The Coast Reporter writes….
Cannabis sellers have considerable work to do in order to ensure the privacy and security of the personal information collected from people purchasing their products, B.C.’s information and privacy commissioner says.
“Surprisingly, many retailers didn’t understand that they collect personal information, despite the fact that all private licensed liquor and cannabis retailers collect some form of personal information from employees and customers who enter physical stores or make purchases online,” said Commissioner Michael McEvoy.
He asked how retailers can ensure they’re protecting personal information when they don’t recognize the fact they are collecting it. He said here are “serious gaps” in privacy protections
Indeed, McEvoy found, few such retailers maintain adequate privacy management programs or document privacy policies, despite obligations under B.C.’s private sector Personal Information Protection Act.
Among information retailers are collecting are: age, contact information, payment details; member information including contact data and, in some cases, purchase history; delivery transaction records including products purchased, prices charged, quantity, delivery fees and name and signature of recipient; web and computer information (IP address, geographical location of IP address, login credentials); and photographs or video surveillance images.
The findings came in the course of a compliance review of 30 retailers based on media stories and enquiries about the sector’s collection, use and disclosure of personal information.
The report said cannabis retailers are required to use security cameras to monitor all retail and product storage areas, entrances and exits, adding an additional collection of sensitive personal information.
THE REPORT20-84383 CRFRT LiquorCannabis Retailers final for web