By using this site, you agree to the Privacy Policy and Terms of Use.
Accept
Health Works CollectiveHealth Works CollectiveHealth Works Collective
  • Health
    • Mental Health
    Health
    Healthcare organizations are operating on slimmer profit margins than ever. One report in August showed that they are even lower than the beginning of the…
    Show More
    Top News
    improving patient experience
    6 Ways to Improve Patient Satisfaction Within Hospitals
    December 1, 2021
    degree for healthcare job
    What Are The Health Benefits Of Having A Degree?
    March 9, 2022
    custom software development is changing healthcare
    Digital Customer Journey Mapping and its Importance for Healthcare
    July 21, 2022
    Latest News
    Grounded Healing: A Natural Ally for Sustainable Healthcare Systems
    May 16, 2025
    Learn how to Renew your Medical Card in West Virginia
    May 16, 2025
    Choosing the Right Supplement Manufacturer for Your Brand
    May 1, 2025
    Engineering Temporary Hospitals for Extreme Weather
    April 24, 2025
  • Policy and Law
    • Global Healthcare
    • Medical Ethics
    Policy and Law
    Get the latest updates about Insurance policies and Laws in the Healthcare industry for different geographical locations.
    Show More
    Top News
    Can Thinking Younger Make You Live Longer?
    April 20, 2011
    Image
    Obesity’s Outlook Unchanged
    June 13, 2011
    When It’s An Emergency Elderly Not Treated As Well in Hospitals
    July 16, 2011
    Latest News
    Building Smarter Care Teams: Aligning Roles, Structure, and Clinical Expertise
    May 18, 2025
    The Critical Role of Healthcare in Personal Injury Recovery: A Comprehensive Guide for Victims
    May 14, 2025
    The Backbone of Successful Trials: Clinical Data Management
    April 28, 2025
    Advancing Your Healthcare Career through Education and Specialization
    April 16, 2025
  • Medical Innovations
  • News
  • Wellness
  • Tech
Search
© 2023 HealthWorks Collective. All Rights Reserved.
Reading: How HIPAA Applies to Medical Marijuana Businesses and Patients
Share
Notification Show More
Font ResizerAa
Health Works CollectiveHealth Works Collective
Font ResizerAa
Search
Follow US
  • About
  • Contact
  • Privacy
© 2023 HealthWorks Collective. All Rights Reserved.
Health Works Collective > eHealth > Medical Records > How HIPAA Applies to Medical Marijuana Businesses and Patients
eHealthMedical RecordsUncategorized

How HIPAA Applies to Medical Marijuana Businesses and Patients

Kristel Staci
Last updated: July 8, 2020 4:26 pm
Kristel Staci
Share
6 Min Read
SHARE

Without a doubt, health information is private and should be kept secure — but what counts as health information?

Contents
The Source of Marijuana-related HIPAA ConfusionKeeping Medical Marijuana Users Safe

As the U.S. Department of Health and Human Services outlines, protected health information includes any data regarding “an individual’s past, present or future physical or mental health, the provision of health care to the individual or the past, present or future payment for the provision of health care to the individual.” Additionally, HIPAA covers any information that identifies the individual in any way. This helps to ensure that no one but health care providers and predetermined family members can gain access to sensitive information.

HIPAA is quite strict in what it deems necessary of protection and how health care businesses can safely manage their patients’ data. Yet, there remains some confusion with regards to medical marijuana. Can medical marijuana patients be sure their health information is secure in dispensaries and beyond?

The Source of Marijuana-related HIPAA Confusion

To anyone unfamiliar with HIPAA’s rules and regulations, this issue might seem straightforward: Medical marijuana dispensaries handle patients the same way pharmacies do, and since pharmacies are subject to HIPAA, it seems obvious that medical dispensaries would need to enact the same protections for the sake of patients’ privacy.

