[{"data":1,"prerenderedAt":140},["ShallowReactive",2],{"blog_post:texas-cannabis-registry-query-dont-copy-standard-practice":3},{"id":4,"uid":5,"url":6,"type":7,"href":8,"tags":9,"first_publication_date":10,"last_publication_date":10,"slugs":11,"linked_documents":13,"lang":14,"alternate_languages":15,"data":16},"auoT3hEAACcAhap0","texas-cannabis-registry-query-dont-copy-standard-practice","\u002Fnews\u002Ftexas-cannabis-registry-query-dont-copy-standard-practice","blog_post","https:\u002F\u002Fairlift.cdn.prismic.io\u002Fapi\u002Fv2\u002Fdocuments\u002Fsearch?ref=avXtSRIAACcAKfmG&q=%5B%5B%3Ad+%3D+at%28document.id%2C+%22auoT3hEAACcAhap0%22%29+%5D%5D",[],"2026-11-12T16:45:55+0000",[12],"texass-cannabis-registry-expansion-shows-why-query-dont-copy-should-be-standard-practice",[],"en-us",[],{"post_title":17,"author":23,"category":28,"date":29,"summary":30,"hero_image":34,"body":46},[18],{"type":19,"text":20,"spans":21,"direction":22},"heading1","Texas's Cannabis Registry Expansion Shows Why \"Query, Don't Copy\" Should Be Standard Practice",[],"ltr",[24],{"type":25,"text":26,"spans":27,"direction":22},"paragraph","cloudPWR Team",[],"insights","2026-11-03",[31],{"type":25,"text":32,"spans":33,"direction":22},"Texas is expanding its medical cannabis program from three dispensing organizations to fifteen, and every new operator has to plug into a patient registry housed inside the state police. The access pattern they choose will define their risk.",[],{"dimensions":35,"alt":38,"copyright":39,"url":40,"id":41,"edit":42},{"width":36,"height":37},4024,6048,"Data center server racks representing a government patient registry database","Source: Pexels - free commercial use","https:\u002F\u002Fimages.prismic.io\u002Fairlift\u002F76HTQmwfMFcTSuZI_hero-image.jpg?auto=format,compress","76HTQmwfMFcTSuZI",{"x":43,"y":43,"zoom":44,"background":45},0,1,"#ffffff",[47,83,94,121],{"variation":48,"version":49,"items":50,"primary":51,"id":80,"slice_type":81,"slice_label":82},"default","initial",[],{"body_text":52},[53,56,67,70,74,77],{"type":25,"text":54,"spans":55,"direction":22},"Texas is expanding its medical cannabis program from three licensed dispensing organizations to fifteen. Twelve new operators are entering the Texas Compassionate Use Program under House Bill 46, and every one of them has to plug into the same system before they can sell a single product: the Compassionate Use Registry of Texas, or CURT.",[],{"type":25,"text":57,"spans":58,"direction":22},"As one recent analysis of the expansion pointed out, CURT isn't run by a health department. It's run by the Texas Department of Public Safety, the state police.",[59],{"start":60,"end":61,"type":62,"data":63},3,39,"hyperlink",{"link_type":64,"url":65,"target":66},"Web","https:\u002F\u002Fcannasecure.tech\u002Ftexas-tcup-expansion-curt-registry-dps-patient-data-2026\u002F","_blank",{"type":25,"text":68,"spans":69,"direction":22},"That detail matters more now than it would have a year ago. HB 46 also expanded CURT's qualifying conditions to include chronic pain, PTSD-related diagnoses, traumatic brain injury, Crohn's disease, and hospice and palliative care, on top of the cancer, epilepsy, ALS, and autism entries already on the list. A registry entry used to mean this person may legally buy cannabis. Increasingly it means this person has been diagnosed with a specific condition, recorded in a database that state and local law enforcement can call to verify.",[],{"type":71,"text":72,"spans":73,"direction":22},"heading3","A Registry Built to Verify, Not to Store",[],{"type":25,"text":75,"spans":76,"direction":22},"CURT exists to answer one question at the point of sale: does this patient have a valid entry? Dispensing organizations query the registry, get a yes or no, and dispense accordingly. That's the entire job. It's a verification service, not a data warehouse.",[],{"type":25,"text":78,"spans":79,"direction":22},"The twelve new TCUP operators won't all read it that way. Most of them are building a cannabis compliance stack for the first time, under a selection deadline, choosing vendors on demo quality rather than a security review. The easy shortcut is to query CURT once and cache the result locally, so