footage to be retained for a specific amount of time, often 45-90 days or longer if there is an ongoing investigation or case that requires the footage. While some businesses only retain video data for the state-required length of time, others choose to keep it longer.
Storing data on-site can become expensive and precarious. Best practices call for a hybrid cloud storage solution model as it provides on-site and both public and private cloud data storage solutions. This model provides users with the ability to choose which files are stored on-site and which files live in the cloud. Doing so improves file accessibility without impacting or compromising on-premises storage. In addition, it’s helpful to have two methods of digitizing data, for safety’s sake. In the event an on-site storage method crashes—though hopefully this won’t ever happen—there’s a version available off-site via the cloud. That said, with cloud-based storage solutions come cybersecurity threats that must be managed.
Due to the ongoing COVID-19 pandemic, more businesses are online than ever before. Unsurprisingly, cyberthreats are on an upward trend, including in the cannabis industry. Earlier this year, MJBizDaily reported that a data breach exposed personal information of current and former employees of Aurora Cannabis. The incident involved “unauthorized parties [accessing] data in (Microsoft cloud software) SharePoint and OneDrive”. Although this breach involved only employees, confidential customer information is also at risk of being compromised during a data breach.
On a separate occasion, an unsecured Amazon S3 data storage bucket caused a large-scale database breach that impacted almost 30,000 people across the industry, according to the National Cannabis Industry Association. The breach included scanned versions of government-issued ID cards, purchase dates, customer history and purchase quantities. Unlike the Aurora Cannabis breach, this one included customer data.
Just like other more established industries, the cannabis industry needs to protect and secure confidential data. If you don’t have a cybersecurity expert on your team, consider hiring a consultant to evaluate your risk or partnering with a credible cybersecurity technology company to implement proactive solutions. Before signing a contract, do your due diligence. Does the consultant and/or technology company understand the compliance regulations specific to the cannabis industry? Do their solutions meet the regulations in the state(s) where your facility operates? Taking the time to protect your company’s data before a breach occurs is proactive, smart business.
Smart safes help secure cash handling, which given the difficult banking environment for cannabis companies, means they’re on the list of best practice security technology products. What is a smart safe? A smart safe is a device that securely accepts, validates, records and stores cash and connects to the other cash management technology solutions such as point of sale systems. They connect to the internet and provide off-site stakeholders visibility into a facility’s cash position.
A high-speed smart safe counts cash by hand faster than a human and is an overall more secure way to deliver cash bank deposits. At the end of the night, making a deposit at a physical bank location can be dangerous, exposing your cash and the individuals responsible for making the deposit to unsecured threats. Using a smart safe reduces that threat and also helps cannabis operators comply with financial recordkeeping and documentation requirements. Due to federal cannabis prohibition, many cannabis businesses lack enough insurance to fully cover their exposure to cash theft, which has led to a trending industry-wide investment in smart safes.
Advanced access control
Best practice access control means more than a ring of keys hanging off the facility manager’s belt. Advanced access control gives cannabis business owners and managers the ability to manage employee access remotely via the cloud. This feature can limit access areas within a facility, enabling an individual to revoke access instantly from a remote location making it a useful tool in the event of a facility lockdown or emergency. A mobile app and/or website can be used to lock or unlock secure doors, monitor access in real time and export access logs.
Advanced access control devices aren’t a standard in the industry yet. Although many state regulators don’t require cannabis businesses to utilize advanced electronic access control, using this technology is a best practice and may be required in the future.
Understanding the ramifications and keeping up with state-mandated compliance is challenging. While state regulations can be found online, they’re often in pieces, leaving operators unsure about whether or not they have them all. Once an operator is confident that they have the most current version of all the laws, rules, and regulations that apply to their cannabis business, making way through the dense legal jargon can be exhausting. Even after multiple readings, it can be unclear about how to apply these guidelines to the operator’s cannabis business, which is one reason cannabis businesses work with a trusted legal counsel to meet compliance requirements. For trusted advisors and cannabis business licensees and operators alike, cannabis compliance software solutions are designed to not just check boxes for a cannabis business, but to help everyone involved understand how the regulations apply to the operation. These solutions improve accessibility so that employees at all organizational levels understand the rules and requirements of their position and the products they work with.
In addition, compliance software can help licensees and operators establish and implement best practice SOPs to meet regulatory requirements. Because the cannabis industry is young and many operators are moving fast, many cannabis businesses are vulnerable to security breaches and threats. Prioritizing security and compliance can help cannabis leaders protect against potential threats. Investing in the latest and most innovative security technology solutions—beyond what is required by state regulations—can help operators outsmart those who seek to steal from them and position their companies as industry leaders that prioritize safety and compliance, protecting not just cash and products, but the people who work in their facilities and the customers who purchase their products.
The cannabis industry’s advancement towards legalization continues to dominate national headlines, from the stance of incoming Attorney General Merrick Garland to deprioritize enforcement of low-level cannabis crimes, Senate Majority Leader Chuck Schumer’s continued advocacy, to the recent passing of legislation in New York, New Mexico and Virginia (the first in the South) to authorize adult-use cannabis. While these updates are likely to intrigue customers and investors alike, they are also sure to draw the attention of cyber criminals who could look at the relative youth of the industry, as well as its rapid growth, as a prime target of opportunity for nefarious acts.
