Portions of MJ Freeway’s source code were reportedly stolen and posted in Reddit threads as well as on Gitlab.com, a source code hosting website. On June 15th, the account “MJFreeway Open Source” was made on Gitlab.com, and portions of the source code were posted, but have since been taken down. Source code is essentially a list of commands of a program, the basis for making improvements and modifications to a software system. Source code can sometimes contain sensitive information. To be clear, MJ Freeway does not use an open source model; their source code is the basis of their traceability software. Open source is a tool that fosters public collaboration on software development, helping identify weaknesses or areas for improvement.
When asked to comment on the matter, MJ Freeway issued the following statement:
“Last week we discovered that someone had obtained an outdated portion of MJ Freeway’s source code. This incident has absolutely no impact on our systems or MJ Freeway services, and client and patient data is not at risk. While this theft poses no risk to our clients, patients, or business operations, we take any incident involving unauthorized access very seriously and have reported it to the Colorado Bureau of Investigation.
Unfortunately, it has come to our attention that our competitors are spreading inaccurate information about the incident, including baseless claims about SSL info and the potential for client data being compromised – neither of which is true. We encourage our customers to contact us directly with any questions they may have.
We follow or exceed all relevant industry security standards and are confident that we have the most robust security measures in our industry. None of our peers come close. However, we live in a world of determined cyber-criminals and we operate in a competitive environment. Success and size makes a company a bigger target for malicious actors, as other large companies also know. We will continue to investigate and take follow-up action as we learn more about this incident.”
On Sunday, June 18th, a user by the name of ‘techdudes420’ posted in the subreddit, r/weedbiz, a thread titled “MJFreeway goes open source.” The link for that post was the Gitlab.com page where MJ Freeway’s source code was published briefly. The same user then published a second reddit post the following day with the same link to the stolen code, but this time in the r/COents, a subreddit for the Colorado cannabis community. MJ Freeway is based in Denver. That post claimed the user found the stolen source code with a quick search and that the user was banned because of that. The moderator of the thread chimed in, saying they banned the user for posting the stolen code. “We received a takedown request from the software owner stating the code had been stolen and released without permission,” says the moderator. “After investigating the matter I reached the same conclusion and removed the thread.” The moderator then updated the comment shortly after: “Edit: As for OP [original poster] ‘finding’ the code, if that were true I don’t know why he or she would have created a new Reddit account just to post the link.”
In addition to their own cybersecurity analysis, a spokeswoman for MJ Freeway says they will be performing a third party audit and analysis this week as well. When that information becomes available, we will update this article.
Update: Multiple sources have reported that portions of MJ Freeway’s source code are still available online on torrent sites like PirateBay.
According to a press release, the National Association of Cannabis Businesses (NACB) launches today, becoming the first self-regulatory organization (SRO) for the cannabis industry. With their mission to help compliance, transparency and growth of cannabis companies, they will lead member businesses in establishing voluntary national standards, addressing issues like advertising and financial integrity.
A team of experienced legal regulatory professionals will lead member businesses through a process of developing those standards. Andrew Kline, president of the NACB, was a senior advisor to Vice President and then-Senator Joseph Biden, served as an Assistant United States Attorney in the District of Columbia and in the Enforcement Bureau of the FCC. Their chief executive officer, Joshua Laterman, began working on NACB three years ago, but before that he had two decades of experience as general counsel at global financial and investment institutions. Doug Fischer, their chief legal officer and director of standards, spent the past nine years in cannabis law and financial regulation and enforcement at the law firm Cadwalader Wickersham and Taft.
According to the press release, SROs have proven to be effective in other industries at limiting government interference and overregulation, while preserving public safety. FINRA (Financial Industry Regulatory Authority) is an example of an SRO that serves the financial industry. It is a non-governmental organization that helps regulate member brokerage firms and exchange markets, working to help their members stay compliant with regulations set by the Securities and Exchange Commission. Much like the rapid growth of the financial markets over the past 30 years, the cannabis industry is experiencing exponential growth while regulators try to keep up.
“The cannabis industry is on a historical growth trajectory that is expected to continue for years to come, but even the most established, well-run businesses recognize that the future favors the prepared,” says Josh Laterman, CEO of NACB. “As other industries have experienced with their SROs, establishing and committing to voluntary national standards will enable cannabis business owners to demonstrate impeccable business and compliance practices to consumers, regulators, banks and investors.”
According to Doug Fischer, chief legal officer and director of standards, they will focus on a variety of topics that align with the federal enforcement priorities. So these standards might not cover some of the product safety and quality aspects that ASTM International and FOCUS touch on, rather addressing issues like advertising, financial integrity, preventing diversion across state lines, prevention of youth use and corporate responsibility. Another important distinction to make is that an organization like ASTM International sets standards, but the NACB as an SRO is tasked with enforcing them as well.