every future visit from the same patient becomes a database lookup instead of a registry call. That shortcut creates a second patient database, one with none of the state's access controls, retention limits, or oversight, sitting inside a brand-new company with no compliance history yet.",[],"body_text$1c5d8b91-f0eb-44c2-af41-0e5003deeb40","body_text",null,{"variation":48,"version":49,"items":84,"primary":85,"id":92,"slice_type":93,"slice_label":82},[],{"quote_copy":86,"quote_source":90,"quote_image":91},[87],{"type":25,"text":88,"spans":89,"direction":22},"A registry entry answers one question: is this patient eligible today. Every local copy an operator keeps past that answer is an unregulated database the state never agreed to.",[],[],{},"quote$ec1380ae-9da0-4e80-8a55-2cabe4cfd2e9","quote",{"variation":48,"version":49,"items":95,"primary":96,"id":120,"slice_type":81,"slice_label":82},[],{"body_text":97},[98,101,104,111,114,117],{"type":71,"text":99,"spans":100,"direction":22},"What \"Query, Don't Copy\" Looks Like in Practice",[],{"type":25,"text":102,"spans":103,"direction":22},"The fix isn't a policy memo telling new dispensaries not to retain patient data. Policies get ignored under deadline pressure. The fix is an architecture that makes the compliant path the easy path: query the registry at the point of sale, log that the check happened with a timestamp and a staff ID, and store nothing else.",[],{"type":25,"text":105,"spans":106,"direction":22},"That's the same pattern AIRLIFT Connect uses for any governed pipeline, cannabis registry or otherwise. Capture pulls in the verification request, Deliver sends back a result, and Observe tracks the entire exchange, queued through completed, so if a legislator or an auditor asks whether an operator retained data past the point of verification, the answer comes from a log instead of a promise.",[107],{"start":108,"end":61,"type":62,"data":109},24,{"link_type":64,"url":110,"target":66},"https:\u002F\u002Fwww.airlift.app\u002Fconnect\u002F",{"type":71,"text":112,"spans":113,"direction":22},"This Isn't Only a Texas Problem",[],{"type":25,"text":115,"spans":116,"direction":22},"cloudPWR built the South Dakota Medical Cannabis Registry to answer the question CURT is now facing at scale: how do you let dozens of outside parties verify eligibility without handing each of them a copy of the underlying patient data? In a HIPAA-oriented statewide system, the answer isn't a stricter policy. It's a pipeline that makes copying harder than querying.",[],{"type":25,"text":118,"spans":119,"direction":22},"Every state running a cannabis registry, a provider directory, or any other eligibility system eventually faces the same twelve-operators moment Texas is facing now: a wave of new parties that need access, on a deadline, with no existing governance between them and the source of record. The agencies that get ahead of it treat verification as infrastructure, not as something each new operator figures out on their own.",[],"body_text$d25717fc-5ebb-4656-9786-a8e95de80fda",{"variation":48,"version":49,"items":122,"primary":123,"id":139,"slice_type":81,"slice_label":82},[],{"body_text":124},[125,128,131],{"type":71,"text":126,"spans":127,"direction":22},"The Takeaway for Agencies Building the Next Registry",[],{"type":25,"text":129,"spans":130,"direction":22},"Before a dispensary, a contractor, or any other new party gets access to a state system, ask one question: what happens to the data after the check runs? If the answer depends on how each new operator chooses to build their own stack, the registry doesn't have real governance yet. It has intent.",[],{"type":25,"text":132,"spans":133,"direction":22},"cloudPWR builds AIRLIFT Connect around exactly that gap, governed pipelines that give outside parties an answer without giving them a database. If your agency is standing up or scaling a registry-style system, get in touch to talk through what a query-don't-copy architecture looks like for your program.",[134],{"start":135,"end":136,"type":62,"data":137},210,222,{"link_type":64,"url":138,"target":66},"https:\u002F\u002Fwww.cloudpwr.com\u002Fcontact\u002F","body_text$7bd1bc21-6eb7-4433-aaf3-a820e62375be",1794503463921]