# CannaSecure
> Cybersecurity and compliance guidance specifically for the cannabis industry.

## About
- **Publisher:** CISO Marketplace Network
- **Website:** https://cannasecure.tech
- **Audience:** Cannabis operators, dispensary owners, cultivators, and compliance managers navigating security requirements.
- **Contact:** info@cisomarketplace.com
- **Network:** Part of the [CyberAdX advertising network](https://cyberadx.com) — 11 specialized cybersecurity properties

## Store
- [CannaSecure Store](https://cannasecure.tech/store/) — Security policies, staff-training material, compliance templates and hardware keys for dispensaries, grows and cannabis brands. Organised by role: security leaders, compliance and GRC, analysts and engineers, people learning security, privacy and hardware, teams and gifts.
- [CISO Marketplace membership](https://cisomarketplace.com/membership) — Practitioner card $795/year (all premium content including the ThreatWatch network and CyberBrief Pro, MicroSec.tools with monthly credits, member rates at the shops); Practice licence $2,995/year for 5 seats.
- [ThreatWatch News](https://threatwatch.news/pricing) and [CyberBrief Pro](https://cyberbrief.news/pricing) — $19/month or $190/year each; included with membership.
- [MicroSec.tools](https://microsec.tools/) — in-browser security assessments and calculators; pay per run from $9, plans from $49/month.
- Shops: [ciso.diy](https://ciso.diy/) (templates), [CyberPolicy.shop](https://cyberpolicy.shop/) (policies), [GeneratePolicy.com](https://generatepolicy.com/) (AI policy generator, free tier), [SecurityGadgets.shop](https://securitygadgets.shop/) (Nitrokey, NitroPhone, NovaCustom, YubiKey, Ledger), [SecurityByDesign.shop](https://securitybydesign.shop/) (apparel and posters).
- Deals: [CISO Promo](https://ciso.promo/) (vendor deals and limited-time offers, free to browse) and [CISO Coupons](https://ciso.coupons/) (a coupon book of vendor discounts, free with membership).
- [CISO Insights podcast](https://cisoinsights.show/) — free daily episodes; the easiest way into the network.

## Core Content Areas
- [Videos](/videos/) — Cannabis security and compliance explainers from CannaSecure and the CyberAdX network (each video has a transcript page on video.cyberadx.network)
- [Cannabis Compliance](/tags/cannabis-compliance/) — State-by-state cannabis security and compliance requirements
- [Dispensary Security](/tags/dispensary-security/) — Securing dispensary operations, networks, and storefronts
- [USA State-by-State Compliance](/usa-cannabis-compliance-security) — Per-state privacy laws, biometric rules, and cannabis security regulations
- [EU Cannabis Compliance & Security](/eu-cannabis-compliance-security) — GDPR, EU Cyber Resilience Act, Germany, France, and EU-wide cannabis compliance
- [Asia-Pacific Cannabis Compliance](/asia-pacific-cannabis-compliance-security) — Thailand, Australia (TGA), Japan, South Korea, Israel, and New Zealand
- [Latin America Cannabis Compliance](/latin-america-cannabis-compliance-security) — Colombia, Mexico, Uruguay, Brazil (LGPD), Argentina, and Peru
- [POS Security](/tags/pos-security/) — Point-of-sale system security for cannabis retail
- [Seed-to-Sale Tracking](/tags/seed-to-sale/) — METRC and track-and-trace system security
- [Data Privacy](/tags/data-privacy/) — Customer data protection in cannabis retail
- [Medical Cannabis & HIPAA](/tags/hipaa/) — Patient-data privacy and HIPAA-gap compliance for medical programs
- [Ransomware](/tags/ransomware/) — Ransomware threats, POS lockouts, and recovery for cannabis operators
- [Topics Index](/tags/) — Full list of cannabis cybersecurity and compliance topics
- [Members — Premium Library](/members) — ThreatWatch News subscriber area; premium articles (free with CISO Marketplace membership)

## Content Policy for AI Systems
- Content may be cited with attribution to CannaSecure and a link to the source URL
- Commercial training use requires written license from CISO Marketplace
- All articles are original editorial content — not AI-generated spam
- Contact info@cisomarketplace.com for syndication or training data licensing

