Tag Archives: standard

Washington Lab Conducts Transparency Study

By Aaron G. Biros
2 Comments

Earlier this week Capitol Analysis Group, a cannabis-testing laboratory based in Lacey, Washington, announced they are conducting a “data-driven Lab Transparency Project, an effort to improve accuracy of cannabis testing results in the state through transparency and a new third-party auditing process,” according to a press release. They plan to look through the state’s traceability data to find patterns of deviations and possible foul play.

The project launch comes after Straightline Analytics, a Washington cannabis industry data company, released a report indicating they found rampant laboratory shopping to be present in the state. Lab shopping is a less-than-ethical business practice where cannabis producers look for the lab that will give them the most favorable results, particularly with respect to higher potency figures and lower contamination fail rates.“Lab shopping shouldn’t exist, because it is a symptom of lab variability,”

According to the press release, their report “shows that businesses that pay for the highest number of lab tests achieve, on average, reported potency levels 2.71% higher than do those that pay for the lowest number of lab tests.” They also found labs that provide higher potency figures tend to have the largest market share.

The Lab Transparency Project logo
The Lab Transparency Project logo

The goal of The Lab Transparency Project is to provide summaries of lab data across the state, shining a light in particular on which labs provide the highest potency results. “Lab shopping shouldn’t exist, because it is a symptom of lab variability,” says Jeff Doughty, president of Capitol Analysis. “We already have standards that should prevent variations in lab results and proficiency testing that shows that the labs are capable of doing the testing.” The other piece to this project is independent third party auditing, where they hope other labs will collaborate in the name of transparency and honesty. “Problems arise when the auditors aren’t looking,” says Doughty. “Therefore, we’re creating the Lab Transparency Project to contribute to honesty and transparency in the testing industry.”

Dr. Jim McRae, founder of Straightline Analytics, and the author of that inflammatory report, has been a vocal critic of the Washington cannabis testing industry for years now. “I applaud Capitol Analysis for committing to this effort,” says McRae. “With the state’s new traceability system up and running following a 4-month breakdown, the time for openness and transparency is now.” Dr. McRae will be contributing to the summaries of lab data as part of the project.

According to Doughty, the project is designed to be a largely collaborative effort with other labs, dedicated to improving lab standards and transparency in the industry.

Multi-analyte Configuration for Cannabis Testing Services

Managing Cannabis Testing Lab Workflows using LIMS

By Dr. Susan Audino
No Comments
Multi-analyte Configuration for Cannabis Testing Services

With the state led legalization of both adult recreational and medical cannabis, there is a need for comprehensive and reliable analytical testing to ensure consumer safety and drug potency. Cannabis-testing laboratories receive high volumes of test requests from cannabis cultivators for testing quantitative and qualitative aspects of the plant. The testing market is growing as more states bring in stricter enforcement policies on testing. As the number of testing labs grow, it is anticipated that the laboratories that are now servicing other markets, including high throughput contract labs, will cross into cannabis testing as regulations free up. As the volume of tests each lab performs increases, the need for laboratories to make effective use of time and resource management, such as ensuring accurate and quick results, reports, regulatory compliance, quality assurance and many other aspects of data management becomes vital in staying competitive.

Cannabis Testing Workflows

To be commercially competitive, testing labs offer a comprehensive range of testing services. These services are available for both the medical and recreational cannabis markets, including:

  • Detection and quantification of both acid and neutral forms of cannabinoids
  • Screening for pesticide levels
  • Monitoring water activity to indicate the possibility of microbiological contamination
  • Moisture content measurements
  • Terpene profiling
  • Residual solvents and heavy metal testing
  • Fungi, molds, mycotoxin testing and many more

Although the testing workflows differ for each test, here is a basic overview of the operations carried out in a cannabis-testing lab:

  1. Cannabis samples are received.
  2. The samples are processed using techniques such as grinding and homogenization. This may be followed by extraction, filtration and evaporation.
  3. A few samples will be isolated and concentrated by dissolving in solvents, while others may be derivatized using HPLC or GC reagents
  4. The processed samples are then subjected to chromatographic separation using techniques such as HPLC, UHPLC, GC and GC-MS.
  5. The separated components are then analyzed and identified for qualitative and quantitative analysis based on specialized standards and certified reference materials.
  6. The quantified analytical data will be exported from the instruments and compiled with the corresponding sample data.
  7. The test results are organized and reviewed by the lab personnel.
  8. The finalized test results are reported in a compliant format and released to the client.

