--- title: Six Data Protection Recommendations for Your Cannabis Business description: California Governor Jerry Brown just signed a law that requires marijuana establishments to ensure that consumer information is reasonably protected. The overall risk to a marijuana business of a data breach is significantly enhanced by the fact that the possession and consumption of marijuana is still a federal crime, and employers can fire employees for […] image: https://cdn.prod.website-files.com/66525ec138843cc1ccb1c325/68c301ebaa36be33aa2af8f7_1a3f16114a452999cc4d7d6b36ae1602_Obedio%20march%20of%20progress.png --- [Skip to content](https://hs.getobedio.com/blog/2018/09/21/2018-9-21-six-data-protection-recommendations-for-your-cannabis-businesses#main-content) [![Obedio logo with black text and an orange graphic composed of four circles and a diagonal arrow pointing up and right.](https://cdn.prod.website-files.com/66525ec138843cc1ccb1c325/66529844eddaa630d6da1b42_obedio%20gold%20for%20white%20background.png)](https://getobedio.com) [Team](https://www.getobedio.com/team) [Pricing](https://www.getobedio.com/pricing) [Contact](https://www.getobedio.com/demo) [Blog](https://www.getobedio.com/blog) [Login](https://obed.io/v4/login) # Six Data Protection Recommendations for Your Cannabis Business ![Susan Ameel](https://7528315.fs1.hubspotusercontent-na1.net/hub/7528315/hubfs/raw_assets/public/mV0_d-cms-elevate-theme_hubspot/elevate/images/avatar-placeholder.jpg?width=48&height=48&name=avatar-placeholder.jpg) Susan Ameel September 21, 2018 California Governor Jerry Brown just signed a [law](http://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=201720180AB2402) that requires marijuana establishments to ensure that consumer information is reasonably protected. The overall risk to a marijuana business of a data breach is significantly enhanced by the fact that the possession and consumption of marijuana is still a federal crime, and employers can fire employees for cannabis use. A breach of personal information, including medical information, can have an immediate and disastrous effect. Below are some best practices that can help mitigate the risk of a consumer data breach: - Perform a risk assessment of your business to understand where you collect personal information, how it is stored and how it is protected (encryption, password, restricted access). - Retain only digital information that is stored appropriately and protected by a sufficient level of encryption. - Minimize the amount and type of consumer information collected and regularly purge information that is no longer needed. - Restrict access and the ability to download customer lists. This reduces the ability for employees to take the information to new employers. - Adopt an industry data protection standard such as NIST and customize it for your business risks and practices - Review and adopt customer data protection practices by other highly regulated industries such as health care, financial services or retail companies ## Share this post [mailto:https%3A%2F%2Fhs.getobedio.com%2Fblog%2F2018%2F09%2F21%2F2018-9-21-six-data-protection-recommendations-for-your-cannabis-businesses](mailto:https%3A%2F%2Fhs.getobedio.com%2Fblog%2F2018%2F09%2F21%2F2018-9-21-six-data-protection-recommendations-for-your-cannabis-businesses) ## Keep reading ### [California Ballot Measure Local Municipalities California voters will decide 118 local tax measures and $8.07 billion in bond requests on November 3](https://hs.getobedio.com/blog/california-voters-will-decide-118-local-tax-measures-and-8.07-billion-in-bond-requests-on-november-3) ### [Local Ordinance Zoning Ordinance Development Data Federal Realty Asks La Mesa to Approve a 165,000-Square-Foot Bass Pro Shops Where Macy's Stood at Grossmont Center](https://hs.getobedio.com/blog/federal-realty-asks-la-mesa-to-approve-a-165000-square-foot-bass-pro-shops-where-macys-stood-at-grossmont-center) [![Obedio your municipal data source](https://hs.getobedio.com/hs-fs/hubfs/google%20workspace-1.png?width=100&height=41&name=google%20workspace-1.png "Obedio your municipal data source")](https://getobedio.com) Obedio's business intelligence platform provides data and insights from over 25,000 municipalities, enabling retail, manufacturing, finance, real estate, and government clients to make informed decisions, assess risk, and identify opportunities. **Data Source & Liability Disclaimer:** The data presented on this website is aggregated from various official government and public entities ("The Original Government Sources"). This data may have been modified for use from its original source. The Original Government Sources do not vouch for the quality, accuracy, or timeliness of the data as presented here. All data is provided "as is." Neither Global Regulatory Risk Advisors, Inc. (d/b/a Obedio) nor The Original Government Sources make any representations or warranties as to the completeness, accuracy, or content of any data made available through this site. All warranties, whether express or implied, including implied warranties of merchantability or fitness for a particular purpose, are expressly disclaimed. **Usage & Intellectual Property:** While the underlying facts are public records, the specific compilation, organization, and presentation of this information are proprietary to ****Global Regulatory Risk Advisors, Inc. (d/b/a Obedio)****. Any unauthorized copying, distribution, or display of this proprietary presentation is prohibited. Copyright © 2018–2026 Global Regulatory Risk Advisors, Inc. (d/b/a Obedio) [|](https://getobedio.com/privacy)[Terms of Service](https://getobedio.com/terms)[|](https://getobedio.com/privacy)[Privacy Policy](https://getobedio.com/privacy) Privacy Policy · Legal · © 2025. All rights reserved. ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Susan Ameel", "url" : "https://hs.getobedio.com/blog/author/susan-ameel" }, "dateModified" : "2025-02-28T01:22:21.723Z", "datePublished" : "2018-09-21T13:24:20.000Z", "headline" : "Six Data Protection Recommendations for Your Cannabis Business", "mainEntityOfPage" : { "@id" : "https://hs.getobedio.com/blog/2018/09/21/2018-9-21-six-data-protection-recommendations-for-your-cannabis-businesses", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://hs.getobedio.com/hubfs/google%20workspace-1.png" } } } ``` ```json { "@context" : "https://schema.org", "@id" : "https://hs.getobedio.com/blog/2018/09/21/2018-9-21-six-data-protection-recommendations-for-your-cannabis-businesses#breadcrumb", "@type" : "BreadcrumbList", "itemListElement" : [ { "@type" : "ListItem", "item" : "https://www.getobedio.com/", "name" : "Home", "position" : 1 }, { "@type" : "ListItem", "item" : "https://hs.getobedio.com/blog", "name" : "Blog", "position" : 2 }, { "@type" : "ListItem", "item" : "https://hs.getobedio.com/blog/2018/09/21/2018-9-21-six-data-protection-recommendations-for-your-cannabis-businesses", "name" : "Six Data Protection Recommendations for Your Cannabis Business", "position" : 3 } ] } ```