Many states have enacted strict privacy laws that prevent dispensaries from sharing customer data without explicit consent. For instance, in California, personal data collected by dispensaries is generally prohibited from being shared without customer approval.