In order to understand risk mitigation best practices across a wide spectrum of private sector industries, this article will first identify the current security environment in order to understand the threats, briefly highlight specific case studies and assess the risks and identify methods that individual organizations, as well as the cannabis industry as a whole, can take action to enhance security and preparedness and to develop resiliency against future attacks.
Understanding the Threats
For an industry that has operated in a largely cash-based system for much of its existence, the idea of security is not foreign. Typically, these concerns focused on physical security implementation. The topic has received plenty of coverage, including a recent article in this journal articulating Important Security Considerations When Designing Cannabis Facilities. While an audit of physical security measures is a valuable part to any all-hazards threat assessment, securing a growing online network – from email to online finances to connected devices within cannabis facilities – can pose more unfamiliar challenges. When consulted for this article, Patten Wood, a former VP of marketing for a prominent west-coast cannabis retail brand noted: “While the topic of cybersecurity is critically important to customers, businesses, and the industry at large, it isn’t top of mind for many of the cannabis companies that I’ve experienced.” Understanding what risks are present is the first step to mitigating them, so we must first discuss several common cyber threats for the cannabis industry.
Phishing: Phishing happens when cybercriminals impersonate a trusted individual or entity, typically through email. The goal in this instance is to get the target to share confidential information or download software that can allow unauthorized access into an organization’s network. Phishing is one of the most common types of cyberattacks as it is relatively easy to conduct and surprisingly effective.
Ransomware Attacks: Ransomware attacks are used to gain access to a computer network and then lock and encrypt either the entire system or certain sets of high-value files, which can compromise important business information, and impact client and vendor privacy. A ransom is then demanded for restoring access, but paying the ransom comes with its own risk as it doesn’t guarantee the files will be restored.
Cyber Extortion: Similar to ransomware attacks in their design, cyber extortion typically deals with a threat of leaking personal information and will generally demand payment in cryptocurrency in order to maintain their anonymity.
Remote Access Threats: As 2020 has forced organizations to rethink how they conduct business and shift to more remote operations than they had in the past, it can open up several new threats. According to a survey by IT social network SpiceWorks.com, six out of every ten organizations allow their employees to connect their company-issued devices to public Wi-Fi networks. Utilizing unsecured Wi-Fi networks opens the user up to man-in-the-middle attacks, allowing hackers to intercept company data. Unsecure Wi-Fi also brings the threat of malware distribution. An additional consideration with remote workers is the uptick in cyber attacks against remote access software referred to as remote desktop protocol (RDP) attacks. According to Atlas VPN, RDP attacks skyrocketed 241% in 2020 and we’ve seen numerous RDP attacks against critical infrastructure throughout the pandemic and across all industries.
Internet of Things (IoT) Leaks: With IoT devices running everything from security systems to automated growing operations, the convenience has been a huge boost for the industry. Unfortunately, many IoT devices don’t have sophisticated built-in security. Another common problem is the tendency of users to keep default passwords upon installation, which can make devices easy for cyber criminals to access. Once they are inside the system, malware can easily be installed, and the actors can move laterally throughout the network.
Personal and Medical Record Security: Many cyberattacks expose some level of personal data, whether that be customer, employee or vendor information. An extra consideration for retail operations that either treat medical patients, or medical and adult-use customers, is the additional information they must store about their clients. Medical facilities will maintain protected health information (PHI), which are much more valuable on the dark web than personally identifiable information (PII). But even adult use facilities may keep government-issued ID or other additional information above that of a typical retailer, which makes the potential value of their information much more intriguing for a cybercriminal.
Assessing the Risks
Depending on where your organization lies in the seed to sale chain, you will have different levels of risk for various types of attacks. We briefly discussed ransomware attacks earlier. Ransoms can range widely depending on the size of the organization that is attacked, but the ransom alone isn’t the only risk consideration. Businesses must also factor in the cost of downtime (an average of 18 days in 2020) caused by the ransomware when evaluating the impact to business operations, as well as reputation. While small – medium businesses are absolutely at risk, especially given their relative lack of cybersecurity resources and sophistication, a recent trend involves “Big Game Hunting” where cybercriminals are targeting larger organizations with the potential for bigger paydays. Criminals understand that big business can rarely afford major delays, and may be more able and willing to pay, and pay big, for a return to normal operations.
Below are several examples of attacks which have either directly impacted the cannabis industry, or have valuable lessons the industry can learn from.
GrowDiaries: In October 2020 researcher Bob Diachenko discovered that 3.4 million records including passwords, posts, emails and IP addresses were exposed after two open-source application Kibana apps were left exposed online. As a platform for cannabis growers around the world (who are not all growing legally), this type of exposure puts the community at great risk, and can lower user confidence in the product, as well as putting them at personal risk of harm or legal ramifications. The applications being left open is a prime example of either a lack of good cybersecurity policies, or not following through on those policies.
Aurora Cannabis: On December 25th, 2020 Canadian company Aurora Cannabis suffered a data breach when SharePoint and OneDrive were illegally accessed. Included in the data that was compromised was credit card information, government identification, home addresses and banking details. The access point coming through Microsoft cloud software is a prime example of some of the challenges facing businesses who have an increasingly remote workforce yet still need that workforce to access critical (and usually highly sensitive) information.
THSuite: A database owned by seed to sale Point-Of-Sale (POS) software provider THSuite was discovered by researchers in December 2019. The database contained PHI/PII for 30,000 people, with over 85,000 files being exposed. The information that was left accessible included scanned government IDs, personal contact information and medical ID numbers. Clearly this gets into HIPAA territory, which can result in fines of up to $50,000 for every exposed record.
