Cannabis Security Regulations by State

While cannabis usage and possession is still illegal under federal law, the laws and regulations vary widely by state.

In 21 states – the sale and possession of marijuana is legal for both medical and recreational use, as of November 2022, and 10 states have taken steps to decriminalize it to some degree. Thirty-seven states and the District of Columbia have passed laws allowing some degree of medical use of marijuana.

For additional details, click on each state to find details of legality in that state, and if there are regulations that pertain to security for legal cannabis, those are provided (details for District of Columbia are under Maryland state).

Cannabis Legalization Status

Cannabis legalized for recreational use
Medical cannabis broadly legalized
No broad laws legalizing cannabis

Washington:

Medical cannabis legal as of 1998

Recreational cannabis legal as of 2012 (first U.S. state to legalize recreational marijuana)

Washington Administrative Code – WAC 314-55-083

The security requirements for a marijuana licensee are as follows:

(1) Display of identification badge. All licensees and employees on the licensed premises shall be required to hold and properly display an identification badge issued by the licensed employer at all times while on the licensed premises and engaged in the transportation of marijuana. The identification badge must list the licensee’s trade name and include the person’s full and legal name and photograph. All licensees and employees must have their state issued identification available to verify the information on their badge is correct.

(a) All nonemployee visitors to the licensed premises, other than retail store customers, shall be required to hold and properly display an identification badge issued by the licensee at all times while on the licensed premises.

(b) A log must be kept and maintained showing the full name of each visitor entering the licensed premises, badge number issued, the time of arrival, time of departure, and the purpose of the visit.

(c) All log records must be maintained on the licensed premises for a period of three years and are subject to inspection by any WSLCB employee or law enforcement officer, and must be copied and provided to the WSLCB or law enforcement officer upon request.

(d) Employees, visitors, and other persons at a marijuana licensed premises, including persons engaged in the transportation of marijuana, must provide identification to a WSLCB enforcement officer upon request.

(2) Alarm systems. At a minimum, each licensed premises must have a security alarm system on all perimeter entry points and perimeter windows. Motion detectors, pressure switches, duress, panic, and hold-up alarms may also be utilized.

(3) Surveillance system. At a minimum, a licensed premises must have a complete video surveillance system with minimum camera resolution of 640 x 470 pixels or pixel equivalent for analog. The surveillance system storage device and/or the cameras must be internet protocol (IP) compatible. All cameras must be fixed and placement shall allow for the clear and certain identification of any person and activities in controlled areas of the licensed premises. All entrances and exits to an indoor facility shall be recorded from both indoor and outdoor, or ingress and egress vantage points. All cameras must record continuously twenty-four hours per day and at a minimum of ten frames per second. The surveillance system storage device must be secured on the licensed premises in a lockbox, cabinet, closet, or secured in another manner to protect from employee tampering or criminal theft. All surveillance recordings must be kept for a minimum of forty-five days on the licensee’s recording device. All videos are subject to inspection by any WSLCB employee or law enforcement officer, and must be copied and provided to the WSLCB or law enforcement officer upon request. All recorded images must clearly and accurately display the time and date. Time is to be measured in accordance with the U.S. National Institute Standards and Technology standards.

(a) Controlled areas include:

(i) Any area within an indoor, greenhouse or outdoor room or area where marijuana is grown, or marijuana or marijuana waste is being moved within, processed, stored, or destroyed. Rooms or areas where marijuana or marijuana waste is never present are not considered control areas and do not require camera coverage.

(ii) All point-of-sale (POS) areas.

(iii) Twenty feet of the exterior of the perimeter of all required fencing and gates enclosing an outdoor grow operation. Any gate or other entry point that is part of the required enclosure for an outdoor growing operation must be lighted in low-light conditions. A motion detection lighting system may be employed to light the gate area in low-light conditions.

(iv) Any room or area storing a surveillance system storage device.

(b) All marijuana, marijuana concentrates, or marijuana-infused products that are intended to be removed or transported between two licensed premises shall be staged in an area known as the “quarantine” location for a minimum of twenty-four hours. Transport manifest with product information and weights must be affixed to the product. At no time during the quarantine period can the product be handled or moved under any circumstances and is subject to auditing by the WSLCB or designees.

(4) Traceability: To prevent diversion and to promote public safety, marijuana licensees must track marijuana from seed to sale. Licensees must provide the required information on a system specified by the WSLCB. All costs related to the reporting requirements are borne by the licensee. Marijuana seedlings, clones, plants, lots of usable marijuana or trim, leaves, and other plant matter, batches of extracts, marijuana-infused products, samples, and marijuana waste must be traceable from production through processing, and finally into the retail environment including being able to identify which lot was used as base material to create each batch of extracts or infused products. The following information is required and must be kept completely up-to-date in a system specified by the WSLCB:

(a) Key notification of “events,” such as when a plant enters the system (moved from the seedling or clone area to the vegetation production area at a young age);

(b) When plants are to be partially or fully harvested or destroyed;

(c) When a lot or batch of marijuana, marijuana extract, marijuana concentrates, marijuana-infused product, or marijuana waste is to be destroyed;

(d) When usable marijuana, marijuana concentrates, or marijuana-infused products are transported;

(e) Any theft of usable marijuana, marijuana seedlings, clones, plants, trim or other plant material, extract, infused product, seed, plant tissue or other item containing marijuana;

(f) There is a seventy-two hour mandatory waiting period after the notification described in this subsection is given before any plant may be destroyed, a lot or batch of marijuana, marijuana extract, marijuana-infused product, or marijuana waste may be destroyed;

(g) There is a twenty-four hour mandatory waiting period after the notification described in this subsection to allow for inspection before marijuana plants, seeds, plant tissue cultures, or lots of marijuana are transported from a producer to another producer or to a processor;

(h) There is a twenty-four hour mandatory waiting period after the notification described in this subsection to allow for inspection before usable marijuana, marijuana concentrates, or marijuana-infused products are transported from a processor to another processor or to a retailer;

(i) All marijuana plants eight or more inches in height or width must be physically tagged and tracked individually;

(j) A complete inventory of all marijuana, seeds, plant tissue, seedlings, clones, all plants, lots of usable marijuana or trim, leaves, and other plant matter, batches of extract, marijuana concentrates, marijuana-infused products, and marijuana waste;

(k) All marijuana, usable marijuana, marijuana-infused products, marijuana concentrates, seeds, plant tissue, clone lots, and marijuana waste must be physically tagged with the sixteen digit identification number generated by the traceability system and tracked;

(l) All point of sale records;

(m) Marijuana excise tax records;

(n) All samples sent to an independent testing lab, any sample of unused portion of a sample returned to a licensee, and the quality assurance test results;

(o) All free samples provided to another licensee for purposes of negotiating a sale;

(p) All samples used for testing for quality by the producer or processor;

(q) Samples containing usable marijuana provided to retailers;

(r) Samples provided to the WSLCB or their designee for quality assurance compliance checks; and

(s) Other information specified by the board.

(5) Start-up inventory for marijuana producers. Within fifteen days of starting production operations a producer must have all nonflowering marijuana plants, clones, seeds, and plant tissue cultures physically on the licensed premises. The producer must, within twenty-four hours, record each marijuana plant that enters the facility in the traceability system during this fifteen day time frame. No flowering marijuana plants may be brought into the facility during this fifteen day time frame. After this fifteen day time frame expires, a producer may only start plants from seed or create clones from a marijuana plant located physically on their licensed premises, or purchase marijuana seeds, clones, or plants from another licensed producer.

*Requirements are subject to change.

Rhode Island:

Medical cannabis legal as of 2006

Recreational cannabis was legalized up to 1 oz in 2022

State of Rhode Island and Providence Plantations Dept of Health – Rules & Regs Related to the Medical Marijuana Program [R21-28.6-MMP]

5.1.7 Security Requirements:

(a) Each compassion center shall implement appropriate security and safety measures to deter and prevent the unauthorized entrance into areas containing marijuana and the theft of marijuana.

(1) Access from outside the premises shall be kept to a minimum and be well-controlled;

(2) The outside perimeter of the premises shall be well-lighted; and

(3) Entry into area(s) where marijuana is held shall be limited to authorized personnel.

(b) Each compassion center shall have a fully operational security alarm system at each authorized physical address that will provide suitable protection against theft and diversion. For the purpose of these Regulations, a fully operational security alarm system shall include, as a minimum:

(1) Immediate automatic or electronic notification to alert local or municipal law enforcement agencies to an unauthorized breach of security at the compassion center or at any other authorized physical address; and

(2) Immediate automatic or electronic notification to local or municipal public safety personnel of a loss-of-electrical support backup system.

(c) When appropriate, the security system shall provide protection against theft or diversion that is facilitated or hidden by tampering with computers or electronic records.

(d) Each compassion center shall ensure that the storage of usable marijuana is in a locked area with adequate security. For purpose of these Regulations, “adequate security”, as a minimum, should be assessed, established and maintained based on:

(1) Quantity of usable marijuana that will be kept on hand at each authorized location;

(2) The compassion center’s inventory system for tracking and dispensing usable marijuana;

(3) The number of principal officers, board members, agents, volunteers or employees who have or could have access to the usable marijuana;

(4) The geographic location of the compassion center (i.e., high or low crime area);

(5) Scope and sustainability of the alarm system; and

(6) Root cause analysis of any breach of security and/or inventory discrepancy for usable marijuana at that location.

(e) Each compassion center, as a minimum, shall:

(1) Conduct an initial comprehensive inventory of all medical marijuana, including usable marijuana available for dispensing, mature marijuana plants and unusable marijuana, at each authorized location on the date the compassion center first dispenses medical marijuana.

(2) Conduct the comprehensive inventory required by §5.1.7(e)(1) of these Regulations at intervals not to exceed twenty-four (24) months from the date of the previous comprehensive inventory;

(3) Conduct a monthly inventory review of stored, usable marijuana;

(4) Within twenty-four (24) hours of discovery of the event, notify the Department and appropriate local law enforcement authorities by telephone of discrepancies identified during inventories conducted pursuant to §§5.1.7(e)(1), (e)(2) or (e)(3) of these Regulations.

(5) Establish a protocol for the testing and maintenance of the security alarm system;

(6) Conduct a maintenance inspection/test of the alarm system for each authorized location at intervals not to exceed thirty (30) days from the previous inspection/test and promptly make all necessary repairs to ensure the proper operation of the alarm system;

(7) In the event of a failure of the security alarm system, due to loss of electrical support or mechanical malfunction, that is expected to exceed an eight (8) hour period:

(i) Within twenty-four (24) hours of discovery of the event, notify the Department by telephone; and

(ii) Provide alternative security measures approved by the Department or close the authorized physical address(es) impacted by the failure/malfunction until the security alarm system has been restored to full operation;

(8) Maintain documentation in an auditable form for a period of at least twenty-four (24) months after the event for:

(i) All inventories conducted pursuant to §§5.1.7(e)(1), (e)(2) or (e)(3) of these Regulations. The record shall include, as a minimum, the date of the inventory, a summary of the inventory findings and the name, signature and title of the individual who conducted the inventory;

(ii) All maintenance inspections/tests conducted pursuant to §5.1.7(e)(6) of these Regulations, and any servicing, modification or upgrade performed on the security alarm system. The record shall include, as a minimum, the date of the action, a summary of the action(s) performed and the name, signature and title of the individual who performed the action(s);

(iii) Any alarm activation or other event which requires response by public safety personnel; and

(iv) Any unauthorized breach(es) of security.

(9) Request that the Rhode Island State Police (RISP) visit the compassion center to inspect the facility security and make any recommendations regarding the security of the facility and its personnel within ten (10) days prior to the initial opening of each compassion center.

(i) Said recommendations shall not be binding upon any compassion center, nor shall the lack of implementation of said recommendations delay or prevent the opening or operation of any center.

(ii) If the RISP do not inspect the compassion center within the ten (10) day period there shall be no delay in the compassion center’s opening.

* Requirements are subject to change.

Pennsylvania:

Medical cannabis legal as of 2016

Recreational cannabis illegal

Pennsylvania Medical Marijuana Dept of Health – Title 28, Chapters 1141 and 1151

§ 1151.26. Security and surveillance.

(a) A grower/processor shall have security and surveillance systems, utilizing commercial-grade equipment, to prevent unauthorized entry and to prevent and detect an adverse loss. The security and surveillance systems must include the following:

(1) A professionally-monitored security alarm system that includes the following:

(i) Coverage of all facility entrances and exits; rooms with exterior windows, exterior walls, roof hatches or skylights; storage rooms, including those that contain medical marijuana and safes; and the perimeter of the facility.

(ii) A silent security alarm system signal, known as a duress alarm, generated by the entry of a designated code into an arming station to signal that the alarm user is being forced to turn off the system.

(iii) An audible security alarm system signal, known as a panic alarm, generated by the manual activation of a device intended to signal a life-threatening or emergency situation requiring law enforcement response.

(iv) A silent alarm signal, known as a holdup alarm, generated by the manual activation of a device intended to signal a robbery in progress.

(v) An electrical, electronic, mechanical or other device capable of being programmed to send a prerecorded voice message requesting dispatch, when activated, over a telephone line, radio or other communication system to a law enforcement, public safety or emergency services agency.

(vi) A failure notification system that provides an audible, text or visual notification of any failure in the systems. The failure notification system must provide by telephone, e-mail or text message an alert to a designated security person within the facility within 5 minutes after the failure.

(vii) Smoke and fire alarms.

(viii) Auxiliary power sufficient to maintain operation of specified growing and processing areas identified in the grower/processor’s plan of operation for at least 48 hours following a power outage.

(ix) The ability to ensure all access doors are not solely controlled by an electronic access panel to prevent locks from becoming released during a power outage.

(x) Motion detectors.

(2) A professionally-monitored security and surveillance system that is operational 24 hours a day, 7 days a week and records all activity in images capable of clearly revealing facial detail. The security and surveillance system must include the following:

(i) Fixed camera placement that allows for a clear image of all individuals and activities in and around the following:

(A) All limited access areas.

(B) A room or area containing a security and surveillance system storage device or equipment.

(C) Entrances to and exits from the facility. Entrances and exits must be recorded from both indoor and outdoor vantage points.

(D) Rooms with exterior windows, exterior walls, roof hatches, or skylights and storage rooms, including those that may contain medical marijuana and safes.

(E) Twenty feet from the exterior of the perimeter of the facility.

(ii) Auxiliary power sufficient to maintain operation for at least 48 hours following a power outage.

(iii) Ability to operate under the normal lighting conditions of each area under surveillance.

(iv) Ability to immediately produce a clear, color, still photograph in a digital format that meets the requirements of this subsection.

(3) Ability to clearly and accurately display the date and time. The date and time must be synchronized and set correctly and may not significantly obscure the picture.

(4) Ability to record all images captured by each surveillance camera for a minimum of 4 years in a format that may be easily accessed for investigative purposes. The recordings must be kept:

(i) At the facility:

(A) In a locked cabinet, closet or other secure place to protect it from tampering or theft.

(B) In a limited access area or other room to which access is limited to authorized individuals.

(ii) At a secure location other than the location of the facility if approved by the Department.

(5) A security alarm system separate from the facility’s primary security system covering the limited access area or other room where the recordings under paragraph (4) are stored. The separate security alarm system must meet the same requirements as the facility’s primary security alarm system.

(b) The following apply regarding the inspection, servicing or alteration of, and the upgrade to, the site’s and facility’s security and surveillance systems:

(1) The systems shall be inspected and all devices tested once every year by a qualified alarm system vendor and a qualified surveillance system vendor, as approved by the Department.

(2) The grower/processor shall conduct maintenance inspections once every month to ensure that any repairs, alterations or upgrades to the security and surveillance systems are made for the proper operation of the systems.

(3) The grower/processor shall retain at the facility, for at least 4 years, records of all inspections, servicing, alterations and upgrades performed on the systems and shall make the records available to the Department and its authorized agents within 2 business days following a request.

