Many of the states that were in the first wave of recreational marijuana legalization such as Oregon and Washington have their own state worker safety programs and published guidance for the industry, said attorney Jesse Mondry, whose practice at Harris Sliwoski Sliwoski LLP in Portland, Ore., focuses on cannabis issues.

Also, each state’s cannabis industry is already heavily regulated and licensed with worker conditions often part of the requirements, he said.

“It’s going to be terrible,” said attorney Dan Harris of Harris Sliwoski Sliwoski LLP, who helps companies do business in emerging markets. “There will be no IP protection in Russia.”

Bloomberg Washington Correspondent Joe Mathieu delivers insight and analysis on the latest headlines from the White House and Capitol Hill, including conversations with influential lawmakers and key figures in politics and policy. Guests: Dan Harris, founder of Harris Sliwoski

Despite the compliance efforts, many pot companies are not ready for the new law, said Griffen Thorne, data security and cannabis attorney at Harris Sliwoski in Los Angeles.

A data breach could put a cannabis company in a precarious position if it has to alert a consumer in a state where marijuana isn’t legal, Griffen Thorne, tech and cannabis attorney at Harris Sliwoski, told Bloomberg Law. A state attorney general opposed to marijuana legalization, for example, may target out-of-state marijuana companies for partisan or personal reasons, going after them for minor privacy infractions, like not having updated privacy policies or leaking non-sensitive data, he said.