“From our perspective, businesses have been having a hard time navigating the complex state regulations, particularly those operating in multiple states,” says Fischer. “That is further complicated by the current administration not solidifying their stance on recreational cannabis.” The Cole Memo put out under the Obama Administration set clear federal enforcement priorities, allowing cannabis businesses and states to identify ways to avoid federal government interference or prosecution.
The current administration has done nothing but fuel regulatory uncertainty. This is particularly important given this week’s news regarding the leaders at the Justice Department making inflammatory and threatening statements regarding legal medical cannabis. “It causes these businesses, who should be focused on their own day-to-day operations, instead focusing on complying with what they think the federal government wants and regulatory compliance with state regulations,” says Fischer. “We can help solve that problem by making it easier for companies to become compliant, not only with state regulations but federal guidance as well. This has been proven by other SROs, that if we set our own standards and abide by them, federal regulators might be guided by the industry’s self-policing in determining how to regulate the cannabis industry.” According to Andrew Kline, it could also provide a window of opportunity for better banking access.
The founder and CEO, Joshua Laterman, used to work in the banking industry and recognized the need for a cannabis industry SRO. “He saw an incredible opportunity in a projected $50 billion market by 2026, and as a former banker he saw the opportunity for banks to do business in the industry, but they don’t know who to trust,” says Kline. “Starting a self regulatory organization can help fill that void, allowing companies to identify and put a stamp of approval on a segment of the population that is uber-compliant, therefore giving banks a view into who they should and shouldn’t do business with.” While it won’t immediately resolve the many issues associated with cannabis businesses’ accounting, the NACB could be a major help to smaller businesses looking to prove their worth. “The important point here is that based on the experience of our team, we know what is important to the federal government, and we understand that members will be shaping standards with us, so we will also guide them to federal priorities,” says Kline.
Fischer says a self-regulatory organization is always driven by the industry and needs of the members, but they have the added unique challenge of working in a web of competing governmental interests. “Self-regulatory organizations can shape the future of regulation; we don’t know if or when federal prohibition will end, but if it does, the government is going to look at a variety of areas for regulations,” says Fischer. “We might be able to help shed light on our self-regulating nature and if we can demonstrate the best practices for specific areas, states and even the federal government could look to that, giving our members an advantage.” According to their press release, licensed cannabis growers, dispensaries or any other ancillary business may apply to become members. Some of the founding members include Buds & Roses, Etain, Green Dot Labs, Local Product of Colorado, Matrix NV, Mesa Organics, among others.
The Organic Cannabis Association and Ethical Cannabis Alliance announced today they are merging into one organization, the Cannabis Certification Council (CCC), according to a press release. The new third-party certifications include “Organically Grown” and “Fairly Produced”, granting producers a seal for marketing if they achieve the certifications.
According to Ashley Preece of the Ethical Cannabis Alliance, now executive director at CCC, they plan on starting with the “Organically Grown” certification as first certification to market. “We are launching with Organically which will include robust labor standards as well as standards that go beyond [USDA] Organic,” says Preece. “The USDA Organic standard is watered down and we want to expand on proper horticulture practices so it relates directly to cannabis producers.” The process of designing that certification involves using that USDA Organic certification as a building block to draw from but not directly adopt.
“We will start by pulling from Organic and Fair Trade standards, then we will have a technical advisory committee (TAC), made up of multi-stakeholder agricultural industry and cannabis industry professionals to give input and adjust the standard accordingly,” says Preece. “From there we will have a pilot program, engaging with producers abiding by the standards’ requirements. After the pilot phase, we make final adjustments before bringing it to market.” In order to make sure their certification works across the board, Preece says they are engaging with stakeholders around the country and eventually globally. “We need to engage each different community to make sure this is applicable on a national level.” Preece also says they plan staying abreast of other standards, such as ASTM International’s, but those are geared more towards production safety. “We are looking towards more robust Organic and Fair Trade standards, and ‘cannabinizing’ them,” says Preece.
David Bronner, a prominent advocate of drug policy reform and CEO of Dr. Bronner’s, a top-selling soap brand in the US market place, will be providing seed funding and a matching grant to the CCC. “We are committed to making socially and environmentally responsible products of the highest value, and we are excited for the CCC to begin driving that ethos in the cannabis industry,” says Bronner. “The Cannabis Certification Council (CCC), with its unique mission, is a perfect vessel for us to support our values in the cannabis space.”