(4) In the event of a mechanical malfunction of the security or surveillance system that a grower/processor anticipates will exceed an 8-hour period, the grower/processor shall notify the Department immediately and, with Department approval, provide alternative security measures that may include closure of the facility.

(5) The grower/processor shall designate an employee to continuously monitor the security and surveillance systems at the facility.

(6) The following apply regarding records retention:

(i) Within 2 business days following a request, a grower/processor shall provide up to four screen captures of an unaltered copy of a video surveillance recording to the Department or its authorized agents, law enforcement or other Federal, State or local government officials if necessary to perform the governmental officials’ functions and duties.

(ii) If a grower/processor has been notified in writing by the Department or its authorized agents, law enforcement or other Federal, State or local government officials of a pending criminal or administrative investigation for which a recording may contain relevant information, the grower/processor shall retain an unaltered copy of the recording for 4 years or until the investigation or proceeding is closed or the entity conducting the investigation or proceeding notifies the grower/processor that it is not necessary to retain the recording, whichever is longer.

(c) The grower/processor shall install commercial-grade, nonresidential doors and door locks on each external door of the facility. Keys or key codes for all doors shall remain in the possession of designated authorized individuals.

(d) During all nonworking hours, all entrances to and exits from the site and facility must be securely locked.

(e) The grower/processor shall have an electronic back-up system for all electronic records.

(f) The grower/processor shall install lighting to ensure proper surveillance inside and outside of the facility.

(g) A grower/processor shall limit access to a room containing security and surveillance monitoring equipment to persons who are essential to maintaining security and surveillance operations; Federal, State and local law enforcement; security and surveillance system service employees; the Department or its authorized agents; and other persons with the prior written approval of the Department. The following apply:

(1) A grower/processor shall make available to the Department or the Department’s authorized agents, upon request, a current list of authorized employees and service employees or contractors who have access to any security and surveillance areas.

(2) A grower/processor shall keep security and surveillance rooms locked at all times and may not use these rooms for any other purpose or function.

* Requirements are subject to change.

Oregon:

Medical cannabis legal as of 1998

Recreational cannabis legal as of 2015

Oregon Administrative Rules – Division 25

(enforced by Oregon Liquor Control Commission (OLCC))

845-025-1400 – Security Plans

(1) An applicant must have a security plan. The Commission will not conduct any pre-licensing inspection under OAR 845-025-1090(3) until it has approved an applicant’s security plan.

(2) The Commission must notify an applicant in writing whether the security plan has been approved. If the security plan is approved with a waiver granted under OAR 845- 025-1405, the notice must specifically describe the alternate safeguards that are required and, if time limited, must state the time period the security plan is in effect.

(3) A licensee must notify the Commission of any proposed changes to a security plan and must have approval prior to implementing any change. The Commission will notify a licensee whether the change is approved in the same manner described in subsection (2) of this rule.

(4) The Commission may withdraw approval of the security plan at any time if there have been one or more documented instances of theft or loss of marijuana items on the licensed premises within the past year. If the Commission withdraws its approval of the security plan, the licensee will be given a reasonable period of time to modify the plan and if the security plan was approved with a waiver of any security requirements, will be given a reasonable period of time to come into compliance with the security requirements that were waived.

(5) Failure to comply with the terms of an approved security plan is a Category III violation.

845-025-1410 – Security Requirements

(1) A licensee is responsible for the security of all marijuana items on the licensed premises or in transit, including providing adequate safeguards against theft or diversion of marijuana items and records that are required to be kept.

(2) The licensee must ensure that commercial grade, non-residential door locks are installed on every external door, and gate if applicable, of a licensed premises where marijuana items are present.

(3) During all hours when the licensee is not operating a licensee must ensure that:

(a) All points of ingress and egress from a licensed premises are securely locked and any keys or key codes to the enclosed area remain in the possession of the licensee, licensee representative, or authorized personnel;

(b) All marijuana items on a licensed retailer’s premises are kept in a safe or vault as those terms are defined in OAR 845-025-1015; and

(c) All usable marijuana, cut and drying mature marijuana plants, cannabinoid concentrates, extracts or products on the licensed premises of a licensee other than a retailer are kept in a locked, enclosed area within the licensed premises that is secured with at a minimum, a properly installed steel door with a steel frame, and a commercial grade, non-residential door lock.

(4) A licensee must:

(a) Have an electronic back-up system for all electronic records; and

(b) Keep all video recordings and archived required records not stored electronically in a locked storage area. Current records may be kept in a locked cupboard or desk outside the locked storage area during hours when the licensed business is open.

845-025-1420 – Alarm System

(1) A licensed premises must have a fully operational security alarm system, activated at all times when the licensed premises is closed for business.

(2) The security alarm system for the licensed premises must:

(a) Be able to detect unauthorized entry onto the licensed premises and unauthorized activity within any limited access area where mature marijuana plants, usable marijuana, cannabinoid concentrates, extracts or products are present;

(b) Be programmed to notify a the licensee, licensee representative or authorized personnel in the event of an unauthorized entry; and

(c) Have a mechanism to ensure that the licensee, licensee’s employees and authorized representatives can immediately notify law enforcement or a security company of any unauthorized entry. This subsection may be satisfied in one of the following ways:

(A) Having at least two operational “panic buttons” located inside the licensed premises that are linked with the alarm system that immediately notifies a security company or law enforcement; or

(B) Having operational “panic buttons” physically carried by all licensee representatives present on the licensed premises that are linked with the alarm system that immediately notifies a security company or law enforcement; or

(C) Having a landline telephone present in all limited access areas that is capable of immediately calling a security company or law enforcement.

(3) A licensee that has at least one authorized representative physically present on the licensed premises at all times when it is closed for business is not required to comply with section (1) and sections (2)(a) and (b) of this rule.

(4) Upon request, licensees shall make all information related to security alarm systems, monitoring and alarm activity available to the Commission.

845-025-1430 – Video Surveillance Equipment

(1) A licensed premises must have a fully operational video surveillance recording system.

(2) Video surveillance equipment must, at a minimum:

(a) Consist of:

(A) Digital or network video recorders;

(B) Cameras capable of meeting the requirements of OAR 845-025-1450 and this rule;

(D) Digital archiving devices;

(E) A minimum of one monitor on premise capable of viewing video; and

(F) A printer capable of producing still photos.

(b) Have the capability of producing a still photograph from any camera image;

(c) Be equipped with a failure notification system that provides, within one hour, notification to the licensee or an authorized representative of any prolonged surveillance interruption or failure; and

(d) Have sufficient battery backup to support a minimum of one hour of recording time in the event of a power outage.

(3) Except for mounted cameras, all video surveillance equipment and recordings must be stored in a locked secure area that is accessible only to the licensee, licensee representatives and authorized personnel, Commission employees and contractors, and other state or local government officials that have jurisdiction over some aspect of the licensed premises or licensee.

845-025-1440 – Required Camera Coverage and Camera Placement

(1) A licensed premises must have camera coverage, as applicable, for:

(a) All points of ingress and egress to and from the licensed premises;

(b) All limited access areas as that term is defined in OAR 845-025-1015;

(d) All points of entry to or exit from limited access areas;

(e) The surveillance room or surveillance area as defined in OAR 845-025-1460(1)(a) and (b); and

(f) Any other area that the Commission believes presents a public safety risk based on the overall operation and characteristics of the licensed premises.

(2) A licensee must ensure that cameras are placed so that they capture clear and certain images of any individual and activity occurring:

(a) Within 15 feet both inside and outside of all points of ingress and egress to and from the licensed premises; and

(b) In all locations within limited access, and consumer sales areas on the licensed premises.

845-025-1450 – Video Recording Requirements for Licensed Facilities

(1) A licensee must have cameras that continuously record, 24 hours a day:

(a) In all areas where mature marijuana plants, immature marijuana plants, usable marijuana, cannabinoid concentrates, extracts or products may be present on the licensed premises; and

(b) All points of ingress and egress to and from areas where mature marijuana plants, immature marijuana plants, usable marijuana, cannabinoid concentrates, extracts or products are present.

(2) A licensee must:

(a) In limited access and consumer sales areas, use cameras that record at a minimum resolution of 1280 x 720 px and record at 10 fps (frames per second);

(b) In exterior perimeter and areas on the licensed premises that are not limited access areas, use cameras that record at a minimum resolution of 1280 x 720 px and record at least 5 fps, except where coverage overlaps any limited access areas such as entrances or exits and in those overlap areas cameras must record at 10 fps;

(d) Keep surveillance recordings, except for off-site backup recordings described in (2)(l) of this rule, for a minimum of:

(A) 90 calendar days for licenses issued or renewed after August 31, 2016; and

(B) 30 calendar days for licenses issued prior to August 31, 2016.

(e) Keep off-site backup recordings described in (2)(l) of this rule for a minimum of 30 days;

(f) Maintain surveillance recordings in a format approved by the Commission that can be easily accessed for viewing and easily reproduced;

(g) Upon request of the Commission, keep surveillance recordings for periods exceeding the retention period specified in section (2)(d) of this rule;

(h) Have the date and time embedded on all surveillance recordings without significantly obscuring the picture;

(i) Archive video recordings in a format that ensures authentication of the recording as a legitimately-captured video and guarantees that no alterations of the recorded image has taken place;

(j) Make video surveillance records and recordings available immediately upon request to the Commission in a format specified by the Commission for the purpose of ensuring compliance with ORS Chapter 475B and these rules;

(k) Immediately notify the Commission of any equipment failure or system outage lasting 30 minutes or more; and

(l) Back up the video surveillance recordings off-site and in real time for the surveillance room or surveillance area.

(3) Notwithstanding the requirements in section (1) of this rule a licensee may stop recording in areas where marijuana items are not present due to seasonal closures or prolonged periods of inactivity. The licensee must provide notice to OLCC when recording is stopped and must keep a log of all times that recording is stopped due to marijuana items not being present. The log and notice must identify which cameras were not recording, the date and time recording stops, the date and time recording resumes or is scheduled to resume, and a description of the reason why the recording stopped and started.

(4) Failure to comply with subsections (2)(d)(e), (f), (h) or (i) of this rule is a Category I violation and may result in license revocation.

845-025-1460 – Location and Maintenance of Surveillance Equipment

(1) A licensee must:

(a) Have the surveillance room or surveillance area in a limited access area; and

(b) Have the surveillance recording equipment housed in a designated, locked, and secured room or other enclosure with access limited to:

(A) The licensee, licensee representatives, and authorized personnel

(B) Employees of the Commission;

(C) State or local law enforcement agencies for a purpose authorized under ORS Chapter 475B, these rules, or for any other state or local law enforcement purpose; and

(D) Service personnel or contractors.

(2) Off-site storage must be secure and the recordings must be kept in a format approved by the Commission that can be easily accessed for viewing and easily reproduced.

(3) A licensee must keep a current list of all authorized employees and service personnel who have access to the surveillance system and room on the licensed premises.

(4) Licensees must keep a surveillance equipment maintenance activity log on the licensed premises to record all service activity including the identity of any individual performing the service, the service date and time and the reason for service to the surveillance system.

(5) Off-site monitoring of the licensed premises by a licensee or an independent third party is authorized as long as standards exercised at the remote location meet or exceed all standards for on-site monitoring.

845-025-1470 – Producer Security Requirements

(1) A producer must effectively prevent public access to all areas of the licensed premises used in the production of marijuana. In addition to the security requirements in OAR 845-025-1400 to 845-025-1460, a producer’s approved security plan as described in OAR 845-025-1400 must include a method to prevent public access to all areas of the licensed premises used in the production of marijuana.

(2) If a producer chooses to dispose of marijuana items by any method of composting, as described in OAR 845-025-7750, the producer must prevent public access to the composting area.

*Requirements are based off of the Oregon OLCC Draft Rules for 2017 and are subject to change.

Ohio:

Medical cannabis legal as of 2017

Recreational cannabis illegal – Possession of small amounts decriminalized

Ohio Administrative Code – 3796:6 Marijuana Dispensaries

3796:6-3-07 Security, control, and storage of medical marijuana at a dispensary.

(A) Pursuant rule 3796:6-3-05 of the Administrative Code, a designated representative shall provide supervision and control of medical marijuana and medical marijuana products and adequate safeguards to ensure that such items are dispensed in accordance with Chapter 3796. of the Revised Code and this division, by the following procedures:

(1) A licensed dispensary key employee shall provide personal supervision of the medical marijuana and medical marijuana products, order forms, all records relating to the dispensing of medical marijuana and medical marijuana products, unless the state board of pharmacy has issued written approval to a dispensary allowing for the storage of records off-site.

(2) Whenever personal supervision of medical marijuana and medical marijuana products is not provided by a licensed dispensary key employee, physical or electronic security of such items must be provided according to the following requirements:

(a) The dispensary department, restricted access areas and stock of medical marijuana must each be secured by a physical barrier with suitable locks and an electronic barrier to detect entry at a time when licensed dispensary employees are not present. The physical barrier shall be constructed from floor to ceiling to separate the public entry area from the dispensary department. Such a barrier, before being put into use, must be approved by the state board of pharmacy.

(b) A restricted access area within the dispensary department must contain all medical marijuana, and if maintained on the licensed premises, all records relating to the dispensing of medical marijuana, and any other items required to be under personal supervision of a licensed dispensary employee.

(c) A dispensary maintaining records at a location other than the premises licensed by the state board of pharmacy or via a computerized recordkeeping system shall maintain an executed agreement with the company possessing or storing the records authorizing an agent of the state board of pharmacy access to the records maintained in accordance with this rule within three business days, excluding weekends and holidays. The dispensary is obligated to ensure the board receives the records in the timeframe specified in this rule.

(d) No item, product, record, or equipment that must be accessible to anyone other than a licensed dispensary employee may be stored in restricted access areas.

(e) No medical marijuana may be sold or otherwise dispensed at any time the dispensary department is closed.

(3) Areas designated for the dispensing and storage of medical marijuana shall meet the security requirements in rule 3796:6-3-16 of the Administrative Code. No person may be within the physical confines of the area designated for dispensing or storage of medical marijuana unless under the personal supervision of a licensed dispensary employee.

(B) A dispensary shall store inventory on the licensed premises. All inventory stored on the licensed premises must be secured in restricted access areas and tracked in the inventory tracking system.

(C) A dispensary shall maintain adequate lighting, ventilation, temperature, humidity control, and equipment. Required equipment includes, but is not limited to, adequate personal protective equipment for employees.

(D) Containers storing expired, damaged, deteriorated, misbranded, adulterated or opened medical marijuana shall be separated from other medical marijuana until they are destroyed in accordance with the dispensary’s destruction policy. Expired, damaged, deteriorated, misbranded, or adulterated medical marijuana shall not be stored at the licensed dispensary for more than one week.

(E) The dispensary shall be maintained in a clean and orderly condition. It shall be free from infestation by insects, rodents, birds, or pests.

(F) Medical marijuana shall be stored at appropriate temperatures and under appropriate conditions to help ensure that its identity, strength, quality and purity are not adversely affected.

* Requirements are subject to change.

North Dakota:

Medical cannabis legal as of 2016

Recreational cannabis illegal – Rejected on ballot on Nov 2022, but decriminalized

North Dakota Article 22-33, Chapter 33-44-01

33-44-01-17. Surveillance requirements.

(1) To prevent unauthorized access to marijuana and usable marijuana, the compassion center shall have video surveillance equipment to deter the unauthorized entrance into restricted access areas.

a. The compassion center must operate, monitor, and maintain in good working order a closed-circuit television (CCTV) surveillance system on all of its premises, which must operate at all times and visually record:

(1) All phases of production and processing.

(2) All compassion center points of entry and exit, sales and display areas, storage facilities, and garages.

(3) The entrance to the video surveillance room.

(4) Any parking lot, which must have appropriate lighting for the normal conditions of the area under surveillance.

b. Video surveillance systems must:

(1) Capture clear and certain identification of any person entering or exiting a compassion center.

(2) Have the ability to produce a clear, color, still photo either live or from a recording.

