Tag Archives: legislation

A2LA Accredits GoodCat Analytical to ISO/IEC 17025

By Aaron G. Biros
1 Comment

According to a press release published last week, the American Association of Laboratory Accreditation (A2LA) announced the accreditation of GoodCat Analytical, LLC, a cannabis testing laboratory based in Naples, Florida. This marks the first time that A2LA has accredited a cannabis testing lab in the state.

Adam Gouker, A2LA General Manager, says this is a momentous achievement for GoodCat Analytical. “A2LA is excited to expand our cannabis accreditation program into yet another state, promoting the value of independent third-party accreditation to support quality products in the industry,” says Gouker. “We congratulate GCA Laboratories in achieving this milestone for their organization and wish them all the best as they move forward with this new endeavor.”

According to Jimmy Dodsworth, chief science officer at GoodCat Analytical, they had to develop a lot of methods on their own. “I can’t say enough about each of our staff members efforts to develop and validate each analytical method,” says Dodsworth. “The level of quality for these internally developed tests is amazing considering we started from scratch.”

Raymond Keller, owner and president of GoodCat Analytical, says A2LA’s support was an incredibly valuable resource for them. “We also need to acknowledge the tremendous guidance and support from the A2LA staff,” says Keller. “There is no doubt that they had a hand in making our lab the impressive operation it is today and know they will continue to do so moving forward.”

german flag

German Cultivation Bid Appears To Have Three Finalists

By Marguerite Arnold
No Comments
german flag

The Frankfurt-based newspaper Handelsblatt Zeitung is reporting that three Canadian firms (actually two Canadians and a German start-up cofounded by another Canadian company) have now been selected as the first cannabis cultivation bid finalists, however insiders on the ground say that this is not necessarily a final decision.

A Berlin-based subsidiary of Wayland in Germany called Demecan, along with Aphria and Aurora have all been named as bid finalists pending a normal review period.

However, there are other complications still looming. This is far from over.

The first issuance of the bid in 2017 went down in court over a technical fault on the part of the issuing agency. The current iteration was posted last summer and saw its application moved several times because of further legal challenges.

As Peter Homburg, partner and head of the European Cannabis Group at Dentons said when contacted by Cannabis Industry Journal, “This is of course not an official announcement. I have a tendency to believe that others involved in the tender process historically may well challenge this decision.”

BfArM, the federal German agency in charge of the cannabis cultivation tender process, did not respond to a request for a comment as of press time.

The Decision Is Far From Over

Here are the basic challenges still ahead:

There is a lawsuit pending against the bid itself from applicants that has yet to be decided. The Klage (formal hearing in court) is due next week. If that does not derail the process, here are the next considerations.

While all three firms named in the bid have international reputations, there are some pending questions.

Wayland is far ahead of the other two firms in terms of production capability in the country. Their facility in eastern Germany has just been certified GMP standard – which means they are qualified to produce the quality of flower required for medical consumption. This news is also far from a surprise.

As Ben Ward, CEO of Wayland Group, commented when contacted by CIJ for a response via email: “At Wayland, we believe in meaningful partnerships, investing in Germany from day one, demonstrating a long-term commitment to the market,” says Ward. “Wayland GmbH is a German company, operated by Germans, existing in Dresden and Munich and is committed to this market. The companies awarded lots received the allocation based on a rigorous application process, not media sensation.”

Of all the Canadian firms, in fact, despite its lack of high-flying stock price, Wayland has made the most concerted effort to show its commitment to producing in Germany by a large investment of capital and expertise. Further, the firm has shown itself to be the most culturally sensitive to German culture, including hiring a female member to the board (a hot topic far from the cannabis industry). However, there are other issues looming. On the same day that Wayland issued a press release announcing its position in the bid, it also issued one announcing the merger talks with ICC had failed.

The second is that Aphria’s main cultivation center in Canada is not EU-GMP certified although they have applied for the same and now also own one of Germany’s largest distributors (with approximately a 6% market share).

Other firms not only kicked off the entire cannabis discussion in Germany, but have established GMP-compliant facilities both in Canada and across Europe, namely Canopy Growth, which was widely believed to have also applied to the second tender. However prevailing rumours about a Canadian “crop failure” in British Columbia (described by the company as a deliberate destruction of plants created by delays in the licensing process) last fall may have also played a role in the German decision.

Canopy_Growth_Corporation_logoAurora is also in interesting waters. Having distinguished itself as Canopy’s closest rival across Europe, winning significant kudos in Denmark, Italy, Poland and Luxembourg last year, the company is also clearly not “just” a medical cannabis company and apparently was refused an opportunity to go public on the Deutsche Börse last fall. The selection of the firm by BfArm for the bid in a situation where the company is on a watch list created by the stock market regulatory agency in Frankfurt is also an intriguing one. Especially given the company’s announcement of its Polish success on the same day as the decision to import was announced, and the fact that so far it is the only Canadian cannabis company to successfully import to Luxembourg.

