COLORADO CANNABIS BUSINESS SECURITY
KNOWLEDGE CENTER

Created to provide helpful information about the Colorado cannabis industry

COLORADO CANNABIS LICENSE INFO

Please note; while we aim to keep these pages fully up to date with the latest information, cannabis laws are always changing. We encourage you to verify these rules and regulations in the official legal text, which we’ve linked throughout the page for your convenience.

For compliance requirements related to cannabis seed to sale tracking and reporting for growers, manufacturers, and dispensaries in Colorado click here!

 

Click here for program webpage

Colorado Cannabis Business Security Requirements

*Please note that this section encompasses only the compliance requirements relevant to business security. Many parts of the rules and regulation shave been removed to focus exclusively on the security compliance aspects. To view the full set of rules and regulations for Colorado, Rec Rules, Medical Rules!

 

Please check back here for updates!

Colorado Business Security Requirements for Cannabis Licensees

You can view the program webpage here.

Medical Rules:

M 305 – Security Alarm Systems and Lock Standards

 

  • A. Security Alarm Systems – Minimum Requirements

 

    • 1. Each Licensed Premises shall have a Security Alarm System, installed by an Alarm Installation Company, on all perimeter entry points and perimeter windows.
    • 2. Each Licensee must ensure that all of its Licensed Premises are continuously monitored. Licensees may engage the services of a Monitoring Company to fulfill this requirement.
    • 3. The Licensees shall maintain up to date and current records and existing contracts on the Licensed Premises that describe the location and operation of each Security Alarm System, a schematic of security zones, the name of the Alarm Installation Company, and the name of any Monitoring Company. See Rule M 901 – Business Records Required.
    • 4. Upon request, Licensees shall make available to agents of the Division or relevant local licensing authority or other state or local law enforcement agency, for a purpose authorized by the Medical Code or any other state or local law enforcement purpose, all information related to Security Alarm Systems, Monitoring, and alarm activity.
    • 5. Any outdoor or greenhouse Optional Premises Cultivation Operation, or outdoor or greenhouse Marijuana Research and Development Cultivation, is a Limited Access Area and must meet all of the requirements for Security Alarm Systems described in this rule. An outdoor or greenhouse Optional Premises Cultivation Operation or outdoor or greenhouse Marijuana Research and Development Cultivation must provide sufficient security measures to demonstrate that outdoor or greenhouse areas are not readily accessible by unauthorized individuals. It shall be the responsibility of the Licensee to maintain physical security in a manner similar to an Optional Premises Cultivation Operation or Marijuana Research and Development Cultivation located in an indoor Licensed Premises so it can be fully secured and alarmed. The fencing requirements shall, at a minimum, include, perimeter fencing designed to prevent the general public from entering the Limited Access Areas and shall meet at the least the following requirements:
      • a. The entire Limited Access Area shall be surrounded by a fence that measures at least eight feet from the ground to the top of the fence and is constructed of at least a six-gauge or higher metal chain link fence or another similarly secure material but may not be wood. All support posts shall be steel and securely anchored.
      • b. All entry gates shall measure at least eight feet from the ground to the top of the entry gate and shall be constructed of a six-gauge or higher metal chain link fence or a similarly secure material but may not be wood.
      • c. The fence shall obscure the Limited Access Area so that it is not easily viewed from outside the fence.
      • d. The perimeter of the fence shall be surrounded with lights illuminating all sides of the fence for at least 20 feet from the fence. The required lights may be, but are not required to be, motion sensing.
      • e. A Licensee may, in writing, request that the Division waive one or more of the security requirements described in subparagraphs (a) through (d) of this Rule, by submitting on a form prescribed by the Division a security waiver request for Division approval. The Division may, in its discretion and on a case by case basis, approve the security waiver if it finds that the alternative safeguard proposed by the Licensee meets the goals of the above security requirements. Approved security waivers expire at the same time as the underlying License. The Licensee’s request for a waiver shall include:
        • i. The specific rules and subsections of a rule that is requested to be waived;
        • ii. The reason for the waiver;
        • iii. A description of an alternative safeguard the Licensee will implement in lieu of the requirement that is the subject of the waiver; and
        • iv. An explanation of how and why the alternative safeguard accomplishes the goals of the security rules, specifically public safety, prevention of diversion, accountability, and prohibiting access to minors.
      • f. During the period January 1, 2018, to January 1, 2019, a Licensee that is currently in compliance with the Security Alarm Systems requirements will not be required to comply with this revised Rule M 305. Compliance with this revised Rule M 305 shall be required effective January 1, 2019.