Preece says the “Fairly Produced” labor certification is going to be based off of Fair Trade practices. “That will include living wages per community and taking options of ownership into consideration, including different business models where employees might have shares or partial ownership,” says Preece. “As we know, this industry has come from the illicit market, where we saw a lot of inappropriate working environments, gender relations and pay schedules. So we want to ensure that workers have contracts in place, they are treated fairly just as any other industry and we want to mitigate any strange encounters that might have seeped into this regulated market.” Founding board members include Laura Rivero of Yerba Buena Farms; Amy Andrle of L’Eagle Services Denver; Nick Richards of Dill and Dill and Vicente Sederberg; and Ben Gelt of Par, with Ashley Preece as executive director. “This is a huge step for the cannabis industry,” says Preece. “Our collaboration reflects the priority of the mission ingrained in both parties, and together we will immediately be greater than the sum of our parts.”
The lab was accredited to ISO/IEC 17025 – General Requirements for the Competence of Testing and Calibration Laboratories, so they are now able to test for pesticides in cannabis and other matrices, according to the press release published today. “WSDA sought this accreditation to ensure our clients can have absolute confidence in our testing methods and lab results. The information we produce drives enforcement cases and policy decisions,” says Mike Firman, manager of the WSDA Chemical and Hop Laboratory. “We want to do everything that can be done to make sure our data is reliable.”
The A2LA Cannabis Accreditation Program is essentially a set of standards for quality in testing cannabis and cannabis-based products, such as infused products, tinctures and concentrates. ISO 17025 accreditation is quickly become a desirable certification for laboratories. Many states strongly encourage or even require ISO 17025 accreditation for cannabis laboratories. California recently released a set of proposed lab testing regulations for the cannabis industry that specifically requires an ISO 17025 accreditation in order for laboratories to issue certificates of analysis.
Because each state’s requirements for laboratories testing cannabis varies so greatly, A2LA works with state regulators to craft their accreditation program to meet each state’s specific requirements. “A2LA is excited to play such an important role in the accreditation of cannabis testing laboratories and is pleased to see ISO/IEC 17025 accreditation expanding into additional states,” says A2LA General Manager Adam Gouker. “Priority must be placed on ensuring that cannabis products are tested by competent laboratories to convey confidence in the results – a cornerstone which underpins the safety to all end-users.” A2LA is currently accepting applications for cannabis laboratories working to receive accreditation. Labs that already have ISO 17025 accreditation and are in a state with legal cannabis, have the ability to expand their scope of accreditation if they are looking to get into cannabis testing.
Last week, the American Society for Testing and Materials (ASTM International) approved the formation of a committee to develop standards for the cannabis industry. ASTM International is a standards development organization that develops voluntary consensus-based standards for industries. United States regulatory bodies and the World Trade Organization have recognized the organization’s standards in other industries.
On March 1st, the non-profit announced the formation of a committee for ““creating technical standards and guidance materials for cannabis and its products and processes.” So now that the vote has passed, what is the next step? They will begin the process of member training, appointment of leadership and writing the bylaws. ASTM will have two online briefings before their official meeting for the cannabis committee (D37) in June. Those meetings will discuss how the committee was formed and how it’ll be structured. The first official meeting of the cannabis committee will take place June 11th and 12th in Toronto.
Voluntary consensus-based standards means there is a balance of interests, an appeals process and an overall consensus has been reached. The areas of focus for the cannabis standards include indoor and outdoor horticulture and agriculture, quality management systems, laboratories, processing and handling, security and transportation, and personnel training, assessment and credentialing. Many standards will be developed under each of these broad categories. A large component of consensus-based standard development is openness…so anyone who wants to participate in the development of the standards is welcome and encouraged to do so. They are still looking for participants from the cannabis industry and those interested can register here.
Lezli Engelking, founder of the Foundation of Cannabis Unified Standards (FOCUS), says this is terrific news for the cannabis industry. “To have a global organization like ASTM, that federal governments actually work with and respect, is a huge stride forward for the cannabis industry,” says Engelking. “FOCUS is thrilled to be working with ASTM.” FOCUS and ASTM International have a derivative work license agreement that provides ASTM the FOCUS standards to use as a baseline for developing their standards. “FOCUS will continue to certify cannabis businesses to the FOCUS standards, but we will be able to add in the ASTM standards to our certification platform,” says Engelking. “It helps us expand our depth and reach in tools for our clients.”
FOCUS standards and ASTM standards are both voluntary consensus-based, meaning it is the businesses and stakeholders participating that ultimately write the standards. The organizations’ staff does not actually contribute to and develop the standards; they are more like a vehicle for the industry and stakeholders to come to a consensus, according to Engelking. “ASTM does the same thing that we do for the cannabis industry, just on a much larger scale,” says Engelking. “Its role is to fulfill the development, not actually develop it.” Because of that, ASTM and FOCUS standards can work in harmony.
A certified reference material (CRM) is generally recognized as providing the highest level of traceability and accuracy to a measurement. A CRM designed specifically for cannabis testing and tailored to state-specific testing regulations could help laboratories better ensure the safety of their products.