On an organizational level, employee training, password hygiene and malware protection are some of the basic and most important steps that should be taken by all organizations. But, if “knowledge is power,” the best defense for any organization against cyber threats is a well-informed organization- including leadership down to the front-line employees. Excellent tools to assist in this are Information Sharing & Analysis Centers/Organizations (ISACs/ISAOs). ISACs were established under a presidential directive in 1998 to enable critical infrastructure owners and operators to share cyber threat information and best practices. The National Council of ISACs currently has over 20 member ISACs including Real Estate, Water, Automotive and Energy. ISAOs were created by a 2015 executive order to encourage cyber threat information sharing within private industry sectors that fall outside of those listed as “critical infrastructure”. Christy Coffey, vice president of operations at the Maritime and Port Security ISAO (MPS-ISAO) says information sharing enabled by the executive order is critical. “We need to accelerate private sector information sharing, and I believe that the ISAO is the vehicle.”
According to Michael Echols, CEO of the International Association of Certified ISAO’s (IACI) at the Kennedy Space Center, security experts have long understood that threat information sharing can allow for better situational awareness and help organizations better identify common threats and ways to address them. “On the other side, hackers in a very documented way are already teaming up and sharing information on new approaches and opportunities to bring more value (to their efforts).” The ongoing crisis surrounding the Microsoft Exchange Server Vulnerability demonstrates that different cybercriminal groups will work simultaneously to abuse system flaws. As of March 5th it was reported that at least 30,000 organizations in the U.S. – and hundreds of thousands worldwide – have backdoors installed which makes them vulnerable to future attacks, including ransomware.
Below are several links to recent products that have been shared by various ISACs/ISAOs, which are provided as an example of the type of information that is commonly shared via these organizations.
If organizations are interested in learning more about enhancing their cybersecurity resiliency through private-sector led information sharing, please reach out to the newly formed Cannabis ISAO at email@example.com
The drug war has harmed communities of color since its inception. For decades and decades, BIPOC (Black, Indigenous, and other People of Color) have been nearly six times more likely to be arrested for drug use than White Americans, despite similar rates of use.
Over the years that legalized cannabis has proliferated across the country, the same trends of market consolidation have emerged in every state that has legalized the plant. BIPOC communities already impacted by the drug war have less access to capital and therefore less access to the cannabis industry. Cannabis market consolidation has always led to white people taking a greater market share while BIPOC communities are left behind.
The legal cannabis industry currently lacks representation of BIPOC executives, business owners, and professionals. Ernest Toney, former global marketing and partnerships manager at Marijuana Business Daily, wants to change that. He founded the BIPOC Cannabis Business Network – a membership community that is working to make the cannabis industry more accessible and profitable for BIPOC professionals and business owners.
BIPOCANN is a place to meet cannabis industry leaders, a place to exchange goods, services and ideas that promote BIPOC economic growth in cannabis, an innovation hub for unique voices and perspectives, and it’s all BIPOC-owned and managed.
In this interview, we sit down with Ernest Toney to hear about BIPOCANN and ask him some questions about what the future of the cannabis industry could look like.
Cannabis Industry Journal: Tell me about your background- how did you get involved in the cannabis industry?
Ernest Toney: I grew up in Virginia and went to James Madison University where I studied kinesiology, and sports management in graduate school. That led me to pursue a career in sports administration, beginning as a sales and marketing director for a large YMCA in the southwest, followed by a stint as a sales consultant for the Arizona Diamondbacks in Major League Baseball. Immediately prior to joining the cannabis industry, I worked at USA Ultimate – the national governing body for the niche sport of ultimate (frisbee) in the United States. During that time, I managed and scaled adult programs and events across the country. A big part of my job required collaborating with national stakeholders and creating and enforcing policies to grow the sport by making it more accessible to diverse demographics. We also worked hard to increase the commercial visibility of the sport through mainstream media, including ESPN, with gender equity being a major focus area. It was cool because looking back, I learned a lot of things during that five-year period that is directly applicable to the work I’m doing to support the cannabis industry.
But my interest in the cannabis industry became strong when I moved to Denver in 2011, a year before Amendment 64 passed. When Colorado became the first adult use cannabis market in the USA, it was an exciting time. I have always been curious about economics and how policies can impact people’s lives. I was interested in what was going to happen when the new market opened.
Early on, I followed the industry trends very closely. Living in downtown Denver, I saw firsthand the effects the cannabis industry was having on day-to-day life, like increased tourism, a housing market boom, a lot of new start-ups, dispensaries opening everywhere. It was just something I knew I wanted to learn more about.
Around 2016, I started making industry connections, but didn’t pursue opportunities until a few years later. Eventually, I was hired in 2018 by MJBizDaily to focus on new business initiatives. Some of my past successes with scaling programs, national and international event management, and community-building aligned with what they were looking for.
I started as the company’s first international marketing manager. In that role, I was responsible for driving marketing campaigns to increase the company’s global readership, event registrations, and business conference presence in foreign markets. After the first year, I transitioned to identify and manage marketing partnerships for the company – which included international and domestic media, event, and affiliate partnerships within and outside of cannabis.