And The Import Game Is Just Getting Hot…

The unsurprising news that the bid appears to be moving forward is actually not the hottest news in Europe right now. The reality on the ground is already shifting. Several weeks ago, a Frankfurt-based distribution start-up announced that they had successfully imported cannabis into the country from Macedonian-based Nysk Holdings via Poland.

At the International Cannabis Business Conference (ICBC) in Berlin last weekend, Australian producers (for one) were also reporting a German demand for their product that was greater than they could fill. And there were many Israelis present for what is expected to be an official opening of their import ability by the third quarter of this year.

Price Wars Are Looming

The bid itself is going to have a powerful impact on pricing in both the German and European market beyond that. It represents the first time in any country that a government has attempted to pre-negotiate prices for the drug as a narcotic beyond Israel and in this case, it will have at least regional implications.

aurora logoAt the same time, it is also clear that producers like Nysk and beyond them, Israeli and Australian firms (in particular) are actively finding ways to have their product enter the country- and further at prices that are catching the Canadians on the hop. Indeed Aurora is reporting that it actually lowered its “usual” prices to win European contracts which have been reported as being 3.2 euros a gram in Italy and 2.5 euros a gram in Luxembourg.

To put this in perspective, this is a range of about CA$3-5 a gram of flower which is also well below what Canopy (for one) has reported selling its product even to recreational users in Canada and significantly below medical export prices as reported by recent company corporate reports.

Wayland in contrast, is reporting that its production price in Germany will be at least a euro-per-gram cheaper than this. Or in other words, more in line with prices expected to be generated from both the bid itself and the cannabis now entering the country from other sources.

And of course, this is only the first of what is expected to be a series of new tenders. The original amount, itself increased in the two years the issue has been pending, is clearly not enough to even begin to meet demand as proved by the levels of competitively priced imports now entering the country.

Beyond questions about whether this time the tender will actually stand, are those now pending about new ones potentially in the offing – and not just in Germany but across Europe as cannabis continues to see a very green spring.

Soapbox

Third-Party Cannabis Safety Audits & How to Prepare in 7 Steps

By Tyler Williams
2 Comments

Unlike the food industry, the cannabis industry is still in its infancy. Which means there is not a push from retailers demanding cannabis farmers, extractors or manufacturers to get third-party audits. In fact, most grow operations supply into their own dispensaries. So why should a cannabis farmer, extractor or manufacturer get a third-party audit? Third-party audits are crucial to maintaining product safety and quality by providing a third set of eyes to verify what is working and what is not. Besides regulatory requirements and customers requiring your facility to get a third-party audit, there are numerous other benefits to receiving an audit. Some of these benefits include:

  • Improvement to product safety
  • Improvement to product quality and consistency
  • Meeting regulatory compliance
  • Eliminating potential risks and possible recalls
  • Marketing advantages over competitors who are not audited by a third-party
  • Improvement to consumer confidence and an increase to brand loyalty

How to Prepare for a Third-Party Audit

Working for a certification body, I am in the unique position to see numerous sites go through the certification process. In this position I have seen both extremes: Sites that spend 6-8 months and a lot of resources preparing for an audit, as well as sites that wait until the day before to even look at the audit standard. Unfortunately, the latter is almost always going to fail the audit. Here are seven steps for preparing for your next third-party audit.“By failing to prepare, you are preparing to fail.”– Benjamin Franklin

  1. Start Preparing Early

Think of your third-party audit as a college exam one month away. You could start studying for the exam now and get a real understanding of the material or you could wait until the day before to start your no-sleep, energy drink-fueled, 24-hour cram session. We all know which preparation method will get a better score on the exam. Now let’s apply that same strategy to your third-party audit. Once you have decided what audit is best for your site and have those specific standards in your hand, the clock starts ticking and you should already be preparing for the audit, whether it is one month or six months away.

  1. Get Management Commitment

It is essential to the entire cannabis safety and quality system to have commitment from top down. Without this, the site will not get the resources (people, equipment, money, time, etc.) they need to pass a third-party audit. Management commitment is so important that it is often seen as its own section in most modern audit standards. It is very easy for third-party auditors to identify when there is a lack of management commitment in a site. Therefore, if you don’t get management commitment, then you are already starting off the audit on a bad note.