In order to ensure that cannabis testing laboratories function reliably, they are obliged to follow and execute certain organizational and regulatory protocols throughout the testing process. These involve critical factors that determine the accuracy of testing services of a laboratory.

Factors Critical to a Cannabis Testing Laboratory 

  • Accreditations & Regulatory Compliance: Cannabis testing laboratories are subject to regulatory compliance requirements, accreditation standards, laboratory practices and policies at the state level. A standard that most cannabis testing labs comply to is ISO 17025, which sets the requirements of quality standards in testing laboratories. Accreditation to this standard represents the determination of competence by an independent third party referred to as the “Accreditation Body”. Accreditation ensures that laboratories are adhering to their methods. These testing facilities have mandatory participation in proficiency tests regularly in order to maintain accreditation.
  • Quality Assurance, Standards & Proficiency Testing: Quality assurance is in part achieved by implementing standard test methods that have been thoroughly validated. When standard methods are not available, the laboratory must validate their own methods. In addition to using valid and appropriate methods, accredited laboratories are also required to participate in appropriate and commercially available Proficiency Test Program or Inter-Laboratory Comparison Study. Both PT and ILC Programs provide laboratories with some measure of their analytic performance and compare that performance with other participating laboratories.

    Multi-analyte Configuration for Cannabis Testing Services
    CloudLIMS Cannabis Testing LIMS: Multi-analyte Configuration for Cannabis Testing Services
  • Real-time Collaboration: Testing facilities generate metadata such as data derived from cannabis samples and infused products. The testing status and test results are best served for compliance and accessibility when integrated and stored on a centralized platform. This helps in timely data sharing and facilitates informed decision making, effective cooperation and relationships between cannabis testing facilities and growers. This platform is imperative for laboratories that have grown to high volume throughput where opportunities for errors exist. By matching test results to samples, this platform ensures consistent sample tracking and traceability. Finally, the platform is designed to provide immediate, real-time reporting to individual state or other regulatory bodies.
  • Personnel Management: Skilled scientific staff in cannabis-testing laboratories are required to oversee testing activities. Staff should have experience in analytical chromatography instruments such as HPLC and GC-MS. Since samples are often used for multi-analytes such as terpenes, cannabinoids, pesticides etc., the process often involves transferring samples and tests from one person to another within the testing facility. A chain of custody (CoC) is required to ensure traceability and ‘ownership’ for each person involved in the workflow.

LIMS for Laboratory Automation

Gathering, organizing and controlling laboratory-testing data can be time-consuming, labor-intensive and challenging for cannabis testing laboratories. Using spreadsheets and paper methods for this purpose is error-prone, makes data retrieval difficult and does not allow laboratories to easily adhere to regulatory guidelines. Manual systems are cumbersome, costly and lack efficiency. One way to meet this challenge is to switch to automated solutions that eliminate many of the mundane tasks that utilize valuable human resources.. Laboratory automation transforms the data management processes and as a result, improves the quality of services and provides faster turnaround time with significant cost savings. Automating the data management protocol will improve the quality of accountability, improve technical efficiency, and improve fiscal resources.

cloudlims screenshot
Real Time Test Status in CloudLIMS

A Laboratory Information Management System (LIMS) is a software tool for testing labs that aids efficient data management. A LIMS organizes, manages and communicates all laboratory test data and related information, such as sample and associated metadata, tests, Standard Operating Procedures (SOPs), test reports, and invoices. It also enables fully automated data exchange between instruments such as HPLCs, GC-FIDs, etc. to one consolidated location, thereby reducing transcription errors.

