It’s high time for privacy regulation?
The information and privacy commissioner of Saskatchewan, Canada, is proposing cannabis dispensaries be subject to the Health Information Protection Act (HIPA).
“The recommendation suggests that under HIPA — which regulates collection, storage, use and disclosure of personal health information and access to personal health information — the term ‘trustee’ be defined to include ‘corporations or persons which operate a facility providing a health service including massage therapists and cannabis dispensaries.”
“To some extent it depends on how much the dispensary is collecting, but it does strike us that if they’re collecting information on your purchases of marijuana then at least they have the obligation to safeguard that information,” said Ron Kruzeniski, who’s going into his sixth year as commissioner.”