  1. Create a To-Do-ListGMP

Think of the entire audit checklist or standard as your long to-do list. Some things, like attaining a certificate of analysis (COA) from a supplier, may only need to be done annually. While other things, such as ensuring employees are following Good Manufacturing Practices (GMPs), will need to be done continuously throughout day to day operations. Go through the audit checklist and separate what needs to be done annually, semiannually, quarterly, monthly and continuously throughout day to day operations. This will give you a list with all of the frequencies of each different requirement.

  1. Teamwork“Teamwork makes the dream work, but a vision becomes a nightmare when the leader has a big dream and a bad team.” – John C. Maxwell

The preparation of an audit should never rest on the shoulders of one person. Yet this is something I tend to see too often in both food and cannabis facilities alike. Your site should establish a cannabis safety and quality team of multidiscipline personnel that have an impact on product safety and quality. Once the team is established, various tasks from the to-do-list can be disbursed among all the members of the team. Collaboration is key to successfully preparing for a third-party audit, especially when the timelines are very stringent.

  1. Training

Training is essential to preparing for your third-party audit. This is what closes the gaps between what the safety and quality department have developed and what your front-line employees are applying. All employees should know what part of the audit standard applies to them. Additionally, employees should be trained on interview questions that the auditor might ask them during the audit. Helping them prepare for these types of questions will help ease their nerves and allow them to answer the questions with self-assurance when it comes time to the actual audit.

  1. Conduct Internal Audits

Conducting internal audits is not only a great way to prepare for your third-party audit, it’s a requirement. You should always use the audit checklist to observe your documents and facility to see where there are gaps. If possible, the person or team conducting the internal audit should never review their own work. Additionally, all issues or non-conformances should be noted, evaluated, corrected and closed out.

  1. Third-Party Pre-Assessment or Mock Audit (Optional)

A third-party pre-assessment or mock audit is the closest thing you can get to an actual audit. This is where a company would come in and evaluate your site to the specific standards and give a formal report over any deficiencies found during the assessment and how to fix them. This is a great way to test your preparedness before the actual audit.

Marguerite Arnold

Farmako Inks Deal To Import 50 Tonnes of Polish Cannabis Into Germany

By Marguerite Arnold
No Comments
Marguerite Arnold

The ex-im cannabis map of Europe has been promising to get interesting for some time. And in March, it’s long promised potential just bloomed a little more as Frankfurt-based Farmako announced a first-of-its kind import deal of 50 tonnes of medical cannabis (and from Poland no less) over the next four years.

Farmako was just founded in September 2018. They began distribution to German pharmacies this month. They also have an office in London and cross-European aspirations.

While Farmako is the first to announce such a unique cross-border production and distribution agreement, however, they are far from the only ones planning the same. In fact at least Tilray is expected to announce that their newly-minted Portuguese crop is being processed into oil bound for German pharmacies any day now. It is also not unrealistic to expect that (at least) Canopy Growth, of the big Canadian producers at least, will soon announce the same situation for their crops in countries across the continent, starting with Spain.

Outside Germany of course, this kind of entrepreneurial endeavour is already underway. In the UK, a new import group just announced the first bulk shipment of Dutch medical cannabis into the country, distributed directly to over 1,000 pharmacies nationwide.

There still are a couple of jaw-dropping things to consider about this new German development. Namely, that the amount of just this deal over the next four years between two (relatively new, non-Canadian) companies is approximately five times the amount currently called for in the still pending domestic cultivation bid in Germany.

The second, of course, is that the Polish company on the other side of the border and this ex-im deal, PharmaCann Polska, is a uniquely positioned conglomeration of individuals with apparently Canadian and Israeli market experience. This means that they are already positioned to access the biggest two production markets in the world and are certain to be looking to exploit other Eastern European connections (at minimum). If not ones further afield than that.

One thing is absolutely certain far beyond the particulars of this one deal. The current import limitations from Canada and the Netherlands into the German market appear to be a thing of the past. And the cross-border trade for medical cannabis is now clearly entering a new phase.

Implications

Farmako clearly intends to go after the existing Canadians in the market on price, which means both Canopy Growth and Tilray. But it also means Wayland, at this point is the largest domestic certified producer (albeit with Canadian roots and partners) and an entire licensed facility in eastern Germany ready to go. That is not an insignificant threat and sets up another looming question: Which will actually be cheaper in the long run? Domestically grown German cannabis, or that imported from adjacent countries with lower paying labor markets?

This announcement also means that the “cannabis shortage” in the country is officially over as of this spring. And that won’t just come from Farmako but others already in the market and those angling now to get in via other creative means.

Regardless, what that will do to overall sales, patient numbers and overall speed is another matter.