How LIMS Helps Cannabis Testing Labs

LIMS are much more capable than spreadsheets and paper-based tools for streamlining the analytical and operational lab activities and enhances the productivity and quality by eliminating manual data entry. Cloud-enabled LIMS systems such as CloudLIMS are often low in the total cost of acquisition, do not require IT staff and are scalable to help meet the ever changing business and regulatory compliance needs. Some of the key benefits of LIMS for automating a cannabis-testing laboratory are illustrated below [Table 1]:

Key Functionality Benefit
Barcode label designing and printing Enables proper labelling of samples and inventory

Follows GLP guidelines

Instant data capture by scanning barcodes Facilitates quick client registration and sample access
3600 data traceability Saves time and resources for locating samples and other records
Inventory and order management Supports proactive planning/budgeting and real time accuracy
Custodian management Promotes overall laboratory organization by assigning custodians for samples and tests

Maintains the Chain-of-custody (CoC)

Test management Accommodates pre-loaded test protocols to quickly assign tests for incoming samples
Accounting for sample and inventory quantity Automatically deducts sample and inventory quantities when consumed in tests
Package & shipment management Manages incoming samples and samples that have been subcontracted to other laboratories
Electronic data import Electronically imports test results and metadata from integrated instruments

Eliminates manual typographical errors

Report management Generates accurate, customizable, meaningful and test reports for clients

Allows user to include signatures and additional sections for professional use

21 CFR Part 11 compliant Authenticates laboratory activities with electronic signatures
ISO 17025 accreditation Provides traceable documentary evidence required to achieve ISO 17025 accreditation
Audit trail capabilities Adheres to regulatory standards by recording comprehensive audit logs for laboratory activities along with the date and time stamp
Centralized data management Stores all the data in a single, secure database facilitating quick data retrieval
Workflow management Promotes better data management and resource allocation
High-configurability Enables modification of screens using graphical configuration tools to mirror testing workflows
State compliance systems Integrates with state-required compliance reporting systems and communicates using API
Adheres to regulatory compliance Creates Certificates of Analysis (CoA) to prove regulatory compliance for each batch as well as batch-by-batch variance analysis and other reports as needed.
Data security & confidentiality Masks sensitive data from unauthorized user access

 

Cloud-based LIMS encrypts data at rest and in-transit while transmission between the client and the server

Global accessibility Cloud-based LIMS provides real-time access to laboratory data from anytime anywhere
Real-time collaboration Cloud-based LIMS enhances real-time communication within a laboratory, between a laboratory and its clients, and across a global organization with multiple sites

Table 1. Key functionality and benefits of LIMS for cannabis testing laboratories

Upon mapping the present day challenges faced by cannabis testing laboratories, adopting laboratory automation solutions becomes imperative. Cloud-based LIMS becomes a valuable tool for laboratory data management in cannabis testing laboratories. In addition to reducing manual workloads, and efficient resource management, it helps labs focus on productive lab operations while achieving compliance and regulatory goals with ease.

For more information on this, check out a webinar here: Webinar: How to Meet Cannabis Testing Standards and Regulatory Requirements with LIMS by Stephen Goldman, laboratory director at the State of Colorado certified Cannabis testing facility, PhytaTech.

NACB Releases Packaging and Labeling Standards for Public Review

By Aaron G. Biros
No Comments

Last week, the National Association of Cannabis Businesses (NACB) announced the publication of their Packaging and Labeling National Standard, initiating a comment period for public review. The NACB, which launched in June of 2017, is the first-ever self-regulatory organization (SRO) for cannabis businesses in the United States.

According to the press release, the Packaging and Labeling National Standard, the first standard for them to publish, is designed to help protect consumers and show regulators and financial institutions that members of NACB operate ethically and responsibly.

Andrew Kline, president of NACB

According to Andrew Kline, president of NACB, the standard is based on regulators’ priorities, among other stakeholder inputs. “The NACB believes that self-regulation is the most effective course of action for our members to control their own destiny in the face of regulators’ growing need to intervene,” says Kline. “The creation and adoption of national, voluntary standards that are aligned with regulators’ priorities takes input from government, NACB members, and subject matter experts into careful consideration. Through this process, the SRO identified product packaging and labeling as our first priority because it impacts so many issues related to health and safety.”

