Medical marijuana is legal in Colorado. Hundreds of dispensaries have sprouted up all over the state. Since they say that the drug is for medical reasons that it seem to follow that they are covered under HIPAA and need to protect their clients personal information.

The standard medical practice they have been following HIPAA guidelines for many years now. It is rare that we hear about a doctor carelessly discarding patient records. With the rush to set up shop and operators with no prior experience with HIPAA I think we are in for a bumpy privacy road.

9news is reporting that a marijuana dispensary in Denver discarded client records into the trash.