Since you are handling "patient" information and verifying their status, do you have to take any extra consideration of any specific laws, such as HIPAA? it's not like their health history is on there, so i would assume it's just like filing regular paperwork. any insight?
I think only the physician signing your medical recommendation is covered by HIPAA, and I believe that dispensary 'patient-disclosures' are more for their benefit/liability/record. example: http://www.collectiveconscious.org/wp-content/uploads/2012/07/Association-Agreement-for-Patient-Member.pdf
The only info I want my dispensary using on me is what kind of bud I like. That way, they can keep an ample supply ready for my sorry ass.