The fact that a certificate accompanies a reference material does not qualify it as a CRM. The reference material must be produced in accordance with ISO Guide 34 specifications by an accredited manufacturer. Adam Ross, key account manager and organic specialist at LGC Standards, says accreditation is a big part of bringing legitimacy to cannabis testing. “For a laboratory to receive an ISO 17025 accreditation, they must purchase their RMs from an ISO 17025 manufacturer. The best option is to purchase an ISO Guide 34 manufactured CRM,” says Ross. “It is particularly important for testing requirements, such as potency, pesticides, etc., where quantitation is expected, to use properly certified quantitative reference materials.” LGC Standards, a 175-year-old company, is one of those manufacturers that invested the time and money to achieve ISO Guide 34 accreditation and offers a spectrum of CRMs for cannabis testing.
The major advantage to using a proper CRM is an increased level of credibility. Auditors recognize the value of using a CRM which can add to the integrity of the results produced. The regular use of certified reference standards along with proper training, methodology and instrumentation, will facilitate a result that has the least amount of uncertainty and is more defendable. “The regular use of certified reference standards will help ensure products that go to market are safe to consume,” says Ross.
With regard to potency analyses, Ross has some key insights to help a laboratory better utilize CRMs. “My advice? Don’t mix the cannabinoids; labs analyzing by GC/FID have discovered that some of the cannabinoids will co-elute. Also, they have a short shelf life when mixed together,” says Ross. “Cannabinoid analysts should use GC/MS or LC/MS for their analysis or analyze the cannabinoids individually,” says Ross.
So what happens if a cannabis lab uses non-certified reference materials? Labs might save money in the short term. CRMs are slightly more expensive than a non-certified reference material, but will increase the defensibility of a lab’s data. Using a reference material created in-house or from a non-accredited vendor can lead to less-than-accurate results. A non-certified reference material has a greater chance of being made incorrectly. The publication of incorrect data damages the credibility of the testing lab and could lead to legal action against the lab from damaged parties.
One of the major challenges for the cannabis testing industry is the variation in state-to-state regulations. Ross says that Oregon’s regulations are pretty comprehensive and that other states should look to the Oregon Environmental Laboratory Accreditation Program (ORELAP) for guidance. According to Ross, ORELAP would like to see higher quality standards with legitimate traceability. Utilizing CRMs the correct way will help laboratories achieve greater accuracy.
Here are some tips for using CRMs appropriately:
Always bring your standards to room temperature before making a dilution.
Matrix matched calibration standards provide more accurate quantitation. Prepare standards in the solvent from extracted blank matrices.
Always bracket your analytical runs with continuing calibration verification standards. Proving that your instrument remained calibrated during the run gives your data more credibility.
Analytical chemists purchase CRMs for three primary uses in the testing lab:
To calibrate the instrument that will be used to perform the testing
To confirm the instruments continuing calibration throughout the analytical process
For analytical quality control or “spikes”
Typically, labs will spike known concentrations of the analytes of interest into a control sample and regular samples with the intent of testing analytical efficiency. Recoveries of analytes from the spiked control sample tell the chemist how well the analytical method is working. The spiked samples (matrix spikes) demonstrate to what extent the sample matrix (the consumable being tested) is influencing the results of the analytical procedure.
CRMs could be described as the nexus between cannabis testing results, the human element and the instrumentation used in an analysis. By using a cannabis-specific CRM, the cannabis testing community can demonstrate tangible improvements in accuracy and legitimacy.
Election Day brought a renewed sense of vigor to the market with voters in eight states legalizing forms of cannabis. California, Nevada, Maine and Massachusetts passed recreational cannabis measures, making legalization’s momentum seem exponential.
But November 8th also gave Donald Trump the presidency, and his cabinet appointments, namely Sen. Jeff Sessions as Attorney General, gave many a feeling of uncertainty for the future of federal legalization. Adding insult to injury, the DEA repeatedly stood by their antiquated and ludicrous judgment for cannabis to remain a Schedule 1 narcotic.
A lot of the fervor surrounding public safety could be described as overdramatic or somewhat unwarranted. 2016 was the year of misinformation. Fake news spread like wildfire with people sharing stories like this or this that turned out to be very misleading or just downright false.
States with legal cannabis came under heavy public scrutiny and addressed problems like consumer education, public safety and lab testing. Pesticides became a highly publicized and persistent issue in a number of areas, with some states regulating it heavily and addressing public health concerns. Plenty of new rules were formed surrounding labeling and testing, with Oregon, Colorado and Washington experiencing some regulatory growing pains.