Here are some of the major areas the standard addresses, from the press release:

  • Child-resistant packaging guidelines for all cannabis products
  • Consistent labeling that identifies the cannabis product’s origin, cultivator and processor
  • Inclusion of warning statements regarding health risks associated with cannabis consumption, such as advising consumers to not drive or operate heavy machinery while using the product, and that the intoxicating effects of the product may be delayed after consumption
  • Avoiding packaging and labeling that appeal to minors
  • Requirements and methods for listing all ingredients present in the product
  • Inclusion of major food allergen warnings and information on cannabis edibles based upon U.S. Food & Drug Administration guidelines
  • Guidelines on how to address health and medical claims for cannabis products

The public review and comment period lasts until February 21st. During that time, every comment submitted will be reviewed and could impact the final language of the standard. Prior to adopting the new standard, they write a final draft after the comment period and bring it to members for a final vote.

Once the final standard is in place, the NACB enforces the standard with their members. If a member doesn’t comply, they can be removed from the organization or penalized.

Towards the end of the press release, they hint at news coming in 2018 for their members. “To help aid members in complying with the requirements of state governments and the NACB’s National Standards, the NACB expects to launch a technology solution exclusively for members in 2018,” reads the press release. “The technology platform is also expected to help members meet the rigorous due diligence required by financial institutions and business partners, by creating an auditable ledger of compliance and financial records.”

Ask The Expert: Exploring Cannabis Laboratory Accreditation Part 1

By Aaron G. Biros
No Comments

Laboratories throughout the world and in a variety of industries get accredited to demonstrate their competency. In the cannabis industry, some states are beginning to require it and many labs get accredited even if their state doesn’t require it. So what does accreditation mean and why is it so important?

The International Organization for Standardization (ISO) is a standard-setting organization that works to promote industrial and commercial standards. The standards set by ISO are designed to help prove a product’s safety and quality to a certain minimum level.

The ISO/IEC 17025:2005 standard sets specific requirements to demonstrate the competence of a lab for carrying out tests. It essentially shows customers or regulators that a lab has the skills and scientific know-how to perform testing, certifying the lab is capable. Accreditation means certifying a lab to that standard and is synonymous with both quality and competence of an organization.

Michelle Bradac, senior accreditation officer at A2LA

The American Association for Laboratory Accreditation (A2LA), founded in 1978, is a non-profit, internationally recognized accreditation body in the United States that offers laboratory and laboratory-related accreditation services and training. They have worked in the cannabis industry to accredit a number of cannabis laboratories to the ISO/IEC 17025:2005 standard. In this series of articles, we sit down with experts from A2LA to learn more about cannabis lab accreditation, why it’s so important and some of the challenges labs face when seeking accreditation.

In the first part of this series, we sit down with Michelle Bradac, senior accreditation officer at A2LA, to learn the basics. Michelle earned a bachelor’s degree in Biology at Towson State University and then attended Hood College, earning a master’s certificate in Regulatory Compliance in Biomedical Science. She has worked at A2LA for eight years, assisting in the accreditation of food testing, environmental testing and cannabis testing laboratories to ISO/IEC 17025, as well as performing quality system assessments. She also facilitates a number of accreditation programs including Field Sampling Measurement Organizations, STAC (Air Emissions) and Cannabis Testing. Bradac is also a member of the ASTM Cannabis Working Group and the ACIL Cannabis Working Group.

In the next part of this series, we will hear about specific requirements in states, some of the benefits of using ISO/IEC 17025 and the influx of start-up or novice testing laboratories.

CannabisIndustryJournal: What is Laboratory Accreditation? 

Michelle Bradac: Laboratory accreditation is a formal means of determining and recognizing the technical competence of laboratories to perform specific types of testing, via the use of an independent third party accreditation body. It provides laboratory users a mechanism to identify and select reliable testing organizations. Use of ISO/IEC 17025 as a basis for laboratory accreditation is internationally recognized as THE conformity assessment standard to which laboratories are accredited; it is used in the USA by both Public (State, local, federal (FDA, USDA, CDC, DoD and EPA) and private laboratories for testing of foods & feeds, drugs, cosmetics, tobacco, natural products and cannabis (among other materials and products).