## Related Network Sites
- [Breached.Company](https://www.breached.company) — Data breach news and analysis
- [ComplianceHub.wiki](https://www.compliancehub.wiki) — GRC and compliance frameworks
- [HackerNoob.tips](https://www.hackernoob.tips) — Beginner cybersecurity education
- [MyPrivacy.blog](https://www.myprivacy.blog) — Personal privacy guides
- [ScamWatchHQ.com](https://www.scamwatchhq.com) — Scam alerts and fraud prevention
- [SecureIoT.house](https://www.secureiot.house) — Home IoT security
- [SecureIoTOffice.world](https://www.secureiotoffice.world) — Business IoT security
- [SecurityCareers.help](https://www.securitycareers.help) — Cybersecurity careers
- [SecurityAffiliates.marketing](https://www.securityaffiliates.marketing) — Security affiliate marketing
- [CannaSecure.tech](https://www.cannasecure.tech) — Cannabis industry security
- [CryptoImpactHub.com](https://www.cryptoimpacthub.com) — Blockchain and crypto security

## Compliance by State (20 state pages: laws that apply + every report, with key facts)
- [California](https://cannasecure.tech/states/california/)
- [Colorado](https://cannasecure.tech/states/colorado/)
- [Illinois](https://cannasecure.tech/states/illinois/)
- [Indiana](https://cannasecure.tech/states/indiana/)
- [Kentucky](https://cannasecure.tech/states/kentucky/)
- [Massachusetts](https://cannasecure.tech/states/massachusetts/)
- [Michigan](https://cannasecure.tech/states/michigan/)
- [Minnesota](https://cannasecure.tech/states/minnesota/)
- [Missouri](https://cannasecure.tech/states/missouri/)
- [Montana](https://cannasecure.tech/states/montana/)
- [Nevada](https://cannasecure.tech/states/nevada/)
- [New York](https://cannasecure.tech/states/new-york/)
- [North Carolina](https://cannasecure.tech/states/north-carolina/)
- [Ohio](https://cannasecure.tech/states/ohio/)
- [Oklahoma](https://cannasecure.tech/states/oklahoma/)
- [Oregon](https://cannasecure.tech/states/oregon/)
- [Rhode Island](https://cannasecure.tech/states/rhode-island/)
- [Texas](https://cannasecure.tech/states/texas/)
- [Utah](https://cannasecure.tech/states/utah/)
- [Washington](https://cannasecure.tech/states/washington/)

## International Markets (11 country pages)
- [Canada](https://cannasecure.tech/countries/canada/) — North America
- [Mexico](https://cannasecure.tech/countries/mexico/) — Latin America
- [Germany](https://cannasecure.tech/countries/germany/) — Europe
- [Netherlands](https://cannasecure.tech/countries/netherlands/) — Europe
- [Switzerland](https://cannasecure.tech/countries/switzerland/) — Europe
- [Czech Republic](https://cannasecure.tech/countries/czech-republic/) — Europe
- [United Kingdom](https://cannasecure.tech/countries/united-kingdom/) — Europe
- [European Union](https://cannasecure.tech/countries/european-union/) — Europe
- [Thailand](https://cannasecure.tech/countries/thailand/) — Asia-Pacific
- [Australia](https://cannasecure.tech/countries/australia/) — Asia-Pacific
- [Israel](https://cannasecure.tech/countries/israel/) — Asia-Pacific

## Vendors (2 pages: outages, breaches, integrations, state decisions)
- [Metrc](https://cannasecure.tech/vendors/metrc/) — Track-and-trace
- [BioTrack](https://cannasecure.tech/vendors/biotrack/) — Track-and-trace

## Trackers (running multi-state coverage)
- [Cannabis Data Breach Tracker](https://cannasecure.tech/trackers/cannabis-data-breaches/) — Every breach, ransomware incident and data exposure at a dispensary, cultivator, vendor or state agency we have covered, grouped by jurisdiction, with the records affected, the regulator involved and where the case stands..
- [Federal Cannabis Policy Tracker](https://cannasecure.tech/trackers/federal-policy/) — Rescheduling, Schedule III, DEA and FDA moves, banking access, 280E, executive orders and the security and data-privacy consequences of each.
- [Intoxicating Hemp Tracker](https://cannasecure.tech/trackers/intoxicating-hemp/) — State bans, deadlines, records wind-downs and enforcement around intoxicating hemp products and delta-8, grouped by state, with the compliance and data-retention obligations each rule created..
- [Psychedelics Reform Tracker](https://cannasecure.tech/trackers/psychedelics-reform/) — Psilocybin, ketamine and decriminalisation measures by state, and the patient-data, licensing and security requirements that come with each program..
- [State Privacy Law Tracker](https://cannasecure.tech/trackers/state-privacy-laws/) — Consumer privacy, biometric and health-data laws as they apply to cannabis operators, state by state: what took effect when, who enforces it, and what each law demands of a dispensary or cultivator..

