Amidst the considerable growth of the cannabis industry in recent years, risks remain regarding compliance with state and federal privacy and data protection laws. This brief discussion will focus on the application of two prominent privacy and data security laws to the cannabis industry: the California Consumer Privacy Act (CCPA) and the Telephone Communications Privacy Act (TCPA).