Canada may have legalized cannabis, but the country’s privacy commissioner is cautioning users to pay with cash instead of using their cards.
CBC News reported that the privacy commissioner has posted a statement on his website warning that cannabis users could be ostracized if information regarding their online marijuana purchases somehow gets leaked.
The commissioner noted that cannabis buyers’ personal information is often collected during card-based purchases, and this data could be either shared with other parties or compromised by a data breach. Whether shared or leaked, cannabis buyers’ information can be used against them by countries that manage to get a hold of such data, like the US, he advised.
“Cannabis is illegal in most jurisdictions outside of Canada. The personal information of cannabis users is therefore very sensitive,” the commissioner said.
“Some countries may deny entry to individuals if they know they have purchased cannabis, even lawfully.”
In some cases, Canadians have been barred for life from entering the US after admitting to using cannabis, or being involved in the cannabis industry.
Therrien added that cannabis buyers can further protect their privacy by not providing marijuana sellers with more information than necessary. It is legally required, however, for buyers to prove to sellers that they are of legal age. He also added that cannabis stores should only collect email addresses – not customer names – for mailing lists or memberships.
Not all Canadians have the option to pay for cannabis with cash, however; in Ontario, there are still no retail outlets for marijuana.
In November, the Ontario Cannabis Store reported a data breach through Canada Post, compromising the information of some 4,500 customers.