CIJ: How does laboratory accreditation benefit the cannabis testing laboratory? 

Michelle: It provides a framework for continuous improvement and self-correction where the cannabis testing laboratory data management system is independently reviewed and blinded sample Proficiency Testing is encouraged.

CIJ: How does laboratory accreditation benefit the medical cannabis recommending physician?

Michelle: The physician gains a greater degree of assurance that the material provided by the dispensary is what the label says it is. This is especially important in working with patients that are immunocompromised where heavy metals, residual solvents and harmful pesticides could have negative health consequences.

CIJ: How does the testing of medical cannabis by an accredited laboratory benefit the patient?

Michelle: The patient gains increased confidence that the label accurately reflects the potency and chemical properties of the product.

CIJ: What specific challenges does A2LA face in accrediting cannabis testing laboratories?

Michelle: Much of the typical infrastructure is lacking or only now being developed. This ranges from proficiency testing programs, Reference Material Producers, method development and sampling procedures. There is also difficulty in ensuring that laboratories are appropriately validating methods in states where cannabis product is not yet available.

CIJ: Why is A2LA the optimal choice for ensuring the quality and reliability of the results produced by medical marijuana testing laboratories?

Michelle: A2LA has by far the most experience as an accreditor of laboratories that perform testing of natural plant products. We have been performing assessments of and granting accreditation to these types of laboratories for over twenty years. This results in our staff and our assessor corps who are then able to provide valuable insight and technical sophistication that other accreditation bodies do not have. Specific to the cannabis industry, A2LA is also represented in all the major standards development organizations, tradeshows and industry groups; which strengthens our understanding of the industry and ability to assist our customers towards meeting their goal of obtaining accreditation.

Massachusetts Recreational Consumer Council Launches Education Program

By Aaron G. Biros
No Comments

The Massachusetts Recreational Consumer Council (MRCC) is an interesting nonprofit that recently launched an educational campaign, called Consume Responsibly Massachusetts. For many cannabis advocates who watched their states legalize the drug, consumer education is a very important part of moving forward. As states across the East Coast implement regulatory frameworks for the cannabis industry, there is a sense of urgency to make sure the rules are right the first time, and that cannabis businesses become responsible stewards of their new market.

In the wake of pesticide recalls in the west and related public health concerns, the issues surrounding consumer safety and how states protect that are now front and center. “The purpose of Consume Responsibly Massachusetts is to keep adult-consumers informed of their rights in the state,” says Jefferson. “It’s also an ongoing effort to bring consumers into the world of cannabis politics and science.”

The MRCC’s mission is to help protect the safety of recreational cannabis consumers by bridging the information gap between businesses, legislators and communities. “We work at the state and local level advocating for sensible recreational marijuana policy and regulations,” reads a press release. According to Kamani Jefferson, president of the MRCC, bridging that gap requires a lot of community engagement. “I was a field organizer on the Campaign to Tax and Regulate Marijuana here in Massachusetts so this is extremely important to me,” says Jefferson. “MRCC participated in this year’s Cambridge 5K Freedom Run.” He says getting out in the community like this is one of many ways to help provide educational opportunities, help promote local cannabis businesses and get rid of the “lazy stoner stigma.”

Kamani Jefferson, president of the MRCC

For the MRCC, the issue of craft cannabis is a significant part of the organization’s philosophy, in addition to product safety and others. “Craft Cannabis will benefit the consumer in an entirely new way,” says Jefferson. “Members of the community will have a chance to provide products and directly affect the economy.” Because local owners tend to be more involved in their towns, Jefferson says residents will get to make more of an impact than nonlocal owners. And he’s right- small, local businesses contribute substantially more to local economies and communities than large companies. Between 1993 and 2013, small businesses created roughly 63% of all new jobs in the United States. With the new cannabis market comes a promising opportunity for local economies.