I felt compelled to make a change amidst the social unrest this summer. I was doing my own protesting and volunteer advocacy in Denver, but started to see more broadly, in the cannabis industry, that cannabis executives and companies were bringing attention to the fact that the War On Drugs has been problematic for minorities and communities of color. There was greater talk about social equity programs and how they are not as effective as they should be. There was greater attention to the fact that over 40,000 people are still incarcerated for the plant that others are profiting from – and that the people behind bars are predominantly coming from communities of color. I was in a position that afforded me the opportunity to see what the composition of the global cannabis industry looked like, and I could see minority representation was lacking in business ownership, leadership positions, and more.
I thought – what is the best way for me to use my talents, insights, and knowledge to affect and change this narrative? Ultimately, I decided to start my own business. Not only was this an opportunity for me to “walk the walk,” being a black man starting a business in this industry where there is a lack of black ownership, but more importantly I was uniquely positioned to be able to educate and let people know about the opportunities to be a part of the booming industry. So, I did some brainstorming and came up with a company, which is called BIPOCANN and it stands for connecting BIPOC communities to the cannabis industry.
The work I have been doing for the last quarter includes directly recruiting people into the industry. If you are curious and want to learn more about the industry, then BIPOCANN can be the entry point. We figure out what your goals are and use the network and our resources to get you connected and figure out where you want to go. Likewise, if you are a service provider, like a graphic designer, accountant, marketer or business owner for example, that sees opportunities for your business to play a role and support it from an ancillary standpoint, BIPOCANN can be an entry point for you too.
The other component to it is working with existing businesses who are trying to make the industry more accessible. I work with existing companies and brands to create platforms that amplify voices and make BIPOC folks more visible, seen and heard within the cannabis industry. We are also helping businesses increase their profitability through diversification tactics and marketing tactics that contribute to their bottom line.
CIJ: Tell me about BIPOCANN- what is it, what are your goals with this project and how has it been received so far?
Ernest: The prohibition of cannabis has disproportionately impacted communities of color in the Americas. I alluded to this earlier, but there are more than 40,000 people behind bars in the U.S. for cannabis possession and use. There’s evidence suggesting that Black Americans are up to six times more likely to get arrested for cannabis use than White Americans despite use rates being the same. And when you look at the makeup of the professional industry, there is poor representation of business ownership by people of color. The Cannabis Impact Fund references that only 4.3% of dispensaries are Black or Latinx-owned. These problems intersect in a lot of ways.
BIPOCANN is a small business working to make the cannabis industry more accessible and profitable for BIPOC professionals and business owners. Now, I know that one company cannot change 100 years of cannabis prohibition and how policy works. But if you want to make this industry more accessible, inclusive, and profitable for those who do not have the access then there are a lot of levers to pull. Policy is one. But BIPOCANN is using more direct strategies. We actively recruit people to come in and be a part of this industry, through employment, entrepreneurship, consulting, and collaborations.
We have also created the BIPOC Cannabis Business Network, a community where members can exchange services, network, and collaborate. It’s all about creating more opportunities for BIPOC professionals and business owners, and it’s a safe space to share your experiences and to ideate. Similar to your Cannabis Quality Virtual Conference, where there was a dedicated space for BIPOC folks to be seen and heard and tell their story through your virtual panels, we use our resources and network to help advocates for equity and access be seen, heard, and find opportunities to thrive as a business owner or professional.
CIJ: How do you hope BIPOCANN will be embraced by the cannabis community?
Ernest: I think it has been received well in its first quarter of business. We have had opportunities to share our story across a lot of platforms, including multiple cannabis industry conferences, podcasts, and interviews with varied media outlets. We are in startup mode, so currently we are about building a brand, being seen, and helping people understand what we are trying to achieve. We are working towards that right now. We have had some success and folks are supporting our vision and goals.
I am hoping the cannabis industry will look at BIPOCANN as another important resource within the social equity, business development, and networking landscape. I don’t want to be seen as a competitor to the organizations and individuals who have been doing similar work in this space, for much longer, but as an ally. Some of our approaches to bring new people into the industry will include strategically aligning communities and markets where we have strong ties – such as state governments, national nonprofits, and global cannabis networks.
CIJ: Where do you see the cannabis industry making progress with respect to diversity and including people of color?
Ernest: When I look at the types of conversations and coverage the industry is having, even compared to last year, it seems like more conferences, media entities, brands, and individual leaders are tuned in and trying to figure out how they can contribute to making this industry better, more equitable and more accessible. I am seeing a lot of more attention, attempts to understand where the gaps are and what to do about it.
When I take a step back to think of all the virtual conferences that have made dedicated conference tracks or even entire programs – like the National Association of Cannabis Business’ Social Equity Conference, the Emerge Canna Conference, the Cannabis Sustainability Symposium, and the Cannabis Industry Journal’s post-election social justice panel – or weekly segments from Black leaders like Dasheeda Dawson (She Blaze) and Tahir Johnson (The Cannabis Diversity Report) — those are good signs. They are creating opportunities for voices representing underserved communities in cannabis to share their perspectives and be advocates for change.
But there is still much to do and that includes greater education about the realities, histories, and challenges BIPOC and other minority communities are facing. Going back to the NACB, they recently drafted a social equity standard for state legislatures to use as a baseline for crafting policies and provisions for social equity programs. That and resources from organizations like the Minority Cannabis Business Association, Supernova Women, Cannaclusive, Minorities for Medical Marijuana, and the Massachusetts Recreational Consumer Council, for example are some useful resources for the industry.
Wana Brands is also continuing to do good work, and it was exciting to see them become the first sponsor of the inaugural Black CannaConference by the Black CannaBusiness Magazine. That was a great example of an industry leader using their dollars, marketing resources, and company values to support an event specifically dedicated to creating, developing, and enhancing Black entrepreneurs and businesses in the cannabis industry.