Those growing pains shed light on the need for regulators to craft rules that allow for changes, adding rules where necessary and getting rid of cumbersome rules that might thwart market growth. Rules need to be able to adapt as the industry grows, much like businesses need to adapt to a changing market climate to stay afloat. This is all the more reason why cannabis businesses need to make their voices heard and work with regulators to move things forward.
With so much uncertainty surrounding the future of legal cannabis in America, the word of the year for 2017 should be resiliency. In a social-ecological context, resiliency is “the capacity of a system to absorb or withstand perturbations and other stressors such that the system remains within the same regime, essentially maintaining its structure and functions. It describes the degree to which the system is capable of self-organization, learning and adaptation.”
Self-organization, learning and adaptation are three very important attributes of a resilient system. Without knowing what will happen when Trump’s cabinet takes the reigns of federal agencies, it is important to prepare for the unexpected. Adhering to standards like FOCUS allows cannabis businesses to prepare for unexpected events like recalls or product safety failures.
Those standards could also become the law down the road, as government officials often look to an industry’s voluntary consensus-based standards when deciding how to regulate it. In 2017, a number of state governments will embark on the heavy undertaking of writing the regulatory framework for legal cannabis.
2017 will bring opportunities and challenges to the cannabis industry. The industry’s rapid growth juxtaposed with political, economic and regulatory uncertainties create a climate that requires resilience to be built into the system at all levels. It is critical, now more than ever, that cannabis businesses build strong relationships with industry groups, advocacy groups and regulators to craft the institutional capacity and mutual trust needed to weather the uncertainty ahead.
Almost as soon as cannabis became recreationally legal, the public started to ask questions about the safety of products being offered by dispensaries – especially in terms of pesticide contamination. As we can see from the multiple recalls of product there is a big problem with pesticides in cannabis that could pose a danger to consumers. While The Nerd Perspective is grounded firmly in science and fact, the purpose of this column is to share my insights into the cannabis industry based on my years of experience with multiple regulated industries with the goal of helping the cannabis industry mature using lessons learned from other established markets. In this article, we’ll take a look at some unique challenges facing cannabis testing labs, what they’re doing to respond to the challenges, and how that can affect the cannabis industry as a whole.
The Big Challenge
Over the past several years, laboratories have quickly ‘grown up’ in terms of technology and expertise, improving their methods for pesticide detection to improve data quality and lower detection limits, which ultimately ensures a safer product by improving identification of contaminated product. But even though cannabis laboratories are maturing, they’re maturing in an environment far different than labs from regulated industry, like food laboratories. Food safety testing laboratories have been governmentally regulated and funded from almost the very beginning, allowing them some financial breathing room to set up their operation, and ensuring they won’t be penalized for failing samples. In contrast, testing fees for cannabis labs are paid for by growers and producers – many of whom are just starting their own business and short of cash. This creates fierce competition between cannabis laboratories in terms of testing cost and turnaround time. One similarity that the cannabis industry shares with the food industry is consumer and regulatory demand for safe product. This demand requires laboratories to invest in instrumentation and personnel to ensure generation of quality data. In short, the two major demands placed on cannabis laboratories are low cost and scientific excellence. As a chemist with years of experience, scientific excellence isn’t cheap, thus cannabis laboratories are stuck between a rock and a hard place and are feeling the squeeze.
Responding to the Challenge
One way for high-quality laboratories to win business is to tout their investment in technology and the sophistication of their methods; they’re selling their science, a practice I stand behind completely. However, due to the fierce competition between labs, some laboratories have oversold their science by using terms like ‘lethal’ or ‘toxic’ juxtaposed with vague statements regarding the discovery of pesticides in cannabis using the highly technical methods that they offer. This juxtaposition can then be reinforced by overstating the importance of ultra-low detection levels outside of any regulatory context. For example, a claim stating that detecting pesticides at the parts per trillion level (ppt) will better ensure consumer safety than methods run by other labs that only detect pesticides at concentrations at parts per billion (ppb) concentrations is a potentially dangerous claim in that it could cause future problems for the cannabis industry as a whole. In short, while accurately identifying contaminated samples versus clean samples is indeed a good thing, sometimes less isn’t more, bringing us to the second half of the title of this article.
Less isn’t always more…
In my last article, I illustrated the concept of the trace concentrations laboratories detect, finishing up with putting the concept of ppb into perspective. I wasn’t even going to try to illustrate parts per trillion. Parts per trillion is one thousand times less concentrated than parts per billion. To put ppt into perspective, we can’t work with water like I did in my previous article; we have to channel Neil deGrasse Tyson.