Other Looming Problems

There are two big issues that this development does not solve of course. The first is the ability of patients to find doctors willing to prescribe the drug, and further to make sure they spend the time filling out the paperwork and negotiating with the patient’s insurer, to make sure that patients can actually get it. Starting with affording medical cannabis in the first place. Most patients on what is known as “statutory” health insurance (90% of the country) cannot afford the out of pocket cost at pharmacies without insurance approvals. Once they get them, they pay up to $12 for a month’s supply (in the case of flower, about an ounce).

german flag
Photo: Ian McWilliams, Flickr

The second issue is that it is currently unclear, mostly due to the lack of granularity provided by the country’s statutory health insurers, what is actually being prescribed for which kind of condition and to whom. Earlier this month, new information was made available about the overall growth of coverage of medical cannabis in Germany. While the total spending, and rough breakdown of flowers vs. product was provided, it is unclear beyond that, where this is going. There were also apparently just over 46,000 patients in Germany as of December 2018. And this is a growth trend that while clearly on an upward trajectory for the last three quarters is slow and steady as she goes. The sudden uptick in the market seen in the second quarter of last year appears to be an anomaly.

Further, understanding market price points is also hard. Flos and prepared pharmaceuticals such as Sativex are highly expensive right now. In the case of the Canadian firms, their medical exports are being sold at about twice the price of their domestic recreational sales points. Look for this to change dramatically as real competition heats up across Europe (and from more distributors than just this Frankfurt upstart).

What the news in other words about Farmako really signifies is that the price barriers in the medical market are about to come down at the point of sale- and hopefully in the short term, patients will not have to rely on the approval of their insurance companies to be able to access the drug because they will be able to afford it themselves. No matter what happens with the bid. Although this too will also serve to lower prices.

The great medical normalization race for medical cannabis in Europe is now officially “on.” And that is good news not only for patients, but of course, the industry.

British Barristers Take On Cannabis “Novel Food” Regulation In Brussels

By Marguerite Arnold
No Comments

The first thing to understand about the significance of the British barristers now challenging the EU’s classification of hemp extracts as a novel food is that this is like jumping into the middle of an action adventure by coming in at the second act. In other words, you miss the introduction and the first couple of car chases.

That said, this action movie also features a cannabis-flavored plot. Those used to the maddening hair splitting now going on just about everywhere as the industry gains legitimacy, in other words, are familiar with the larger story line.

Here are the “CBD Cliff’s Notes.”

The structure of cannabidiol (CBD), one of 400 active compounds found in cannabis.

It is highly significant that a major British cannabis trade organization, the Cannabis Trades Association, hired a leading law firm in London to go sue the EU over its recent decision to lump all CBD extracts into the same “novel” distinction. Up until now, only CBD sourced from cannabis had fallen prey to this strange regulation. Thus, the lawsuit. No Brexit themes involved. Yet. Although that too will play a role in all of this.

What Is This Really About?

If those in the CBD business are honest with themselves, the real reason for this segmented part of the cannabis industry to even exist in the first place is the race, desire and need to actually be allowed to operate in relative regulatory peace. No matter what the battles are on the THC front. CBD has been seen as a result, pretty much since the beginning of the new age of legalization, as the “safer” political and market entry choice by those in regions such as U.S. southern states and the burgeoning, can’t-wait-to-be-off-to-the-races, market in Europe. See the new federal hemp legalization bill in the United States as Exhibit A.

However, in Europe this has run into more than a few problems since the Swiss put “low THC” or “Cannabis Lite” on the map more locally. Starting with the whole discussion about licensing in general. And then, even more confusingly, about what to actually classify the plant. Especially when it is used in food and cosmetics as opposed to “medicine.”

Specifically, where does the cannabis plant in general, let alone its individual components, really fall when it comes to regulated human consumption?

european union states
Member states of the European Union

For the time being- read last year when the industry in Spain was facing police busts over CBD cookies on the shelves at health stores- the conventional industry wisdom was that this whole furore was “just” over the use of concentrates, tinctures and other products made from cannabis-sourced CBD. However, given the noise that Austria managed to make over Christmas about the entire “licensing” issue (namely who has the right to produce, sell and package even CBD as a cannabinoid no matter where it is sourced), the EU also moved all CBD products and tinctures- even those made from good old hemp- into the novel food category.

This means in effect, that even CBD extracts produced from the hemp plant (which is actually the majority of such product in Europe) must now be regulated as a “novel food” too. Even though in poor old hemp’s case, it is certainly the case that health food nuts have been consuming the same in Europe long before (and certainly after) standing EU “novel food” regulations were put into place back in the late 90’s.

Thus, the lawsuit, launched from a country unsure of whether it will even be in the EU post-May (either the month or the current PM).

