I think that they are going to run into trouble with the database if they include names. Confidentiality is assured in the constitution and can not be violated.

However, it would be possible to run the database using only the card number and exp date without violating patient rights.

We need a database that we can enter a patients card number and see if the are still registered with the center. Currently there is no way to confirm your patient and respective plant or product volume counts.

Patients changing centers without notice can expose the center to felony cultivation or possession charges.