KOUSHI SUNDER of STEMLESS at REVEL: CANNABIS + THE CONSUMER Presentation
Introduction
In this section, Koshi introduces herself and her company, Stemless. She explains what Stemless does and how it operates in the cannabis industry.
About Stemless
- Stemless is an online ordering platform for cannabis.
- It partners with dispensaries to make it easy for customers to see live menus and transact online.
- Transactions are fully compliant with state banking laws.
Data and Your Rights
In this section, Koshi discusses data privacy and protection in the cannabis industry. She highlights the importance of protecting personal data in light of topical issues such as Facebook's Cambridge Analytica scandal.
Protecting Yourself
- Protecting your data is especially important due to the conflict between state and federal laws in the cannabis industry.
- Customers have the ability to purchase legally but may not do so due to concerns about health insurance, employment, or judgments against them.
- Personal data can be used against consumers in ways they might not initially recognize.
Types of Data Transmission
Intentional Transmission
Sharing
- Companies may need to interact with other businesses to ensure transactions happen.
Unintentional Transmission
Hacking
- Hackers can gain access to personal information through unsecured networks or phishing scams.
Third-party Access
- Third-party companies may have access to personal information without users' knowledge or consent.
Conclusion
In this section, Koshi concludes her talk by emphasizing the importance of protecting personal data in the cannabis industry. She encourages consumers to be vigilant and informed about their rights and the ways in which their data is being used.
Protecting Your Data
- Consumers should be aware of intentional and unintentional data transmission.
- Protecting personal data is crucial in the cannabis industry due to the conflict between state and federal laws.
- Consumers should be informed about their rights and how their data is being used.
Outsourcing and Value Chain
The importance of outsourcing in the value chain and being mindful of the companies you interact with.
Picking Your Battles
- Outsourcing is important in the value chain.
- Companies need to pick their battles and outsource other parts of it.
- It's important to make sure that the companies you're interacting with take their part in the value chain seriously.
Being Mindful
- When outsourcing, it's important to be mindful of the partners that are being brought into play.
- You want to make sure that these partners take their role in the value chain seriously.
Advertising and Data Privacy
The insidious nature of advertising and data privacy concerns.
What's Being Sold?
- With any product, if you're not paying for it, you're not the customer. You are the product.
- Cambridge Analytica scandal highlights how Facebook sells user data.
Cookies and Tracking
- Cookies and tracking can be used to gather information on users' behavior elsewhere online.
- This information can then be used to target ads at users when they are ready to make a purchase decision.
Unintentional Transmission
The dangers of unintentional transmission through leaks, feature rollouts, hacking, etc.
Leaks
- Feature rollouts can lead to leaks of sensitive information.
- Strava app example where runners were tracked on US military bases without consent or knowledge.
Hacking
- Hacking can come in many forms and can lead to sensitive information being leaked or stolen.
Protecting Consumer Data
In this section, the speaker discusses best practices for protecting consumer data. The topics covered include unintentional data transmission, unauthorized use, timed rollouts, multiple databases, and encryption.
Unintentional Data Transmission
- Companies should consider all the shady things that people can do and how to stop them from doing it.
- Best defense is offense.
Unauthorized Use
- Cambridge Analytica used Facebook's API in a way that was against Facebook's terms of use statement.
- Companies should keep in mind what information people have access to when creating APIs.
- If you don't want them to have access to it, don't put it in your terms and conditions.
Timed Rollouts
- Stemless utilizes timed rollouts to protect consumer data.
- Rolling out new features in small increments is smart from a security standpoint.
- Capturing feedback from users using new feature sets helps identify concerns that may not have been identified during lab testing.
Multiple Databases
- Stemless moves sensitive data across multiple databases to protect against database failure or breach.
- Centralizing where data is held exposes companies to more risk when it comes to PII (personally identifiable information).
Encryption
- 256-bit encryption is standard practice for anything payment related.
Protecting Your Data Online
In this section, the speaker discusses how companies collect and use data from their customers and provides tips on how to protect oneself online.
Protecting Yourself Online
- Look for the HTTPS symbol at the top left-hand corner of your browser when giving personal information to a website.
- Check out the terms and conditions and privacy policies of a website to understand how they use your data.
- If you have questions about how a company is using your data, ask them. A reputable company will answer your questions.
- Err on the side of caution if you are unsure about making a transaction with a company that does not take your concerns seriously.
Conclusion
The speaker concludes by thanking the audience for listening and reminding them to be cautious when sharing personal information online.