 

  • B. Lock Standards – Minimum Requirement

 

    • 1. At all points of ingress and egress, the Licensee shall ensure the use of a commercial grade, non-residential door locks.
    • 2. Any outdoor or greenhouse Optional Premises Cultivation Operation, or outdoor or greenhouse Marijuana Research and Development Cultivation, must meet all of the requirements for the lock standards described in this rule

Rec. Rules:

R 305 – Security Alarm Systems and Lock Standards

    • A. Security Alarm Systems – Minimum Requirements. The following Security Alarm Systems and lock standards apply to all Retail Marijuana Establishments.
      • 1. Each Licensed Premises shall have a Security Alarm System, installed by an Alarm Installation Company, on all perimeter entry points and perimeter windows.
      • 2. Each Licensee must ensure that all of its Licensed Premises are continuously monitored. Licensees may engage the services of a Monitoring Company to fulfill this requirement.
      • 3. A Licensee shall maintain up-to-date and current records and existing contracts on the Licensed Premises that describe the location and operation of each Security Alarm System, a schematic of security zones, the name of the Alarm Installation Company, and the name of any Monitoring Company. See Rule R 901 – Business Records Required.
      • 4. Upon request, Licensees shall make available to agents of the Division or relevant local jurisdiction or state or local law enforcement agency, for a purpose authorized by the Retail Code or for any other state or local law enforcement purpose, all information related to Security Alarm Systems, Monitoring, and alarm activity.
      • 5. Any outdoor or greenhouse Retail Marijuana Cultivation Facility is a Limited Access Area and must meet all of the requirements for Security Alarm Systems described in this rule. An outdoor or greenhouse Retail Marijuana Cultivation Facility must provide sufficient security measures to demonstrate that outdoor areas are not readily accessible by unauthorized individuals. It shall be the responsibility of the Licensee to maintain physical security in a manner similar to a Retail Marijuana Cultivation Facility located in an indoor Licensed Premises so it can be fully secured and alarmed. The fencing requirements shall include, at a minimum, perimeter fencing designed to prevent the general public from entering the Limited Access Areas and shall meet at least the following minimum requirements:
        • a. The entire Limited Access Area shall be surrounded by a fence that measures at least eight feet from the ground to the top of the fence and is constructed of at least a six-gauge or higher metal chain link fence or another similarly secure material but may not be wood. All support posts shall be steel and securely anchored.
        • b. All entry gates shall measure at least eight feet from the ground to the top of the entry gate and shall be constructed of a six-gauge or higher metal chain link fence or a similarly secure material but may not be wood.
        • c. The fence shall obscure the Limited Access Area so that it is not easily viewed from outside the fence.
        • d. The perimeter of the fence shall be surrounded with lights illuminating all sides of the fence for at least 20 feet from the fence. The required lights may be but are not required to be motion sensing.
        • e. A Licensee may, in writing, request that the Division waive one or more of the security requirements described in this subparagraphs (a) through (d) of this Rule, by submitting on a form prescribed by the Division a security waiver request for Division approval. The Division may, in its discretion and on a case by case basis, approve the security waiver if it finds that the alternative safeguard proposed by the Licensee meets the goals of the above security requirements. Approved security waivers expire at the same time as the underlying License. The Licensee’s request for a waiver shall include:
          • i. The specific rules and subsections of a rule that is requested to be waived;
          • ii. The reason for the waiver;
          • iii. A description of an alternative safeguard the Licensee will implement in lieu of the requirement that is the subject of the waiver; and
          • iv. An explanation of how and why the alternative safeguard accomplishes the goals of the security rules, specifically public safety, prevention of diversion, accountability, and prohibiting access to minors.
        • f. During the period January 1, 2018, to January 1, 2019, a Licensee that is currently in compliance with the Security Alarm Systems requirements will not be required to comply with this revised Rule R 305. Compliance with this revised Rule R 305 shall be required effective January 1, 2019.

 

  • B. Lock Standards – Minimum Requirement

 

    • 1. At all points of ingress and egress, the Licensee shall ensure the use of a commercial grade, non-residential door locks.
    • 2. Any outdoor or greenhouse Retail Marijuana Cultivation Facility must meet all of the requirements for the lock standards described in this rule.