According to the EU at least for now, CBD itself is a “novel food” no matter from where it is sourced. And that, according to not only science but food history is an absolute fallacy.consumer safety, from factory to pharmacy or farm to table, is never far from the discussion

Likely Outcomes

Those who were hoping that CBD would remain unregulated in the EU should think again. It is highly likely that what will happen is that CBD production licensing is in the cards and just about everywhere. Think GMPs but with a consumer-food twist.

While indie producers might groan at the prospect of fees and licensing procedures, remember this is Europe. And consumer safety, from factory to pharmacy or farm to table, is never far from the discussion.

While this lawsuit, in other words, is likely to make the EU think more closely about regulating CBD in general, what is most likely to happen is that entire enchilada will be lumped under a regime to insure that high quality production, particularly of crops bound for consumption, is also extended to anything that ends up in either a food or cosmetic product.

CBD Producers Have To Keep Current On Regs

Given the current murkiness that exists, in other words at this point across Europe, in every country and for every CBD product, exports here from other places are still not a great idea.

There are labeling, licensing and of course, ultimately legislative issues that are all still in flux. And while the outcome of the lawsuit might eventually regulate and standardize things, the idea that a license-free CBD production industry is clearly now dead in the water.

Stratos: Quality, Expansion & Growth in Multiple Markets

By Aaron G. Biros
No Comments

Jason Neely founded Stratos in 2014, when he and a small group of people left the pharmaceutical industry in search of a new endeavor in the cannabis marketplace. The concept was straightforward: Apply pharmaceutical methodologyof production to cannabis products. Back then, Stratos offered a range of THC-infused tablets in the Colorado market.

Brenda Verghese, vice president of research & development

Brenda Verghese, vice president of research & development, was one of five people on staff when Stratos launched. Now they have about 30 team members. Consumers were looking for a cannabis product that would be consistent and reliable every time, taking the guesswork out of infused products dosage. That’s where Brenda Verghese found her skillset useful.

Transitioning to the pharmaceutical industry right out of college, Verghese started her career as a chemist and worked her way up to the R&D business development sector. “I specializedin formulations and taking a product from concept to commercialization in the pharmaceutical space,” says Verghese. “Jason Neely approached me with the idea of a cannabis company and focusing on making products as effective and consistent as possible, so really bringing pharmaceutical science into the cannabis space. In the matter of 4 years we grew substantially, mainly focusing on the efficacy of products.”

Behind the scenes at packaging and labeling Image credit: Lucy Beaugard

Soon after the success of their THC products became apparent, Stratos launched a CBD line, quickly growing their portfolio to include things like tinctures and topicals as well. According to Verghese, they are hoping that what’s been established on the THC side of their business as far as reproducibility and consistency is something that consumers will also experience on the CBD side. “Quality and consistency have definitely driven our growth,” says Verghese. “That is what consumers appreciate most- the fact that every tablet, tincture or swipe of a topical product is going to be consistent and the same dose every time.” This is what speaks to their background in the pharmaceutical sciences, FDA regulation has taught the Stratos team to create really robust and consistent formulations.

Quality in manufacturing starts at the source for Stratos: their suppliers. They take a hard look at their supply of raw materials and active ingredients, making sure it meets their standards. “The supplier needs to allow us to do an initial audit and periodic audits,” says Verghese. “We require documentation to verify the purity and quality of oil. We also do internal testing upon receipt of the materials, verifying that the COAs [certificates of analysis] match their claims.”

Process validation in action at the Stratos facility
(image credit: Lucy Beaugard)

Verghese says maintaining that attention to detail as their company grows is crucial. They implement robust SOPs and in-process quality checks in addition to process testing. They test their products 5-6 times within one production batch. Much of that is thanks to Amy Davison, director of operations and compliance, and her 15 years of experience in quality and regulatory compliance in the pharmaceutical industry.

Back in August of 2018, Amy Davison wrote an article on safety and dosing accuracy for Cannabis Industry Journal. Take a look at this excerpt to get an idea of their quality controls:

Product testing alone cannot assess quality for an entire lot or batch of product; therefore, each step of the manufacturing process must be controlled through Good Manufacturing Practices (GMP). Process validation is an aspect of GMPs used by the pharmaceutical industry to create consistency in a product’s quality, safety and efficacy. There are three main stages to process validation: process design, process qualification and continued process verification. Implementing these stages ensures that quality, including dosing accuracy, is maintained for each manufactured batch of product.

Fast forward to today and Stratos is looking at expanding their CBD products line significantly. While their THC-infused products might have a stronger brand presence in Colorado, the CBD line offers substantial growth potential, given their ability to ship nationwide as well as online ordering. “We are always evaluating different markets and looking for what suits Stratos and our consumer base,”says Verghese.