The Milky Way galaxy contains about 100 billion stars, and our sun is one of them. Our lonely sun, in the vastness of our galaxy, where light itself takes 100,000 years to traverse, represents a concentration of 10 ppt. On the surface, detecting galactically-low levels of contaminants sounds wonderful. Pesticides are indeed lethal chemicals, and their byproducts are often lethal or carcinogenic as well. From the consumer perspective, we want everything we put in our bodies free of harmful chemicals. Looking at consumer products from The Nerd Perspective, however, the previous sentence changes quite a bit. To be clear, nobody – nerds included – wants food or medicine that will poison them. But let’s explore the gap between ‘poison’ and ‘reality’, and why that gap matters.
In reality, according to a study conducted by the FDA in 2011, roughly 37.5% of the food we consume every day – including meat, fish, and grains – is contaminated with pesticides. Is that a good thing? No, of course it isn’t. It’s not ideal to put anything into our bodies that has been contaminated with the byproducts of human habitation. However, the FDA, EPA, and other governmental agencies have worked for decades on toxicological, ecological, and environmental studies devoted to determining what levels of these toxic chemicals actually have the potential to cause harm to humans. Rather than discuss whether or not any level is acceptable, let’s take it on principle that we won’t drop over dead from a lethal dose of pesticides after eating a salad and instead take a look at the levels the FDA deem ‘acceptable’ for food products. In their 2011 study, the FDA states that “Tolerance levels generally range from 0.1 to 50 parts per million (ppm). Residues present at 0.01 ppm and above are usually measurable; however, for individual pesticides, this limit may range from 0.005 to 1 ppm.” Putting those terms into parts per trillion means that most tolerable levels range from 100,000 to 50,000,000 ppt and the lower limit of ‘usually measurable’ is 10,000 ppt. For the food we eat and feed to our children, levels in parts per trillion are not even discussed because they’re not relevant.
A specific example of this is arsenic. Everyone knows arsenic is very toxic. However, trace levels of arsenic naturally occur in the environment, and until 2004, arsenic was widely used to protect pressure-treated wood from termite damage. Because of the use of arsenic on wood and other arsenic containing pesticides, much of our soil and water now contains some arsenic, which ends up in apples and other produce. These apples get turned into juice, which is freely given to toddlers everywhere. Why, then, has there not an infant mortality catastrophe? Because even though the arsenic was there (and still is), it wasn’t present at levels that were harmful. In 2013, the FDA published draft guidance stating that the permissible level of arsenic in apple juice was 10 parts per billion (ppb) – 10,000 parts per trillion. None of us would think twice about offering apple juice to our child, and we don’t have to…because the dose makes the poison.
How Does This Relate to the Cannabis Industry?
The concept of permissible exposure levels (a.k.a. maximum residue limits) is an important concept that’s understood by laboratories, but is not always considered by the public and the regulators tasked with ensuring cannabis consumer safety. As scientists, it is our job not to misrepresent the impact of our methods or the danger of cannabis contaminants. We cannot understate the danger of these toxins, nor should we overstate their danger. In overstating the danger of these toxins, we indirectly pressure regulators to establish ridiculously low limits for contaminants. Lower limits always require the use of newer testing technologies, higher levels of technical expertise, and more complicated methods. All of this translates to increased testing costs – costs that are then passed on to growers, producers, and consumers. I don’t envy the regulators in the cannabis industry. Like the labs in the cannabis industry, they’re also stuck between a rock and a hard place: stuck between consumers demanding a safe product and producers demanding low-cost testing. As scientists, let’s help them out by focusing our discussion on the real consumer safety issues that are present in this market.
*average of domestic food (39.5% contaminated) and imported food (35.5% contaminated)
Lezli Engelking founded the Foundation of Cannabis Unified Standards (FOCUS) in 2014 to protect public health, consumer safety, and safeguard the environment by promoting integrity in the cannabis industry through the use of standards. Standards are an agreed upon way of doing things and specify guidelines or requirements for producing goods or providing services, according to FOCUS.
Standards can take the form of a “reference document, which may include specifications, guidelines, conditions or requirements for products, operations, services, methods, personnel and systems on how to design, operate, manufacture or manage something.” Peter Maguire, VP of System Applications for Lighthouse Worldwide Solutions and committee chair of the FOCUS Cultivation standard, joined the organization wanting to make a positive impact on the industry that is in line with protecting people and medical patients. He sees so much variability in the industry and the need to homogenize standard operating procedures (SOPs). “I have worked with multiple cultivation facilities and a few of them have operating procedures in place but having them in place is only half the solution- it’s critical to have the right ones in place,” says Maguire. He has twenty years of experience in contamination control in manufacturing, before entering the cannabis industry.
The FOCUS cultivation standard was created by experts who have years of experience in both cannabis cultivation, good agricultural practices and in the tightly regulated pharmaceutical industry. “FOCUS created these guidelines as a sort of roadmap for success in business; You need to keep your employees healthy and your products safe to survive in the long term,” says Maguire. We sit down with Lezli Engelking to find out how the standards are created, what makes them significant and what businesses can gain by working with them.