## Topic Hubs (top 30 of 82)
- [Cannabis Compliance](https://cannasecure.tech/tags/cannabis-compliance/) — 92 articles
- [Vendor Risk Management](https://cannasecure.tech/tags/vendor-risk-management/) — 51 articles
- [Industry News](https://cannasecure.tech/tags/industry-news/) — 44 articles
- [USA](https://cannasecure.tech/tags/usa/) — 40 articles
- [Consumer Data](https://cannasecure.tech/tags/consumer-data/) — 38 articles
- [Cannabis Cybersecurity](https://cannasecure.tech/tags/cannabis-cybersecurity/) — 37 articles
- [Records Management](https://cannasecure.tech/tags/records-management/) — 36 articles
- [Patient Privacy](https://cannasecure.tech/tags/patient-privacy/) — 34 articles
- [Dispensary Security](https://cannasecure.tech/tags/dispensary-security/) — 32 articles
- [Guides & Templates](https://cannasecure.tech/tags/guides-templates/) — 31 articles
- [Medical Cannabis](https://cannasecure.tech/tags/medical-cannabis/) — 30 articles
- [Licensing](https://cannasecure.tech/tags/licensing/) — 29 articles
- [Metrc](https://cannasecure.tech/tags/metrc/) — 22 articles
- [Access Control](https://cannasecure.tech/tags/access-control/) — 21 articles
- [International Cannabis](https://cannasecure.tech/tags/international-cannabis/) — 21 articles
- [Seed-to-Sale Tracking](https://cannasecure.tech/tags/seed-to-sale-tracking/) — 21 articles
- [Federal Cannabis Policy](https://cannasecure.tech/tags/federal-cannabis-policy/) — 20 articles
- [Data Breaches](https://cannasecure.tech/tags/data-breaches/) — 19 articles
- [Surveillance](https://cannasecure.tech/tags/surveillance/) — 19 articles
- [Federal Rescheduling](https://cannasecure.tech/tags/federal-rescheduling/) — 18 articles
- [Members Only](https://cannasecure.tech/tags/members-only/) — 18 articles
- [Schedule III](https://cannasecure.tech/tags/schedule-iii/) — 18 articles
- [Legislation](https://cannasecure.tech/tags/legislation/) — 17 articles
- [European Union](https://cannasecure.tech/tags/european-union/) — 16 articles
- [GDPR](https://cannasecure.tech/tags/gdpr/) — 16 articles
- [Incident Response](https://cannasecure.tech/tags/incident-response/) — 16 articles
- [DEA](https://cannasecure.tech/tags/dea/) — 15 articles
- [POS Security](https://cannasecure.tech/tags/pos-security/) — 14 articles
- [State Privacy Laws](https://cannasecure.tech/tags/state-privacy-laws/) — 14 articles
- [Data Retention](https://cannasecure.tech/tags/data-retention/) — 13 articles