Top 5 Cybersecurity Threats To The Cannabis Industry

By Lalé Bonner
No Comments

Is your cannabis business an attractive target for cyber criminals? With the influx of investment to this market and new businesses opening frequently throughout the United States, the legal cannabis industry is a prime target for cyber criminals.

Never share personal information (login and passwords, social security numbers, payment card information, etc.) over email.Cannabis industry hackers pick their targets by vulnerability, exploiting consumer or patient data to darknet black markets and forums. The impact can be devastating to both the business and their consumers. With new laws on protecting consumer and patient data on the horizon, businesses that do not adequately protect that data, could face stiff fines, in addition to losing the trust of their customers.

So, how do these attacks present themselves? Recent studies implicate employees as the “weakest link” in the cybersecurity chain due to a lack of cybersecurity best practices and training. Implementing safeguards and providing employee training is imperative to the cybersecurity health of your business.

Now, let’s identify the top 5 cybersecurity threats to the cannabis industry and some valuable tips for protecting against these criminal hacks:

Phishing: Phishing is a form of cyber-attack, typically disguised as an official email from a trustworthy entity, attempting to dupe the recipient into revealing confidential information or downloading malware. Don’t take the bait! 91 percent of cyber-attacks start as phishing scams, with most of these lures being cast through fraudulent emails.

  • Tips: Do not download attachments from unknown senders!
  • Never share personal information (login and passwords, social security numbers, payment card information, etc.) over email.

Password Management: Password complexity is key to protecting against cyber breaches. When it comes to data hacking, 81 percent of breaches are caused by stolen or weak passwords. With a password often being the only barrier between you and a data breach, creating a complex password will dramatically decrease those password-sniffers from obtaining your sensitive information.

  • Tips: Create passwords that are at least 12 characters in length – include letters, numbers and symbols (*$%^!), and never use a default password. This will fend off brute-force attacks.
  • Change passwords every six months to a year, keeping them complicated and protected. For IT Managers, make using a password manager mandatory for all employees. (Pro-tip: LastPass is free).Be cautious with network selection as hackers set up free Wi-Fi networks that appear to be associated with an institution.

Public Wi-Fi: Being able to connect in public spaces, while a modern marvel of convenience, leaves us wide open to cyber-attacks. Whether you are in an airport or café, always err on the side of caution.

  • Tips: Be cautious with network selection as hackers set up free Wi-Fi networks that appear to be associated with an institution.
  • Browse in a “private” or “incognito” window to avoid saving information. If you have a VPN, use it. If not, then do not handle any sensitive data.

BYOD: Beware of Bad Apps: Using personal devices for work has become the norm. In fact, approximately 74 percent of businesses have bring-your-own-device (BYOD) policies or plans to adopt in the future.

With these platforms providing greater access to mobile apps, comes greater responsibility on the part of the end user.

  • Tips: Password protect devices that will be used for work (and, any device in general).
  • Only download applications from a trusted, authorized app store. Do not use untrusted play apps.
  • Mobile device protection is recommended for any device being used on a business network.

Whether it is an app from an unauthorized website or a lost/stolen device that was not password protected, cyber criminals do not need much to compromise critical data.Avoid logging into a SaaS application on a public computer or public Wi-Fi network.

SaaS Selectively: Keep Sensitive Data Safe: SaaS (Software As A Service) are cloud-based software solutions and chances are you are using one of these SaaS solutions for work purposes. IT is typically responsible for implementing security controls for SaaS applications, but ultimate responsibility falls on IT and the end user jointly. Here is what you can do to help keep these solutions safe:

  • Tips: Avoid logging into a SaaS application on a public computer or public Wi-Fi network.
  • Never share your SaaS login credentials with unauthorized persons over digital format or in person. Lastly, if you need to step away, always lock your screen during an active session.

While these tips will help keep your consumer/patient data from falling into the wrong hands, always have a plan B- backup plan! Your plan B must incorporate saving important data to a backup drive daily. Most likely, there is already a backup protocol in place for your mission-critical work data; however, for sanity’s sake, back up your BYOD devices as well.

EVIO Logo

EVIO Labs Florida Achieves ISO17025:2017 Accreditation

By Aaron G. Biros
No Comments
EVIO Logo

EVIO Labs Florida received their ISO 17025:2005 accreditation in February of 2018. Last week, EVIO Labs Florida announced via a press release that they completed their ISO 17025:2017 accreditation and received a certification from AOAC International. The accreditation helped them to further expand their testing scope to shelf life and stability testing, the ability to detect harmful bacteria and calculate degradation in samples.

The certification that they received from AOAC helps verify their ability to conduct accurate and fair 3rd party testing, meeting Florida’s requirements for the market. Back when the laboratory first started in 2017, there were no requirements for lab testing cannabis products under Florida’s regulations.

