Inadvertent Records Release – Agent Update | March 21, 2023

March 21, 2023

The Cannabis Control Commission (Commission) is contacting you to provide a supplemental update about the previous agency notification you received March 16, 2023 relative to an inadvertent release of agency records. This notice is to make you aware of additional information that may have been disclosed to the requestor on March 8, 2023.

One of the documents that was released in error may have contained your name, residential address, email address, phone number, and/or date of birth. Upon further review, the agency has identified an additional field, titled “Reason for De-Registration,” was exported as part of that file. This field included, in some cases, information from Marijuana Establishments (ME) and Medical Marijuana Treatment Centers (MTCs) describing why the registered agent was no longer associated with the licensee (e.g., voluntary separation, new job opportunity, and/or alleged violation of company policy). MEs and MTCs are required to notify the Commission within one (1) day of the separation of a registered agent from employment in accordance with 935 CMR 500.030 (4) and/or 501.030 (4).

While the information contained in this field may be a public record that could otherwise be released in response to a public records request, its disclosure in this case was nevertheless inadvertent.

As stated in the agency’s previous notice on this matter, upon identifying the inadvertent release of agency records, the Commission immediately notified the requestor about the issue. Staff also sought the requestor’s cooperation in deleting all erroneously released files and took proactive steps to prevent any further distribution. The requestor agreed to delete the identified files.

The Commission continues to scrutinize the records that were released on March 8, 2023 and will apprise constituents if it finds other inadvertent disclosures of sensitive information.

If you have questions or concerns about the impacts of this disclosure, contact the Commission by emailing Commission@CCCMass.com with the subject line, “Inadvertent Records Release,” or calling (774) 415-0200.