Help me reach my campaign goal on #Fundly! You can donate as much or little as you want. Check it out: http://fundly.com/r8ntxl4i
Below is our press release with links to the state audit on the CDPHE (They got an F as in failed) and the emergency rule request filed by the PCRLP and CTI with the CDPHE.
ACTION ALERT: Protest Law Enforcement Access to Medical Marijuana Patient Registry*Medical Marijuana Registry Confidentiality Breached by Law Enforcement*CTI and PCRLP File Emergency Rules Petition with Board of HealthFor immediate release, August 15, 2013[Denver] -- An investigation by the Patient Advocacy Project of the Cannabis Therapy Institute (CTI) and the Patient and Caregiver Rights Litigation Project (PCRLP) has uncovered that the Colorado Department of Public Health and Environment (CDPHE) has been illegally sharing confidential medical marijuana Registry data with law enforcement through the CCIC/NCIC national online criminal database, administered by the Colorado Bureau of Investigation (CBI). CTI and PCRLP have filed an Emergency Rules Petition with the Colorado Board of Health to stop this practice, which they plan to discuss at the Board of Health's next meeting on Aug. 21, 2013.AUDITOR'S REPORT: CDPHE PROVIDES TOO MUCH INFORMATION TO POLICEThe CTI/PCRLP investigation was triggered by a report released by the Colorado Office of the State Auditor on July 15, 2013 that first revealed details of a new online database that allows law enforcement direct access to the confidential medical marijuana patient Registry.Relevant parts of the June 2013 Auditor's Report on the CDPHE start on Page 59:http://www.cannabistherapyinstitute.com/legal/colorado/audit/The Constitution requires the CDPHE to keep a confidential Registry of medical marijuana patients and states that law enforcement can only receive information from the Registry if they have stopped or arrested someone who presents them a with medical marijuana Registry ID card. Since the Registry was created in 2001, law enforcement has never had direct access to the Registry. CDPHE employees always handled all law enforcement inquiries, and the Registry was always on a single computer in a locked room and was not accessible through the Internet.The Auditor's Report states that the new "CCIC-Registry Online Database" went online in April 2013 and may be giving law enforcement too much information on patients, such as the plant count and quantity of cannabis a patient is allowed to possess. The Auditor writes, "It is not clear that Public Health has constitutional authority to provide information about patient plant and ounce counts through the Registry-CCIC interface."The Auditor also uncovered 15 reported confidentiality breach incidents, including an incident where 5400 caregiver names were "inappropriately provided to the State Auditor." The caregivers whose confidential information was breached were never notified.CTI/PCRLP EMERGENCY RULES PETITIONOn August 15, CTI and PCRLP filed a 10-page Emergency Rules Petition to the Board of Health seeking to stop law enforcement from gaining direct access to the Registry. The Petition argues that any and all law enforcement access to the Registry is illegal. The Emergency Rules Petition provides further details of confidentiality breaches and states:"Over 200,000 patients, former-patients and caregivers have had their confidential data compromised in unknown ways. The many documented leaks of Registry information reported by the Auditor constitute a substantial failure of the CDPHE to protect the confidential Registry as required by the Constitution. It is unclear what information was given to whom and when, or even how many copies of the Registry exist. Because of these massive failures, the Registry must be presumed to be breached in its entirety. Even one breach of the Registry is too many.""Patients can no longer trust the CDPHE to maintain the confidential Registry that they paid them to maintain. The current Registry must be disabled, and an entirely new system must be devised to create a new Registry that is truly confidential."CLICK HERE TO READ FULL PETITION:http://www.cannabistherapyinstitute.com/legal/rules/boh/2013/rule.request.boh.2013-08-15.pdfCDPHE MISSING CONFIDENTIALITY AGREEMENTSThe Auditor's Report also reveals many other areas where the confidentiality of patients has been violated, including access by state agencies and outside contractors to Registry data that the CDPHE cannot directly control. One of the entities that has full access to the Registry is an outside contractor operating the COHELP hotline, which is the state's main BIO-TERRORISM hotline. However, according to the Auditor, 95% of COHELP calls concern the Medical Marijuana Registry. CDHPE has no contract with COHELP and has no direct oversight. Because of this, the Auditor concludes, "The medical marijuana program does not have control of the work performance of COHELP staff."In addition, the Auditor stated that CDPHE was unable to provide signed confidentiality statements of 30% of the people that they checked in their random sample. A Colorado Open Records Request (CORA) from PCRLP revealed that the CDPHE has confidentiality statements from only a fraction of the people who have had access to the Registry. To get the other missing confidentiality agreements, the CDPHE directed PCRLP to contact the following outside entities and private contractors: Express Employment Professionals (a temp agency that the CDPHE hired to enter Registry applications), Colorado Department of Personnel and Administration, Rocky Mountain Poison and Drug Center, and the Governor's Office of Information