MASSACHUSETTS CANNABIS BUSINESS SECURITY
KNOWLEDGE CENTER

Created to provide helpful information about the Massachusetts cannabis industry

MASSACHUSETTS CANNABIS LICENSE INFO

Please note; while we aim to keep this pages fully up to date with the latest information, cannabis laws are always changing. We encourage you to verify these rules and regulations in the official legal text, which we’ve linked throughout the page for your convenience.

For compliance requirements related to cannabis seed to sale tracking and reporting for growers, manufacturers, and dispensaries in Massachusetts, click here!

 

Click here for program webpage

Massachusetts Cannabis Business Security Requirements

*Please note that this section encompasses only the compliance requirements relevant to business security. Many parts of the rules and regulations have been removed to focus exclusively on the security compliance aspects. To view the full set of rules and regulations for Massachusetts adult use cannabis, click here! For medical cannabis rules and regulations, click here!

Business Security Requirements for Medical Marijuana Licenses in Massachusetts

The medical marijuana program is operated by the Massachusetts Cannabis Control Commission.

For a full set of rules and regulations, click here.

725.105: Operational Requirements for Registered Marijuana Dispensaries

  • (A) Every RMD shall have and follow a set of detailed written operating procedures. If the RMD has a second location, it shall develop and follow a set of such operating procedures for that facility. Operating procedures shall include, but need not be limited to the following:
    • (1) Security measures in compliance with 105 CMR 725.110;
    • (2) Employee security policies, including personal safety and crime prevention techniques;
    • (4) Storage of marijuana in compliance with 105 CMR 725.105(D);
    • (14) Written policies and procedures for the production and distribution of marijuana, which shall include, but not be limited to:
      • (a) Methods for identifying, recording, and reporting diversion, theft, or loss, and for correcting all errors and inaccuracies in inventories;
    • (17) Policy and procedure for the handling of cash on RMD premises including, but not limited to, storage, collection frequency, and transport to financial institution(s).
  • (B) Cultivation, Acquisition, and Distribution Requirements.
    • (1) The following requirements pertain to cultivation of marijuana for medical use:
      • (c) All phases of the cultivation of marijuana shall take place in designated, locked, limited access areas that are monitored by a surveillance camera system in accordance with 105 CMR 725.110(D)(1)(d) through (i);
  • (C) Requirements for Handling and Testing Marijuana and for Production of MIPs.
    • (3) All marijuana in the process of cultivation, production, preparation, transport, or analysis shall be housed and stored in such a manner as to prevent diversion, theft, or loss.
      • (a) Such items shall be accessible only to the minimum number of specifically authorized dispensary agents essential for efficient operation.
      • (b) Such items shall be returned to a secure location immediately after completion of the process or at the end of the scheduled businessday.
      • (c) If a manufacturing process cannot be completed at the end of a working day, the processing area or tanks, vessels, bins, or bulk containers containing marijuana shall be securely locked inside an area or building that affords adequate security.
  • (D) RMD Storage Requirements.
    • (5) RMD storage areas shall be maintained in accordance with the security requirements of 105 CMR 725.110.

 