M 306 – Video Surveillance

 

  • A. Minimum Requirements

 

The following video surveillance requirements shall apply to all Medical Marijuana Businesses:

    • 1. Prior to exercising the privileges of a Medical Marijuana Business, an Applicant must install fully operational video surveillance and camera recording system. The recording system must record in digital format and meet the requirements outlined in this rule.
      • 2. All video surveillance records and recordings must be stored in a secure area that is only accessible to a Licensee’s management staff.
      • 3. Video surveillance records and recordings must be made available upon request to the Division, the relevant local licensing authority, or any other state or local law enforcement agency for a purpose authorized by the Medical Code or for any other state or local law enforcement purpose.
      • 4. Video surveillance records and recordings of point-of-sale areas shall be held in confidence by all employees and representatives of the Division, except that the Division may provide such records and recordings to the relevant local licensing authority, or any other state or local law enforcement agency for a purpose authorized by the Medical Code or for any other state or local law enforcement purpose.

 

  • B. Video Surveillance Equipment

 

      • 1. Video surveillance equipment shall, at a minimum, consist of digital or network video recorders, cameras capable of meeting the recording requirements described in this Rule, video monitors, digital archiving devices, and a color printer capable of delivering still photos.
      • 2. All video surveillance systems must be equipped with a failure notification system that provides prompt notification to the Licensee of any prolonged surveillance interruption and/or the complete failure of the surveillance system.
      • 3. Licensees are responsible for ensuring that all surveillance equipment is properly functioning and maintained so that the playback quality is suitable for viewing and the surveillance equipment is capturing the identity of all individuals and activities in the monitored areas.
      • 4. All video surveillance equipment shall have sufficient battery backup to support a minimum of four hours of recording in the event of a power outage.

 

  • C. Placement of Cameras and Required Camera Coverage

 

      • 1. Camera coverage is required for all Limited Access Areas, point-of-sale areas, security rooms, all points of ingress and egress to Limited Access Areas, all areas where Medical Marijuana, Medical Marijuana Concentrate, or Medical Marijuana-Infused Product is displayed for sale, and all points of ingress/egress to the exterior of the Licensed Premises.
      • 2. Camera placement shall be capable of identifying activity occurring within 20 feet of all points of ingress and egress and shall allow for the clear and certain identification of any individual and activities on the Licensed Premises.
      • 3. At each point-of-sale location, camera coverage must enable recording of the patients, caregiver or customer(s) and employee(s) facial features with sufficient clarity to determine identity.
      • 4. All entrances and exits to the facility shall be recorded from both indoor and outdoor vantage points.
      • 5. The system shall be capable of recording all pre-determined surveillance areas in any lighting conditions. If the Licensed Premises has a Medical Marijuana cultivation area, a rotating schedule of lighted conditions and zero-illumination can occur as long as ingress and egress points to Flowering areas remain constantly illuminated for recording purposes.
      • 6. Areas, where Medical Marijuana is grown, tested, cured, manufactured, researched, or stored, shall have camera placement in the room facing the primary entry door at a height which will provide a clear unobstructed view of activity without sight blockage from lighting hoods, fixtures, or other equipment.
      • 7. Cameras shall also be placed at each location where weighing, packaging, transport, preparation, or tagging activities occur.
      • 8. At least one camera must be dedicated to record the access points to the secured surveillance recording area.
      • 9. All outdoor cultivation areas must meet the same video surveillance requirements applicable to any other indoor Limited Access Areas.

 

  • D. Location and Maintenance of Surveillance Equipment

 

