Becoming the 17th state to legalize adult-use cannabis, on March 31, New York enacted the Marijuana Regulation and Taxation Act (MRTA) anticipated to generate $1.2 billion in annual sales by 2023.

Because of the sensitive and protected health information that those growing, processing and selling marijuana (marijuana-related businesses or MRBs) are required to collect and retain, cannabis data privacy and cybersecurity challenges are severe, expensive but often preventable.