“It is hard to know what even a year from now will look like.”On the policy front, we just saw on election day cannabis having a ton of success at the polls, passing in every single state where there was a ballot measure.
Arizona did a good job with having social equity provisions directly included in the language on their ballot measure. I think for the states that have yet to draft a social equity program, they can look at what has worked well in some other states and also look at what has not worked well, like loopholes that invite predatory behaviors.
I’m excited to see that Governor Ralph Northam and the Virginia Marijuana Legalization Working Group are already identifying the best ways to make a recreational market a beneficial and sustainable one, and tackling how to incorporate social equity, racial equity, and economic equity into a future legalization bill. I am looking forward to learning more after an upcoming meeting with a Working Group member. Eventually, I hope to contribute towards any social equity efforts that will benefit my home state and hometown (a high poverty community that has been at the crossroads of America’s major civil rights movements, with a correctional facility that houses an inmate population equivalent to nearly 10% of the town population).
CIJ: Where do you see the industry moving in the next five years?
Ernest: Ha-ha! It is hard to know what even a year from now will look like.
Just this week the United Nations rescheduled cannabis, which is a big deal! We also saw the U.S. House of Representatives pass the MORE Act. We are inching closer towards federal legalization in the US and I think it will happen within that five-year timeframe, and it will be contentious. There will be compromises on things some folks don’t want compromises on, there will be more big money influencing the outcomes of the industry, and there will be unforeseen or unintended consequences to whatever the federal legislation looks like. I recently moderated a panel of social equity license holders, who felt that federal legalization would harm the disproportionately impacted areas (by the War on Drugs) even more! Their preference was to see cannabis de-scheduled and remain under state control.
I think federal legalization will bring another wave of major mergers and acquisitions, similar to what the Canadian market experienced in 2019, benefiting big business over small business.“We need folks who are educated and informed about these matters to be at the policymaking level to have a fighting chance.”
CIJ: Do you think we can change that?
Ernest: There are so many things at play. The legislators need to have diverse perspectives and representation from the folks in the industry, especially people of color who can speak to the impact that a century of prohibition policies have had on their communities. Those voices and stories need to be heard, but that type of representation is grossly lacking on Capitol Hill…which is all the more reason we need leaders from the aforementioned communities to have a seat at the table when decisions are made.
I say that because a lot of time there are unforeseen consequences when policies are created, so decision makers at the federal level can learn from those of us already doing the work on the local level. I recently had a conversation with a former journalist and colleague who is currently in a cannabis regulatory role. We were talking about how policy and operations intersect with social equity. He made the points that “many markets implement license caps, which are intended to prevent oversaturation of cannabis business (the idea being that density of outlets impacts use rates, and particularly youth use rates); in theory, that’s a good policy – but it comes with very real consequences for social equity applicants (because those licenses often go to the wealthiest applicants). License caps also artificially inflate the cost of those licenses (for a transfer of ownership), which also harms social equity applicants. Lotteries are also generally the result of policy and usually have disastrous results for the social equity applicant.”
So yeah – the rare opportunity to define a new industry that doesn’t just do business as usual, that can right its historical wrongs, and that will reward the communities that have been most harmed by cannabis enforcement, is now. And we need folks who are educated and informed about these matters to be at the policymaking level to have a fighting chance. The optimist in me says “we can do it!” The pessimist in me reminds me that it is 2020 and people still believe the Earth is flat. I’ll keep pushing for change, but I also won’t be surprised if this perfect opportunity to get it right goes wrong.
CIJ: How can people get involved in BIPOCANN?
Ernest: The best way to get involved is to visit www.bipocann.com and support our efforts by becoming an individual member or business member. Not only does that give you the opportunity to connect directly with other members in our business network, but it gives you the chance to be the first to be notified about the latest projects, events, and opportunities we’re working on to change the industry, how we can. By joining, you also directly support BIPOCANN’s goals, contribute to the operating budget of a black-owned business in cannabis, and support the nonprofit partners who we allocate a percentage of monthly sales towards.
You can also get involved by subscribing to our monthly newsletter through the website or by following our social media accounts @bipocann. We are also available for speaking, media, or consulting projects that support social equity, diversity, and inclusion in cannabis. For those types of inquiries, please contact firstname.lastname@example.org.
As of March 2, right before the UN punted on reclassification of cannabis at the international level for another nine months, the UK government eased import restrictions for people in search of the drug.
Specifically, licensed wholesalers will now be able to import larger quantities of cannabis-based products and hold supplies for future use by patients with prescriptions.
Previous restrictions meant that patients had to wait for weeks or months to obtain the still highly expensive drugs (an import license from Canada can take 8 weeks).
Essentially, while welcome, this also means that every single potential cannabis patient who does not suffer from epilepsy or MS must import, via private means, a drug that is still unbelievably expensive. Those with the means are subjected to high prices and bureaucratic complications (like a regular thirty-day review of the prescription).
Cynical Cannabis Moves
While those who can afford to pay approximately $1,000 a month now have options, this is not exactly cannabis reform that is inclusive. Indeed, the entire conversation appears to be about making sure that private companies make profits rather than scientific advancement.
While the government is planning to engage with patients and to participate in trials to figure out how the NHS can utilize the drug, this is little help for sick patients now. Particularly in the middle of a global pandemic and almost as surely, global recession.
