Marijuana businesses, especially those in the medical marijuana industry, often have access to sensitive consumer information. Many state laws mandate the collection and retention of such information, including photo identification and health records. By complying with these laws, marijuana businesses may become potential targets of data losses.

Failure to take reasonable measures to secure personal information can lead to considerable legal risk for marijuana companies.

Click here to read the full article on Bloomberg Law.