More Read

Daycare Telemedicine Pilot
#HCSM Tweet Chat Founder Dana Lewis [PODCAST]
Digital Marketing Best Practices for Vein Clinics
Time Thieves
Mobile Health Around the Globe: Johns Hopkins Med Students Develop Symcat App for Self-Diagnosis

Unfortunately, the truth is that though dispensaries and pharmacies ostensibly provide similar services — they provide guidance and treatments to people suffering from serious medical conditions — they aren’t always treated the same under the law. There are three qualifications a business needs to have for HIPAA coverage:

1.       The business needs to be a health care provider

2.       The business needs to have protected health information

3.       The business is storing or transmitting protected health information

In most states, none of these qualifications clearly apply to dispensaries. For example, though medical marijuana patients need to visit a doctor and receive a qualifying diagnosis to gain access to medical marijuana dispensaries in Colorado, that diagnosis and the resulting recommendation aren’t technically “prescriptions” for marijuana, as outlined by the Colorado medical marijuana law. Thus, medical dispensaries aren’t functioning the same way as pharmacies in that they are not filling orders from doctors for specific drugs, and they might not count as health care providers in a state’s legal code.

What’s more, “protected health information” is not synonymous with any health information. For health information to qualify for HIPAA protection, it must fit HIPAA’s definition — which is admittedly broad. Most medical marijuana dispensaries in Colorado and beyond collect some information on their customers, but whether this information is personally identifiable, pertaining to health or health care or transmitted in any way really depends on the individual dispensary. Some dispensaries record the marijuana card of every patient who makes a purchase, as well as their underlying condition for the purposes of tailoring product recommendations. This behavior almost certainly meets the conditions of “protected health information.” However, other dispensaries might only collect an email address or might require customers to pay with cash; in these cases, the dispensary does not interact with protected health information and thus isn’t subject to HIPAA’s rules.

Finally, the bulk of the confusion surrounding HIPAA’s application to medical marijuana dispensaries comes from the persistent problem of marijuana’s place as a Schedule I drug under federal law. HIPAA is a federal act, and it is enforced by the Federal Government — but if the Federal Government believes that selling marijuana is inherently illegal, why should it extend coverage to medical marijuana businesses and their patients? For now, the answer seems to be a big “I don’t know.”

Keeping Medical Marijuana Users Safe

As much as we might want to believe that everyone in the cannabis industry is doing their best to keep their customers safe and their information secure, the truth is that businesses often cut corners and make mistakes. All marijuana users, but especially medical marijuana users who must surrender sensitive information about themselves and their health conditions, deserve a certain level of protection, and the government should be able to provide that protection.

Medical marijuana patients should learn the law in their state and ask questions of their dispensaries if they are unsure how their health information is being handled. Cannabis business owners should take appropriate precautions to secure their systems against attacks that could expose sensitive health data, and state governments should expand regulations to define dispensaries as health care providers akin to pharmacies. Finally, the Federal Government needs to take steps to accept marijuana as not only a non-dangerous substance but as an exceedingly valuable medical treatment. Until that happens, there is no guarantee that HIPAA will apply to medical marijuana.

Share This Article
Facebook Copy Link Print
Share

Stay Connected

1.5kFollowersLike
4.5kFollowersFollow
2.8kFollowersPin
136kSubscribersSubscribe

Latest News

Clinical Expertise
Building Smarter Care Teams: Aligning Roles, Structure, and Clinical Expertise
Health care
May 18, 2025
Grounded Healing: A Natural Ally for Sustainable Healthcare Systems
Grounded Healing: A Natural Ally for Sustainable Healthcare Systems
Health
May 15, 2025
Learn how to Renew your Medical Card in West Virginia
Learn how to Renew your Medical Card in West Virginia
Health
May 15, 2025
Dr. Klaus Rentrop Shares Acute Myocardial Infarction heart treatment
Dr. Klaus Rentrop Shares Acute Myocardial Infarction
Cardiology
May 13, 2025

You Might also Like

health IT professionals
BusinesseHealthFinanceMedical RecordsMobile HealthTechnology

Health IT and Digital Health Jobs, Qualifications, and Certification Benefits

October 28, 2014

Continuous Partial Attention

October 4, 2012

New Zealand Making a Renewed Effort to Attract Patients from the US With Non-Tort Surgical Procedures-Medical Tourism

February 14, 2011

How to Develop Tweets That Will Get Consumers Chirping

November 3, 2014
Subscribe
Subscribe to our newsletter to get our newest articles instantly!
Follow US
© 2008-2025 HealthWorks Collective. All Rights Reserved.
  • About
  • Contact
  • Privacy
Welcome Back!

Sign in to your account

Username or Email Address
Password

Lost your password?