Soundbites by government ministers are also putting a cheery face on a situation that is dire, not just because of access but because of cost.
Per British Health and Social Care Secretary Matt Hancock, “We still have a long way to go. We need more research into the quality and safety of these medicines, and to do all we can to cut down the costs and remove barriers so that, when appropriate, patients can access it, including on the NHS.”
As recent events, including not only Brexit and cannabis reform, but indeed the now global pandemic have proven, healthcare systems globally are not up to the kinds of threats now thrown in their direction. Designed mostly after WWII, with a far different tax and economic base to support them, as well as far different demographics, most are also clearly not up to the rigors of the 21st century.
It is not just the supply chains for cannabis or even pharmaceuticals that are in the mix of course. Food security in the UK is now also, according to one international expert, Tim Lang, World Health Organization advisor, “in serious trouble.”
The Covid-19 pandemic, in other words, caught the world with its pants down, despite numerous warnings and even models predicting almost exactly this situation as recently as last year. Just like the AIDS crisis. This time, however, there are options available.
The question is, will governments and international organizations rise to the challenge to meet them?
A New World Drug Order
The British, while behind the Germans, are unfortunately, delaying a decision which has been already extended for too long. Relaxing drug import rules are one thing. But recommendations about the uses of the drug are still very narrow in the UK (even more stringent than in Germany).
Beyond that, overall food and drug security (supply chain) issues are in the room and for drugs far from cannabis. As many have begun to point out, cannabis is now prescribed for patients (and in many countries) and these patients are the most vulnerable to a virus like Covid-19. They are vulnerable not just because their immune systems are weak, but frequently because they are also economically exposed.
As the world battles another retrovirus pandemic, perhaps it is time that the lessons of the past be learned by those with the power to make decisions that will ultimately affect billions of people globally.
Cannabis producers are making large investments in new technologies to improve their plant varieties, production know-how and product formulations. At the same time, producers are working hard to create and promote more compelling, top-of-mind brand identities for their improved products. The series concludes with a 9-point outline of specific steps cannabis producers need to consider taking to protect their key intellectual property assets.
The value of these investments cannot be realized if competitors are allowed to copy and exploit the producer’s successes. Canada’s intellectual property laws can and should be used to protect cannabis producers from such predation. Invoking Canada’s laws to this end is not difficult and does not have to be expensive. It does, however, require specific, deliberate and early action.
This series of articles outlines the principal means of protecting intellectual property rights in the core technologies and marketing programs of cannabis companies. The series also highlights what any cannabis company must do to ensure that its own activities do not run afoul of another’s rights. No company wants to begin a new venture only to face a lawsuit for intellectual property infringement.
The series concludes with a 9-point outline of specific steps cannabis producers need to consider taking to protect their key intellectual property assets.
Trade Secrets: Protection For Confidential Know How
A trade secret is specific, commercially valuable information and know-how that is kept confidential within the company and cannot generally be reversed-engineered by outsiders. A trade secret provides protection over any type of information or know-how and is not subject to any expiry date. Trade secret protection is lost only when the information or know-how becomes available to the public.
As a best practice, defining the trade secret in a confidential document can be useful as a way of restricting access to the secretCannabis producers generate all kinds of valuable know-how that cannot be appreciated simply from an inspection of the vended product. Examples would include methods of crossbreeding, cultivation, harvesting, extraction and processing. Customer lists and other internal business structures and information may also qualify as trade secrets.
There are no statutory pre-conditions that must be met to obtain a trade secret. A trade secret is acquired simply upon the generation of valuable information or know-how that is kept confidential. As a best practice, defining the trade secret in a confidential document can be useful as a way of restricting access to the secret, and as evidence in proceedings as to the scope of the trade secret (an issue that is frequently in dispute in such cases).
For the trade secret to be maintained, the producer will need to take steps to ensure that access to the know-how and associated documents is restricted only to those who need to know the secret for purposes of carrying out their functions at the company. All personnel with access to the trade secret will need to be bound to confidence by employment agreement and/or by separate contract. When employees leave, they ought to be reminded of their obligations of confidentiality and must be prohibited from removing any documentation regarding the trade secret from the company. All outside companies who need access to the secret must sign non-disclosure agreements. It is typical for owners of trade secrets to be vigilant in their market surveillance and to engage private investigators when they suspect a trade secret has been stolen.
A trade secret’s very confidentiality provides its principal value. A competitor cannot copy what it has no ability to discern. However, when someone with access to the secret ‘goes rogue’, such as by using the know-how for his or her own account or for that of a new employer, the owner of the trade secret must act quickly and bring the matter before the Court. The Court has a broad discretion to stop the rogue and any persons or companies who learn the secret from the rogue from further dissemination or exploitation of the trade secret. The Court also has a broad discretion to craft an appropriate remedy to compensate the trade-secret owner for the wrong. If the action is brought before the trade secret is broadly disseminated, the trade secret may be reinstated and enforceable in the future. If the owner of the secret acts too slowly and the dissemination of the trade secret becomes too broad, the trade secret may be lost forever.
Adopting the use of trade secrets to protect know-how in the cannabis business does suffer from the fragility of the right itself. One disclosure, however inadvertent, can destroy the protection. In addition, a trade secret will not protect a company from a competitor who independently derives the know-how. Further, theft of the trade secret can be difficult to spot because, by its nature, the trade secret is exploited within the walls of the competitor company and is not evident in the marketed product. The owner of the secret will need to watch its competitors for telltale shifts in business direction and product offerings, particularly when those competitors hire the ex-employees of the owner of the trade secret. It is typical for owners of trade secrets to be vigilant in their market surveillance and to engage private investigators when they suspect a trade secret has been stolen.
