Following the recent legalization of cannabis, private retailers
are open for business from coast to coast. While cannabis remains
illegal in other jurisdictions, cannabis users' personal
information is highly sensitive. In light of this, British
Columbia's Privacy Commissioner has issued a guidance document to help retailers understand
their obligations.
The guidance is rooted in the Commissioner's interpretation
of the Personal Information Protection Act (British
Columbia), in particular section 11, which provides that
"…an organization may collect personal information only
for purposes that a reasonable person would consider appropriate in
the circumstances…"
The Commissioner emphasizes retailers' need to inform
individuals about what personal information is being collected, and
the purposes for such collection; and recommends a set of best
practices for cannabis retailers: