
5506(a) (relating to required disclosures) to a financial
institution or insurer, the financial institution or insurer
shall not be deemed in violation of this chapter solely because
the financial institution or insurer was not notified and
continued to provide services beyond the date at which such
services should or could have been terminated as a result of the
suspension or revocation of the permit, registration or
certification.
(g) Exclusion.--This chapter shall not apply to the
cultivation, production, manufacture, sale, transportation,
display, dispensing, distribution or purchase of cannabis for
recreational use within this Commonwealth in a manner contrary
to the act of April 14, 1972 (P.L.233, No.64), known as The
Controlled Substance, Drug, Device and Cosmetic Act, or any
actions in violation of the Medical Marijuana Act except as
otherwise provided by this chapter.
(h) Requirements.--The protections provided by this section
to a financial institution or insurer and to the directors,
officers, employees, agents, owners, shareholders or members of
the institution or insurer are subject to the institution's or
insurer's material compliance with the requirements of section
5503(a) and (b) and reasonable due diligence to determine that a
legitimate cannabis-related business or a business associate of
a legitimate cannabis-related business is in compliance with the
laws of this Commonwealth and the laws of other states in which
the cannabis-related business is located, or with any applicable
Federal laws, which provide authorization for the operation of a
legitimate cannabis-related business.
§ 5505. Access to information.
(a) Voluntary disclosures.--Section 1307 of the act of April
17, 2016 (P.L.84, No.16), known as the Medical Marijuana Act,
shall not prohibit the voluntary disclosure of any records or
other information by a legitimate cannabis-related business, or
a business associate to a financial institution or insurer, as
necessary to obtain financial or insurance services to the
extent not prohibited by and consistent with any applicable
requirements of the Health Insurance Portability and
Accountability Act of 1996 (Public Law 104-191, 110 Stat. 1936)
privacy regulation as promulgated by the United States
Department of Health and Human Services under 45 CFR Pts. 160
(relating to general administrative requirements), 162 (relating
to administrative requirements) and 164 (relating to security
and privacy) and 16 CFR Pt. 313 (relating to privacy of consumer
financial information).
(b) Restrictions on use of records.--A financial
institution, or insurer receiving access to information under
subsection (a), the distribution of which would otherwise be
prohibited, may only use the information as necessary to satisfy
due diligence obligations required to provide financial or
insurance services to persons participating in the medical
marijuana program established under the Medical Marijuana Act
2022/90MSP/HB0331A05137 - 7 -
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51