725.110: Security Requirements for Registered Marijuana Dispensaries

  • (A) General Requirements. An RMD shall implement sufficient security measures to deter and prevent unauthorized entrance into areas containing marijuana and theft of marijuana at the RMD. Security measures to protect the premises, registered qualifying patients, personal caregivers, and dispensary agents of the RMD must include, but are not limited to the following. The RMD must:
    • (1) Allow only registered qualifying patients, personal caregivers, dispensary agents, persons authorized by 105 CMR 725.105(P), and, subject to the requirements of 105 CMR 725.110(C)(4), outside vendors, contractors, and visitors, access to the RMD;
    • (2) Prevent individuals from remaining on the premises of the RMD if they are not engaging in activity expressly or by necessary implication permitted by St. 2012, c. 369 and 105 CMR 725.000;
    • (3) Dispose of marijuana in accordance with 105 CMR 725.105(J), in excess of the quantity required for normal, efficient operation as established in 105 CMR 725.105(G)(1);
    • (4) Establish limited access areas accessible only to specifically authorized personnel, which shall include only the minimum number of employees essential for efficient operation;
    • (5) Store all finished marijuana in a secure, locked safe or vault and in such a manner as to prevent diversion, theft, and loss;
    • (6) Keep all safes, vaults, and any other equipment or areas used for the production, cultivation, harvesting, processing, or storage of marijuana and MIPs securely locked and protected from entry, except for the actual time required to remove or replace marijuana;
    • (7) Keep all locks and security equipment in good working order;
    • (8) Prohibit keys, if applicable, from being left in the locks, or stored or placed in a location accessible to persons other than specifically authorized personnel;
    • (9) Prohibit accessibility of security measures, such as combination numbers, passwords, or electronic or biometric security systems, to persons other than specifically authorized personnel;
    • (10) Ensure that the outside perimeter of the RMD is sufficiently lit to facilitate surveillance;
    • (11) Ensure that trees, bushes, and other foliage outside of the RMD do not allow for a person or persons to conceal themselves from sight;
    • (12) Develop emergency policies and procedures for securing all product following any instance of diversion, theft, or loss of marijuana, and conduct an assessment to determine whether additional safeguards are necessary; and
    • (13) Develop sufficient additional safeguards as required by the Department for RMDs that present special security concerns. 12/1/17 105 CMR – 4160.17 725.110: continued
    • (14) An RMD shall comply with all local requirements regarding siting, provided however that if no local requirements exist, an RMD shall not be sited within a radius of 50 feet of a school, daycare center, or any facility in which children commonly congregate. The 500 foot distance under this section is measured in a straight line from the nearest point of the facility in question to the nearest point of the proposed RMD.
  • (B) Alternate Security Provisions. If an RMD has provided other safeguards that can be regarded as an adequate substitute for a security requirement specified in 105 CMR 725.110, such added protection may be taken into account by the Department in evaluating overall required security measures.
  • (C) Limited Access Areas.
    • (1) All limited access areas must be identified by the posting of a sign that shall be a minimum of 12″ X 12″ and which states: “Do Not Enter – Limited Access Area – Access Limited to Authorized Personnel Only” in lettering no smaller than one inch in height.
    • (2) All limited access areas shall be clearly described by the filing of a diagram of the registered premises, in the form and manner determined by the Department, reflecting walls, partitions, counters, and all areas of entry and exit. Said diagram shall also show all propagation, vegetation,flowering, processing, production,storage, disposal, and retail sales areas.
    • (3) A dispensary agent shall visibly display an identification badge issued by the RMD at all times while at the RMD or transporting marijuana.
    • (4) All outside vendors, contractors, and visitors must obtain a visitor identification badge prior to entering a limited access area, and shall be escorted at all times by a dispensary agent authorized to enter the limited access area. The visitor identification badge must be visibly displayed at all times while the visitor is in any limited access area. All visitors must be logged in and out, and that log shall be available for inspection by the Department at all times. All visitor identification badges shall be returned to the RMD upon exit.
  • (D) Security and AlarmSystems.
    • (1) An RMD shall have an adequate security system to prevent and detect diversion, theft, orloss of marijuana or unauthorized intrusion, utilizing commercial grade equipment, which shall, at a minimum, include:
      • (a) A perimeter alarm on all entry and exit points and perimeter windows;
      • (b) A failure notification system that provides an audible, text, or visual notification of any failure in the surveillance system. The failure notification system shall provide an alert to designated employees of the RMD within five minutes after the failure, either by telephone, email, or textmessage;
      • (c) A duress alarm, panic alarm, or holdup alarm connected to local public safety or law enforcement authorities;
      • (d) Video camerasin all areasthat may contain marijuana, at all points of entry and exit, and in any parking lot, which shall be appropriate for the normal lighting conditions of the area undersurveillance. The camerasshall be directed at allsafes, vaults,sales areas, and areas where marijuana is cultivated, harvested, processed, prepared,stored, handled, or dispensed. Cameras shall be angled so as to allow for the capture of clear and certain identification of any person entering or exiting the RMD or area;
      • (e) 24-hour recordings from all video cameras that are available for immediate viewing by the Department upon request and that are retained for at least 90-calendar days. Recordings shall not be destroyed or altered, and shall be retained as long as necessary if the RMD is aware of a pending criminal, civil, or administrative investigation, or legal proceeding for which the recording may contain relevant information;
      • (f) The ability to immediately produce a clear, color, still photo (live or recorded);
      • (g) A date and time stamp embedded on all recordings. The date and time shall be synchronized and set correctly and shall not significantly obscure the picture;
      • (h) The ability to remain operational during a power outage; and 12/1/17 105 CMR – 4160.18 725.110: continued
      • (i) A video recording that allowsforthe exporting ofstill imagesin an industrystandard image format, including .jpg, .bmp, and .gif. Exported video shall have the ability to be archived in a proprietary format that ensures authentication of the video and guarantees that no alteration of the recorded image has taken place. Exported video shall also have the ability to be saved in an industry standard file format that can be played on a standard computer operating system. Allrecordingsshall be erased or destroyed priorto disposal.