Technology (OIT). This is more proof of the Auditor's concerns that the CDPHE does not have direct control over the people and entities that have access to the Registry.PARALLEL DATABASE AND PARALLEL CONSTRUCTIONIn addition to the Auditor's report, the official Agreement between the CDPHE and CBI regarding "Law Enforcement Queries of the Medical Marijuana Registry Information" dated October 2012 (obtained through another CORA request) provides more details on law enforcement access to patient data.CLICK HERE TO READ CBI/CDPHE AGREEMENT:http://www.cannabistherapyinstitute.com/legal/rules/boh/2013/cbi.cdphe.registry.agreement.pdfThe CBI/CDPHE Agreement on page 3-4 states: "The CCIC transaction log ... records every inquiry made through CCIC as well as the provided response ... The log's record of prior transactions is maintained for at least five years and its access is restricted to CCIC support personnel at CBI only."This means the CBI is keeping all results of its queries to the Registry, including names of patients, in their own "parallel database". Since only the CBI can access this data, no one can determine how the CBI may use or abuse this confidential patient information.A recent Reuters' story uncovered the common police practice of "Parallel Construction", where law enforcement will use unlawfully-obtained secret tips to begin investigations on people. There are no safeguards in the CBI/CDPHE Agreement preventing law enforcement from using confidential Registry information in their "parallel database" to begin investigations into people, and then use "parallel construction" to cover-up the original source of information.http://www.reuters.com/article/2013/08/05/us-dea-sod-idUSBRE97409R20130805DISCRIMINATION AGAINST MARIJUANA USERSAll marijuana users, including patients, face discrimination in employment, housing, veteran's benefits, child custody, health insurance, automobile insurance, organ transplants, firearm ownership, occupational licensing and in interactions with law enforcement. The main purpose of the Registry was to allow patients to use medical marijuana in a confidential way. With all the leaks of this private information reported by the Auditor, the Registry can no longer be trusted to protect patient information, and the sanctity of the Registry may never be repaired.*WHAT YOU CAN DO*1) WRITE TO COLORADO BOARD OF HEALTHTell them that the CCIC-Registry Online Database must be immediately disabled and ask the Board to support the CTI/PCRLP Emergency Rules to protect patient privacy.SAMPLE LETTERDear Board of Health members:This is a letter protesting the CDPHE's failure to maintain a confidential Medical Marijuana Registry, as reported by the state Auditor. The CDPHE has illegally set up an online computer database and made it available to law enforcement without sufficient safeguards. I demand that law enforcement direct access to the Registry be permanently disabled. I support the CTI/PCRLP Emergency Rules Petition (filed Aug. 15, 2013) and urge you to hear comments on this petition at your public meeting on August 21.EMAILSCut and paste and send to: email@example.com, firstname.lastname@example.org, email@example.com, firstname.lastname@example.org, email@example.com, firstname.lastname@example.org, email@example.comKarin McGowan, Interim Executive Director, CDPHEEmail: firstname.lastname@example.org, email@example.comBoard of HealthEmail: firstname.lastname@example.orgMedical Marijuana RegistryEmail: email@example.comGovernor John HickenlooperEmail: Governor.firstname.lastname@example.orgSen. Pat Steadman (co-author of HB 1284)Email: email@example.comCC: Cannabis Therapy Instituteinfo@cannabistherapyinstitute.com2) ATTEND PUBLIC HEARINGWednesday, August 21, 2013Board of Health Public MeetingColorado Department of Public Health and EnvironmentSabin-Cleere Conference Room4300 Cherry Creek Drive South, Denver, CO 802469:00am: PROTEST by Patients of Registry Confidentiality Breaches - Bring Signs9:45am: Signup for General Public CommentSignup to speak during general Public Comment. It is unclear at this point if the Board will discuss the CTI/PCRLP Emergency Rules Petition. In order to make sure patient concerns on violations of their privacy are heard at this meeting, we must take the opportunity for public comment at the beginning of the meeting during the open comment period.10:00am: General Public CommentThe Board President may limit comment time. Please be prepared to speak only 2 minutes.11:00am: The CDHPE's Annual Report on the Medical Marijuana Registry by Registry Director Ron Hyman was previously scheduled for this meeting. This is a "discussion" item, so there will be no opportunity for public comment on this item.3) SEND US YOUR STORYWe are requesting that any patient or caregiver, current or former, who believes he or she has been harmed in any way by breaches of confidentiality of the Registry to send us your story. Have you been pulled over, and the police knew you were a patient? Have you been denied firearms permits because it was discovered you were a patient? Are you worried that your Registry information will be used against you?Also please contact us if you would be willing to be part of a class action lawsuit concerning the violation of your constitutionally-protected confidentiality rights. The confidential information of over 200,000 active and inactive people may have been breached, and there should be a legal recourse for affected patients and caregivers.Send email to: Kathleen@cannabis-alliance.org with the word "Lawsuit" ---Provided as a Public Service by the:Cannabis Therapy Institute and the PCRLP
Looking to raise money?