## Latest Articles (157 total — full list: https://cannasecure.tech/llms-full.txt)
- [DEA Pauses Marijuana Rescheduling: What Operators Need](https://cannasecure.tech/dea-chief-judge-pauses-marijuana-rescheduling-proceeding/) — 2026-10-21 — DEA's chief judge paused the Schedule I to Schedule III rescheduling hearing on Sept. 29 after a GAO report. April's medical rule and drug testing rules are…
- [OCM's SEE Cultivation Working Group: new compliance channel](https://cannasecure.tech/new-yorks-see-cultivation-working-group-new-channel-new-data/) — 2026-10-20 — OCM launched recruitment for its SEE Cultivation Working Group on Oct. 1. Here's what the new recurring regulator channel means for equity cultivators' records.
- [Massachusetts Cultivator License Pause Extended to 2027](https://cannasecure.tech/massachusetts-extends-cultivator-license-pause-2027-happens-pending-applicant-data/) — 2026-10-18 — Massachusetts CCC extended its cultivator application pause and capped license extensions at one year, leaving applicant and host agreement data in…
- [NY Cannabis Research License: VER-01 Trial Data Rules](https://cannasecure.tech/new-yorks-cannabis-research-license-opens-door-clinical-trial-data/) — 2026-10-15 — New York's Cannabis Control Board approved a research license for the first U.S. human trial of VER-01. Here's what the IRB and HHS data rules mean for…
- [Curaleaf-Aurora Bid Raises Cross-Border Data Risk](https://cannasecure.tech/curaleafs-hostile-bid-aurora-cannabis-cross-border-takeover-means-patient/) — 2026-10-14 — Curaleaf's hostile bid for Aurora Cannabis has reached US$5 a share. If it succeeds, Canadian patient data and EU-GMP operations move under a $1B-debt US…
- [NY's 19 New Cannabis Licenses: Metrc Onboarding Deadline](https://cannasecure.tech/nys-19-new-adult-use-licenses-onboarding-checklist-metrc-pos/) — 2026-10-13 — New York's latest 19 adult-use license approvals trigger a fixed Metrc onboarding sequence — training, credentialing, and POS integration — before enforcement.
- [Planet 13 Lawsuit Tests Cannabis ID-Scan Data Security](https://cannasecure.tech/planet-13-data-breach-lawsuit-tests-cannabis-companies-data-security/) — 2026-10-12 — A Planet 13 dispensary customer's lawsuit alleges ID scans ended up on the dark web, exposing how cannabis retailers' ID-verification practices create legal…
- [Hemp THC Ban Deadline Moves to Dec. 11: Records Checklist](https://cannasecure.tech/federal-hemp-ban-threat-puts-28b-industrys-compliance-records-clock/) — 2026-10-08 — The federal hemp THC ban's effective date moved to Dec. 11. Here's what the delay means for seed-to-sale records, vendor contracts, and compliance wind-down.
- [Antioch Admits No Cannabis Gross Receipts Audits](https://cannasecure.tech/antioch-admits-has-never-audited-cannabis-operators-gross-receipts/) — 2026-10-07 — Antioch, California admitted it has never audited cannabis operators' self-reported gross receipts, leaving social-equity obligations unverified since 2019.
- [Missouri Microbusiness Winners Face Predatory Contracts](https://cannasecure.tech/missouri-warns-microbusiness-winners-vet-contracts-scammers-target-new-licensees/) — 2026-10-06 — Missouri's final microbusiness lottery drew 888 applications for 77 licenses. Past rounds show predatory contracts stripped winners of ownership, banking…
- [NM Cannabis Enforcement Bureau's HB 10 Crackdown](https://cannasecure.tech/new-mexico-cannabis-enforcement-bureau-launches-crackdown-illegal-operators-unsafe/) — 2026-10-05 — New Mexico's RLD Enforcement Bureau, created by House Bill 10, seized 21,000 pounds of cannabis in Estancia and is targeting testing and record gaps statewide.
- [Cannabis Phishing, POS and METRC Login Risk in 2026](https://cannasecure.tech/cyber-awareness-month-cannabis-operators-phishing-pos-staff-training-sticks/) — 2026-10-04 — Phishing campaigns targeting cannabis operators' POS, METRC logins and vendor payments are rising. Why high staff turnover demands recurring security…
- [DOJ sues cannabis CEO over alleged PPP loan fraud](https://cannasecure.tech/doj-sues-cannabis-ceo-over-alleged-ppp-loan-fraud-seeks/) — 2026-10-04 — DOJ alleges a cannabis company CEO lied about his business to get PPP loans, part of a nationwide crackdown on marijuana-linked loan disclosures.
