Office of the Information and Privacy Commissioner
November 15, 2018

Best Practices for Protecting Personal Information in Cannabis Purchase Transactions

On October 17, 2018, the possession and sale of cannabis became legal in Canada, in accordance with provincial legislative regimes.

The Personal Information Protection and Electronic Documents Act (PIPEDA) external link icon applies to generally to businesses, including cannabis retailers, that collect, use, and disclose the personal information of individuals in Newfoundland and Labrador. Cannabis is illegal in most jurisdictions outside of Canada. The personal information of cannabis purchasers is therefore very sensitive. For example, some countries may deny entry to individuals based on their purchase/usage of cannabis. Many individuals are also legitimately concerned about the potential for loss of employment opportunities, impacts on familial relationships and other potential consequences of identification as a user of cannabis.

While the jurisdiction of the Office of the Information and Privacy Commissioner of Newfoundland and Labrador extends only to public bodies, the Commissioner has created a Best Practice PDF icon document to assist cannabis retailers and purchasers in understanding their rights and obligations under PIPEDA by suggesting best practices regarding the use, collection and disclosure of personal information in cannabis purchase transactions.

- 30 -

Media contact
Janet O’Reilly
Senior Access & Privacy Analyst

2018 11 15                              12:15 p.m.