Editor’s Note: In part 2 of this series, which will be published next week, Richard Naiberg will take a closer look at patents and how business can protect new and inventive technology in Canada’s cannabis industry. Stay tuned for more!
As August comes to a close, it is clear that it has been one busy quarter for market development – all over the place. Developments in the UK and Germany in particular, however, have been dramatic. In turn, this is also starting to bring other countries online – even as potential producers move in on the market and before real domestic medical reform has occurred (in countries ranging from Turkey to Spain).
And, say no more, Canada finally announced its “due date” in October.
How all three markets will move forward is also very interesting. They are all interrelated at this point, and even more intriguing, increasingly in synch.
This trend is also one advocates should take note of to push forward on further legislative and access issues going forward.
In the future, no matter what happens with Brexit, developments in both the UK and Germany will continue to push the conversation forward in the EU, a region that is now the world’s most strategic (and globally accessible) cannabis market. Advocates, particularly in Canada and the U.S. right now, can also do much to support them.
Events here, while they may seem “slow” to outsiders, are in fact progressing – and as Cannabis Industry Journal has been reporting – quite fast even if the developments haven’t been (initially at least) quite as public. As this ‘zine wrote, breaking the news in July, the Federal German Drugs and Medical Devices Agency (BfArM) quietly posted the revised bid in July on a European tender site after refusing to confirm that it had sent out (undated) cancellation letters to previous hopefuls. Applicants for the new tender have until October 22 to respond. It is expected, given the new focus on “coalitions” that there will be many more applicants from global teams.
Even more interesting is the informal “reference price” that BfArM is appearing to set for bid respondents (7 euros per gram) and the impact of that on all pricing going forward across the continent.
Within a week, it also emerged that the Deutsche Borse, the organization that regulates the German stock exchanges, and working via its third party clearing arm, refused to clear any trades of any publically listed North American cannabis company that are also listed in Germany. This is an interesting development for sure – particularly now. How it will impact the biggest companies (read publicly listed Canadian LPs) is unclear, particularly because they can now raise capital via global capital markets – including the U.S.
Earlier in the summer, one of the largest public or “statutory” health insurance companies in Germany issued the “Cannabis Report.” It showed that cannabis has now moved out of “orphan drug territory” in Germany, and over 15,000 patients are now prescribed the drug. That said, over 35% of all claims are still being rejected. Most patients at this point, are also women older than 40.
It seems to be less than coincidence that the other big mover this quarter (and in fact most of the year) has been the UK. These two countries are linked by history and trade more than any other in Europe.
As of October, the country will not only reschedule cannabinoid-derived medicine to a Schedule II drug, but also allow more patients to access it. It is unclear how fast reform will come to a country in the throes of Brexit drama, but it is clear that this discussion is now finally on the table. What is also intriguing about this development is how far and fast this will open the door for other firms to compete, finally, with the monopoly enjoyed by GW Pharmaceuticals in the British Islands since 1998.
In one of the quarter’s biggest coups that stockholders loved but left the domestic industry with few illusions about the fight ahead, GW Pharmaceuticals also announced that it had managed (ahead of all U.S.-based producers and firms and even rescheduling in the U.S.) to gain U.S. federal government approval to import a CBD-based epilepsy drug (Epidiolex) into the United States from the UK and thus gain national distribution.
What is even more interesting is that the next formal “steps” in all three markets are now timed to coincide within weeks of each other in October this year.
Canadian producers of course are in the leading position to enter both German and British markets. Further their production centers now springing up all over Europe are supplying both their source markets and will be available for international distribution.
Poland has now legalized cannabis for medical purposes.
That said, it will be some time before patients have access to the drug. While Poles can now technically access medical pot, the scheme approved by the Polish Parliament that went into effect on November 1st is regressive, to say the least. Certainly compared with even other countries in Europe that are now finally admitting that cannabis is a drug with medical efficacy, the Polish experiment looks “old-fashioned.”
What Does Medical Cannabis Reform Look Like in Poland?
Like most conservative countries, Poland is sticking with a highly restrictive approach that still puts patients in the hot seat. In addition to getting a doctor’s prescription, the chronically ill must be approved by a state authority – a regional pharmaceutical inspector. They must get a license first, in other words. They must then find about $500 a month to pay for cannabis. To put this in perspective, that is roughly the total amount such patients get from the state to live on each month.
The multiple steps mean that only patients with financial resources– and an illness which is chronic but still allows them to negotiate the many government hurdles, including cost –will now be able to access medical cannabis. Unlike Germany which makes no such distinctions, Polish law now recognizes the drug as an effective form of treatment only for chronic pain, chemo-induced nausea, MS and drug-resistant epilepsy.
The heavily amended legislation also outlaws home growing. And while 90% of pharmacies will be able to dispense the drug, this is again, a technicality. Where will the pharmacies get the cannabis in the first place?
So the question remains: will this step really mean reform? There is no medical cultivation planned. And no companies (yet) have been licensed to import the drug.
This is what is clear. Much like the conversation in Georgia and other southern American states several years ago, legislators are bowing to popular demand if not scientific evidence, to legalize medical use. But patients still cannot get it – even if they jump through all the hoops.