(3) Have an embedded date-and-time stamp on all recordings that must be synchronized and not obscure the picture.

(4) Continue to operate during a power outage.

c. Video recording specifications include:

(1) A video recording must export still images in an industry standard image format, including .jpg, .bmp, and .gif.

(2) Exported video must be archived in a proprietary format that ensures authentication and guarantees that the recorded image has not been altered.

(3) Exported video must be saved in an industry standard file format that can be played on a standard computer operating system.

(4) Upon completion of the required retention period, all recordings must be erased or destroyed before disposal.

(2) The compassion center must maintain all security system equipment and recordings in a secure location to prevent theft, loss, destruction, corruption, and alterations.

(3) The compassion center must ensure that twenty-four hour recordings from all video cameras are:

a. Transmitted to, and available for, viewing by the department through a live feed to the department.

b. Retained for a period of at least 180 days during the initial two years of operation, and upon department approval, for at least ninety calendar days thereafter.

c. Maintained free of alteration or corruption.

d. Retained longer if the compassion center is given notice of a pending criminal, civil, or administrative investigation, or other legal proceeding for which the recording may contain relevant information.

33-44-01-18. Alarm system requirements.

(1) A compassion center must install and maintain a professionally monitored security alarm system that provides intrusion and fire detection of all:

a. Facility entrances and exits.

b. Rooms with exterior windows.

c. Rooms with exterior walls.

d. Roof hatches.

e. Skylights.

f. Storage rooms.

(2) A security alarm system means a device or series of devices that summons law enforcement personnel during, or as a result of, an alarm condition. Devices may include:

a. Hardwired systems and systems interconnected with a radio frequency method such as cellular or private radio signals that emit or transmit a remote or local audio, visual, or electronic signal.

b. Motion detectors.

c. Pressure switches.

d. A duress alarm.

e. A panic alarm.

f. A holdup alarm.

g. An automatic voice dialer.

h. A failure notification system that provides an audio, text, or visual notification of any failure in the surveillance system.

(3) A compassion center’s security alarm system and all devices must continue to operate during a power outage.

(4) The compassion center must test the security alarm system and all devices on a monthly basis and maintain a record of all tests.

(5) The compassion center’s security alarm system must be inspected and all devices tested annually by a qualified alarm vendor.

* Requirements are subject to change.

New York:

Medical cannabis legal as of 2014

Recreational cannabis legalized 3/2021

New York Public Health Law – Title 10, Chapter XIII, Part 1004

§ 1004.13 Security requirements for manufacturing and dispensing facilities.

(a) All facilities operated by a registered organization, including any manufacturing facility and dispensing facility, shall have a security system to prevent and detect diversion, theft or loss of marihuana and/or medical marihuana products, utilizing commercial grade equipment, which shall, at a minimum, include:

(1) a perimeter alarm;

(2) motion detectors;

(3) video cameras in all areas that may contain marihuana and at all points of entry and exit, which shall be appropriate for the normal lighting conditions of the area under surveillance. The manufacturing facility or dispensing facility shall direct cameras at all approved safes, approved vaults, dispensing areas, marihuana sales areas and any other area where marihuana is being produced, harvested, manufactured, stored, handled or dispensed. At entry and exit points, the manufacturing facility or dispensing facility shall angle cameras so as to allow for the capture of clear and certain identification of any person entering or exiting the facility;

(4) twenty-four hour recordings from all video cameras, which the manufacturing facility or dispensing facility shall make available for immediate viewing by the department or the department’s authorized representative upon request and shall be retained for at least 90 days. The registered organization shall provide the department with an unaltered copy of such recording upon request. If a registered organization is aware of a pending criminal, civil oradministrative investigation or legal proceeding for which a recording may contain relevant information, the registered organization shall retain an unaltered copy of the recording until the investigation or proceeding is closed or the entity conducting the investigation or proceeding notifies the registered organization that it is not necessary to retain the recording;

(5) a duress alarm, which for purposes of this section means a silent security alarm system signal generated by the entry of a designated code into an arming station in order to signal that the alarm user is being forced to turn off the system;

(6) a panic alarm, which for purposes of this section, means an audible security alarm system signal generated by the manual activation of a device intended to signal a life threatening or emergency situation requiring a law enforcement response;

(7) a holdup alarm, which for purposes of this section, means a silent alarm signal generated by the manual activation of a device intended to signal a robbery in progress;

(8) an automatic voice dialer, which for purposes of this section, means any electrical, electronic, mechanical, or other device capable of being programmed to send a prerecorded voice message, when activated, over a telephone line, radio or other communication system, to a law enforcement, public safety or emergency services agency requesting dispatch;

(9) a failure notification system that provides an audible, text or visual notification of any failure in the surveillance system. The failure notification system shall provide an alert to the manufacturing facility or dispensing facility within five minutes of the failure, either by telephone, email, or text message;

(10) the ability to immediately produce a clear color still photo that is a minimum of 9600 dpi from any camera image (live or recorded);

(11) a date and time stamp embedded on all recordings. The date and time shall be synchronized and set correctly and shall not significantly obscure the picture; and

(12) the ability to remain operational during a power outage.

(b) A registered organization shall ensure that any manufacturing facility and dispensing facility maintains all security system equipment and recordings in a secure location so as to prevent theft, loss, destruction or alterations.

(c) In addition to the requirements listed in subdivision (a) of this section, each manufacturing facility and dispensing facility shall have a back-up alarm system approved by the department that shall detect unauthorized entry during times when no employees are present at the facility and that shall be provided by a company supplying commercial grade equipment, which shall not be the same company supplying the primary security system.

(d) A registered organization shall limit access to any surveillance areas solely to persons that are essential to surveillance operations, law enforcement agencies, security system service employees, the department or the department’s authorized representative, and others when approved by the department. A registered organization shall make available to the department or the department’s authorized representative, upon request, a current list of authorized employees and service employees who have access to any surveillance room. A manufacturing facility and dispensing facility shall keep all on-site surveillance rooms locked and shall not use such rooms for any other function.

(e) A registered organization shall keep illuminated the outside perimeter of any manufacturing facility and dispensing facility that is operated under the registered organization’s license.

(f) All video recordings shall allow for the exporting of still images in an industry standard image format (including .jpeg, .bmp, and .gif). Exported video shall have the ability to be archived in a proprietary format that ensures authentication of the video and guarantees that no alteration of the recorded image has taken place. Exported video shall also have the ability to be saved in an industry standard file format that can be played on a standard computer operating system. A registered organization shall erase all recordings prior to disposal or sale of the facility.

(g) A registered organization shall keep all security equipment in full operating order and shall test such equipment no less than monthly at each manufacturing facility and dispensing facility that is operated under the registered organization’s registration. Records of security tests must be maintained for five years and made available to the department upon request.

(h) The manufacturing facility of the registered organization must be securely locked and protected from unauthorized entry at all times.

(i) All marihuana that is not part of a finished product must be stored in a secure area or location within the registered organization accessible only to the minimum number of employees essential for efficient operation.

(j) All medical marihuana products, approved or ready for testing, must be stored in a department approved safe or vault in such a manner as to prevent diversion, theft or loss.

(k) All approved safes, vaults or any other approved equipment or areas used for the manufacturing or storage of marihuana and approved medical marihuana products must be securely locked or protected from entry, except for the actual time required to remove or replace marihuana or approved medical marihuana products.

(l) Keys shall not be left in the locks or stored or placed in a location accessible to individuals who are not authorized access to marihuana or manufactured medical marihuana products.

(m) Security measures, such as combination numbers, passwords or biometric security systems, shall not be accessible to individuals other than those specifically authorized to access marihuana or manufactured medical marihuana products.

(n) Prior to transporting any approved medical marihuana product, a registered organization shall complete a shipping manifest using a form determined by the department.

(1) A copy of the shipping manifest must be transmitted to the dispensing facility that will receive the products and to the department at least two business days prior to transport.

(2) The registered organization shall maintain all shipping manifests and make them available to the department for inspection upon request, for a period of 5 years.

(o) A registered organization shall only transport approved medical marihuana products from a manufacturing facility to dispensing facilities.

(1) the approved medical marihuana products must be transported in a locked, safe and secure storage compartment that is part of the vehicle transporting the marihuana; and

(2) in a storage compartment that is not visible from outside the vehicle.

(p) An employee of a registered organization, when transporting approved medical marihuana products, shall travel directly from the registered organization’s manufacturing facility to the dispensing facility and shall not make any unnecessary stops in between.

(q) A registered organization shall ensure that all approved medical marihuana product delivery times are randomized.

(r) A registered organization shall staff all transport vehicles with a minimum of two employees. At least one transport team member shall remain with the vehicle at all times that the vehicle contains approved medical marihuana products.

(s) A transport team member shall have access to a secure form of communication with employees at the registered organization’s manufacturing facility at all times that the vehicle contains approved medical marihuana products.

(t) A transport team member shall possess a copy of the shipping manifest at all times when transporting or delivering approved medical marihuana products and shall produce it to the commissioner, the commissioner’s authorized representative or law enforcement official upon request.

* Requirements are subject to change.

New Jersey:

Medical cannabis legal as of 2010

Recreational cannabis legalized in Nov 2020 Election.

New Jersey Health & Senior Services Medical Marijuana Program NJAC 8:64

8:64-9.7 Security

(a) Each alternative treatment center shall provide effective controls and procedures to guard against theft and diversion of marijuana including, when appropriate, systems to protect against electronic records tampering.

(b) At minimum, each alternative treatment center shall:

(1) Install, maintain in good working order and operate a safety and security alarm system at its authorized physical address(es) that will provide suitable protection 24 hours a day, seven days a week against theft and diversion and that provides, at a minimum:

(i) Immediate automatic or electronic notification to alert State or local police agencies to an unauthorized breach of security at the alternative treatment center; and

(ii) A backup system that activates immediately and automatically upon a loss of electrical support and that immediately issues either automatically or electronic notification to State or local police agencies of the loss of electrical support;

(2) Implement appropriate security and safety measures to deter and prevent the unauthorized entrance into areas containing marijuana and the theft of marijuana;

(3) Implement security measures that protect the premises, registered qualifying patients, registered primary caregivers and principal officers, directors, board members and employees of the alternative treatment center;

(4) Establish a protocol for testing and maintenance of the security alarm system;

(5) Conduct maintenance inspections and tests of the security alarm system at the ATC’s authorized location at intervals not to exceed 30 days from the previous inspection and test and promptly implement all necessary repairs to ensure the proper operation of the alarm system;

(6) In the event of a failure of the security alarm system due to a loss of electrical support or mechanical malfunction that is expected to last longer than eight hours:

(i) Notify the Department pursuant to N.J.A.C. 8:64-9.8; and

(ii) Provide alternative security measures approved by the Department or close the authorized physical addresses impacted by the failure or malfunction until the security alarm system is restored to full operation;

(7) Keep access from outside the premises to a minimum and ensure that access is well controlled;

(8) Keep the outside areas of the premises and its perimeter well lighted.

(i) Exterior lighting must be sufficient to deter nuisance and criminal activity and facilitate surveillance and must not disturb surrounding businesses or neighbors;

(9) Provide law enforcement and neighbors within 100 feet of the ATC with the name and phone number of a staff person to notify during and after operating hours to whom they can report problems with the establishment;

(10) Equip interior and exterior premises with electronic monitoring, video cameras and panic buttons.

(i) A video surveillance system shall be installed and operated to clearly monitor all critical control activities of the ATC and shall be in working order and operating at all times. The ATC shall provide two monitors for remote viewing via telephone lines in State offices. This system shall be approved by the MMP prior to permit issuance.

(ii) The original tapes or digital pictures produced by this system shall be stored in a safe place with a 30-day archive;

(11) Limit entry into areas where marijuana is held to authorized personnel;

(12) Consistently and systematically prevent loitering, that is, the presence of persons who are not on-duty personnel of the ATC and who are not ATC registrants engaging in authorized ATC-dispensary activity; and

(13) Provide onsite parking.

* Requirements are subject to change.

New Hampshire:

Medical cannabis legal as of 2013

Recreational cannabis illegal – Possession of small amounts decriminalized

New Hampshire DHHS – Chapter He-C 400 Therapeutic Cannabis Program

He-C 402.24 ATC – Security Requirements

(a) An ATC shall implement security measures to deter and prevent unauthorized entrance into areas containing cannabis or CIP and to prevent diversion, loss and theft of cannabis or CIP at the ATC. Security measures to protect the premises, registered qualifying patients, designated caregivers, and agents of the ATC must include but are not limited to the following:

(1) The ATC shall limit access to the facility as described in (b) and (f) below;

(2) The ATC shall establish limited access areas accessible only to specifically authorized personnel, and only the minimum number of employees or ATC agents essential for efficient operation;

(3) The ATC shall dispose of all cannabis containing waste including unused portions of the plant, contaminated cannabis product and excess cannabis in accordance with He-C 402.19;

(4) The ATC shall store all finished cannabis in a secure, locked safe, vault or storage unit in such a manner as to prevent diversion, theft, and loss;

(5) The ATC shall keep all safes, vaults, storage units and any other equipment or areas used for the production, cultivation, harvesting, processing, or storage of cannabis and CIP securely locked and protected from entry, except for the actual time required to remove or replace cannabis;

(6) The ATC shall keep all locks and security equipment in good working order;

(7) Keys, and other access devices, as applicable, shall not be left in the locks, or stored or placed in a location accessible to persons other than specifically authorized personnel;

(8) The ATC shall prohibit accessibility of security measures, such as combination numbers, passwords, or electronic or biometric security systems, to persons other than specifically authorized personnel;

(9) The outside perimeter of the ATC shall be sufficiently lit to facilitate surveillance;

(10) The ATC shall ensure that trees, bushes, and other foliage outside of the facility do not allow for a person or persons to conceal themselves from sight;

(11) The ATC shall develop emergency policies and procedures for securing all product following any instance of diversion, theft, or loss of cannabis or CIP, and conduct an assessment to determine whether additional safeguards are necessary; and

(12) The ATC shall develop additional safeguards as directed by the department for registered premises or areas of operations that present security concerns.

(b) An ATC shall not permit any person to enter the ATC unless:

(1) Such person is an ATC agent, is on duty and is visibly displaying his or her badge;

(2) Such person is a qualifying patient or designated caregiver possessing a registry identification card issued by the department pursuant to He-C 401 and whose access shall be limited to the cannabis dispensing area;

(3) The person is an outside vendor or contractor whose responsibilities require access to the ATC and then only to the specific areas necessary and only as long as necessary to perform the person’s job duties;

(4) Such person is authorized by law, rule, or in writing by the commissioner to be in the facility;

(5) Such person(s) are emergency responders in the course of responding to an emergency; or

(6) The ATC shall document the names, times, and dates of each responder at the time of the incident or as soon as is practicable after the emergency, as required by the incident report in He-C 402.10(i).

(c) The requirements of (b) above shall not be construed to prohibit access to authorized law enforcement personnel or local officials acting within their lawful jurisdiction.

(d) The ATC shall document:

(1) The dates and times that all agents are either in the facility or offsite transporting cannabis or CIP for testing, disposal, or to another ATC;

(2) The registry numbers, dates, and times that all registered patients and caregivers are in the facility for either education or purchase of cannabis or CIP;

(3) Access to the registered premises by other authorized persons, including the name, signature, date, times, stated purpose, and the name of the employee providing escort; and

(4) The signature and employee escort requirements in (d)(3) above shall not apply for emergency responders in the event of a reportable incident.

(e) For all authorized persons who do not have either a registry identification card issued by the department or an identification badge issued by the ATC, the ATC shall:

(1) Issue a temporary numbered visitor’s badge that must be worn for the duration of the visit to the ATC and returned prior to exit; and

(2) Provide an ATC employee who shall escort the authorized person(s) at all times while they are in the limited access areas of the facility.

(f) The limited access areas described in (a)(2) above shall be identified by the posting of a sign that shall be a minimum of 12” X 12” and which states: “Do Not Enter – Limited Access Area – Access Limited to Authorized Personnel Only” in lettering no smaller than one inch in height.

