Tag Archives: II

Cannabis Registry Reality Check: Privacy Must be Paramount

By Shadrach White
No Comments

The task of preserving privacy for any records platform, especially a cannabis registry, cannot simply be relegated to ones and zeros lurking in some forgotten codebase. This past year taught us many lessons, especially related to the trauma unleashed by vulnerabilities in government domains. We learned time and again that a registrant’s privacy must be the first order of business for the architects of registries.

But the first order of business isn’t the last order of business. That intention and effort to secure privacy must then be communicated and reinforced through real-world reality checks.

Lapses in data security and rising distrust for government institutions block the efficacy of well-intentioned and vital registries. Those states launching new registries in 2021 are at a precarious crossroads as public trust erodes.

As I write this, we’ve just learned illicit operators hacked a third-party service provider for the Washington State Auditor’s office. The attack compromised the personal data of 1.4 million users seeking unemployment benefits. Security hacks are a cautionary tale, whose impact is felt too often.

But many in the government sector are staring at a once-in-a-generation challenge to launch new registries – those related to cannabis – with privacy top-of-mind from the initial Request For Bid.“The question isn’t when these privacy-first registries will be implemented, it’s a question of whether they’ll be implemented proactively ahead of hacks or after the damage is done.”

Here’s how:

Table Stakes for New Cannabis Registries

These suggestions are just the beginning, and I see them as the minimum buy-in to begin the architecture of a new cannabis registry. They include:

  • End-to-end data encryption while in transit and within the system while the data is at rest.
  • A solution that is a cloud-native web application which is managed as a service for maximum uptime and strong security posture.
  • Registries should also leverage algorithms and machine learning to ensure accurate data entry by analyzing incorrect or duplicate data before it is saved within the system.

Beyond HIPAA

The Health Insurance Portability and Accountability Act (HIPAA) requires privacy and security measures to protect Personal Health Information (PHI). Debate exists on whether compliance is a requirement for all entities transacting in the medicinal cannabis space. While some state registries are exempt from HIPAA, others choose to provide HIPAA compliance not just for the optics, but the known benefit to users’ privacy and confidence. New cannabis registries should commit to HIPAA-compliance to set a trusted new privacy standard for medical patient credentials and legal authorization for the use of cannabis for medical purposes.

That’s just the start. Registries should also ensure SOC2 Type II certification, which safeguards security, site availability, confidentiality and privacy through independent third-party auditors.

Connect with Confidence

Registries function as a hub of information in an often-confusing cannabis space. The California Bureau of Cannabis Control displays more than 25 links wired into its top navigation bar alone. Each link sends the curious to new resources. Registries must establish themselves as credible resources, especially when directing users to third-party sites.

One example is for cannabis registries to provide secure access to healthcare professionals who are verified by the Drug Enforcement Agency (DEA). These healthcare professionals are licensed to distribute controlled substances including cannabis. Each third-party link should offer the same high-level of scrutiny to enshrine confidence and credibility in the registry.

Next-Generation ID Cards

A cannabis registry card should not just be a document, but a toolset that attests to the identity and the authority of the carrier represented. An illicit counterfeiting market seeks to exploit registry card vulnerabilities. Next generation ID cards present the best defense against counterfeiting and illegal use with robust security measures. That starts with assuring that any credential is mobile ID compatible with iOS Wallet and GooglePay for mobile identification.

ID cards should also include:

The automated modification of the document bearer’s photograph to ICAO (International Civil Aviation Organization) standards. This critical modification makes the photograph easier to use for ID verification; it also facilitates the detection of photograph substitution.

A two-dimensional barcode compiles information contained in a one-dimensional barcode. It also delivers confirmation of other data shown on the card or in the system such as license authorization and limitations. Adding additional material to the physical document such as holograms, UV image, micro-printing or laser perforations offers another level of protection against illicit use or counterfeiting.

While cannabis registries are the beginning, they’re not the end. Driving efficacy for government registries needed for COVID19 track-and-tracing, cannabis plant track-and-tracing and vaccine distribution require the same attention to privacy, security and ultimate useability. A sea change is required – not just for the sake of those who use the registries but also for those who must implement, deploy and maintain those registries. The question isn’t when these privacy-first registries will be implemented, it’s a question of whether they’ll be implemented proactively ahead of hacks or after the damage is done. I believe the government sector leaders exploring new cannabis registries offer the wisdom and foresight to choose the proactive approach.