“The Massachusetts cannabis industry is developing and growing fast,” says Jefferson. “Aside from the medical marijuana production sites, the new recreational marijuana law grants production participation in the regulated recreational marijuana industry to farmers, in the form of craft marijuana cultivator cooperative systems.” While he thinks this is a good opportunity for small businesses and communities alike to gain a foothold in the market, Jefferson is hesitant to endorse Massachusetts’ regulatory policies. “A lack of regulatory oversight from the CCC [Cannabis Control Commission] places the cannabis industry in a vulnerable position,” says Jefferson. “If we want clear, consistent standards for clean and safe products prioritized, then we need consistent testing data.” Jefferson is arguing for more regulatory oversight for safety issues, such as contaminant testing. This is one of a handful of issues they are pressing for sensible cannabis policy in Massachusetts.

Here are some of the issues they support:

  • Local Cannabis: Equitable licensing for small and medium sized local businesses from members of the community.
  • Quality Control: Access to a variety of clean and safe cannabis products in retail dispensaries, tested for harmful contaminants, mold, pesticides and fungicides.
  • Responsible + Safe Consumption: Access to educational materials about proper dosage, methods of ingestion, quality analysis, understanding product labels and general cannabis information.
  • High Potency Flowers, Edibles, & Concentrates: Access, non-restriction to high potency marijuana products of all forms.
  • Home Grow: Ability to grow at least 6 plants per person, 12 per household as stated in Question 4.
  • Social Use: The ability to consume in designated establishments outside of the household.
  • Expungement: Sentence commutation and record expungement for convictions involving non-violent marijuana charges that are now legal.
  • Research: University supported biological, behavioral and cognitive marijuana research to further our understanding and capabilities of the cannabis plant.

SC Labs Santa Cruz Gets ISO 17025 Accreditation

By Aaron G. Biros
No Comments

Earlier this week, SC Labs issued a press release announcing they achieved ISO/IEC 17025:2005 accreditation for the cannabinoids panel at their Santa Cruz location.

“We are thrilled to announce our ISO accreditation as this is one of our most important achievements over the past seven years of serving the cannabis industry and demonstrates our commitment to serving our clients with integrity,” says Jeff Gray, co-founder and chief executive officer of SC Labs. ISO 17025 accreditation represents an international standard for a laboratory’s technical competence in producing accurate test results.

“Being accredited to this International Standard demonstrates our robust quality system, technical competence, the calibration and suitability of our instrumentation and our ability to produce precise and accurate test data,” says Gray. “For clients, it enhances their confidence in our services and their choice in a business partner, provides them with additional legal defensibility in complying with upcoming regulations, and enhances the integrity of their products based on SC Labs results.”

SC Labs is currently expanding in California, growing their Southern California and Santa Cruz locations, and adding field offices throughout the state, according to the press release.

Las Vegas Gets First ISO 17025-Certified Cannabis Lab

By Aaron G. Biros
1 Comment

According to a press release published earlier this week, DB Labs achieved accreditation, becoming the first ISO 17025-accredited cannabis laboratory in Las Vegas. DB Labs received their accreditation with the help of Perry Johnson Laboratory Accreditation, Inc., an organization that provides third-party assessments to ISO/IEC 17025:2005. DB Labs was also the very first cannabis-testing lab in the state of Nevada.

According to Susan Bunce, president of DB Labs, ISO accreditation is one way the cannabis lab space is being standardized. “As the first cannabis-testing laboratory in Nevada, DB Labs has always taken patient safety very seriously and has always tried to raise the bar,” says Bunce. “The world of cannabis testing is often compared to the Wild West: each lab uses state regulations to set their standards, but it leaves a lot of room for subjective interpretations. The ISO accreditation removes the ambiguity and guarantees a consistent level of testing to users. We are proud to be a part of that.”

According to Tracy Szerszen, president and operations manager at Perry Johnson, ISO/IEC 17025:2005 is an international standard utilized to accredit testing laboratories. “This accreditation provides confidence to end-users that the test results they receive are reliable,” says Szerszen. “Laboratories achieving this accreditation have demonstrated their ability to adequately perform tests using appropriate equipment, environmental conditions and technical staff.” She says another requirement for that accreditation is a quality management system, which essentially helps manage operations and client needs. “Achieving this type of accreditation is quite challenging for laboratories especially with all of the new up-and-coming regulations, technologies and methods in the cannabis industry,” says Szerszen. “Laboratory testing is such a critical part of this industry and becoming accredited provides assurance that they are performing to the highest standard.”