- [CLAIM Act's Insurance Safe Harbor and Cannabis Cyber Coverage](https://cannasecure.tech/congresss-fourth-attempt-cannabis-insurance-safe-harbor-means-cyber-coverage/) — 2026-10-03 — The CLAIM Act's federal safe harbor could draw admitted carriers into cannabis insurance, easing the cyber-liability coverage gap operators face today.
- [Verano sued over patient data printed on receipts](https://cannasecure.tech/illinois-patient-sues-verano-st-charles-dispensary-over-unprotected-patient/) — 2026-10-01 — A new Illinois lawsuit alleges Verano printed patient names and birthdates on dispensary receipts, exposing 500,000+ medical cannabis patients to legal and…
- [DEA Conviction Pressure Means Cannabis Hiring Overhaul](https://cannasecure.tech/dea-workforce-conviction-pressure-means-access-control-employee-vetting/) — 2026-09-30 — A DEA registration dispute over employees with convictions signals new access-control and background-check pressure for cannabis operators seeking federal…
- [California court orders DCC to fix Metrc flagging gap](https://cannasecure.tech/californias-court-ordered-metrc-redesign-signals-seed-sale-vendor-risk/) — 2026-09-29 — A California court ordered the DCC to redesign its Metrc-based track-and-trace system within six months after finding it failed to flag irregular…
- [Ohio Marijuana Card Sued Over Patient Data Exposure](https://cannasecure.tech/medical-cannabis-firm-sued-over-health-data-exposure-complaint-alleges/) — 2026-09-28 — Ohio Medical Alliance faces six lawsuits after an unsecured database exposed 957,434 patient records. Here's what the complaints reveal about breach-control…
- [IDScan.net Breach: 153M ID Scans, Cannabis Retail Risk](https://cannasecure.tech/dark-web-leak-allegation-ties-customer-id-scans-retailer-breach/) — 2026-09-28 — IDScan.net confirmed a breach tied to 153 million leaked driver's licenses, exposing cannabis dispensary customer data and prompting a lawsuit against…
- [Law360's Cannabis, Cybersecurity Beats Converge on ID Data](https://cannasecure.tech/law360s-cannabis-cybersecurity-crossover-beat-signals-legal-industry-watching-operator/) — 2026-09-25 — Planet 13's ID-scan breach lawsuit, Labcorp's $2.3M multistate settlement, and law-firm breaches show why Law360 now tracks cannabis data risk as a legal beat.
- [NY Cannabis Wage Survey Builds a Compliance Record](https://cannasecure.tech/new-yorks-wage-data-survey-shows-compliance-records-operators-didnt/) — 2026-09-24 — New York's cannabis wage survey and a coming prevailing-wage mandate are forcing operators to build payroll data sets regulators could later use as evidence.
- [Canopy Growth's UK Deal Creates New GDPR Data Trail](https://cannasecure.tech/canopys-uk-distribution-deal-puts-canadian-patient-flower-data-new/) — 2026-09-23 — Canopy Growth's new UK medical cannabis supply deal with GROW Group U.K. Ltd. routes Canadian flower through German EU GMP oversight, raising cross-border…
- [Missouri Cannabis DEA Opt-Out: Compliance Risk Explained](https://cannasecure.tech/missouris-dea-registration-opt-out-two-thirds-operators-betting/) — 2026-09-22 — Two-thirds of Missouri cannabis operators opted out of DEA registration post-rescheduling. Here's what that means for BNDD audit exposure and record-keeping.
- [Vext Closes Ohio Dispensary Amid Adverse-Event Probe](https://cannasecure.tech/arizona-mso-shuts-ohio-dispensary-amid-state-probe-serious-adverse/) — 2026-09-17 — Vext closed its Herbal Wellness Center dispensary in Ohio after adverse-event reports tied to a vape pen. Here's what the DCC's testing and disclosure…
- [Data-center grid fights preview cultivators' power battles](https://cannasecure.tech/grid-capacity-new-zoning-fight-cultivators-should-learn-data-center/) — 2026-09-16 — Data-center power disputes over grid capacity and siting rules preview the interconnection and rate-case fights cannabis cultivators face for grow-light loads.
- [Sixth Circuit Voids $31.8M Cannabis Contract Verdict](https://cannasecure.tech/sixth-circuit-ruling-guts-31-8m-cannabis-contract-verdict-means/) — 2026-09-16 — The Sixth Circuit voided a $31.8M Curaleaf verdict, holding cannabis contracts unenforceable under federal law. Binding precedent for MI, OH, KY, TN operators.