(g) An ATC shall have a security system, to prevent and detect diversion, theft, or loss of cannabis or unauthorized intrusion, utilizing commercial grade equipment, which shall, at a minimum, include:

(1) A perimeter alarm on all entry points and perimeter windows;

(2) A failure notification system that provides an audible, text, or visual notification of any failure in the surveillance system which alerts designated employees of the ATC within five minutes after the failure, either by telephone, email, or text message;

(3) A duress alarm, panic alarm, and holdup alarm connected to local public safety or law enforcement authorities or to an alarm monitoring company;

(4) Video cameras in all areas that may contain cannabis, at all points of entry and exit, on the entrance to the video surveillance room and in any parking lot, which shall be appropriate for the normal lighting conditions of the area under surveillance. The cameras shall be directed at all safes, vaults, sales areas, and areas where cannabis is cultivated, harvested, processed, prepared, stored, handled, or dispensed. Cameras shall be angled so as to allow for the capture of clear and certain identification of any person entering or exiting the ATC or area;

(5) 24-hour recordings from all video cameras that are available for immediate viewing by the department upon request and that are retained for at least 90 calendar days. Recordings shall not be destroyed or altered, and shall be retained as long as necessary if the ATC is made aware of a pending criminal, civil, or administrative investigation, or legal proceeding for which the recording may contain relevant information;

(6) The ability to immediately produce a clear, color, still photo either live or from a recording;

(7) A date and time stamp embedded on all recordings which shall be synchronized, set correctly, and shall not obscure the picture;

(8) The functionality that the security system shall remain operational during a power outage; and

(9) A video recording that allows for the exporting of still images in an industry standard image format, including .jpg, .bmp, and .gif. Exported video shall have the ability to be archived in a proprietary format that ensures authentication of the video and guarantees that no alteration of the recorded image has taken place. Exported video shall also have the ability to be saved in an industry standard file format that can be played on a standard computer operating system. All recordings shall be erased or destroyed prior to disposal.

(h) In addition to the requirements listed in (g) above each facility shall have a backup alarm system that shall detect unauthorized entry during times when the facility is closed and that shall be provided by a company supplying commercial grade equipment which shall not be the same company providing the primary security system.

(i) All security system equipment and recordings shall be maintained in a secure location so as to prevent theft, loss, destruction, and alterations.

(j) Access to surveillance areas shall be limited to persons that are essential to surveillance operations, law enforcement authorities acting within their lawful jurisdiction, security system service personnel, and the department. A current list of authorized employees and service personnel that have access to the surveillance room must be available to the department upon request. If located on-site, surveillance rooms shall remain locked and shall not be used for any other function.

(k) Video surveillance records and recordings of point-of-sale areas shall be confidential, except that the ATC may provide such records and recordings, with notice to the department, to state or local law enforcement agency(s) if requested in connection with a law enforcement investigation or proceeding state or local law enforcement proceedings or pursuant to a court order.

(l) All policies, procedures, practices, plans, and physical layout pertaining to security and the address of the cultivation location if separate from the dispensing location shall be confidential except that they shall be provided to the department upon request.

(m) All security equipment shall be in good working order and shall be inspected and tested at regular intervals, of at least every 30 calendar days.

(n) At all points of ingress and egress, the ATC shall ensure the use of commercial-grade, nonresidential door locks.

(o) ATCs shall develop written security protocols which they shall share with local police department(s) having jurisdiction at the address of the ATC and its cultivation location if separate from the dispensing location. The ATC shall document the efforts taken to engage local police departments.

* Requirements are subject to change.

Nevada:

Medical cannabis legal as of 2000

Recreational cannabis legal as of 2017

Nevada Administrative Code 453A

NAC 453A.420 Security. (NRS 453A.370)

To prevent unauthorized access to medical marijuana at a medical marijuana establishment, the medical marijuana establishment must have:

1. Security equipment to deter and prevent unauthorized entrance into limited access areas that includes, without limitation:

(a) Devices or a series of devices to detect unauthorized intrusion, which may include a signal system interconnected with a radio frequency method, such as cellular or private radio signals, or other mechanical or electronic device;

(b) Exterior lighting to facilitate surveillance;

(1) At least one call-up monitor that is 19 inches or more;

(2) A video printer capable of immediately producing a clear still photo from any video camera image;

(3) Video cameras with a recording resolution of at least 704 x 480 or the equivalent which provide coverage of all entrances to and exits from limited access areas and all entrances to and exits from the building and which are capable of identifying any activity occurring in or adjacent to the building;

(4) A video camera at each point-of-sale location which allows for the identification of any person who holds a valid registry identification card, including, without limitation, a designated primary caregiver, purchasing medical marijuana;

(5) A video camera in each grow room which is capable of identifying any activity occurring within the grow room in low light conditions;

(6) A method for storing video recordings from the video cameras for at least 30 calendar days;

(7) A failure notification system that provides an audible and visual notification of any failure in the electronic monitoring system; and

(8) Sufficient battery backup for video cameras and recording equipment to support at least 5 minutes of recording in the event of a power outage; and

(d) Immediate automatic or electronic notification to alert local law enforcement agencies of an unauthorized breach of security at the medical marijuana establishment in the interior of each building of the medical marijuana establishment.

2. Policies and procedures:

(a) That restrict access to the areas of the medical marijuana establishment that contain medical marijuana to persons authorized to be in those areas only;

(b) That provide for the identification of persons authorized to be in the areas of the establishment that contain medical marijuana;

(d) For conducting electronic monitoring; and

(e) For the use of the automatic or electronic notification to alert local law enforcement agencies of an unauthorized breach of security at the medical marijuana establishment.

(Added to NAC by Div. of Pub. & Behavioral Health by R004-14, 3-28-2014, eff. 4-1-2014; A by R148-15, 9-9-2016)

* Requirements are subject to change.

Montana:

Medical and Recreational cannabis legal as of 1/1/2021

Montana Medical Marijuana Act – MAR Notice No. 37-820

NEW RULE V – MARIJUANA AND MARIJUANA-INFUSED PRODUCTS PROVIDER LICENSEE REQUIREMENTS

(1) A licensee must clearly identify all limited access areas at a registered premises.

(2) All licensee employees must wear a badge or clothing that easily identifies the individual as an employee.

(3) A licensee must maintain a daily log of all visitor activity to a limited access area on a registered premises. The log must contain the visitor’s first and last name and date of visit.

(4) Visitors must be accompanied by a licensee or licensee employee at all times.

(5) A licensee must post signs in a conspicuous location where the signs can be easily read by individuals on the registered premises that read:

(a) “No Minors Permitted Anywhere on This Premises”;

(b) “No On-Site Consumption of Marijuana”; and

(c) At all areas of ingress or egress to a limited access area a sign that reads: “Do Not Enter – Limited Access Area – Access Limited to Authorized Personnel and Escorted Visitors.”

(6) A licensee may have 50 square feet of canopy space per registered cardholder:

(a) square footage of canopy space is measured horizontally starting from the outermost point of the furthest mature flowering plant in a designated growing space and continuing around the outside of all mature flowering plants located within the designated growing space;

(b) a licensee may designate multiple grow canopy areas at a registered premises but those spaces must be separated by a physical boundary such as an interior wall or by at least eight feet of open space;

(c) total canopy size is calculated by multiplying 50 square feet of canopy by the number of registered cardholders; and (d) a licensee must not exceed the total canopy allowed by the department for cultivation of marijuana.

(7) A licensee is responsible for the security of all marijuana items on a registered premises, in transit, and under the supervision of any licensee or licensee employee until the marijuana item is sold.

(8) A licensee must have a written security plan maintained on the registered premises that adequately safeguards against theft, diversion, or tampering of marijuana items both on the registered premises and during transit.

(9) Commercial grade, nonresidential door locks must be installed on every external door and gate of a registered premises.

* Requirements are subject to change.

Michigan:

Medical cannabis legal as of 2008

Recreational cannabis legalized on November 2018 ballot, becoming 10th state to legalize recreational.

Michigan Dept of Licensing and Regulatory Affairs – Bureau of Medical Marihuana Regulation – Medical Marihuana Facilities Licensing Act

Rule 27. Security measures; required plan; video surveillance system.

(1) An applicant for a license to operate a proposed marihuana facility shall submit a security plan that demonstrates, at a minimum, the ability to meet the requirements of this rule.

(2) Licensees shall ensure that any person at the marihuana facility, except for employees of the licensee, are escorted at all times by the licensee or at least 1 employee of the licensee when in the limited-access areas at the marihuana facility.

(3) A licensee shall securely lock the marihuana facility, including all interior rooms, windows, and points of entry and exits with commercial-grade, nonresidential door locks.

(4) A licensee shall maintain an alarm system at the marihuana facility. Upon request, a licensee shall make available to the department all information related to the alarm system, monitoring, and alarm activity.

(5) A licensee shall have a video surveillance system that, at a minimum, consists of digital or network video recorders, cameras capable of meeting the recording requirements in this rule, video monitors, digital archiving devices, and a color printer capable of delivering still photos.

(6) The licensee shall ensure the video surveillance system does all the following:

(a) Records at a minimum the following areas:

(i) Any areas where marihuana products are weighed, packed, stored, loaded, and unloaded for transportation, prepared, or moved within the marihuana facility.

(ii) Limited-access areas and security rooms. Transfers between rooms must be recorded.

(iii) Areas storing a surveillance system storage device with at least 1 camera recording the access points to the secured surveillance recording area.

(iv) The entrances and exists to the building must be recorded from both indoor and outdoor vantage points. The areas of entrance and exit between marihuana facilities at the same location if applicable, including any transfers between marihuana facilities.

(v) Point of sale areas where marihuana products are sold and displayed for sale.

(b) Records at all times images effectively and efficiently of the area under surveillance with sufficient resolution.

(7) A licensee shall install each camera so that it is permanently mounted and in a fixed location. Each camera must be placed in a location that allows the camera to clearly record activity occurring within 20 feet of all points of entry and exit on the marihuana facility, and allows for the clear and certain identification of any person, including facial features, and activities, including sales or transfers, in all areas required to be recorded under these rules.

(8) A licensee shall have cameras that record continuously 24 hours per day and recorded images must clearly and accurately display the time and date.

(9) A licensee must secure the physical media or storage device on which surveillance recordings are stored in a manner to protect the recording from tampering or theft.

(10) A licensee shall keep surveillance recordings for a minimum of 14 days, except for in instances of investigation or inspection by the department, through its investigators, agents, auditors, or the state police, in which case the licensee shall retain the recordings until such time as the department notifies the licensee that the recordings may be destroyed.

(11) Surveillance recordings of the licensee are subject to inspection by the department, through its investigators, agents, auditors, or the state police, and must be kept in a manner that allows the department to view and obtain copies of the recordings at the marihuana facility immediately upon request. The licensee shall also send or otherwise provide copies of the recordings to the department upon request within the time specified by the department.

(12) A licensee shall maintain a video surveillance system equipped with a failure notification system that provides notification to the licensee of any interruption or failure of the video surveillance system or video surveillance system storage device.

(13) A licensee shall maintain a log of the recordings, which includes all of the following:

(a) The identities of the employee or employees responsible for monitoring the video surveillance system.

(b) The identity of the employee who removed the recording from the video surveillance system storage device and the time and date removed.

* Requirements are subject to change.

Massachusetts:

Medical cannabis legal as of 2012

Recreational cannabis legal as of 2016

Massachusettes 105 CMR 725.000

725.110: Security Requirements for Registered Marijuana Dispensaries

(A) General Requirements. A RMD shall implement sufficient security measures to deter and prevent unauthorized entrance into areas containing marijuana and theft of marijuana at the RMD. Security measures to protect the premises, registered qualifying patients, personal caregivers, and dispensary agents of the RMD must include but are not limited to the following. The RMD must:

(1) Allow only registered qualifying patients, personal caregivers, dispensary agents, persons authorized by 105 CMR 725.105(P), and, subject to the requirements of 105 CMR 725.110(C)(4), outside vendors, contractors, and visitors, access to the RMD;

(2) Prevent individuals from remaining on the premises of the RMD if they are not engaging in activity expressly or by necessary implication permitted by the Act and 105 CMR 725.000;

(3) Dispose of marijuana in accordance with 105 CMR 725.105(J), in excess of the quantity required for normal, efficient operation as established in 105 CMR 725.105(G)(1);

(4) Establish limited access areas accessible only to specifically authorized personnel, which shall include only the minimum number of employees essential for efficient operation;

(5) Store all finished marijuana in a secure, locked safe or vault and in such a manner as to prevent diversion, theft, and loss;

(6) Keep all safes, vaults, and any other equipment or areas used for the production, cultivation, harvesting, processing, or storage of marijuana and MIPs securely locked and protected from entry, except for the actual time required to remove or replace marijuana;

(7) Keep all locks and security equipment in good working order

(8) Prohibit keys, if applicable, from being left in the locks, or stored or placed in a location accessible to persons other than specifically authorized personnel;

(9) Prohibit accessibility of security measures, such as combination numbers, passwords, or electronic or biometric security systems, to persons other than specifically authorized personnel;

(10) Ensure that the outside perimeter of the RMD is sufficiently lit to facilitate surveillance;

(11) Ensure that trees, bushes, and other foliage outside of the RMD do not allow for a person or persons to conceal themselves from sight;

(12) Develop emergency policies and procedures for securing all product following any instance of diversion, theft, or loss of marijuana, and conduct an assessment to determine whether additional safeguards are necessary; and

(13) Develop sufficient additional safeguards as required by the Department for RMDs that present special security concerns.

(14) A RMD shall comply with all local requirements regarding siting, provided however that if no local requirements exist, a RMD shall not be sited within a radius of five hundred feet of a school, daycare center, or any facility in which children commonly congregate. The 500 foot distance under this section is measured in a straight line from the nearest point of the facility in question to the nearest point of the proposed RMD.

(B) Alternate Security Provisions. If a RMD has provided other safeguards that can be regarded as an adequate substitute for a security requirement specified in 105 CMR 725.110, such added protection may be taken into account by the Department in evaluating overall required security measures.

(1) All limited access areas must be identified by the posting of a sign that shall be a minimum of 12” X 12” and which states: “Do Not Enter – Limited Access Area – Access Limited to Authorized Personnel Only” in lettering no smaller than 1 inch in height.

(2) All limited access areas shall be clearly described by the filing of a diagram of the registered premises, in the form and manner determined by the Department, reflecting walls, partitions, counters, and all areas of entry and exit. Said diagram shall also show all propagation, vegetation, flowering, processing, production, storage, disposal, and retail sales areas.

(3) A dispensary agent shall visibly display an identification badge issued by the RMD at all times while at the RMD or transporting marijuana.

(4) All outside vendors, contractors, and visitors must obtain a visitor identification badge prior to entering a limited access area, and shall be escorted at all times by a dispensary agent authorized to enter the limited access area. The visitor identification badge must be visibly displayed at all times while the visitor is in any limited access area. All visitors must be logged in and out, and that log shall be available for inspection by the Department at all times. All visitor identification badges shall be returned to the RMD upon exit.