Chris Martinez
Chris Martinez, co-founder and president of EVIO Labs Florida

Upon expanding to their Gainesville location in November last year and getting accredited to ISO 17025:2017 last week, EVIO Labs Florida expects the new location to be compliant and operational by April 2019, in preparation for the state’s new regulations. “Our team has worked diligently to maintain our stance as the Gold Standard in Cannabis Testing,” says Chris Martinez, co-founder and president of EVIO Lab Florida. “The ability to obtain the recent ISO 17025:2017 and AOAC certification is a testament to our dedication in maintaining public safety and product integrity in an ever-growing industry.”

Martinez is also presenting during the 2ndAnnual Cannabis Labs Virtual Conference on April 2, where he will discuss how EVIO Labs Florida began as a laboratory and how they were able to expand to a second location and grow their market presence in Florida. Click here to register for his talk.

How a Cloud QMS Can Get Cannabis Startups ISO 9001-Certified

By Mike Hansen
1 Comment

When it comes to compliance for cannabis startups, the ISO 9000 family of standards reigns supreme. Providing the guidelines for the concepts that make up a quality management system (QMS), the ISO family is composed of five standards: ISO 9000, 9001, 9002, 9003 and 9004. Outside of ISO 9001, ISO 9000 is the most important because it creates the foundation that guides all of the other standards.

ISO 9000 is split into two sections: fundamentals and vocabulary. Fundamentals covers the basic principles of quality management and the vocabulary section is a dictionary of quality management terminology. ISO 9000 is crucial because it provides direction on proper QMS implementation that will lead to achieving an ISO 9001 certification.

While the entire ISO 9000 family is focused on quality management systems that aim to help organizations “ensure that their products and services consistently meet customer’s requirements and that quality is consistently improved,” ISO 9001 is the only standard that lists actual requirements and requires certification.Cloud-based quality management software provides the flexibility and scalability, that cannabis startups need to comply with ISO 9001

Quality Management Systems (QMS)

When conceptualizing “quality management,” it is best to think of it as an organization’s definition of how it will meet the quality requirements of customers and other stakeholders who are affected by its work. Implementing this requires an extensive alignment of company processes and procedural governance.

It’s easiest to think of a QMS as the facilitator of outlined processes that are required to fulfill ISO 9001 requirements. For example, if an organization has defined a change request process, it could use a cloud-based QMS to put that process in place. However, the benefits of a cloud-based QMS don’t have to end at ISO 9001. It can also help organizations comply with other regulations like GxP.

ISO 9001 Requirements

ISO 9001 requirements can sound very generic because they’re meant to be applied to any organization, big or small, in any industry. The key to ISO 9001 is the concept of continuous improvement, which is why specific requirements for what “quality” is are not defined. Rather, companies must create objectives and work toward improving processes to meet those objectives. That said, a certified QMS still must do the following:

  • Meet the requirements of other stakeholders, for example, customer requirements and regulatory standards
  • Ensure that employees receive training outlining the quality requirements
  • Determine and document the processes, their interactions and their results
  • Be able to produce records to prove that system requirements have been met
  • Constantly monitor quality management software performance
  • Address any risks that could result from changes
  • Perform internal audits and correct any issues
  • Continuously improve the QMS

From creation to disposal, document protocols must be clear and properly followed.With that in mind, ISO 9001’s purpose is to evaluate whether or not a QMS does a good job of managing processes while also being able to help organizations identify areas that need improvement. In simple terms, ISO 9001 helps companies who were making an excellent product most of the time, make an excellent product every time.

How can cloud quality management software help you get your ISO 9001 certification? Once you create processes that adhere to ISO 9001 quality management standards, you have to put them into practice. Enter: quality management software. But, how exactly does it help?

Optimal Time to Value

First, cloud-based software is the most cost-efficient to implement. Secondly, since a QMS needs to be accessible to every employee regardless of whether they work at HQ or on-site, cloud QMS are built to be mobile-friendly and easily accessed from any location.

Automated Document Lifecycles & Version Control

From creation to disposal, document protocols must be clear and properly followed. As up-to-date documents are an important factor in maintaining high levels of quality, the most recent versions of approved documents should be readily available while previous editions should be hidden away.

With cloud quality management software, workflows can automate the review and approval processes by automatically sharing documents with the right reviewers. Then, after the document has been approved, the changes will automatically be applied to the master document while the obsolete version is archived, helping to remove any chance of it being accidentally used after the update.

