Canadian cannabis companies with US operations must disclose risks