    • (2) All security system equipment and recordings shall be maintained in a secure location so as to prevent theft, loss, destruction, andalterations.
    • (3) In addition to the requirementslisted in 105 CMR725.110(D)(1) and (2), the RMD shall have a back-up alarm system, with all capabilities of the primary system, provided by a company supplying commercial grade equipment, which shall not be the same company supplying the primary security system, orshall demonstrate to the Department’ssatisfaction alternate safeguards to ensure continuous operation of a security system.
    • (4) Access to surveillance areasshall be limited to persons that are essential to surveillance operations, law enforcement authorities acting within their lawful jurisdiction, security system service personnel, and the Department. A current list of authorized employees and service personnel that have access to the surveillance room must be available to the Department upon request. If on-site, surveillance rooms shall remain locked and shall not be used for any otherfunction.
    • (5) All security equipment shall be in good working order and shall be inspected and tested at regular intervals, not to exceed 30-calendar days from the previous inspection and test.
  • (E) Registered Marijuana Dispensary Transportation of Marijuana and MIPs.
    • (1) Only a dispensary agent may transport marijuana or MIPs on behalf of an RMD, between RMDs, RMD sites, orto registered qualifying patients or personal caregivers. Only a dispensary agent or laboratory agent may transport marijuana or MIPs between an independent testing laboratory andRMDs.
    • (2) An RMD and independent testing laboratoryshall:
      • (a) Weigh, inventory, and account for on video all marijuana to be transported prior to its leaving the origination location;
      • (b) Re-weigh, re-inventory, and account for on video all marijuana transported, within eight hours after arrival at the destination RMD or independent testing laboratory except in the case of of transport from a RMD for delivery pursuant to 105 CMR 725.110(E)(11);
      • (c) Document and report any unusual discrepancy in weight or inventory to the Department and local law enforcement within 24hours;
      • (d) Complete a shipping manifest in a form and manner determined by the Department, for retention by the origination location, and carry a copy of said manifest with the products being transported; and
      • (e) Securely transmit a copy of the manifest to the destination prior to transport except in the case of home delivery pursuant to 105 CMR 725.110(E)(11).
    • (3) An RMD and independent testing laboratory shall retain all shipping manifests for no less than one year and make them available to the Department upon request.
    • (4) An RMD and independent testing laboratory shall ensure that marijuana is:
      • (a) Transported in a secure, locked storage compartment that is part of the vehicle transporting the marijuana;
      • (b) Not visible from outside the vehicle; and
      • (c) Transported in a vehicle that bears no markingsthat indicate that the vehicle is being used to transport marijuana nor indicates the name of the RMD or independent testing laboratory.
    • (5) Any vehicle transporting marijuana shall travel directly from origination to destination and shall not make any stops except in the case of delivery pursuant to 105 CMR 725.110(E)(11). In case of an emergency stop, a detailed log must be maintained describing the reason for the event, the duration, the location, and any activities of personnel exiting the vehicle.
    • (6) An RMD shall ensure that all delivery times and routes are randomized.
    • (7) An RMD shall staff all transport vehicles with a minimum of two dispensary or laboratory agents. At least one dispensary or laboratory agent shall remain with the vehicle at all times that the vehicle contains marijuana. 12/1/17 105 CMR – 4160.19 725.110: continued
    • (8) Each dispensary or laboratory agent shall have access to a secure form of communication with personnel at the sending site at all times that the vehicle contains marijuana.
    • (9) Each dispensary or laboratory agent shall carry his or her Department-issued registration card at all times when transporting marijuana and shall produce it to the Department’s authorized representative or law enforcement official upon request.
    • (10) An RMD or independent testing laboratory shall report to the Department and local law enforcement any vehicle accidents, diversions, losses, or other reportable incidents pursuant to 105 CMR 725.110(F), that occur during transport, within 24 hours.
    • (11) Delivery of marijuana to the primary residence of a registered qualifying patient or a personal caregiver or to the caregiving institution of a registered qualifying patient shall be conducted in accordance with 105 CMR 725.105(F) and 105 CMR 725.110(E).
    • (12) Each vehicle used for transport of marijuana shall have a global positioning system monitoring device that is monitored by the RMD or independent laboratory during transport.
  • (F) IncidentReporting.
    • (1) An RMD shall immediately notify appropriate law enforcement authorities and the Department within 24 hours after discovering the following:
      • (a) Discrepancies identified during inventory, diversion, theft, loss, and any criminal action involving the RMD or a dispensaryagent;
      • (b) Any suspicious act involving the sale, cultivation, distribution, processing, or production of marijuana by anyperson;
      • (c) Unauthorized destruction ofmarijuana;
      • (d) Any loss or unauthorized alteration of records related to marijuana, registered qualifying patients, personal caregivers, or dispensary agents;
      • (e) An alarm activation or other event that requiresresponse bypublic safetypersonnel;
      • (f) The failure of any security alarm system due to a loss of electrical power or mechanical malfunction that is expected to last longer than eight hours; and
      • (g) Any other breach ofsecurity.
    • (2) An RMD shall, within ten calendar days, provide written notice to the Department of any incident described in 105 CMR 725.110(F)(1), by submitting an incident report in the form andmanner determined bythe Department which detailsthe circumstances ofthe event, any corrective actions taken, and confirmation that the appropriate law enforcement authorities were notified.
    • (3) All documentation related to an incident that is reportable pursuant to 105 CMR 725.110(F)(1) shall be maintained by an RMD for no less than one year and made available to the Department and to law enforcement authorities acting within their lawful jurisdiction upon request.
  • (G) An RMD must, on an annual basis, obtain at its own expense a security system audit by a vendor approved by the Department. A report of such audit must be submitted, in a form and manner determined by the Department, no later than 30-calendar days after the audit is conducted. If the audit identifies concerns related to the RMD’s security system, the RMD must also submit a plan to mitigate those concerns within ten business days of submitting the audit.