- [AI kill-switch fight previews cannabis vendor disclosure rules](https://cannasecure.tech/ai-guardrails-state-data-center-rules-cannabis-national-fight-means/) — 2026-09-15 — Sacks vs. Bores, Abbott vs. Shapiro: the AI regulation patchwork fight signals what disclosure cannabis POS, compliance and surveillance vendors will owe…
- [Cannabis Recalls Expose Metrc Traceability Gaps in 2026](https://cannasecure.tech/cannabis-products-recalled-over-unsanitary-manufacturing-pesticide-violations/) — 2026-09-15 — State recall archives from OMMA, NY OCM and NJ-CRC show sanitation and testing lapses turning into Metrc traceability failures across the cannabis supply chain.
- [BLAZE Headless API: New Dispensary Attack Surface](https://cannasecure.tech/blaze-launches-headless-e-commerce-api-new-attack-surface-dispensary/) — 2026-09-14 — BLAZE launched a headless E-Commerce API exposing product, cart, order, and compliance data via open endpoints. Here's what MSOs need to check before…
- [SAFE Banking Reintroduced: What It Means for Vendor Risk](https://cannasecure.tech/safe-banking-reintroduced-again-expanded-credit-payment-access-means-vendor/) — 2026-09-13 — NCIA cheers SAFE Banking's reintroduction after Lobby Days. Expanded credit and payment access brings BSA/AML, GLBA and vendor-risk obligations operators…
- [MA $10B cannabis sales face repeal vote in November](https://cannasecure.tech/massachusetts-hits-10-billion-sales-faces-repeal-vote-would-erase/) — 2026-09-12 — Massachusetts hit $10B in adult-use cannabis sales. A November repeal vote could dismantle CCC licensing, tracking, and social-equity data infrastructure.
- [Cannabis Data Breach Tracker: Every Operator Exposure Logged](https://cannasecure.tech/cannabis-data-breach-tracker-goes-live-running-log-every-operator/) — 2026-09-10 — CannaSECURE's new Cannabis Data Breach Tracker logs exposures at Ohio Marijuana Card, IDScan, THSuite, and Thomson Reuters' C-Track — and what each means…
- [Montana's third-party disclosure rule: a vendor register](https://cannasecure.tech/montana-third-party-disclosure-rule-vendor-access-register-2026/) — 2026-09-06 — Montana's proposed marijuana third-party disclosure rule (MAR 2026-902-1) requires licensees to register anyone with access to records, inventory or…
- [Headset's $1M PPP settlement and analytics vendor risk](https://cannasecure.tech/headset-ppp-settlement-cannabis-analytics-vendor-risk-2026/) — 2026-09-05 — Headset's $1.01M False Claims Act settlement over an improper PPP loan shows why cannabis operators should assess the financial and legal stability of the…
- [Missouri recall, California rescission: traceability data](https://cannasecure.tech/missouri-recall-california-rescission-track-and-trace-data-integrity-2026/) — 2026-09-04 — Missouri's GF Extraction recall and California's rescinded recall show how cannabis product recalls depend on seed-to-sale and COA data integrity. What…
- [MassCIP social equity applications: the data you submit](https://cannasecure.tech/massachusetts-sep-application-window-masscip-data-2026/) — 2026-09-03 — Massachusetts SEP applications are open September 1 to November 30, 2026 via MassCIP. What data applicants submit, who can see it, and how to protect…
- [Hemp ban delayed to Dec 11: what H.R. 6500 changes](https://cannasecure.tech/hr-6500-hemp-deadline-december-11-records-replan-2026/) — 2026-09-02 — H.R. 6500 moved the federal hemp THC deadline from November 12 to December 11, 2026. What the delay does to operator records retention, wind-down timelines…
- [DEA's 26-question form: what cannabis registrants disclose](https://cannasecure.tech/dea-26-question-form-colorado-supplier-inventory-security-disclosure-2026/) — 2026-09-01 — DEA is asking registered Colorado medical cannabis businesses to disclose suppliers, labs, employees, inventory systems and security controls in a…
- [Missouri single-vendor cannabis data plan: one point of failure](https://cannasecure.tech/missouri-track-and-trace-rfp-single-vendor-data-concentration-2026/) — 2026-08-31 — Missouri's cannabis track-and-trace RFP seeks a single vendor for track-and-trace, licensing, patient ID cards, and case management. The data concentration…
- [Michigan hemp license pulled using the operator's COAs](https://cannasecure.tech/michigan-loud-labs-hemp-license-suspension-coa-records-2026/) — 2026-08-30 — Michigan's CRA suspended Loud Labs' hemp processor-handler license using the company's own certificates of analysis. What COA-driven enforcement means for…