In Poland, patients who cannot find legal cannabis in the country (which is all of them at this point) now do have the right to travel to other EU countries in search of medicine. But the unanswered question in all of this is still present. How, exactly is this supposed to work? Patients must come up with the money to pay for their medical cannabis (at local prices) plus regular transportation costs. Then they must pay sky high fees to access local doctors (if they can find them) at “retail cost” uncovered by any insurance.
The issue of countries legalizing cannabis on paper, but not in action, is a problem now facing legalization advocates in the EUThe most obvious route for Polish patients with resources and the ability to travel is Germany. The catch? Medical cannabis costs Just on this front, the idea of regular country hopping for script refills – even if “just” across the border – is ludicrous. And who protect such patients legally if caught at the border, with a three month supply?
Poland, in other words, has adopted something very similar to Georgia’s regulations circa 2015. Medical cannabis is now technically legal but still inaccessible because of cost and logistics. Reform, Polish-style, appears to actually just be more window-dressing.
And while it is an obvious step for the country to start issuing import licenses to Canadian, Israeli and Australian exporters, how long will that take?
The Next Step Of Reform – Unfettered Patient Access
While things are still bad in Poland, right across the border in Germany where presumably Polish patients could theoretically buy their medical cannabis, all is still not copacetic. Even for the “locals.” Germany’s situation remains dire. But even before legalization in March, Germany was importing bud cannabis from Holland and began a trickle of imports last summer from Canada. That trickle has now expanded considerably with new import licences this year. And presumably, although nobody is sure, there will be some kind of domestic cultivation by 2019.
At Deutsche Hanfverband’s Cannabis Normal activist’s conference in Berlin held on the same weekend as Poland decided to legalize medical cannabis, a Gen X patient expressed his frustration with the situation of legalization in general. Oliver Waack-Jurgensen is now suing his German public insurer. He expects to wait another year and a half before he wins. In the meantime, he is organizing other patients. “They [political representatives] are bowing to political expediency but completely ignoring patient needs,” says Waack-Jurgensen. “How long is this conversation going to take? I am tired of it. Really, really tired of this.”
The issue of countries legalizing cannabis on paper, but not in action, is a problem now facing legalization advocates in the EU and elsewhere who have achieved legislative victories, but still realize this is an unfinished battle. Germany is the only country in Europe with a federal mandate to cover the drug under insurance (for Germans only). And that process is taking time to implement.But even in Germany, patients are having to sue their insurance companies
Germany, Italy and Turkey are also the only countries in Europe as of now with any plans to grow the drug domestically under a federally mandated regulation scheme. Import from Holland, Canada and even Australia appears to be the next step in delaying full and unfettered reform in Europe. See Croatia, Slovenia and Bosnia. How Spanish or Portuguese-grown cannabis will play into this discussion is also an open question mark. Asking Polish patients suffering from cancer to “commute” to Portugal is also clearly unfeasible.
Unlike the United States, however, European countries do have public healthcare systems, which are supposed to cover the majority of the population. What gives? And what is likely to happen?
A Brewing Battle At The EU Human Rights Court?
While the Polish decision to “legalize” medical use is a step in the right direction, there is still a long way to go. If the idea is to halt the black market trade, giving patients real access is a good idea. But even in Germany, patients are having to sue their insurance companies. And are now doing so in large numbers. In a region where lawsuits are much less common than the U.S., this is shocking enough.
But the situation is so widespread and likely to continue for some time, that class action lawsuits – and on the basis of human rights violations over lack of access to a life-saving drug – may finally come to the continent and at an EU (international) level court.
Patients are literally dying in the meantime. And those who aren’t are joining the calls for hunger strikes and other direct civil action. Sound far-fetched? There is legal precedent. See Mexico.
And while Poland may or may not be the trigger for this kind of concerted legal action, this idea is clearly gathering steam in advocacy circles across Europe.
On Wednesday, ten U.S. Senators from both sides of the aisle signed a letter pleading with the U.S. Treasury Department to help with banking for cannabis businesses, according to Lisa Lambert of Reuters. The letter seeks some form of protection for cannabis-friendly banks and credit unions, even those doing business with ancillary companies.
Notable signatories include Senators Elizabeth Warren (D-Massachusetts), Bernie Sanders (D-Vermont) and Jeff Merkley (D-Oregon). “Most banks and credit unions have either closed accounts or simply refused to offer services to indirect and ancillary businesses that service the marijuana industry,” states the letter. “A large number of professionals have been unable to access the financial system because they are doing business with marijuana [sic] growers and dispensaries.”
According to a spokesman, the Treasury Department’s Financial Crimes Enforcement Network will be addressing it. It is unclear exactly how Sen. Jeff Sessions, Trump’s attorney general nomination, would deal with cannabis-friendly states, let alone banking for them.
Many think Sessions would restrict access, ramp up federal crackdowns and make it difficult for cannabis businesses to grow. Once again however Jeff Sessions has not shared any plans on enforcing the Controlled Substances Act or cracking down on legal cannabis.
Strictly Necessary Cookies
Strictly Necessary Cookie should be enabled at all times so that we can save your preferences for cookie settings.
We use tracking pixels that set your arrival time at our website, this is used as part of our anti-spam and security measures. Disabling this tracking pixel would disable some of our security measures, and is therefore considered necessary for the safe operation of the website. This tracking pixel is cleared from your system when you delete files in your history.
If you disable this cookie, we will not be able to save your preferences. This means that every time you visit this website you will need to enable or disable cookies again.