The medical marijuana program is operated by the Massachusetts Cannabis Control Commission.

For a full set of rules and regulations, click here.

500.105: General Operational Requirements for Marijuana Establishments

The adult use marijuana program is operated by the Massachusetts Cannabis Control Commission.

For a full set of rules and regulations, click here.

  • (1) Written Operating Procedures. Every Marijuana Establishment shall have and follow a set of detailed written operating procedures. If the Marijuana Establishment has a second location, it shall develop and follow a set of such operating procedures for that facility. Operating procedures shall include, but need not be limited to, the following:
    • (a) Security measures in compliance with 935 CMR 500.110;
    • (b) Employee security policies, including personal safety and crime prevention
      Techniques;
    • (d) Storage of marijuana in compliance with 935 CMR 500.105(11);

500.110: Security Requirements for Marijuana Establishments

  • (1) General Requirements. A Marijuana Establishment shall implement sufficient safety
    measures to deter and prevent unauthorized entrance into areas containing marijuana and theft of marijuana at the Marijuana Establishment. Security measures taken by the licensee to protect the premises, employees, consumers and general public shall include, but not be limited to, the following:

    • (a) Positively identifying individuals seeking access to the premises of the Marijuana Establishment or to whom marijuana products are being transported pursuant to 935 CMR 500.105(13) to limit access solely to individuals 21 years of age or older;
    • (b) Adopting procedures to prevent loitering and ensure that only individuals engaging in activity expressly or by necessary implication permitted by these regulations and its enabling statute are allowed to remain on the premises;
    • (c) Disposing of marijuana in accordance with 935 CMR 500.105(12) in excess of the quantity required for normal, efficient operation as established within 935 CMR 500.105;
    • (d) Securing all entrances to the Marijuana Establishment to prevent unauthorized access;
    • (e) Establishing limited access areas pursuant to 935 CMR 500.110(4), which shall be accessible only to specifically authorized personnel limited to include only the minimum number of employees essential for efficient operation;
    • (f) Storing all finished marijuana products in a secure, locked safe or vault in such a  manner as to prevent diversion, theft and loss;
    • (g) Keeping all safes, vaults, and any other equipment or areas used for the production,cultivation, harvesting, processing or storage of marijuana products securely locked and protected from entry, except for the actual time required to remove or replace marijuana;
    • (h) Keeping all locks and security equipment in good working order;
    • (i) Prohibiting keys, if any, from being left in the locks or stored or placed in a location accessible to persons other than specifically authorized personnel;
    • (j) Prohibiting accessibility of security measures, such as combination numbers,
      passwords or electronic or biometric security systems, to persons other than specifically authorized personnel;
    • (k) Ensuring that the outside perimeter of the Marijuana Establishment is sufficiently lit to facilitate surveillance, where applicable;
    • (l) Ensuring that all marijuana products are kept out of plain sight and are not visible from a public place without the use of binoculars, optical aids or aircraft;
    • (m) Developing emergency policies and procedures for securing all product following any instance of diversion, theft or loss of marijuana, and conduct an assessment to determine whether additional safeguards are necessary;
    • (n) Developing sufficient additional safeguards as required by the Commission for
      Marijuana Establishments that present special security concerns; and
    • (o) Sharing the Marijuana Establishment’s security plan and procedures with law
      enforcement authorities and fire services and periodically updating law enforcement authorities and fire services if the plans or procedures are modified in a material way.
  • (2) Alternate Security Provisions.
    • (a) Notwithstanding the requirements specified in 935 CMR 500.110(1), (5) and (6), if a Marijuana Establishment has provided other, specific safeguards that may be regarded as an adequate substitute for those requirements, such measures may be taken into account by the Commission in evaluating the overall required security measures.
    • (b) The applicant or licensee shall submit a request for an alternative security provision to the Commission on a form as determined and made available by the
      Commission. Upon receipt of the form, the Commission shall submit the request to the chief law enforcement officer in the municipality where the Marijuana Establishment is located or will be located. The Commission shall request that the chief law enforcement officer review the request and alternative security provision requested and, within 30 days,