Easy Document Location & Metadata

According to ISO 9001, searching through an organization’s documents should be as easy as searching with Google. It’s an added bonus when the quality management software enables users to add custom metadata to documents. Metadata is just extra information that helps to define a document (like file size, type, date modified). With certain cloud-based QMS’, you can add custom metadata fields to make documents easier to find. For example, you can add an “expiration date” field that allows you to look up policies based on when they are set to expire.With the growing number of data breaches happening every year, it’s important to address the security components of a QMS.

Document Traceability

In order to pass any ISO 9001 audit, there needs to be a complete audit trail for every document, including active documents and the earlier archived versions. While this might seem like a big ask, cloud quality management software helps make this simple. Every single change to a document, regardless of whether it’s the current or past version, is tracked. When combined with automated workflows, you’re able to produce a precise log of every change made by every user.

Advanced User Permissions & Central File Ownership

With the growing number of data breaches happening every year, it’s important to address the security components of a QMS. Many of these issues can be resolved with user permissions, which is generally related to managing users’ editing and sharing access. The proper view, edit, and approval rights go a long way to reducing the risk of human error.

Another feature that may seem like common sense is central file ownership. When the organization owns all of its documents, there’s no need to worry that important files will be lost or deleted. With one owner, the damage that can be inflicted by malicious third-parties is also limited.

Cloud-based quality management software provides the flexibility and scalability, that cannabis startups need to comply with ISO 9001. With the cloud as a foundation, these systems will continue to be assets for the cannabis industry as it gains momentum and expands more.

UKflag

The Rise of The Cannabis Clinic Model In Europe

By Marguerite Arnold
No Comments
UKflag

The opening of the UK’s first cannabis clinic is certainly cause for cheer. The effort, backed by a growing UK powerhouse that includes European Cannabis Holdings, has just opened its first private cannabis clinic in the UK, with two more on the way, including one in London by the end of the year.

The clinic will see patients who can afford to pay, in other words those who are privately insured and not covered by the NHS. The clinics will also serve those with chronic illnesses including chronic pain and epilepsy.

This development will also undoubtedly begin to increase the number of actual legal British cannabis patients, which is significant in and of itself. That count now, close to five months after cannabis became technically available via Schedule II prescription last year, is a shocking four patients. This is not a typo.

Presumably, this means that patients who enter the market this way will also be able to access newly imported Dutch cannabis which has just started to enter the country in bulk. Not to mention be able to find pharmacies who stock the drug.

For the backers of ECH (which include SOL Global), these are strategic moves indeed, which also bode well for those who can afford access.

But does this herald a new shift in the way that cannabis will be prescribed for the mainstream in the UK if not across Europe? That is not so clear.

The History of Cannabis Clinics… In Israel and Beyond

From the medical side of the world, it has been cannabis specialty pain clinics that have moved the conversation forward and served patients in places like Israel. In the latter part of the last decade, Israel slowly began to liberalize access not via dispensaries, as in the American model, but rather via specialty pain clinics paid for by the government. It was only when patient attendance at such prescription and dispensation points became flooded by applicants that the government, just a few short years ago, began to allow regular doctors to prescribe the drug and regular pharmacies to carry it.

What does this say about a British market where reform has just come, and only four patients?There are currently various initiatives sprinkled around Europe- mostly in the form of collectives of doctors who try to help get their patients cannabinoid treatments. See, for example, Kalapa Clinic in Spain. Or the “self help” group of patients in Germany loosely associated with Dr. Grotenhermann (one of the country’s best-known cannabinoid doctors).

Yet in Germany, the first country in Europe to liberalize medical use, there are as yet no cannabis clinics of either the private or public kind (although there have also been several unsuccessful attempts to do just this since 2017 in cities like Berlin and Munich). Part of the reason for the failure of the model in Germany at least is due to the fact that while specialty doctors are needed to help guide patients through the complicated approvals process, the payment for the same from the insurance companies (even private insurers) is so low it is not yet economically feasible to set up a clinic based on this model.

That said, it is clearly an idea that has occurred to more than a few entities. In Germany, however, land of (at least) 40,000 patients, this model has yet to take off. What does this say about a British market where reform has just come, and only four patients? Even as early as spring 2017, when the German government changed the law mandating insurance coverage, there were 800 German patients in the system.

Why The UK Is Likely To Be Different

Image: Flickr

Cannabis patients may actually be some of the best situated patients to ride out the Brexit crisis that will hit all drugs. Why? From the start, the strange classification of the drug is requiring bespoke solutions for niche patients. While it may not be fair, this in turn will at least start to create a core group of medical users.

Creating at least that first critical mass is also unbelievably important for greater access and reform, if not speeding it on its way. And the backers of the new clinics are well aware that impetus on this front will not come from the much-beleaguered NHS but rather private initiatives like the ones now being launched in the UK.

Disclaimer: ECH is a sponsor of the MedPayRx go to market pilot trial.