Managing the Risks of Serving Cannabis Clients


CannabisClients
Experts predict that America's cannabis industry will continue to grow over the next four years — even with ambiguity emanating from the White House.1 The legal cannabis market was worth an estimated $7.2 billion in 2016 and is projected to grow. Medical marijuana sales are projected to grow from about $4.7 billion in 2016 to $13.3 billion in 2020. Adult recreational sales are estimated to jump from about $2.6 billion in 2016 to $11.2 billion by 2020.2

With this projected momentum in the growth of the cannabis industry, more and more CPA firms are weighing the business opportunities and risks related to expanding their practice into this emerging industry. Marijuana-related businesses are in true need of the professional accounting and tax services offered by CPA firms. However, at the heart of the challenge for CPAs as they evaluate these opportunities are the uncertainties that exist with respect to the legal standing of this industry.

First and foremost, cannabis is still considered an illegal Schedule 1 substance under federal law, and there are no guarantees that current or future administrations will continue the discretionary position that is the foundation for this industry. This dichotomy creates ethical and moral quandaries for CPAs. For example, would rendering services (tax, accounting, consulting services, etc.) to cannabis clients be considered a lack of "good moral character" or an "act discreditable" by their state boards of accountancy?

Also, would CPAs who render such services to cannabis clients be exposing themselves to allegations of "aiding and abetting" criminal activities? Thus far, eight state boards of accountancy have issued guidance on providing services to businesses in the marijuana industry, and the profession is pushing the other state boards of accountancy to provide guidance.

Risk Assessment

From CAMICO’s perspective, a CPA firm considering opportunities to accept marijuana business clients should adopt a risk assessment approach to evaluate the risks to their firm from such clients. For example, assess risks associated with the specific client attributes (all-cash business, complexity, uncertainty, etc.) along with assessing your specific firm attributes (risk tolerance, competency, level of service choices, etc.) as you carefully consider whether these prospective clients would be a good fit for the firm. As part of this risk assessment, firms should discuss and review the potential legal ramifications with an attorney who specializes in this industry.

As part of your process in assessing "risks," never forget that your professional acts and decisions will be judged in hindsight. Therefore, if your firm decides to service cannabis clients (or any other higher-risk clients, for that matter), be extremely attentive to the following rules in the malpractice world:
  • Professional standards for CPAs are merely the floor — juries hold CPAs to even higher standards.
  • A CPA's job is to advise the client of opportunities and warn the client of risk.
  • CPAs are scriveners — lack of documentation is viewed as evidence of potential malpractice; jurors expect CPAs to have strong documentation, and the lack of it is viewed as not having met the "burden of proof."
  • "Guilt by association" can impact CPAs in a dispute.

Loss Prevention Best Practices

Apply appropriate safeguards to address the added risk threats associated with cannabis clients. The following are some best practices to consider:
  • Meet principal(s) face to face.
  • Perform background checks on all principals.
  • Insist that clients have ongoing legal representation.
  • Obtain written consent annually to interact with client’s attorney.
  • DOCUMENT, DOCUMENT, DOCUMENT…!!!
    • Have a signed and detailed annual engagement letter clearly articulating scope and limits as well as enhanced "protective clauses." A sample engagement letter ("Cannabis Client Tax Engagement Letter") can be found on the CAMICO Members-Only Site under Knowledge Tree, CAMICO Publications, IMPACT, 2017, IMPACT 109. The Policyholder Login for the Members-Only Site is at www.camico.com.
    • Document all planning, work, consultations and communications (internal and external).
    • Obtain a management representation letter annually (regardless of type of service) that affirmatively confirms the client’s understanding of, and compliance with, state laws and regulations.

Consider creating a Crisis Management Plan (or enhancing an existing one) to manage the firm's potential reputational risks. A crisis management plan should be based on the potential consequences of servicing cannabis clients and should include engaging with a qualified attorney and public relations firm (for incident responses), as well as specifying who will speak on behalf of your firm.

Additional CAMICO Resources

For policyholders wanting additional guidance and information, CAMICO offers a webcast, "Managing the Risks of Serving Cannabis Clients." This webcast is intended to raise awareness regarding issues related specifically to marijuana business clients and to offer risk management advice to address those issues. The webcast:
  • identifies specific risks inherent in serving marijuana business clients,
  • determines specific actions to minimize risks, and
  • identifies engagement letter clauses to include, and those to exclude, to minimize risk.

The webcast runs 1 hour, 45 minutes and is available on the LearnLive platform at the following dates/times:
August 3, 1 p.m. Pacific/4 p.m. Eastern
August 8, 1 p.m. Pacific/4 p.m. Eastern
August 17, 10 a.m. Pacific/1 p.m. Eastern
Additional dates are TBD. Our webcasts offer free risk management–focused CPE to all members of your firm.

To Register

If you have a LearnLive account, please log into the LearnLive site at https://university.learnlive.com/camico and enter your User ID and password. You’ll find the webcast included in the list of upcoming webcasts by clicking the “My Catalog” link in the blue navigation bar. Simply click the gray “Enroll” button to the right of the webcast name to enroll. If you later decide you can’t attend, there is no need to "un-enroll" or notify us.

If you don’t have a LearnLive account, instructions on creating one can be found on the CAMICO Members-Only Site under Knowledge Tree, CAMICO Publications, IMPACT, 2017, IMPACT 109, "Webcast Registration Instructions." The Policyholder Login for the Members-Only Site is at www.camico.com. The Company Passcode is included in the instructions.

As always, CAMICO encourages policyholders to call 1.800.652.1772 or email the Loss Prevention department at lp@camico.com for more information.

1 Bloomberg report dated March 23, 2017, U.S. Cannabis Industry Expected to Maintain Growth Despite Trump.
2 Forbes article dated February 22, 2017, Marijuana Industry Projected To Create More Jobs Than Manufacturing By 2020

Share this post

Leave a comment

Filtered HTML

  • Web page addresses and e-mail addresses turn into links automatically.
  • Allowed HTML tags: <a> <em> <strong> <cite> <blockquote> <code> <ul> <ol> <li> <dl> <dt> <dd>
  • Lines and paragraphs break automatically.

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.

Latest Articles

  • 11 Sep

    Report Potential Claims and Concerns as Early as Possible

    Contact your professional liability and employment practices liability insurance carrier or agent as soon as an issue comes up. Adverse consequences often come from CPAs taking action before consulting their risk advisers. Better safe than sorry.

    Here are some reasons why... read more

  • 14 Aug

    Cyber Claims Trends That Accountants Should Know

    Cyber claims trends have increased over the past year. CAMICO Mutual Insurance provides critical cyber coverage to accountants for cyber risks through an arrangement with NAS Insurance and explains the update on current cyber claims trends below.


    read more

  • 09 Aug

    Protect Your Clients and Your Firm from Hackers

    With cyber-attacks and data breach incidents growing in frequency, it is critical to ensure that your firm has taken all reasonable measures to protect your clients and the firm from hackers.

    read more

  • 05 Jul

    Engagement Letter Do’s and Don’ts

    Engagement letters help improve communication with clients, document engagements, and protect you from litigation. By clearly defining an engagement’s scope and services, you can better avoid misunderstandings. read more