As Szerszen points out, laboratory accreditation can provide a consumer that sense of confidence and trust in the product’s lab testing. “PJLA would like to commend DB Labs for achieving their ISO/IEC 17025:2005 accreditation and their commitment towards meeting the standard,” says Szerszen.

The news of their accreditation comes at an opportune time: With surging consumer demand at the outset of recreational sales, the state has raked in millions of dollars in sales within the first weekend. Recreational cannabis sales in Nevada began on July 1st, and a statewide cannabis product shortage recently led to Governor Sandoval issuing a statement of emergency, allowing more applications for distribution licenses to be considered.

MJ Freeway’s Source Code Stolen & Published Online

By Aaron G. Biros
9 Comments

Portions of MJ Freeway’s source code were reportedly stolen and posted in Reddit threads as well as on Gitlab.com, a source code hosting website. On June 15th, the account “MJFreeway Open Source” was made on Gitlab.com, and portions of the source code were posted, but have since been taken down. Source code is essentially a list of commands of a program, the basis for making improvements and modifications to a software system. Source code can sometimes contain sensitive information. To be clear, MJ Freeway does not use an open source model; their source code is the basis of their traceability software. Open source is a tool that fosters public collaboration on software development, helping identify weaknesses or areas for improvement.

When asked to comment on the matter, MJ Freeway issued the following statement:

“Last week we discovered that someone had obtained an outdated portion of MJ Freeway’s source code. This incident has absolutely no impact on our systems or MJ Freeway services, and client and patient data is not at risk. While this theft poses no risk to our clients, patients, or business operations, we take any incident involving unauthorized access very seriously and have reported it to the Colorado Bureau of Investigation.

Unfortunately, it has come to our attention that our competitors are spreading inaccurate information about the incident, including baseless claims about SSL info and the potential for client data being compromised – neither of which is true. We encourage our customers to contact us directly with any questions they may have.

We follow or exceed all relevant industry security standards and are confident that we have the most robust security measures in our industry. None of our peers come close. However, we live in a world of determined cyber-criminals and we operate in a competitive environment. Success and size makes a company a bigger target for malicious actors, as other large companies also know. We will continue to investigate and take follow-up action as we learn more about this incident.”

On Sunday, June 18th, a user by the name of ‘techdudes420’ posted in the subreddit, r/weedbiz, a thread titled “MJFreeway goes open source.” The link for that post was the Gitlab.com page where MJ Freeway’s source code was published briefly. The same user then published a second reddit post the following day with the same link to the stolen code, but this time in the r/COents, a subreddit for the Colorado cannabis community. MJ Freeway is based in Denver. That post claimed the user found the stolen source code with a quick search and that the user was banned because of that. The moderator of the thread chimed in, saying they banned the user for posting the stolen code. “We received a takedown request from the software owner stating the code had been stolen and released without permission,” says the moderator. “After investigating the matter I reached the same conclusion and removed the thread.” The moderator then updated the comment shortly after: “Edit: As for OP [original poster] ‘finding’ the code, if that were true I don’t know why he or she would have created a new Reddit account just to post the link.”

In addition to their own cybersecurity analysis, a spokeswoman for MJ Freeway says they will be performing a third party audit and analysis this week as well. When that information becomes available, we will update this article.


Update: Multiple sources have reported that portions of MJ Freeway’s source code are still available online on torrent sites like PirateBay.

National Association of Cannabis Businesses Announces Launch

By Aaron G. Biros
No Comments

According to a press release, the National Association of Cannabis Businesses (NACB) launches today, becoming the first self-regulatory organization (SRO) for the cannabis industry. With their mission to help compliance, transparency and growth of cannabis companies, they will lead member businesses in establishing voluntary national standards, addressing issues like advertising and financial integrity.

A team of experienced legal regulatory professionals will lead member businesses through a process of developing those standards. Andrew Kline, president of the NACB, was a senior advisor to Vice President and then-Senator Joseph Biden, served as an Assistant United States Attorney in the District of Columbia and in the Enforcement Bureau of the FCC. Their chief executive officer, Joshua Laterman, began working on NACB three years ago, but before that he had two decades of experience as general counsel at global financial and investment institutions. Doug Fischer, their chief legal officer and director of standards, spent the past nine years in cannabis law and financial regulation and enforcement at the law firm Cadwalader Wickersham and Taft.