      • (i) certify the sufficiency of the requested alternate security provision; or
      • (ii) provide the Commission with a statement of reasons why the alternative security provision is not sufficient in the opinion of the chief law enforcement officer. The Commission shall take the chief law enforcement officer’s opinion under consideration in determining whether to grant the alternative security provision, provided that it shall not be determinative. If no response is received from the chief law enforcement officer or a designee within 30 days of submitting the request to the chief law enforcement officer, the Commission shall proceed wi
  • (4) Limited Access Areas.
    • (a) All limited access areas must be identified by the posting of a sign that shall be a minimum of 12” x 12” and which states: “Do Not Enter—Limited Access Area—Access Limited to Authorized Personnel Only” in lettering no smaller than one inch in height.
    • (b) All limited access areas shall be clearly described by the filing of a diagram of the registered premises, in the form and manner determined by the Commission, reflecting entrances and exits, walls, partitions, vegetation, flowering, processing, production, storage, disposal and retail sales areas.
    • (c) Access to limited access areas shall be restricted to employees, agents or volunteers specifically permitted by the Marijuana Establishment, agents of the Commission, state and local law enforcement and emergency personnel.
    • (d) Employees of the Marijuana Establishment shall visibly display an employee
      identification badge issued by the Marijuana Establishment at all times while at the Marijuana Establishment or transporting marijuana.
    • (e) All outside vendors, contractors and visitors shall obtain a visitor identification badge prior to entering a limited access area, and shall be escorted at all times by a marijuana establishment agent authorized to enter the limited access area. The visitor identification badge shall be visibly displayed at all times while the visitor is in any limited access area. All visitors must be logged in and out and that log shall be available for inspection by the Commission at all times. All visitor identification badges shall be returned to the Marijuana Establishment upon exit.
  • (5) Security and Alarm Requirements for Marijuana Establishments Operating Enclosed
    Areas.