(D) Security and Alarm Systems

(1) A RMD shall have an adequate security system to prevent and detect diversion, theft, or loss of marijuana or unauthorized intrusion, utilizing commercial grade equipment, which shall, at a minimum, include:

(a) A perimeter alarm on all entry points and perimeter windows;

(b) A failure notification system that provides an audible, text, or visual notification of any failure in the surveillance system. The failure notification system shall provide an alert to designated employees of the RMD within five minutes after the failure, either by telephone, email, or text message;

(d) Video cameras in all areas that may contain marijuana, at all points of entry and exit, and in any parking lot, which shall be appropriate for the normal lighting conditions of the area under surveillance. The cameras shall be directed at all safes, vaults, sales areas, and areas where marijuana is cultivated, harvested, processed, prepared, stored, handled, or dispensed. Cameras shall be angled so as to allow for the capture of clear and certain identification of any person entering or exiting the RMD or area;

(e) Twenty-four hour recordings from all video cameras that are available for immediate viewing by the Department upon request and that are retained for at least 90 calendar days. Recordings shall not be destroyed or altered, and shall be retained as long as necessary if the RMD is aware of a pending criminal, civil, or administrative investigation, or legal proceeding for which the recording may contain relevant information;

(f) The ability to immediately produce a clear, color, still photo (live or recorded);

(g) A date and time stamp embedded on all recordings. The date and time shall be synchronized and set correctly and shall not significantly obscure the picture;

(h) The ability to remain operational during a power outage; and

(i) A video recording that allows for the exporting of still images in an industry standard image format, including .jpg, .bmp, and .gif. Exported video shall have the ability to be archived in a proprietary format that ensures authentication of the video and guarantees that no alteration of the recorded image has taken place. Exported video shall also have the ability to be saved in an industry standard file format that can be played on a standard computer operating system. All recordings shall be erased or destroyed prior to disposal.

(2) All security system equipment and recordings shall be maintained in a secure location so 38 Regulation As Approved by the Public Health Council – Last Modified 5.8.13 105 CMR: Department of Public Health as to prevent theft, loss, destruction, and alterations.

(3) In addition to the requirements listed in 105 CMR 725.110(D)(1) and (2), the RMD shall have a back-up alarm system, with all capabilities of the primary system, provided by a company supplying commercial grade equipment, which shall not be the same company supplying the primary security system.

(4) Access to surveillance areas shall be limited to persons that are essential to surveillance operations, law enforcement authorities acting within their lawful jurisdiction, security system service personnel, and the Department. A current list of authorized employees and service personnel that have access to the surveillance room must be available to the Department upon request. If on-site, surveillance rooms shall remain locked and shall not be used for any other function.

(5) All security equipment shall be in good working order and shall be inspected and tested at regular intervals, not to exceed 30 calendar days from the previous inspection and test.

* Requirements are subject to change.

Maryland:

Medical cannabis legal as of 2017

Recreational cannabis legal as of 7/1/2023 for posession up to 1.5 oz

Maryland Health General Article 13-3301 – 13-3303 (security requirements only)

.03 Field Cultivation Premises.

A. Licensed premises for field cultivation of medical marijuana shall be situated to maintain the greatest achievable level of privacy and security.

B. Physical Security.

(1) An area of cultivation shall be securely surrounded by fencing and gates constructed to prevent unauthorized entry.

(2) Security fencing shall be of chain link fencing at least 8 feet high topped with multiple strands of barbed wire.

C. Fencing and gates shall be equipped with a security alarm system that:

(1) Covers the entire perimeter;

(2) Is continuously monitored; and

(3) Is capable of detecting power loss.

D. The premises shall be protected by a video surveillance recording system to ensure:

(1) Surveillance of the entire perimeter of the area of cultivation;

(2) Surveillance over all portions of the security fence and all gates; and

(3) Adherence to the video surveillance requirements of this chapter.

E. A video surveillance system shall be supported by adequate security lighting which may include motion control sensors if necessary to protect light-dark cycles for proper cultivation.

.04 Security Hardware.

A. A licensed premises shall be constructed to prevent unauthorized entry.

B. If the licensed premises is located within a building or structure that also houses a non-licensed premises, any wall between the licensed premises and the non-licensed premises shall be sufficient to prevent unauthorized entry.

C. A cipher or chip-activated keyed lock or equivalent shall be used in a door to deny passage by an unauthorized individual to the premises and any room in which production, cultivation, storage, or processing medical marijuana takes place, or in which security equipment is located in the licensed premises.

D. In addition, a ground level greenhouse to be used to cultivate medical marijuana shall be surrounded by:

(1) An 8 foot or higher chain link fence topped with multiple strands of barbed wire, located no less than 20 feet from a greenhouse; and

(2) A 15 foot area free of vegetation.

.05 Security Lighting.

A. Lighting fixtures of the licensed grower shall be designed and installed to:

(1) Ensure proper surveillance of:

(a) Both sides of all exterior doors, entrances and portals; and

(b) All interior doors and passages between rooms; and

(2) Illuminate work areas for employee safety.

B. This regulation does not apply to lighting in areas of the premises used to cultivate medical marijuana.

.06 Security Alarm Systems.

A. A licensee shall maintain a security alarm system that covers all perimeter entry points and windows at all premises.

B. A security system shall be:

(1) Continuously monitored;

(2) Capable of detecting smoke and fire; and

(3) Capable of detecting power loss.

C. A security alarm system shall include panic alarm devices mounted at convenient, readily accessible locations throughout the licensed premises.

D. A second, independent security alarm system shall be used to protect:

(1) A location where records are stored on-site;

(2) A location where records are stored off-site; and

(3) A vault that holds medical marijuana.

E. A security alarm system shall remain operational until a licensed premises no longer has any medical marijuana, seeds, or cuttings on the premises.

F. A security alarm system shall be equipped with auxiliary power sufficient to maintain operation for at least 48 hours.

.07 Video Surveillance Requirements.

A. A licensee shall maintain a video surveillance recording system at all premises:

(1) That records images in high quality and high resolution capable of clearly revealing facial detail and all activity recorded;

(2) That operates 24-hours a day, 365 days a year without interruption; and

(3) That provides a continuous date and time stamp for every recorded frame.

B. A licensee shall post appropriate notices advising visitors of the video surveillance.

C. A surveillance camera shall be located and operated to continuously capture each exit from the premises.

D. A surveillance camera shall continuously capture activity at each entrance to an area where medical marijuana is grown, tested, cured, manufactured, processed or stored.

E. A recording of all images captured by each surveillance camera shall be kept:

(1) At the licensed premises; and

(2) At an off-site location.

F. The storage of all recordings of security video surveillance shall be:

(1) Access-limited;

(2) Secured by a security alarm system that is independent of the main premises security alarm system;

(3) In a format that can be easily accessed for investigational purposes; and

(4) For a minimum of 90 business days.

G. Any recording of security video surveillance shall be made available to the Commission or law enforcement agency for just cause as requested.

* Requirements are subject to change.

————————————————————————————————————————————————————————————————————————–

District of Columbia:

Medical cannabis legal as of 2011, but is barred from commercial sale

Recreational cannabis legal as of 2014 (went into effect 2015), but is barred from commercial sale

(Laws subject to change.)

Illinois:

Cannabis is legal for both medical and recreational use. Illinois became the eleventh state in the US to legalize recreational marijuana on January 1, 2020

Illinois Administrative Code – Title 68, Chapter VII, Subchapter b, Part 1290 – Rules for Administration of the Compassionate Use of Medical Cannabis Pilot Program

Section 1290.410 Security Requirements

a) A dispensing organization shall implement security measures to deter and prevent entry into and theft from restricted access areas containing cannabis or currency.

b) A dispensing organization shall submit changes to the floor plan or security plan to the Division for pre-approval.

c) The dispensing organization shall implement security measures to protect the premises, registered qualifying patients, designated caregivers and dispensing organization agents including, but not limited to the following:

1) Establish a locked door or barrier between the facility’s entrance and the limited access area. The limited access area shall only be accessible to registered qualifying patients, designated caregivers, principal officers and agents, service professionals conducting business with the dispensing organization, and persons authorized by the Act and this Part;

2) Prevent individuals from remaining on the premises if they are not engaging in activity permitted by the Act or this Part;

3) Develop a policy that addresses the maximum capacity and patient flow in the waiting rooms and patient care areas;

4) Dispose of cannabis in accordance with this Part;

5) During hours of operation, store all cannabis in established restricted access area accessible only to specifically authorized agents. The minimum number of dispensary agents essential for efficient operations shall be in the restricted access areas;

6) When the dispensary is closed, store all cannabis and currency in a secure locked safe or vault and in a manner as to prevent diversion, theft or loss;

(7) Keep all safes, vaults and any other equipment or cannabis storage areas securely locked and protected from unauthorized entry;

8) Keep an electronic daily log of dispensary agents with access to the safe or vault and knowledge of the access code or combination;

9) Keep all locks and security equipment in good working order;

10) The security system shall be operational at all times.

11) Prohibit keys, if applicable, from being left in the locks, or stored or placed in a location accessible to persons other than specifically authorized personnel;

12) Prohibit accessibility of security measures, including combination numbers, passwords or electronic or biometric security systems to persons other than specifically authorized agents;

13) Ensure that the outside perimeter of the dispensary premises is sufficiently lit to facilitate surveillance;

14) Ensure that trees, bushes and other foliage outside of the dispensary premises do not allow for a person or persons to conceal themselves from sight;

15) Develop emergency policies and procedures for securing all product and currency following any instance of diversion, theft or loss of cannabis, and conduct an assessment to determine whether additional safeguards are necessary; and

16) Develop sufficient additional safeguards in response to any special security concerns, or as required by the Division.

d) The Division may request or approve alternative security provisions that it determines are an adequate substitute for a security requirement specified in this Part. Any additional protections may be considered by the Division in evaluating overall security measures.

e) A dispensing organization shall provide additional security as needed and in a manner appropriate for the community where it operates.

f) Restricted Access Areas

1) All restricted access areas must be identified by the posting of a sign that shall be a minimum of 12″ x 12″ and that states “Do Not Enter – Restricted Access Area – Access Restricted to Authorized Personnel Only” in lettering no smaller than one inch in height.

2) All restricted access areas shall be clearly described in the floor plan of the registered premises, in the form and manner determined by the Division, reflecting walls, partitions, counters and all areas of entry and exit. The floor plan shall show all storage, disposal and retail sales areas.

3) All restricted access areas must be secure, with locking devices that prevent access from the limited access areas.

4) All service professionals conducting business with the dispensing organization and visitors must obtain a numbered visitor identification badge prior to entering a restricted access area, and shall be escorted at all times by a dispensary agent authorized to enter the restricted access area. All visitors must be logged in and out, and that log shall be maintained for five years on-site and available for inspection by the Division at all times. All visitor identification badges shall be returned upon exit.

g) Security and Alarm

1) A dispensing organization shall have an adequate security plan and security system to prevent and detect diversion, theft or loss of cannabis, currency or unauthorized intrusion using commercial grade equipment installed by an Illinois licensed private alarm contractor or private alarm contractor agency that shall, at a minimum, include:

A) A perimeter alarm on all entry points and perimeter windows;

B) A failure notification system that provides an audible, text or visual notification of any failure in the surveillance system. The failure notification system shall provide an alert to designated dispensing organization agents within five minutes after the failure, either by telephone, email or text message;

C) A duress alarm, panic button and alarm, holdup alarm or after hours intrusion detection alarm that by design and purpose will directly or indirectly notify, by the most efficient means, the Public Safety Answering Point (PSAP) for the law enforcement agency having primary jurisdiction;

D) Unobstructed video surveillance of all enclosed dispensary areas, unless prohibited by law, including all points of entry and exit that shall be appropriate for the normal lighting conditions of the area under surveillance. The cameras shall be directed so all areas are captured, including, but not limited to, safes, vaults, sales areas and areas where cannabis is stored, handled, dispensed or destroyed. Cameras shall be angled to allow for facial recognition, the capture of clear and certain identification of any person entering or exiting the dispensary area and in lighting sufficient during all times of night or day;

E) Unobstructed video surveillance of outside areas, the storefront and the parking lot, that shall be appropriate for the normal lighting conditions of the area under surveillance. Cameras shall be angled so as to allow for the capture of facial recognition, clear and certain identification of any person entering or exiting the dispensary, the immediate surrounding area and license plates of vehicles in the parking lot;

F) Twenty-four hour recordings from all video cameras available for immediate viewing by the Division upon request. Recordings shall not be destroyed or altered and retained for at least 90 days. Recordings shall be retained as long as necessary if the dispensing organization is aware of the loss or theft of cannabis or a pending criminal, civil or administrative investigation, or legal proceeding for which the recording may contain relevant information;

G) The ability to immediately produce a clear, color still photo from the surveillance video, either live or recorded;

H) A date and time stamp embedded on all video surveillance recordings. The date and time shall be synchronized and set correctly and shall not significantly obscure the picture;

I) The ability to remain operational during a power outage and ensure all access doors are not solely controlled by an electronic access panel to ensure that locks are not released during a power outage; and

J) All video surveillance equipment shall allow for the exporting of still images in an industry standard image format, including .jpg, .bmp and .gif. Exported video shall have the ability to be archived in a proprietary format that ensures authentication of the video and guarantees that no alteration of the recorded image has taken place. Exported video shall also have the ability to be saved in an industry standard file format that can be played on a standard computer operating system. All recordings shall be erased or destroyed prior to disposal.

2) All security system equipment and recordings shall be maintained in good working order, in a secure location so as to prevent theft, loss, destruction or alterations.

3) Access to rooms where surveillance monitoring recording equipment resides shall be limited to persons that are essential to surveillance operations, law enforcement authorities acting within their jurisdiction, security system service personnel and the Division. A current list of authorized dispensary agents and service personnel that have access to the surveillance room must be available to the Division upon request.

4) All security equipment shall be inspected and tested at regular intervals, not to exceed 30 calendar days from the previous inspection and test to ensure the systems remain functional.

5) The security system shall provide protection against theft and diversion that is facilitated or hidden by tampering with computers or electronic records.

h) To monitor the facility and prevent unauthorized access to medical cannabis at the dispensary, the dispensing organization shall incorporate the following:

1) Security equipment to deter and prevent unauthorized entrance into restricted access areas that includes devices or a series of devices to detect unauthorized intrusion that may include a signal system interconnected with a radio frequency method, cellular, private radio signals or other mechanical or electronic device.

2) Electronic monitoring including:

A) All monitors must be 19-inches or greater;

B) A video printer capable of immediately producing a clear still photo from any video camera image;

C) Video cameras recording all points of entry and exit from the dispensary, the limited access areas, the restricted access areas and that are capable of identifying activity occurring adjacent to the building, with a recording resolution that shall be sufficient to distinctly view the entire area under surveillance;

D) A video camera or cameras recording at each point of sale location allowing for the identification of the dispensary agent distributing the cannabis and any qualifying patient or designated caregiver purchasing medical cannabis. The camera or cameras shall capture the sale, the individuals and the computer monitors used for the sale;

E) Storage of video recordings from the video cameras for at least 90 calendar days;

F) A failure notification system that provides an audible and visual notification of any failure in the electronic monitoring system;

G) Sufficient battery backup for video cameras and recording equipment to support recording in the event of a power outage; and

H) All electronic video monitoring must be available on a real time 24-hour a day, every day, live feed accessible by the Division.

3) The dispensing organization shall maintain policies and procedures that include:

A) security plan with protocols for patient, caregiver and agent safety and management and security of cannabis and currency;

B) Restricted access to the areas in the dispensary that contain cannabis to authorized agents;

C) Identification of authorized agents;

D) Controlled access and prevention of loitering both inside and outside the facility;

E) Conducting electronic monitoring; and

F) Use of a panic button.

* Requirements are subject to change.

(Updated 1/2/2020)

Hawaii:

Medical cannabis legal as of 2016

Recreational cannabis illegal, but in 2019 possession of less than three grams decriminalized

Hawaii Dept of Health Administrative Rules, Chapter 11-850

Subchapter 4 – Security

11-850-51 Required security in all dispensary facilities.