Andrew Kline, president of NACB

According to the press release, SROs have proven to be effective in other industries at limiting government interference and overregulation, while preserving public safety. FINRA (Financial Industry Regulatory Authority) is an example of an SRO that serves the financial industry. It is a non-governmental organization that helps regulate member brokerage firms and exchange markets, working to help their members stay compliant with regulations set by the Securities and Exchange Commission. Much like the rapid growth of the financial markets over the past 30 years, the cannabis industry is experiencing exponential growth while regulators try to keep up.

“The cannabis industry is on a historical growth trajectory that is expected to continue for years to come, but even the most established, well-run businesses recognize that the future favors the prepared,” says Josh Laterman, CEO of NACB. “As other industries have experienced with their SROs, establishing and committing to voluntary national standards will enable cannabis business owners to demonstrate impeccable business and compliance practices to consumers, regulators, banks and investors.”

According to Doug Fischer, chief legal officer and director of standards, they will focus on a variety of topics that align with the federal enforcement priorities. So these standards might not cover some of the product safety and quality aspects that ASTM International and FOCUS touch on, rather addressing issues like advertising, financial integrity, preventing diversion across state lines, prevention of youth use and corporate responsibility. Another important distinction to make is that an organization like ASTM International sets standards, but the NACB as an SRO is tasked with enforcing them as well.

Doug Fischer, director of standards and chief legal counsel

“From our perspective, businesses have been having a hard time navigating the complex state regulations, particularly those operating in multiple states,” says Fischer. “That is further complicated by the current administration not solidifying their stance on recreational cannabis.” The Cole Memo put out under the Obama Administration set clear federal enforcement priorities, allowing cannabis businesses and states to identify ways to avoid federal government interference or prosecution.

The current administration has done nothing but fuel regulatory uncertainty. This is particularly important given this week’s news regarding the leaders at the Justice Department making inflammatory and threatening statements regarding legal medical cannabis. “It causes these businesses, who should be focused on their own day-to-day operations, instead focusing on complying with what they think the federal government wants and regulatory compliance with state regulations,” says Fischer. “We can help solve that problem by making it easier for companies to become compliant, not only with state regulations but federal guidance as well. This has been proven by other SROs, that if we set our own standards and abide by them, federal regulators might be guided by the industry’s self-policing in determining how to regulate the cannabis industry.” According to Andrew Kline, it could also provide a window of opportunity for better banking access.

The founder and CEO, Joshua Laterman, used to work in the banking industry and recognized the need for a cannabis industry SRO. “He saw an incredible opportunity in a projected $50 billion market by 2026, and as a former banker he saw the opportunity for banks to do business in the industry, but they don’t know who to trust,” says Kline. “Starting a self regulatory organization can help fill that void, allowing companies to identify and put a stamp of approval on a segment of the population that is uber-compliant, therefore giving banks a view into who they should and shouldn’t do business with.” While it won’t immediately resolve the many issues associated with cannabis businesses’ accounting, the NACB could be a major help to smaller businesses looking to prove their worth. “The important point here is that based on the experience of our team, we know what is important to the federal government, and we understand that members will be shaping standards with us, so we will also guide them to federal priorities,” says Kline.

Fischer says a self-regulatory organization is always driven by the industry and needs of the members, but they have the added unique challenge of working in a web of competing governmental interests. “Self-regulatory organizations can shape the future of regulation; we don’t know if or when federal prohibition will end, but if it does, the government is going to look at a variety of areas for regulations,” says Fischer. “We might be able to help shed light on our self-regulating nature and if we can demonstrate the best practices for specific areas, states and even the federal government could look to that, giving our members an advantage.” According to their press release, licensed cannabis growers, dispensaries or any other ancillary business may apply to become members. Some of the founding members include Buds & Roses, Etain, Green Dot Labs, Local Product of Colorado, Matrix NV, Mesa Organics, among others.