CannabisIndustryJournal: Why are standards important?
Lezli: Standards are the international language for trade – they exist in every industry. “The U.S. Department of Commerce estimates that standards and conformity assessment impact more than 80% of global commodity trade.” FOCUS is not reinventing the wheel with what we are doing. We are simply adapting a business model the federal government already uses. In the 80s, when the heroin epidemic swept across the US, methadone clinics popped up in every state in the country within two years. The clinics were all operating under different state, city and county regulations – much like the cannabis industry is today. The federal government took a look at the situation and decided they needed a way to regulate these clinics in order to protect public health and safety. They released a Request For Proposal (RFP) looking for an organization to create voluntary-consensus standards and a third-party certification system for the methadone clinics. Commission on Accreditation of Rehabilitation Facilities (CARF) is the organization that answered and won that RFP. CARF continues to work with Health and Human Services to maintain the standards and provide third-party certification to the clinics today. FOCUS develops international, voluntary consensus standards and a third party certification program for the global cannabis industry based on the CARF model. This is extremely important, because of the National Technology Transfer and Advancement Act, (Public Law 104-115), signed into law March 7, 1996 by President Clinton. The act requires that all federal agencies use standards developed by voluntary-consensus standards bodies, instead of government-unique standards wherever possible. Perhaps even more importantly, the Act includes provisions that encourage federal agencies to partner with the private sector in the development of standards that not only help improve the efficiency and effectiveness of government, but also strengthen the U.S. position in the global marketplace.
CIJ: What exactly goes into developing a voluntary-consensus standard?
Lezli: Voluntary-Consensus refers to the type of standard and how it is developed. Everyone who participates in the development of voluntary-consensus standards does so on a voluntary basis. Committee members must come to a consensus on every point within the standard- down to every comma or semicolon. Once the development process is complete, the standards must undergo a 30-day public review period. The process for developing voluntary-consensus standards is designated by International Organization for Standardization (ISO). ISO has member agencies in 163 countries that participate in the development of standards. The American National Standards Institute (ANSI) is the American body for ISO. FOCUS follows all ISO/ANSI guidelines in the standards development process. This is extremely important because it means FOCUS standards are suitable for accreditation and adoption into regulations according to the National Technology Transfer and Advancement Act. All voluntary-consensus standards are developed under the principles of:
Openness| Participation in the standard development process is open to individuals with a stake in the standard who bring useful expertise along with the spirit and willingness to participate.
Balance| Focus stakeholder groups involve all stakeholder groups: industry, regulatory, quality assurance, medical, law enforcement, business, research, consumers, patients and the general public.
Voluntary-Consensus| Individual subcommittees of volunteers develop each area of the standard, offering their unique expertise to form a consensus. They are not paid for their participation.
Lack of Dominance| No party has dominant representation, or influence to the exclusion of fair and equitable consideration of other viewpoints.
CIJ: More specifically, how are the FOCUS standards developed?
Lezli: To create a baseline standard, FOCUS utilized World Health Organization (WHO) guidelines for Good Manufacturing Practices (GMP), Good Agricultural Practices (GAP), Good Laboratory Practices (GLP), Code of Federal Regulations (CFR) for pharmaceutical GMPs, nutraceutical GMPs, food safety standards, OSHA and HACCP. From there, applicable cannabis regulations from around the world were added. All of this information was compiled into auditor-style checklists. Each committee member was provided time to go edit, remove or add to items in the checklist on their own. Over the next two years, each of the eight committees had monthly meetings, going through and coming to a consensus on each line item of the standard. Once the committees completed development, the standards were open for a 30-day Public Review to collect comments and feedback. The first eight FOCUS standards, completed and ready for use, cover Cultivation, Retail, Extraction, Infused Products, Laboratory, Security, Sustainability and Packaging & Labeling.
FOCUS is currently recruiting committee members to begin development of five new cannabis standards later this year: Advertising/Marketing, Insurance, Banking/Finance, Patient Care and Research. Committees will receive a list of proposed suggestions for what should be considered in developing the standards. Each committee member will develop a list to select criteria they think should be included into the standard. FOCUS will compile the lists, then committees will go through the monthly standards development/vetting process for each line item in the standard.
CIJ: So what does a business have to gain by adopting a FOCUS standard?
Lezli: Compliance becomes easily manageable with the FOCUS software platform, integrating standards, training and SOPs into the everyday operations of the business. FOCUS certified clients could expect to reduce costs, reduce risk and reduce liability by assuring they are producing safe, quality and consistent products. FOCUS certification allows a business to differentiate themselves from their competitors, and prove to their patients and customers they can trust their products. Certification also allows businesses to access reasonable insurance rates and drives interest from investors.