(a) All dispensary facilities shall have the following security features:

(1) A video surveillance system professionally installed that allows for twenty-four hour continuous video monitoring and recording of all dispensary facilities as follows:

(A) All video equipment used in a dispensary facility shall have back up capability;

(B) All recorded images must clearly and accurately display the time and date;

(D) The video surveillance system shall have minimum camera resolution to allow for the clear and certain identification of any person and activities in any area of a dispensary facility where marijuana products are produced, moved, or stored; all points of sale areas; any room used to pack or unpack a secured container used to transport marijuana or manufactured marijuana products; any room or area storing a surveillance system storage device; and all exits and entrances to a dispensary facility from both indoor and outdoor locations;

(E) The surveillance system video recording storage device shall be secured in a lockbox, cabinet, or closet or secured in another manner that limits access to protect the system from tampering or theft; and

(F) The dispensary licensee shall make video recordings available to the department upon request;

(2) An alarm system to detect unauthorized entry and allow notification of law enforcement in an emergency. The alarm system shall be:

(A) Electronic with a backup power source for a minimum of four hours;

(B) Connected to a security response organization or to law enforcement;

(D) Professionally installed;

(3) A locked entry point to screen individuals for authorized entry to the facility. Only the following may be authorized to enter dispensary facilities:

(A) Persons included on a current department-approved list provided to the department by the licensee of those persons who are allowed into that dispensary’s facilities for a specific purpose for that dispensary in accordance with sections 329D-15 and 329D-16, HRS; and

(B) Other approved individuals with government issued photo identification including:

(i) Qualifying patients;

(ii) Primary caregivers;

(iii) A government employee or official acting in the person’s official capacity;

(iv) Dispensary employees; provided that qualifying patients and primary caregivers may only be authorized to enter retail dispensing locations;

(4) All entrances, exits, windows and other points of entry shall be equipped with commercial-grade, non-residential locks or other functioning mechanical or electrical security devices; and

(5) A sign-in system to record the names of persons listed in paragraph (3) entering the dispensary facility and the date and time of entry to and exit from the dispensary facility.

(b) In the event of a breach or failure of its security system, a dispensary licensee shall immediately suspend operations and secure the affected dispensary facility until the security system is fully operable. The dispensary licensee shall notify the department immediately upon the breach or failure, and again when it resumes operations.

11-850-52 Required security in production centers. In addition to other security features as set forth in this chapter and chapter 329D, HRS, all production centers shall have the following security features:

(1) Secure fencing that surrounds the premises sufficient to reasonably deter intruders and prevent anyone outside the premises from viewing any marijuana in any form;

(2) All marijuana and manufactured marijuana products shall be secured in a locked room, vault, or locked container securely affixed to a wall or floor.

11-850-53 Required security in retail dispensing locations. In addition to the other security features as set forth in this chapter and chapter 329D, HRS, all retail dispensing locations shall have the following security features:

(1) A protocol for admitting qualifying patients or primary caregivers with valid government issued photo identification and medical marijuana registration cards issued pursuant to chapter 329, HRS, prior to allowing them access to the secured room for sales;

(2) A separate secured room for sales which shall include secured and locked display cases for marijuana and manufactured marijuana products;

(3) A maximum occupancy limit ratio in the secured sales room of two customers to every one retail dispensing location employee;

(4) All marijuana and manufactured marijuana products shall be secured in a locked room, vault, or locked container securely affixed to a wall or floor; and

(5) Exterior lighting that illuminates all entries and exits to allow for the clear and certain identification of any person and activities.

* Requirements are subject to change.

Florida:

Medical cannabis legal as of 2016 – Not yet operational

Recreational cannabis illegal

Florida Statutes, Public Health: General Provisions – 381.986 Medical Use of Marijuana

(f) To ensure the safety and security of premises where the cultivation, processing, storing, or dispensing of marijuana occurs, and to maintain adequate controls against the diversion, theft, and loss of marijuana or marijuana delivery devices, a medical marijuana treatment center shall:

1.a. Maintain a fully operational security alarm system that secures all entry points and perimeter windows and is equipped with motion detectors; pressure switches; and duress, panic, and hold-up alarms; and

b. Maintain a video surveillance system that records continuously 24 hours a day and meets the following criteria:

(I) Cameras are fixed in a place that allows for the clear identification of persons and activities in controlled areas of the premises. Controlled areas include grow rooms, processing rooms, storage rooms, disposal rooms or areas, and point-of-sale rooms.

(II) Cameras are fixed in entrances and exits to the premises, which shall record from both indoor and outdoor, or ingress and egress, vantage points.

(III) Recorded images must clearly and accurately display the time and date.

(IV) Retain video surveillance recordings for at least 45 days or longer upon the request of a law enforcement agency.

(d) To ensure the safety and security of its premises and any off-site storage facilities, and to maintain adequate controls against the diversion, theft, and loss of low-THC cannabis, medical cannabis, or cannabis delivery devices, a dispensing organization shall:

b. Maintain a video surveillance system that records continuously 24 hours each day and meets at least one of the following criteria:

(II) Cameras are fixed in entrances and exits to the premises, which shall record from both indoor and outdoor, or ingress and egress, vantage points;

(III) Recorded images must clearly and accurately display the time and date; or

(IV) Retain video surveillance recordings for a minimum of 45 days or longer upon the request of a law enforcement agency.

* Requirements are subject to change.

Delaware:

Medical cannabis legal as of 2011

Recreational cannabis illegal, but possession of small amounts is decriminalized

4470 State of Delaware Medical Marijuana Code

7.2 Security requirements: A compassion center shall implement appropriate security and safety measures to deter and prevent the unauthorized entrance into areas containing marijuana and the theft of marijuana. Such measures shall include the following:

7.2.1 Exterior of premises: With respect to the exterior of a compassion center:

7.2.1.1 Access from outside the premises shall be kept to a minimum and be well controlled.

7.2.1.2 The outside perimeter of the premises shall be well lighted.

7.2.1.3 Entry into any area(s) where marijuana is held shall be limited to authorized personnel.

7.2.2 Alarm system:

7.2.2.1 A compassion center shall have a fully operational security alarm system at each authorized physical address that will provide suitable protection against theft and diversion. For the purpose of these regulations, a fully operational security alarm system shall include:

7.2.2.1.1 immediate automatic or electronic notification to alert local or municipal law enforcement agencies to an unauthorized breach of security at the compassion center or at any other authorized physical address;

7.2.2.1.2 immediate automatic or electronic notification to local or municipal public safety personnel of a loss of electrical support backup system; and

7.2.2.1.3 when appropriate, the security system shall provide protection against theft or diversion that is facilitated or hidden by tampering with computers or electronic records.

7.2.2.2 A compassion center shall conduct a maintenance inspection/test of the alarm system for each authorized location at intervals not to exceed 30 days from the previous inspection/test. A compassion center shall promptly make all necessary repairs to ensure the proper operation of the alarm system.

7.2.2.3 In the event of a failure of the security system, due to loss of electrical support or mechanical malfunction, that is expected to exceed an eight hour period, a compassion center shall:

7.2.2.3.1 within 24 hours of discovery of the event, notify the Department by telephone; and

7.2.2.3.2 provide alternative security measures approved by the Department or close the authorized physical address(es) impacted by the failure/malfunction until the security alarm system has been restored to full operation.

7.2.2.4 A compassion center shall maintain documentation in an auditable form for a period of at least 24 months after the event for:

7.2.2.4.1 all maintenance inspections/tests conducted in response to Section 7.2.2.2 of these regulations, and any servicing, modification or upgrade performed on the security alarm system. The record shall include, as a minimum, the date of the action, a summary of the action(s) performed and the name, signature and title of the individual who performed the action(s);

7.2.2.4.2 any alarm activation or other event which requires response by public safety personnel; and

7.2.2.4.3 any unauthorized breach(es) of security.

7.2.3 Video surveillance: A compassion center shall provide an appropriate video surveillance system that includes the following areas and access to recorded surveillance.

7.2.3.1 Video surveillance should record access areas, customer service areas, growing areas, and anywhere the marijuana is handled, to include processing and packaging areas.

7.2.3.2 Video footage will be digitally recorded and held for an appropriate time period consistent with the Division of Public Health’s Records Retention Policy.

7.2.3.3 A compassion center shall provide the Department with access to the video 24-hours a day, seven days a week through a secure internet connection.

* Requirements are subject to change.

Connecticut:

Medical cannabis legal as of 2012

Recreational legal as of 2021

State of Connecticut Regulation of the Dept of Consumer Protection concerning Palliative Use of Marijuana – Sec. 21a-408-51, Sec. 21a-408-61, and Sec. 21a-408-62

(NEW) Sec. 21a-408-51. Security requirements for dispensary facilities

(a) A dispensary facility shall:

(1) Not maintain marijuana in excess of the quantity required for normal, efficient operation;

(2) Store all marijuana in an approved safe or approved vault and in such a manner as to prevent diversion, theft or loss;

(3) Maintain all marijuana in a secure area or location accessible only to specifically authorized employees, which shall include only the minimum number of employees essential for efficient operation;

(4) Keep all approved safes and approved vaults securely locked and protected from entry, except for the actual time required to remove or replace marijuana;

(5) Keep all locks and security equipment in good working order;

(6) Not allow keys to be left in the locks and not store or place keys in a location accessible to persons other than specifically authorized employees;

(7) Not allow other security measures, such as combination numbers, passwords or electronic or biometric security systems, to be accessible to persons other than specifically authorized employees;

(8) Keep the dispensary department securely locked and protected from entry by unauthorized employees; and

(9) Post a sign at all entry ways into any area of the dispensary facility containing marijuana, including a room with an approved safe or approved vault, which sign shall be a minimum of twelve inches in height and twelve inches in width which shall state: “Do Not Enter – Limited Access Area – Access Limited to Authorized Employees Only” in lettering no smaller than one-half inch in height.

(b) If a dispensary facility presents special security issues, such as an extremely large stock of marijuana, exposed handling or unusual vulnerability to diversion, theft or loss, the commissioner may require additional safeguards, including, but not limited to, a supervised watchman service.

(c) If diversion, theft or loss of marijuana has occurred from a dispensary facility, the commissioner shall determine the appropriate storage and security requirements for all marijuana in such dispensary facility, and may require additional safeguards to ensure the security of the marijuana.

(d) Any marijuana not stored in compliance with sections 21a-408-1 to 21a-408- 70, inclusive, of the Regulations of Connecticut State Agencies, or stored at a location other than that for which the dispensary facility license was issued, shall be subject to embargo or seizure by the department in accordance with section 21a-96 of the Connecticut General Statutes.

(e) Any dispensary facility whose license is revoked or not renewed shall dispose of its entire stock of marijuana in accordance with sections 21a-408-64 of the Regulations of Connecticut State Agencies.

(f) If a dispensary facility has provided other safeguards which can be regarded in total as an adequate substitute for some element of protection required of such facility, such added protection may be taken into account by the commissioner in evaluating overall required security measures.

(NEW) Sec. 21a-408-61. Security requirements for producers

(a) A producer shall:

(1) Not produce, manufacture or maintain marijuana in excess of the quantity required for normal, efficient operation;

(2) Store all marijuana products in an approved safe or approved vault and in such a manner as to prevent diversion, theft or loss;

(3) Maintain all marijuana that is not part of a finished product in a secure area or location within the production facility accessible only to specifically authorized employees, which shall include only the minimum number of employees essential for efficient operation;

(4) Keep all approved safes, approved vaults, or any other approved equipment or areas used for the production, cultivation, harvesting, processing, manufacturing or storage of marijuana, securely locked or protected from entry, except for the actual time required to remove or replace marijuana;

(5) Keep all locks and security equipment in good working order;

(6) Not allow keys to be left in the locks and not store or place keys in a location accessible to persons other than specifically authorized employees;

(7) Not allow other security measures, such as combination numbers, passwords or electronic or biometric security systems, to be accessible to persons other than specifically authorized employees; and

(8) Keep the production facility securely locked and protected from entry at all times.

(b) If a production facility presents special security issues, such as an extremely large stock of marijuana, exposed handling or unusual vulnerability to diversion, theft or loss, the commissioner may require additional safeguards such as a supervised watchman service.

(c) If a loss, theft, or diversion of marijuana has occurred from a production facility, the commissioner shall determine the appropriate storage and security requirements for all marijuana in such production facility, and may require additional safeguards to ensure the security of the marijuana.

(d) Any marijuana not stored in compliance with sections 21a-408-1 to 21a-408- 70, inclusive, of the Regulations of Connecticut State Agencies, or at a location other than that for which the producer license was issued, shall be subject to seizure in accordance with section 21a-96 of the Connecticut General Statutes.

(e) Any producer whose license is revoked or not renewed shall dispose of its entire stock of marijuana under conditions approved by the department.

(f) If a producer has provided other safeguards, which can be regarded in total as an adequate substitute for some element of protection required of such producer, such added protection may be taken into account by the commissioner in evaluating overall required security measures.

(g) No person shall be allowed access to any area within a production facility containing marijuana except laboratory employees and production facility employees whose responsibilities necessitate access to the area of the production facility containing marijuana and then for only as long as necessary to perform the person’s job duties.

(h) Any area of a production facility containing marijuana, including a room with an approved safe or approved vault, shall have a sign posted at all entry ways, which shall be a minimum of twelve inches in height and twelve inches in width and shall state: “Do Not Enter – Limited Access Area – Access Limited to Authorized Employees Only” in lettering no smaller than one-half inch in height.

(i) Notwithstanding the requirements of sections 21a-408-1 to 21a-408-70, inclusive, of the Regulations of Connecticut State Agencies, members of the department, local law enforcement or other federal, state of Connecticut or local government officials may enter any area of a production facility if necessary to perform their governmental duties.

(NEW) Sec. 21a-408-62. Security alarm systems; minimum requirements for dispensary facilities and production facilities

(a) All dispensary facilities and production facilities shall have an adequate security system to prevent and detect diversion, theft or loss of marijuana utilizing commercial grade equipment, which shall, at a minimum, include:

(1) A perimeter alarm;

(2) Motion detector;

(3) Video cameras in all areas that may contain marijuana and at all points of entry and exit, which shall be appropriate for the normal lighting conditions of the area under surveillance. The dispensary facility or production facility shall direct cameras at all approved safes, approved vaults, dispensing areas, marijuana sales areas and any other area where marijuana is being produced, harvested, manufactured, stored or handled. At entry and exit points, the dispensary facility or production facility shall angle cameras so as to allow for the capture of clear and certain identification of any person entering or exiting the facility;

(4) Twenty-four hour recordings from all video cameras, which the dispensary facility or production facility shall make available for immediate viewing by the commissioner or the commissioner’s authorized representative upon request and shall retain for at least thirty days. If a dispensary facility or producer is aware of a pending criminal, civil or administrative investigation or legal proceeding for which a recording may contain relevant information, the dispensary facility or producer shall retain an unaltered copy of the recording until the investigation or proceeding is closed or the entity conducting the investigation or proceeding notifies the dispensary facility manager or producer that it is not necessary to retain the recording;

(5) Duress alarm, which for purposes of this subsection means a silent security alarm system signal generated by the entry of a designated code into an arming station in order to signal that the alarm user is being forced to turn off the system;

(6) Panic alarm, which for purposes of this subsection means an audible security alarm system signal generated by the manual activation of a device intended to signal a life threatening or emergency situation requiring a law enforcement response;

(7) Holdup alarm, which for purposes of this subsection means a silent alarm signal generated by the manual activation of a device intended to signal a robbery in progress;

(8) Automatic voice dialer, which for purposes of this subsection means any electrical, electronic, mechanical, or other device capable of being programmed to send a prerecorded voice message, when activated, over a telephone line, radio or other communication system, to a law enforcement, public safety or emergency services agency requesting dispatch;

(9) A failure notification system that provides an audible, text or visual notification of any failure in the surveillance system. The failure notification system shall provide an alert to the dispensary facility or producer within five minutes of the failure, either by telephone, email, or text message;

(10) The ability to immediately produce a clear color still photo that is a minimum of 9600 dpi from any camera image (live or recorded);

(11) A date and time stamp embedded on all recordings. The date and time shall be synchronized and set correctly and shall not significantly obscure the picture; and

(12) The ability to remain operational during a power outage.

(b) A dispensary facility or a production facility shall maintain all security system equipment and recordings in a secure location so as to prevent theft, loss, destruction or alterations.

(c) In addition to the requirements listed in subsection (a) of this section, each production facility shall have a back-up alarm system approved by the commissioner that shall detect unauthorized entry during times when no employees are present at the facility and that shall be provided by a company supplying commercial grade equipment, which shall not be the same company supplying the primary security system.

