Managing the Risks of Serving Cannabis Clients


CannabisClients


First and foremost, cannabis is still considered an illegal Schedule 1 substance under federal law, and there are no guarantees that current or future administrations will continue the discretionary position that is the foundation for this industry. This dichotomy creates ethical and moral quandaries for CPAs. For example, would rendering services (tax, accounting, consulting services, etc.) to cannabis clients be considered a lack of "good moral character" or an "act discreditable" by their state boards of accountancy?

Also, would CPAs who render such services to cannabis clients be exposing themselves to allegations of "aiding and abetting" criminal activities? Thus far, several state boards of accountancy have issued guidance on providing services to businesses in the marijuana industry, and the profession is pushing the other state boards of accountancy to provide guidance.

Risk Assessment

From CAMICO's perspective, a CPA firm considering opportunities to accept marijuana business clients should adopt a risk assessment approach to evaluate the risks to their firm from such clients. For example, assess risks associated with the specific client attributes (all-cash business, complexity, uncertainty, etc.) along with assessing your specific firm attributes (risk tolerance, competency, level of service choices, etc.) as you carefully consider whether these prospective clients would be a good fit for the firm. As part of this risk assessment, firms should discuss and review the potential legal ramifications with an attorney who specializes in this industry.

As part of your process in assessing "risks," never forget that your professional acts and decisions will be judged in hindsight. Therefore, if your firm decides to service cannabis clients (or any other higher-risk clients, for that matter), be extremely attentive to the following rules in the malpractice world:
  • Professional standards for CPAs are merely the floor — juries often hold CPAs to higher standards.
  • A CPA’s job is to advise the client of opportunities and warn the client of risk.
  • CPAs are scriveners — lack of documentation is viewed as evidence of potential malpractice; jurors expect CPAs to have strong documentation, and the lack of it is viewed as not having met the "burden of proof."
  • “Guilt by association” can impact CPAs in a dispute.


Loss Prevention Best Practices

Apply appropriate safeguards to address the added risk associated with cannabis clients. The following are some best practices to consider:
  • Meet principal(s) face to face to assist in determining integrity.
  • Perform background checks on all principals.
  • Insist that clients have ongoing legal representation.
  • Obtain written consent annually to interact with client’s attorney.
  • Document, document, document!
    • Have a signed and detailed annual engagement letter clearly articulating scope and limits as well as enhanced "protective clauses." CAMICO provides a sample engagement letter template to CAMICO policyholders ("Cannabis Client Tax Engagement Letter").
    • Document all planning, work, consultations and communications (internal and external).
    • Obtain a management representation letter annually (regardless of type of service) that affirmatively confirms the client’s understanding of, and compliance with, state laws and regulations.

Consider creating a Crisis Management Plan (or enhancing an existing one) to manage the firm’s potential reputational risks. A crisis management plan should address the potential consequences of servicing cannabis clients and should include engaging with a qualified attorney and public relations firm (to assist with operational and reputational risk responses), as well as specifying a spokesperson for your firm in the event of a crisis.

More information about CAMICO insurance solutions and risk management programs is available at www.camico.com.

Share this post

Leave a comment

Filtered HTML

  • Web page addresses and e-mail addresses turn into links automatically.
  • Allowed HTML tags: <a> <em> <strong> <cite> <blockquote> <code> <ul> <ol> <li> <dl> <dt> <dd>
  • Lines and paragraphs break automatically.

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.

Latest Articles

  • 13 Nov

    How to respond to subpoenas

    CPA firms are often uncertain about whether or how to respond to a subpoena, as they also need to comply with a number of rules and regulations that are intended to protect client confidentiality. The following Q&A focuses on understanding the nature of subpoenas and how CPA firms can ... read more

  • 13 Nov

    The New 'Hosting Services' Interpretation

    Under the new "Hosting Services" ethics interpretation in the AICPA's Code of Professional Conduct (ET §1.295.143), effective July 1, 2019, CPA independence is impaired by taking responsibility for hosting a client's data or records. As such, if the only way that the client can access its... read more

  • 05 Nov

    FASB ASC 606 – Don’t Get Revenue Wrecked

    by Duncan B. Will, CPA/ABV/CFF, CFE

    Of course, you're relieved and exhausted – in addition to the traditional tax and accounting services you perform for your clients as their accountant and trusted adviser, you've helped them address the new tax law, consulted on a... read more