      • 1. The surveillance room or surveillance area shall be a Limited Access Area.
      • 2. Surveillance recording equipment must be housed in a designated, locked and secured room or other enclosure with access limited to authorized employees, agents of the Division and relevant local licensing authority, state or local law enforcement agencies for a purpose authorized by the Medical Code or for any other state or local law enforcement purpose, and service personnel or contractors.
      • 3. Licensees must keep a current list of all authorized employees and service Personnel who have access to the surveillance system and/or room on the Licensed Premises. Licensees must keep a surveillance equipment maintenance activity log on the Licensed Premises to record all service activity including the identity of the individual(s) performing the service, the service date and time and the reason for service to the surveillance system.
      • 4. Off-site Monitoring and video recording storage of the Licensed Premises by the Licensee or an independent third-party is authorized as long as standards exercised at the remote location meets or exceeds all standards for on-site Monitoring.
      • 5. Each Medical Marijuana Licensed Premises located in a common or shared building must have a separate surveillance room/area that is dedicated to that specific Licensed Premises. Commonly-owned Medical Marijuana Businesses located in the same local jurisdiction may have one central surveillance room located at one of the commonly owned Licensed Premises which simultaneously serves all of the commonly-owned Medical Marijuana Businesses. The facility that does not house the central surveillance room is required to have a review station, printer, and map of camera placement on the premises. All minimum requirements for equipment and security standards as set forth in the section apply to the review station.
      • 6. A co-located Medical Marijuana Business and a Retail Marijuana Establishment may have one central surveillance room located at the shared Licensed Premises. See Rule M 304 – Medical Marijuana Business and Retail Marijuana Establishment: Shared Licensed Premises and Operational Separation.

 

  • E. Video Recording and Retention Requirements

 

    • 1. All camera views of all Limited Access Areas must be continuously recorded 24 hours a day. The use of motion detection is authorized when a Licensee can demonstrate that monitored activities are adequately recorded.
    • 2. All surveillance recordings must be kept for a minimum of 40 days and be in a format that can be easily accessed for viewing. Video recordings must be archived in a format that ensures authentication of the recording as legitimately-captured video and guarantees that no alteration of the recorded image has taken place.
    • 3. The Licensee’s surveillance system or equipment must have the capabilities to produce a color still photograph from any camera image, live or recorded, of the Licensed Premises.
    • 4. The date and time must be embedded on all surveillance recordings without significantly obscuring the picture. The date and time must be synchronized with any point-of-sale system.
    • 5. Time is to be measured in accordance with the official United States time established by the National Institute of Standards and Technology and the U.S. Naval Observatory at: http://www.time.gov/timezone.cgi?Mountain/d/-7/java .
    • 6. After the 40-day surveillance video retention schedule has lapsed, surveillance video recordings must be erased or destroyed prior to sale or transfer of the facility or business to another Licensee or being discarded or disposed of for any other purpose. Surveillance video recordings may not be destroyed if the Licensee knows or should have known of a pending criminal, civil or administrative investigation or any other proceeding for which the recording may contain relevant information.

You can view the program webpage here.

Why Choose Helix Cannabis Security?

Focused on Safety, Security, and Compliance

Our top priority is making sure your staff, your business, and your investment, are safe and secure. We provide cost-effective solutions to satisfy every    compliance requirement in your state as well as end-to-end expert security consultation, and of course, development and implementation of services.

Helix Dispensary Security Services

Compliance

Maintain full compliance with your state and local cannabis business security requirements through Helix’s full-service security firm. Our team of cannabis security experts have implemented compliance-centric security frameworks in dozens of legal cannabis markets for grow warehouses, manufacturing facilities, laboratories and dispensaries.

digital-security

360 Security Systems

From cameras and remote monitoring services to alarm systems and rapid response, Helix Digital Security Systems can address all of your security needs and beyond. Cover every square inch of your facility with comprehensive security camera systems, ensuring 24/7 visibility, DVR capabilities, and more.

physical-security

Security Training

Your staff isn’t expected to stop criminals in action, but ensuring your staff is trained on security best practices can provide essential steps in de-escalation, situational control, and threat identification to allow team members to resolve a situation before it arises.

Are you a Denver-area security guard in need of Security Guard Training Certification?

Want to learn more about Helix Security’s comprehensive services and expertise?

Remote, Eyes-On Monitoring

monitoring

The most-cost effective approach to 24/7 active monitoring of your legal cannabis business.

Remote monitoring provides live, eyes-on guards monitoring your business security camera systems 24 hours a day, 7 days a week. Our guards will activate timely response times and ensure your business is secure, especially when you can’t be there.

At Helix Cannabis Security, we consider it a cannabis security best practice to have guards on-site at your facility at all times that people are present. If people are not present on the premise, there’s no need to risk the safety of a security guard. Remote monitoring provides the same, high-level attention and security, without risking a guards life, or incurring unnecessary costs.

Click to learn more.

Receive Our Pricing Guide