(d) A dispensary facility or a production facility shall limit access to surveillance areas to persons that are essential to surveillance operations, law enforcement agencies, security system service employees, the commissioner or the commissioner’s authorized representative, and others when approved by the commissioner. A dispensary facility and producer shall make available a current list of authorized employees and service employees that have access to the surveillance room to the commissioner or the commissioner’s authorized representative upon request. A dispensary facility and producer shall keep all on-site surveillance rooms locked and shall not use such rooms for any other function.

(e) A dispensary facility and producer shall keep the outside perimeter of the dispensary facility and production facility premises well-lit.

(f) All video recording shall allow for the exporting of still images in an industry standard image format, including .jpg, .bmp, and .gif. Exported video shall have the ability to be archived in a proprietary format that ensures authentication of the video and guarantees that no alteration of the recorded image has taken place. Exported video shall also have the ability to be saved in an industry standard file format that can be played on a standard computer operating system. A dispensary facility and producer shall erase all recordings prior to disposal or sale of the facility.

(g) A dispensary facility and producer shall keep all security equipment in good working order and shall test such equipment no less than two times per year.

* Requirements are subject to change.

Colorado:

Medical cannabis legal as of 2000

Recreational cannabis legal as of 2012

Colorado Marijuana Enforcement Division of Dept of Revenue – 1 CCR 212-2

Basis and Purpose – R 305

The statutory authority for this rule is found at subsections 12-43.4-202(2)(b) and 12-43.4-202(3)(a)(V), C.R.S. Authority also exists in the Colorado Constitution at Article XVIII, Subsection 16(5)(a)(IV). The purpose of this rule is to ensure adequate control of the Licensed Premises and Retail Marijuana and Retail Marijuana Product contained therein. This rule also establishes the minimum guidelines for security requirements for alarm systems and commercial locking mechanisms for maintaining adequate security.

R 305 – Security Alarm Systems and Lock Standards

A. Security Alarm Systems – Minimum Requirements. The following Security Alarm Systems and lock standards apply to all Retail Marijuana Establishments.

(1) Each Licensed Premises shall have a Security Alarm System, installed by an Alarm Installation Company, on all perimeter entry points and perimeter windows.

(2) Each Licensee must ensure that all of its Licensed Premises are continuously monitored. Licensees may engage the services of a Monitoring Company to fulfill this requirement.

(3) A Licensee shall maintain up-to-date and current records and existing contracts on the Licensed Premises that describe the location and operation of each Security Alarm System, a schematic of security zones, the name of the Alarm Installation Company, and the name of any Monitoring Company. See Rule R 901 – Business Records Required.

(4) Upon request, Licensees shall make available to agents of the Division or relevant local jurisdiction or state or local law enforcement agency, for a purpose authorized by the Retail Code or for any other state or local law enforcement purpose, all information related to Security Alarm Systems, Monitoring, and alarm activity.

(5) Any outdoor Retail Marijuana Cultivation Facility, or greenhouse cultivation, is a Limited Access Area and must meet all of the requirements for Security Alarm Systems described in this rule. An outdoor or greenhouse Retail Marijuana Cultivation Facility must provide sufficient security measures to demonstrate that outdoor areas are not readily accessible by unauthorized individuals. This shall include, at a minimum, perimeter fencing designed to prevent the general public from entering the Limited Access Areas. It shall be the responsibility of the Licensee to maintain physical security in a manner similar to a Retail Marijuana Cultivation Facility located in an indoor Licensed Premises so it can be fully secured and alarmed. CODE OF COLORADO REGULATIONS 1 CCR 212-2 Marijuana Enforcement Division 66

B. Lock Standards – Minimum Requirement

(1) At all points of ingress and egress, the Licensee shall ensure the use of a commercialgrade, non-residential door locks.

(2) Any outdoor Retail Marijuana Cultivation Facility, or greenhouse cultivation, must meet all of the requirements for the lock standards described in this rule.

Basis and Purpose – R 306The statutory authority for this rule is found at subsections 12-43.4-202(2)(b),12-43.4-202(2)(d), and 12- 43.4-202(3)(a)(V), and section 12-43.4-701, C.R.S. Authority also exists in the Colorado Constitution at Article XVIII, Subsection 16(5)(a)(VI). The purpose of this rule is to ensure adequate control of the Licensed Premises and Retail Marijuana and Retail Marijuana Product contained therein. This rule also establishes the minimum guidelines for security requirements for video surveillance systems for maintaining adequate security.

R 306 – Video Surveillance

A. Minimum Requirements. The following video surveillance requirements shall apply to all Retail Marijuana Establishments.

(1) Prior to exercising the privileges of a Retail Marijuana Establishment, an Applicant must install a fully operational video surveillance and camera recording system. The recording system must record in digital format and meet the requirements outlined in this rule.

(2) All video surveillance records and recordings must be stored in a secure area that is only accessible to a Licensee’s management staff.

(3) Video surveillance records and recordings must be made available upon request to the Division, the relevant local jurisdiction, or any other state or local law enforcement agency for a purpose authorized by the Retail Code or for any other state or local law enforcement purpose.

(4) Video surveillance records and recordings of point-of-sale areas shall be held in confidence by all employees and representatives of the Division, except that the Division may provide such records and recordings to the relevant local jurisdiction, or any other state or local law enforcement agency for a purpose authorized by the Retail Code or for any other state or local law enforcement purpose.

B. Video Surveillance Equipment

(1) Video surveillance equipment shall, at a minimum, consist of digital or network video recorders, cameras capable of meeting the recording requirements described in this rule, video monitors, digital archiving devices, and a color printer capable of delivering still photos.

(2) All video surveillance systems must be equipped with a failure notification system that provides prompt notification to the Licensee of any prolonged surveillance interruption and/or the complete failure of the surveillance system.

(3) Licensees are responsible for ensuring that all surveillance equipment is properly functioning and maintained, so that the playback quality is suitable for viewing and the surveillance equipment is capturing the identity of all individuals and activities in the monitored areas. CODE OF COLORADO REGULATIONS 1 CCR 212-2 Marijuana Enforcement Division 67

(4) All video surveillance equipment shall have sufficient battery backup to support a minimum of four hours of recording in the event of a power outage. Licensee must notify the Division of any loss of video surveillance capabilities that extend beyond four hours.

C. Placement of Cameras and Required Camera Coverage

(1) Camera coverage is required for all Limited Access Areas, point-of-sale areas, security rooms, all points of ingress and egress to Limited Access Areas, all areas where Retail Marijuana or Retail Marijuana Product is displayed for sale, and all points of ingress and egress to the exterior of the Licensed Premises.

(2) Camera placement shall be capable of identifying activity occurring within 20 feet of all points of ingress and egress and shall allow for the clear and certain identification of any individual and activities on the Licensed Premises.

(3) At each point-of-sale location, camera coverage must enable recording of the customer(s) and employee(s) facial features with sufficient clarity to determine identity.

(4) All entrances and exits to the facility shall be recorded from both indoor and outdoor vantage points.

(5) The system shall be capable of recording all pre-determined surveillance areas in any lighting conditions. If the Licensed Premises has a Retail Marijuana cultivation area, a rotating schedule of lighted conditions and zero-illumination can occur as long as ingress and egress points to Flowering areas remain constantly illuminated for recording purposes.

(6) Areas where Retail Marijuana is grown, tested, cured, manufactured, or stored shall have camera placement in the room facing the primary entry door at a height which will provide a clear unobstructed view of activity without sight blockage from lighting hoods, fixtures, or other equipment.

(7) Cameras shall also be placed at each location where weighing, packaging, transport preparation, processing, or tagging activities occur.

(8) At least one camera must be dedicated to record the access points to the secured surveillance recording area.

(9) All outdoor cultivation areas must meet the same video surveillance requirements applicable to any other indoor Limited Access Areas.

D. Location and Maintenance of Surveillance Equipment

(1) The surveillance room or surveillance area shall be a Limited Access Area.

(2) Surveillance recording equipment must be housed in a designated, locked, and secured room or other enclosure with access limited to authorized employees, agents of the Division and relevant local jurisdiction, state or local law enforcement agencies for a purpose authorized by the Retail Code or for any other state or local law enforcement purpose, and service personnel or contractors. CODE OF COLORADO REGULATIONS 1 CCR 212-2 Marijuana Enforcement Division 68

(3) Licensees must keep a current list of all authorized employees and service personnel who have access to the surveillance system and/or room on the Licensed Premises. Licensees must keep a surveillance equipment maintenance activity log on the Licensed Premises to record all service activity including the identity of the individual(s) performing the service, the service date and time and the reason for service to the surveillance system.

(4) Off-site Monitoring and video recording storage of the Licensed Premises by the Licensee or an independent third-party is authorized as long as standards exercised at the remote location meet or exceed all standards for on-site Monitoring.

(5) Each Retail Marijuana Licensed Premises located in a common or shared building, or commonly owned Retail Marijuana Establishments located in the same local jurisdiction, must have a separate surveillance room/area that is dedicated to that specific Licensed Premises. Commonly-owned Retail Marijuana Establishments located in the same local jurisdiction may have one central surveillance room located at one of the commonly owned Licensed Premises which simultaneously serves all of the commonly-owned retail facilities. The facility that does not house the central surveillance room is required to have a review station, printer, and map of camera placement on the premises. All minimum requirements for equipment and security standards as set forth in this section apply to the review station.

(6) Licensed Premises that combine both a Medical Marijuana Business and a Retail Marijuana Establishment may have one central surveillance room located at the shared Licensed Premises. See Rule R 304 – Medical Marijuana Business and Retail Marijuana Establishment: Shared Licensed Premises and Operational Separation.

E. Video Recording and Retention Requirements

(1) All camera views of all Limited Access Areas must be continuously recorded 24 hours a day. The use of motion detection is authorized when a Licensee can demonstrate that monitored activities are adequately recorded.

(2) All surveillance recordings must be kept for a minimum of 40 days and be in a format that can be easily accessed for viewing. Video recordings must be archived in a format that ensures authentication of the recording as legitimately-captured video and guarantees that no alteration of the recorded image has taken place.

(3) The Licensee’s surveillance system or equipment must have the capabilities to produce a color still photograph from any camera image, live or recorded, of the Licensed Premises.

(4) The date and time must be embedded on all surveillance recordings without significantly obscuring the picture.

(5) Time is to be measured in accordance with the official United States time established by the National Institute of Standards and Technology and the U.S. Naval Observatory at: http://www.time.gov/timezone.cgi?Mountain/d/-7/java

(6) After the 40 day surveillance video retention schedule has lapsed, surveillance video recordings must be erased or destroyed prior to: sale or transfer of the facility or business to another Licensee; or being discarded or disposed of for any other purpose. Surveillance video recordings may not be destroyed if the Licensee knows or should have known of a pending criminal, civil or administrative investigation, or any other proceeding for which the recording may contain relevant information. CODE OF COLORADO REGULATIONS 1 CCR 212-2 Marijuana Enforcement Division 69

F. Other Records

(1) All records applicable to the surveillance system shall be maintained on the Licensed Premises. At a minimum, Licensees shall maintain a map of the camera locations, direction of coverage, camera numbers, surveillance equipment maintenance activity log, user authorization list, and operating instructions for the surveillance equipment.

(2) A chronological point-of-sale transaction log must be made available to be used in conjunction with recorded video of those transactions.

*Requirements are subject to change.

California

Medical cannabis legal as of 1996

Recreational cannabis legal as of 2016 (went into effect 1/1/17)

California Code of Regulations Title 16, Division 42: Bureau of Cannabis Control

Article 5. Security

§ 5042. Access to Limited-Access Areas

Licensees shall ensure that any person on the licensed premises, except for employees and contractors of the licensee, are escorted at all times by the licensee or at least one employee of the licensee when in the limited-access areas of the premises.

§ 5043. Licensee Employee Badge Requirement (Not included on this website)

§ 5044. Video Surveillance System

(a) At a minimum, a licensed premises shall have a digital video surveillance system with a minimum camera resolution of 1280 × 720 pixels.

(b) The surveillance-system storage device or the cameras shall be transmission control protocol (TCP) capable of being accessed through the internet.

(c) The video surveillance system shall at all times be able to effectively and clearly record images of the area under surveillance.

(d) Each camera shall be permanently mounted and in a fixed location. Each camera shall be placed in a location that allows the camera to clearly record activity occurring within 20-feet of all points of entry and exit on the licensed premises, and allows for the clear and certain identification of any person and activities in all areas required to be filmed under subsection (e).

(e) Areas that shall be recorded on the video surveillance system include, but are not limited to, the following:

(1) Areas where cannabis goods are weighed, packed, stored, loaded, and unloaded for transportation, prepared, or moved within the premises;

(2) Limited-access areas;

(3) Security rooms;

(4) Areas storing a surveillance-system storage device with at least one camera recording the access points to the secured surveillance recording area; and

(5) Entrances and exits to the premises, which shall be recorded from both indoor and outdoor vantage points.

(f) Retailers shall also record point-of-sale areas and areas where cannabis goods are displayed for sale on the video surveillance system. At each point of sale location, camera placement must allow for the recording of the facial features of any person purchasing or selling cannabis goods, or any person in the retail area, with sufficient clarity to determine identity.

(g) Cameras shall record continuously 24 hours per day and at a minimum of 15 frames per second (FPS).

(h) The physical media or storage device on which surveillance recordings are stored shall be secured in a manner to protect the recording from tampering or theft.

(i) Surveillance recordings shall be kept for a minimum of 90 days.

(j) Surveillance recordings are subject to inspection by the Bureau, and shall be kept in a manner that allows the Bureau to view and obtain copies of the recordings at the licensed premises immediately upon request. The licensee shall also send or otherwise provide copies of the recordings to the Bureau upon request within the time specified by the Bureau.

(k) Recorded images shall clearly and accurately display the time and date. Time is to be measured in accordance with the United States National Institute Standards and Technology standards.

(l) The video surveillance system shall be equipped with a failure notification system that provides notification to the licensee of any interruption or failure of the video surveillance system or video surveillance-system storage device.

§ 5045. Security Personnel

A retail licensee or microbusiness licensee that is engaged in retail sale, shall hire or contract for security personnel to provide security services for the licensed retail premises. All security personnel hired or contracted for by the licensee shall comply with Chapters 11.4 and 11.5 of Division 3 of the Business and Professions Code.

§ 5046. Locks

A licensee shall ensure that the limited-access areas described in section 5042 of this division can be securely locked using commercial-grade, nonresidential door locks. A licensee shall also use commercial-grade, nonresidential door locks on all points of entry and exit to the licensed premises.

§ 5047. Alarm System

(a) A licensee shall maintain an alarm system as defined in Business and Professions Code section 7590.1(n) at the licensed premises.

(b) A licensee shall ensure a licensed alarm company operator or one or more of its registered alarm agents installs, maintains, monitors, and responds to the alarm system.

(c) Upon request, a licensee shall make available to the Bureau all information related to the alarm system, monitoring, and alarm activity.

*Requirements are subject to change.

Arkansas:

Medical cannabis legal as of 2016

Recreational cannabis illegal – Rejected on Nov 2022 Ballot

Arkansas Alcoholic Beverage Control Division, Amendment No. 98 providing Rules and Regs Governing the Oversite of Medical Marijuana Cultivation Facilities and Dispensaries:

SECTION 6. CONSTRUCTION SPECIFICATIONS AND SECURITY REQUIREMENTS FOR CULTIVATION FACILITES.

RR 6.1. General Security Requirements for Cultivation Facilities

a. Duty to Operate a Secure Premises

i. All Cultivation Facilities shall implement appropriate security measures to deter and prevent the unauthorized entrance into areas containing marijuana and the theft and diversion of marijuana.

ii. A licensee is responsible for the security of all marijuana items on the licensed premises or in transit from the facility.

iii. Cultivation Facilities shall comply with all applicable security requirements set forth in these rules.