FOCUS is here to partner with cannabis businesses. We are there to hold their hand, by providing guidance and assistance along every step of the way. Unlike state mandated audits that delineate what a business is doing right or wrong, FOCUS is an on-going compliance management system. We are here to make sure a business runs as efficiently as possible and take the guesswork out of compliance. Under FOCUS certification, a business receives ongoing consulting, customized SOPs, employee training and a documentation management software system to track and prove compliance.
CIJ: Can you give us an update on FOCUS’ progress in 2016?
Lezli: A large milestone for FOCUS this year, aside from completing version one of the standards, is choosing an appropriate software platform, (Power DMS) to house the standards and provide an ongoing compliance management system for our clients. Power DMS also houses regulatory standards for law enforcement; health care, federal aviation and fire departments, so most agencies in public health are already familiar with it. The familiarity and access to this platform is a huge benefit on the regulatory side. It allows first responders to access the schematics of a FOCUS certified client in the event of an emergency. This is crucial in the event of an explosion from extraction equipment, or a fire in a cultivation facility, as without first identifying where the hazards are, they will not access the facility. The FOCUS software platform allows first responders access to all pertinent information through computers in police cars, ambulances, or fire trucks.
For the industry, the FOCUS software platform is equally as impressive. Not only does the platform house the standards and all SOPs, it is also complete compliance management system. FOCUS certified clients have a simple management tool that houses all training and documentation, assuring all required compliance documentation can be easily accessed at any time. The platform also allows FOCUS certified clients to provide access to governing bodies in advance of state audits –streamlining the process and minimizing time and interruption caused by state audits. The FOCUS platform tracks all changes to required documents, provides real time updates on employee training, creates appropriate traceability logs, and provides updates on regulatory changes, including which SOPs need to be changed to maintain compliance. The platform allows FOCUS to be way more than an auditing company. FOCUS is a partnership in compliance for cannabis companies wanting to maintain good business practices and stay compliant with regulations.
We have about 140 new committee members that will assist existing committees with standards updates and participate in the development of the next set of FOCUS standards for advertising/marketing, banking/finance, research, patient care and insurance. All committees will convene before 2017.
By Olivia L. Dubreuil, Esq., Brett Giddings No Comments
Most readers ought to be well aware that the cannabis industry is rapidly growing. The Arcview Group, an Oakland-based investor network, estimates the retail and wholesale cannabis market will reach $22.8 billion by 2020. That number represents a lot of people consuming cannabis in many different ways.
The average cannabis consumer is changing. A new range of social groups is consuming cannabis-based products. From yoga diehards, to middle-aged men and women, veterans that have ‘tried everything else’ and young professionals looking for a different way to relax, the market is broadening.
This new segment of cannabis consumers are often not looking to get high- they are looking for anti-inflammatories, relaxants and ways of dealing with chronic pains and stress. For these health and wellness seekers, the last thing they want is a product dosed with pesticides, insecticides or butane residues. We can expect to see these consumers to follow broader consumption trends- specifically when it comes to a product like cannabis that people are inevitably placing in or on their bodies.
These consumers come with new sets of expectations, similar to those when they buy fruit, vegetables, coffee or chocolate. They are increasingly curious about the contents of the products they purchase- they are a large part of the reason that the sales of organic produce has ‘ballooned’. They are asking questions like: Does the product contain pesticides? Has the product been cultivated in a way that minimizes negative environmental impacts? How do we know that the supply chain quality controls are rigorous enough to ensure no one has tampered with the product? Who is growing and picking this product and how are those people being treated?
When a curious consumer enters a modern American supermarket, they are guided by a range of messages relating to the contents and supply chain that was part of making each product. Organic, non-GMO, pesticide-free, fair trade, free-range and locally produced are some of the common criteria. The more credible labels are supported by codes and procedures in which the whole supply chain is audited, monitored and approved by the certifying body according to certain standards- for example the USDA certifies organic foods.
Being a Schedule I controlled substance under federal law, cannabis is probably not going to receive USDA organic certification any time soon. However there are organizations out there that are committed to increasing the availability of cannabis grown with organic practices. Certifying bodies like Certified Kind and the Organic Cannabis Growers Society are gaining popularity among growers who see the market evolving in that direction. At the same time, businesses such as Delicious Fog (an ‘organic-focussed’ delivery service in Santa Clara County) and Harvest (an ‘organic’ dispensary in San Francisco)- are specializing in the sale of these ‘organic’ cannabis products.
Just like any sustainability issue- ensuring your cannabis product comes from a well-managed supply chain cannot be a last minute add-on. Whether a business is small, large, mature or emerging, developing a strategic approach to the diverse spread of sustainability challenges is critical.
As a cannabis business what can you do to appeal to the new cannabis consumer?