Soapbox

How to Vote for Cannabis Research on November 3rd

By Dr. Jordan Zager
No Comments

It was 1996. I was four years old. California Proposition 215 passed and for the first time, legal medical cannabis became available. I don’t remember it honestly, but that moment triggered a reckoning of outdated and ineffective efforts to control cannabis, which continues on November 3rd.

The moment in 1996 created for me and my generation of millennials a new, decriminalized lens for which to view cannabis and its potential. In my lifetime, from first experimenting with cannabis after high school and then earning my PhD in plant biochemistry, advancing cannabis research, to starting an agtech company dedicated to the genetic improvement of cannabis, we continue this march toward legalization. But another march hasn’t started yet.

The cannabis we consume today is still largely the same (albeit more potent today) as the cannabis that was legalized in 1996. There’s been little advancement in our scientific understanding of the plant. This can and should change. I believe the future and legitimacy of the cannabis crop in the medical field and in farmers’ fields is on the ballot this November.

Five states have cannabis on the ballot for November 3rd

In 33 states, medical cannabis is currently legal and in eleven of those, including my home states of Nevada and Washington, legalized adult-use recreational cannabis is generating millions in tax revenue every month. But compared to every other commercial crop, cannabis is still decades behind.

We are seeing a glacial cadence with cannabis research. As voters in five more states consider this November whether to legalize cannabis, that same tipping point we reached in 1996 comes closer to being triggered for cannabis research.

Here’s what cannabis scientists, like me, face as we work to apply real scientific methods to the long-neglected crop: I published one of the most cited papers on cannabis research last year, titled, Gene Networks Underlying Cannabinoid and Terpenoid Accumulation in Cannabis. But, as per university policy, we were unable to touch the plant during any of our research. We could not study the physical cannabis plant, extracts or any other substantive physical properties from the plant on campus or as a representative of the university. Instead we studied cannabis DNA processed through a third-party. Funding for the research came from private donors who were required to be unassociated with the cannabis industry.

While we were conducting our heavily restricted, bootstrapped cannabis research, the university lab in the next building over was experimenting with less restrictions on mice using other drugs: cocaine, opioids and amphetamines. (Quick note, marijuana is listed as more dangerous than cocaine, which is a Schedule II drug.)

I get it. Due to the federal prohibition on cannabis as a heavily regulated Schedule I drug, universities cannot fund research without the risk of losing all of their federal funding. While the USDA does not support research and SBIR grants are all but impossible, one government agency does allow research, from cannabis grown only in Mississippi. It’s the Drug Enforcement Agency (DEA) and any research conducted using its crop is as ineffective as you’re imagining. Relevant research is likely impossible using the crop which dates back to a 1970’s strain with a potency that’s about 30 percent of today’s commercial cannabis offerings.

To change this anti-research climate, do what those in California did with Prop 215 in 1996. Vote.

Dr. Jordan Zager, author and CEO of Dewey Scientific

Vote for legalization of cannabis if you’re in those five states where legalization is on the ballot; that’s Arizona, New Jersey, Montana, South Dakota and Mississippi. The more states that align with cannabis legalization, the stronger the case becomes for the federal government to reschedule the drug from a Schedule I controlled substance. Currently cannabis is listed as a Schedule I alongside heroin. The DEA claims cannabis has no currently accepted medical use and a high potential for abuse. Both are not true, just listen to the scientists.

Those outside of the five states putting cannabis on the ballot can still play a role in creating a Congress that is more receptive to cannabis reform. This Congress is the oldest, one of the most conservative and least effective in our country’s history. Younger, more progressive representation will increase our odds of advancing cannabis research.

Cannabis holds far too much possibility for us to allow it to be an unstudied “ditch weed.” THC and CBD are just two of nearly 500 compounds found in cannabis which, when scientifically scrutinized will harvest – I believe – vast medicinal and commercial benefits and the tax windfalls that accompany both. But first you have to vote.

If cannabis and your representatives are not on the ballot, do something millennials have built somewhat of a reputation for failing to do; pick up a phone and call your current representative. Tell them cannabis deserves scientific attention and investment. There’s too much potential in the cannabis plant to wait any longer.