RR 6.2. Construction of Premises

a. Enclosed and Secure Facility – All cultivation of medical marijuana shall take place within a building, greenhouse or other structure that:

i. Has a complete roof enclosure supported by connecting walls, constructed of solid materials, extending from the ground to the roof;

ii. Is secure against unauthorized entry;

iii. Has a foundation, slab, or equivalent base to which the floor is securely attached;

iv. Meets performance standards ensuring that cultivation and processing activities cannot be and are not perceptible from the structure in terms of:

(1) Common visual observation;

(2) Odors, smell, fragrances, or other olfactory stimulus;

(3) Light pollution, glare, or brightness;

(4) Adequate ventilation to prevent mold; and

(5) Noise;

v. Provides complete visual screening, and

vi. Is accessible only through one (1) or more lockable doors.

b. Commercial grade, non-residential door locks shall be installed on every external door, and gate if applicable. All external locks shall be equipped with biometric access controls. Only authorized personnel shall have access to locked and secured areas. Facilities shall maintain detailed records of employees with access to locked and secured areas. Records shall be made available to the Division upon request.

c. All cultivation facilities shall maintain detailed plans and elevation drawings of all operational areas involved with the production, processing, and manufacturing of medical marijuana. The plan shall identify the following:

i. All storage areas, ventilation systems, and equipment used for production, processing, and manufacturing;

ii. All entrances and exits to the facility;

iii. All windows, skylights, and retractable mechanisms built into the roof;

iv. The location of all required security cameras;

v. The location of all alarm inputs, detectors, and sirens;

vi. All video and alarm system surveillance areas;

vii. All production, processing, and manufacturing areas shall be labeled according to the specific activity occurring within the area;

viii. All restricted and limited access areas shall be identified; and

ix. All non-production areas shall be labeled according to their purpose. d. Floor plans and elevation drawings shall be kept current and on the premises of the cultivation facility. Plans and elevation drawings shall be made available to the Division upon request.

e. Floors, walls, and ceilings shall be constructed in such a manner that they may be adequately cleaned and kept clean and in good repair.

f. Cultivation facilities shall have adequate lighting in all areas where Medical Marijuana is stored and where equipment and utensils are cleaned.

g. Plumbing shall be of adequate size and design and adequately installed and maintained to carry sufficient quantities of water to required locations throughout the facility and to properly convey sewage and liquid disposable waste from the facility. There shall be no cross-connections between the potable and waste water lines.

h. All facilities shall be constructed to meet the standards of any applicable state and local electrical, fire, plumbing, and building specification codes.

RR 6.3. Storage Area Requirements (Not included on this website)

RR 6.4. Alarm System

a. All cultivation facilities shall be equipped with an alarm system which, upon attempted unauthorized entry, shall transmit a signal directly to a central protection company or a local or State police agency which has a legal duty to respond. A designated agent of the cultivation facility shall also receive notification of any such signal.

b. Alarm systems shall provide coverage for all points of ingress and egress to the facility, including, but not limited to, doorways, windows, loading bays, skylights, and retractable roof mechanisms.

c. Alarm systems shall provide coverage of any room with an exterior wall, any room containing a safe, and any room used to grow or store medical marijuana.

d. Alarm systems shall be equipped with a “panic device” that upon activation will not only sound any audible alarm components, but will also notify law enforcement.

e. Alarm systems shall have “duress” and “hold up” features to enable an agent to activate a silent alarm notifying law enforcement of an emergency.

f. Alarms system must be equipped with failure notification systems to notify cultivation facilities and law enforcement of any failure in the alarm system.

g. Alarm systems shall have the ability to remain operational during a power outage.

RR 6.5. Video Surveillance System

a. All cultivation facilities shall be equipped with video surveillance systems consisting of the following:

i. Digital video cameras; ABC – 13

ii. 24 hour per day, 7 day per week recording capabilities;

iii. The ability to remain operational during a power outage;

iv. Digital archiving capabilities;

v. On-site and off-site monitoring capabilities; and

vi. All facilities must maintain at least one on-site display monitor connected to the surveillance system at all times. The monitor shall have a screen size of at least 12 inches.

b. All cultivation facilities shall maintain camera coverage of the following areas:

i. All points of ingress and egress to the facility, including, but not limited to, doorways, windows, loading bays, skylights, and retractable roof mechanisms;

ii. Any room with an exterior wall, except restrooms, any room containing a safe, and any room or area used to grow, process, manufacture, or store medical marijuana;

iii. All areas in which any part of the disposal process of marijuana occurs; and

iv. All parking areas and any alley areas immediately adjacent to the building.

c. All recording devices shall display a date and time stamp on all recorded video.

d. All recording devices shall have the capability to produce a still image from the video recording, and each facility shall maintain, on site, a video printer capable of immediately producing a clear still image from any video camera image.

e. Access to on-site surveillance system controls and monitoring shall be limited to authorized personnel. Cultivation facilities shall identify individuals with access to surveillance system controls and monitoring upon request by the Division.

f. All surveillance recordings shall be maintained for a minimum of 90 days.

RR 6.6. Perimeter Requirements (Not included on this website)

SECTION 7. CONSTRUCTION SPECIFICATIONS SECURITY REQUIREMENTS FOR DISPENSARIES.

RR 7.1. General Security Requirements for Dispensaries

a. Duty to Operate a Secure Premises

i. All dispensaries shall implement appropriate security measures to deter and prevent the theft and diversion of marijuana.

ii. A licensee is responsible for the security of all marijuana items on the licensed premises or in transit from the facility.

iii. Dispensaries shall comply with all applicable security requirements set forth in these rules.

RR 7.2. Construction of Premises

a. Enclosed and Secure Facility

i. Dispensaries shall be enclosed on all sides by permanent walls and doors.

b. All cultivation of medical marijuana by a dispensary shall take place within a building, greenhouse or other structure that:

i. Has a complete roof enclosure supported by connecting walls, constructed of solid materials, extending from the ground to the roof;

ii. Is secure against unauthorized entry;

iii. Has a foundation, slab, or equivalent base to which the floor is securely attached;

iv. Meets performance standards ensuring that cultivation and processing activities cannot be and are not perceptible from the structure in terms of:

(1) Common visual observation;

(2) Odors, smell, fragrances, or other olfactory stimulus;

(3) Light pollution, glare, or brightness;

(4) Adequate ventilation to prevent mold; and

(5) Noise;

v. Provides complete visual screening, and

vi. Is accessible only through one (1) or more lockable doors.

c. Commercial grade, non-residential door locks shall be installed on every external door, and gate if applicable. All external locks shall be equipped with biometric access controls. Only authorized personnel shall have access to locked and secured areas. Facilities shall maintain detailed records of employees with access to locked and secured areas. Records shall be made available to the Division upon request.

d. All dispensaries shall maintain detailed plans and elevation drawings of all operational areas involved with the dispensing and production of medical marijuana. The plan shall identify the following:

i. All entrances and exits to the facility;

ii. All windows, skylights, and retractable mechanisms built into the roof;

iii. All designated areas for qualified patients and designated care givers;

iv. All limited access areas;

v. All storage areas, ventilation systems, and equipment used for production, processing, and manufacturing;

vi. The location of all required security cameras;

vii. The location of all alarm inputs, detectors, and sirens;

viii. All video and alarm system surveillance areas;

ix. All production, processing, and manufacturing areas shall be labeled according to the specific activity occurring within the area;

x. All restricted and limited access areas shall be identified; and

xi. All areas shall be labeled according to their purpose.

e. Floor plans and elevation drawings shall be kept current and on the premises of the dispensary. Plans and elevation drawings shall be made available to the Division upon request.

f. Floors, walls, and ceilings shall be constructed in such a manner that they may be adequately cleaned and kept clean and in good repair.

g. Dispensaries shall have adequate lighting in all areas where Medical Marijuana is stored and where equipment and utensils are cleaned.

h. Plumbing shall be of adequate size and design and adequately installed and maintained to carry sufficient quantities of water to required locations throughout the facility and to properly convey sewage and liquid disposable waste from the facility. There shall be no cross-connections between the potable and waste water lines.

i. All facilities shall be constructed to meet the standards of any applicable state and local electrical, fire, plumbing, and building specification codes.

RR 7.3. Storage Area Requirements

a. Any dispensary storing usable marijuana harvested from mature plants pursuant to RR11.3 shall comply with the storage area requirements in RR 6.3.

RR 7.4. Alarm System

a. All dispensaries shall be equipped with an alarm system which, upon attempted unauthorized entry, shall transmit a signal directly to a central protection company or a local or State police agency which has a legal duty to respond. A designated agent of the dispensary shall also receive notification of any such signal.

c. Alarm systems shall provide coverage of any room with an exterior wall, any room containing a safe, and any room used to grow or store medical marijuana.

d. Alarm systems shall be equipped with a “panic device” that upon activation will not only sound any audible alarm components, but will also notify law enforcement.

e. Alarm systems shall have “duress” and “hold up” features to enable an agent to activate a silent alarm notifying law enforcement of an emergency.

f. Alarms system must be equipped with failure notification systems to notify dispensaries and law enforcement of any failure in the alarm system. g. Alarm systems shall have the ability to remain operational during a power outage.

RR 7.5. Video Surveillance System

a. All dispensaries shall be equipped with video surveillance systems consisting of the following:

i. Digital video cameras;

ii. 24 hour per day, 7 day per week recording capabilities;

iii. The ability to remain operational during a power outage;

iv. Digital archiving capabilities;

v. On-site and off-site monitoring capabilities; and

vi. All facilities must maintain at least one on-site display monitor connected to the surveillance system at all times. The monitor shall have a screen size of at least 12 inches.

b. All dispensaries shall maintain camera coverage of the following areas:

i. All points of ingress and egress to the facility, including, but not limited to, doorways, windows, loading bays, skylights, and retractable roof mechanisms;

ii. Any room with an exterior wall, except restrooms, any room containing a safe, and any room or area used to grow, process, manufacture, or store medical marijuana;

iii. All areas in which any part of the disposal process of marijuana occurs;

iv. All point of sale areas.

v. All areas for qualified patients and designated caregivers, except restrooms; and

vi. All parking areas and any alley areas immediately adjacent to the building.

c. All recording devices shall display a date and time stamp on all recorded video.

e. Access to on-site surveillance system controls and monitoring shall be limited to authorized personnel. Dispensaries shall identify individuals with access to surveillance system controls and monitoring upon request by the Division.

f. All surveillance recordings shall be maintained for a minimum of 90 days.

RR 7.6. Perimeter Requirements

a. The perimeter of all dispensaries shall be maintained in such a way to discourage theft and diversion of marijuana. All dispensaries shall maintain the following:

i. Adequate lighting to facilitate surveillance; and ii. Foliage and landscaping that does not allow for a person or persons to conceal themselves from sight.

b. All stages of medical marijuana production and the disposal of unusable medical marijuana on the premises of a dispensary shall not be visible or accessible to the public from outside the premises of the facility.

c. The dispensary shall ensure any odors, which may arise from any stage of marijuana production or the disposal of marijuana, are not detectable by the public from outside the dispensary.

*Requirements are subject to change.

Arizona:

Medical cannabis legal as of 2010

Recreational cannabis legalized effective Nov 30, 2020

Arizona Department of Health Services (AZDHS) Statute R9-17-318:

A. Except as provided in R9-17-310(A)(7), a dispensary shall ensure that access to the enclosed, locked facility where marijuana is cultivated is limited to the dispensary’s principal officers, board members, and authorized dispensary agents.

G. To prevent unauthorized access to medical marijuana at the dispensary and, if applicable, the dispensary’s cultivation site, the dispensary shall have the following:

Security equipment to deter and prevent unauthorized entrance into limited access areas that include:

a. Devices or a series of devices to detect unauthorized intrusion, which may include a signal system interconnected with a radio frequency method, such as cellular, private radio signals, or other mechanical or electronic device;

b. Exterior lighting to facilitate surveillance;

c. Electronic monitoring including:

i. At least one 19-inch or greater call-up monitor,

ii. A video printer capable of immediately producing a clear still photo from any video camera image,

iii. Video cameras:

(1) Providing coverage of all entrances to and exits from limited access areas and all entrances to and exits from the building, capable of identifying any activity occurring in or adjacent to the building; and

(2) Having a recording resolution of at least 704 x 480 or the equivalent;

iv. A video camera at each point of sale location allowing for the identification of any qualifying patient or designated caregiver purchasing medical marijuana,

v. A video camera in each grow room capable of identifying any activity occurring within the grow room in low light conditions,

vi. Storage of video recordings from the video cameras for at least 30 calendar days,

vii. A failure notification system that provides an audible and visual notification of any failure in the electronic monitoring system, and viii. Sufficient battery backup for video cameras and recording equipment to support at least five minutes of recording in the event of a power outage;

d. Panic buttons in the interior of each building

2. Policies and procedures:

a. That restrict access to the areas of the dispensary that contain marijuana and if applicable, the dispensary’s cultivation site to authorized individuals only;

b. That provide for the identification of authorized individuals;

c. That prevent loitering;

d. For conducting electronic monitoring; and

e. For the use of a panic button.

*Requirements are subject to change.

Alaska:

Medical cannabis legal as of 1998

Recreational cannabis legal as of 2014

Alaska Administrative Code (AAC) Section 306.715

A marijuana establishment license application must include the applicant’s operating plan, in a format the board prescribes, describing to the board’s satisfaction the proposed marijuana establishment’s security plans:

The licensed premises of a marijuana establishment must have

(1) exterior lighting to facilitate surveillance

(2) a security alarm system on all exterior doors and windows; and

(3) continuous video monitoring as noted in AAC 306. 720.

A marijuana establishment shall have policies and procedures that

(1) are designed to prevent diversion of marijuana or marijuana product;

(2) prevent loitering;

(3) describe the use of any additional security device, such as a motion detector, pressure switch, and duress, panic, or hold-up alarm to enhance security of licensed premises; and

(4) describe the actions to be taken by a licensee, employee, or agent of the marijuana establishment when any automatic or electronic notification system alerts a local law enforcement agency of an unauthorized breach of security.

A marijuana establishment shall use ecommercial grade, nonresidential door locks on all exterior entry points to the licensed premises. (Eff. 2/21/2016, Register 217)

AAC 306. 720. Video surveillance. (a) A marijuana establishment shall install and maintain a video surveillance and camera recording system as provided in this section. The video system must cover:

(1) each restricted access area and each entrance to a restricted access area within the licensed premises;

(2) each entrance to the exterior of the licensed premises; and

(3) each point-of-sale area.

At a marijuana establishment, a required video camera must be placed in a way that produces a clear view adequate to identify any individual inside the licensed premises, or within 20 feet of each entrance to the licensed premises. Both the interior and the exterior of each entrance to the facility must be recorded by a video camera.

Any area where marijuana is grown, cured, or manufactured, or where marijuana waste is destroyed, must have a camera placement in the room facing the primary entry door, and in adequate fixed positions, at a height that will provide a clear, unobstructed view of the regular activity without a sight blockage from lighting hoods, fixtures, or other equipment, in order to allow for the clear and certain identification of any person and activity in the area at all times.

Surveillance recording equipment and video surveillance records must be housed in a locked and secure area or in a lock box, cabinet, closet or other secure area that is accessible only to a marijuana establishment licensee or authorized employee, and to law enforcement personnel including a peace officer or an agent of the board. A marijuana establishment may use an offsite monitoring service and offsite storage of video surveillance records if security requirements at the offsite facility are at least as strict as onsite security requirements as described in this section.

Each surveillance recording must be preserved for a minimum of 40 days, in a format that can be easily accessed for viewing. All recorded images must clearly and accurately display the time and date, and must be archived in a format that does not permit alteration of the recorded image, so that the images can readily be authenticated. After 40 days, a marijuana establishment may erase video recordings, unless the licensee knows or should know of any pending criminal, civil, or· administrative investigation for which the video recording may contain relevant information. (Eff. 2/21/2016, Register 217)

*Requirements are subject to change.

STATE SECURITY LICENSING RULES

Cannabis Legalization Status

Useful Links

Subscribe