Measuring caregiver authorization completeness at a dispensary

Question and scope

This study asks whether a cannabis dispensary can measure the completeness of a caregiver authorization at the point of pickup. The unit is one caregiver pickup attempt for one patient order. The review examines identity verification, the authorized caregiver record, the scope of the authorization, the release decision, and the counter note. It does not determine whether the patient's medical use was appropriate or whether the caregiver relationship was genuine.

Set the scope to one store, one pickup counter, and a fixed observation window. Record the authorization form, the dispensary system fields, the identification policy, and the staff roles allowed to release an order. If the store changes its form or its point-of-sale workflow during the window, separate the periods. A new field can change the completeness result more than a change in individual attention.

What the sources establish

The Virginia Cannabis Control Authority provides the state regulatory context for licensed cannabis retail and caregiver access. NIST privacy guidance is relevant to limiting the patient information collected and shared at the counter. The Federal Trade Commission's guidance on protecting personal information supports a minimum-necessary approach to identity records. None of these sources measures a dispensary's authorization completeness or supplies a local benchmark.

The store therefore needs local evidence for its own process. Public sources can explain why identity, scope, and privacy matter, but they cannot show whether a specific caregiver was authorized for a specific order. The study should define its own evidence standard and preserve the authorization record. A conclusion about one counter during one period is more defensible than a general claim about caregiver safety.

Definitions and measures

Define a caregiver pickup attempt as a caregiver's request to receive an order on behalf of a patient. Define identity verification as the documented check of the person presenting at the counter. Define authorization scope as the products, actions, and period the patient has approved. Define release as the recorded decision to hand the order to the caregiver. Use those definitions consistently across every attempt in the sample.

Measure the number of attempts, the number with a verified identity, the number with an active authorization, the number with a scope match, and the number with a release note. Report the reasons an attempt was stopped. Do not combine a missing authorization with a failed identity check, because the corrective actions differ. Report the count and the denominator for each authorization element. A single completeness score can hide which control failed.

Sampling and collection

Sample caregiver pickup attempts rather than orders, then review every authorization and release entry attached to the selected attempt. Include attempts at different times of day and attempts involving new caregivers. Stratify by whether the patient had previously used the same caregiver. Record the sampling rule and the observation window. If the store has few caregiver pickups, review every eligible attempt in the period.

Collect the authorization record, the identification check, the order, the release note, and any supervisor approval. Mask patient identifiers in the analysis table and store the raw evidence in the approved system. If the authorization was verbal, record that fact and the person who accepted it. A verbal authorization that the policy does not allow is a finding, not an exclusion.

Analysis and reporting

Report the number of attempts, the number verified, the number authorized, the number released, and the number referred. Show the counts by caregiver status and by staff role. Report the number of attempts stopped because the authorization was missing or expired. A release rate without the stop reasons does not show whether the counter protected the patient. Report the number of attempts with no release decision as a separate count.

Inspect the exceptions. Was the caregiver known to the staff, was the authorization form incomplete, or did the patient add the caregiver after the order was placed? Group the causes and choose one change, such as a required scope field or an expiry alert. Do not rank staff by the number of stopped pickups when the caregiver mix differs. Record the change and its owner before the next sample begins.

Limits and sources of error

The study cannot prove that the caregiver relationship was valid or that the patient understood the authorization. It can show whether the store documented a check and followed its own process. A caregiver may also present a document that looks valid but is later disputed. The review should report those limits rather than treating the record as a legal determination.

The authorization form may not capture every product or action, and the point-of-sale system may not store the scope in a searchable field. The reviewer may also interpret a vague scope differently from the counter staff. Use a short codebook and test agreement on a small sample. Report the disagreement instead of forcing a single reading. Keep the disagreement note with the coded sample so the result can be reproduced.

Review and next action

Choose one change: require an active authorization before the order is packed, add a scope field, add an expiry alert, or require a supervisor review for new caregivers. Assign the owner and the next sample date. Keep the change small enough to test at one counter. Repeat the review with the same definitions. Write the change into the counter checklist so it survives a busy shift.

Close the study when the store accepts the result and schedules the next check. Report the remaining uncertainty beside the completeness counts. The caregiver authority routine describes the counter practice this protocol measures. Use the result to improve the authorization record, not to judge the patient or the caregiver. Schedule the next check and name the person who will run it.

Sources

The sources below support the regulatory, privacy, and recordkeeping context for this review. They do not measure this dispensary, and no source is presented as a local benchmark. Each link should be checked for its date and scope before reuse. The operational finding comes only from the store records described in the method. Keep the cited page with the case file until the review closes.

• Virginia Cannabis Control Authority
• NIST Privacy Framework
• FTC, Protecting Personal Information
• U.S. Bureau of Labor Statistics, administrative assistants

This article describes a measurement method rather than legal, medical, or compliance advice. Confirm current requirements with the applicable authority and qualified advisers. Keep the local evidence separate from those requirements. Record the review date and the owner who accepted the interpretation. Store the signed scope note with the review file, and give the owner a copy before the next sample begins.