R68-28-6. Security Requirements

  1) At a minimum, each cannabis processing facility shall have a security alarm system on all perimeter entry points and perimeter windows.

  2) At a minimum, a licensed cannabis processing facility shall have complete video surveillance system:

  a) with minimum camera resolution of 640 x 470 pixels or pixel equivalent for analog, and

  b) that retains footage for at least 45 days.

  3) All cameras shall be fixed and placement shall allow for the clear and certain identification of any person and activities in controlled areas.

  4) Controlled areas included:

  a) all entrances and exits, or ingress and egress vantage points;

  b) all areas where cannabis or cannabis products are stored,

  c) all areas where cannabis or cannabis products are extracted,

  d) all areas where cannabis or cannabis products are manufactured, packaged, or labeled; and

  e) all areas where cannabis waste is being moved, processed, stored or destroyed.

  5) All cameras shall record continuously.

  6) For locally stored footage, the surveillance system storage device shall be secured in the facility in a lockbox, cabinet, closet, or secured in another manner to protect from employee tampering or criminal theft.

  7) For footage stored on a remote server, access shall be restricted to protect from employee tampering.

  8) Any gate or entry point must be lighted in low-light conditions sufficient to record activity occurring.

  9) All visitors to a cannabis processing facility shall be required to have a properly displayed identification badge issued by the facility at all times while on the premises of the facility.

  10) All visitors shall be escorted by a cannabis processing facility agent at all times while in the facility.

  11) A cannabis processing facility shall keep and maintain a visitors log showing:

  a) the full name of each visitor entering the facility;

  b) the badge number issued;

  c) the time of arrival;

  d) the time of departure, and

  e) the purpose of the visit.

  12) The cannabis processing facility shall keep the visitors log for a minimum of a year.

  13) The cannabis processing facility shall make the visitor log shall available to the department upon request.