    • (a) A Marijuana Establishment located, in whole or in part, in a building, greenhouse or other enclosed area shall have an adequate security system to prevent and detect diversion, theft or loss of marijuana or unauthorized intrusion, utilizing commercial grade equipment which shall, at a minimum, include:
      • 1. A perimeter alarm on all building entry and exit points and perimeter windows, if any;
      • 2. A failure notification system that provides an audible, text or visual notification of any failure in the surveillance system. The failure notification system shall provide an alert to designated employees of the Marijuana Establishment within five minutes after the failure, either by telephone, email or text message;
      • 3. A duress alarm, panic alarm or hold-up alarm connected to local public safety or law enforcement authorities;
      • 4. Video cameras in all areas that may contain marijuana, at all points of entry and exit and in any parking lot which shall be appropriate for the normal lighting conditions of the area under surveillance. The cameras shall be directed at all safes, vaults, sales areas and areas where marijuana is cultivated, harvested, processed, prepared, stored, handled or dispensed. Cameras shall be angled so as to allow for the capture of clear and certain identification of any person entering or exiting the Marijuana Establishment or area;
      • 5. 24-four hour recordings from all video cameras that are available immediate viewing by the Commission upon request and that are retained for at least 90 calendar days. Recordings shall not be destroyed or altered, and shall be retained as long as necessary if the Marijuana Establishment is aware of a pending criminal, civil or administrative investigation or legal proceeding for which the recording may contain
        relevant information;
      • 6. The ability to immediately produce a clear, color still phone whether live or recorded;
      • 7. A date and time stamp embedded in all recordings, which shall be synchronized and set correctly at all times and shall not significantly obscure the picture;
      • 8. The ability to remain operational during a power outage; and
      • 9. A video recording that allows for the exporting of still images in an industry standard image format, including .jpg, .bmp and .gif. Exported video shall have the ability to be archived in a proprietary format that ensures authentication of the video and guarantees that no alternation of the recorded image has taken place. Exported video shall also have the ability to be saved in an industry standard file format that may be played on a standard computer operating system. All recordings shall be erased or destroyed prior to disposal.
    • (b) All security system equipment and recordings shall be maintained in a secure location so as to prevent theft, loss, destruction and alterations.
    • (c) In addition to the requirements listed in 935 CMR 500.110(5)(a) and (b), the Marijuana Establishment shall have a back-up alarm system, with all the capabilities of the primary system, provided by a company supplying commercial grade equipment, which shall not be the same company supplying the primary security system, or shall demonstrate to the Commission’s satisfaction alternate safeguards to ensure continuous operation of a security system.
    • (d) Access to surveillance areas shall be limited to persons that are essential to
      surveillance operations, law enforcement authorities, security system service personnel and the Commission. A current list of authorized employees and service personnel that have access to the surveillance room must be available to the Commission upon request. If the surveillance room is on-site of the Marijuana Establishment, it shall remain locked and shall not be used for any other function.
    • (e) All security equipment shall be in good working order and shall be inspected and tested at regular intervals, not to exceed 30 calendar days from the previous inspection and test.
    • (f) Trees, bushes and other foliage outside of the Marijuana Establishment shall be maintained so as to prevent a person or persons from concealing themselves from sight.
  • (6) Security and Alarm Requirements for Marijuana Establishments Operating an Open
    Cultivation Facility.

    • (a) A Marijuana Establishment that is an open cultivation facility shall implement
      adequate security measures to ensure that outdoor areas are not readily accessible to unauthorized individuals and to prevent and detect diversion, theft or loss of marijuana which shall, at a minimum, include:

      • 1. A perimeter security fence designed to prevent unauthorized entry to the cultivation facility with signs notifying observers that it is a limited access area;
      • 2. Commercial-grade, nonresidential locks;
      • 3. A security alarm system that shall:
        • a. be continuously monitored, whether electronically, by a monitoring company or other means determined to be adequate by the Commission; and
        • b. provide an alert to designated employees of the Marijuana Establishment within five minutes after a notification of an alarm or a system failure, either by
      • 4. Video cameras at all points of entry and exit and in any parking lot which shall be appropriate for the normal lighting conditions of the area under surveillance. Cameras shall be angled so as to allow for the capture of clear and certain identification of any person entering or exiting the Marijuana Establishment or area;
      • 5. 24-hour recordings from all video cameras that are available immediate viewing by the Commission upon request and that are retained for at least 90 calendar days. Recordings shall not be destroyed or altered, and shall be retained as long as necessary if the Marijuana Establishment is aware of a pending criminal, civil or administrative investigation or legal proceeding for which the recording may contain relevant information;
      • 6. The ability to immediately produce a clear, color still phone whether live or recorded;
      • 7. A date and time stamp embedded in all recordings, which shall be synchronized and set correctly at all times and shall not significantly obscure the picture;
      • 8. The ability to remain operational during a power outage;
      • 9. A video recording that allows for the exporting of still images in an industry standard image format, including .jpg, .bmp and .gif. Exported video shall have the ability to be archived in a proprietary format that ensures authentication of the video and guarantees that no alternation of the recorded image has taken place. Exported video shall also have the ability to be saved in an industry standard file format that may be played on a standard computer operating system. All recordings shall be erased or destroyed prior to disposal.
    • (b) All security system equipment and recordings shall be maintained in a secure location so as to prevent theft, loss, destruction and alterations.
    • (c) Access to surveillance areas shall be limited to persons that are essential to surveillance operations, law enforcement authorities, security system service personnel and the Commission. A current list of authorized employees and service personnel that have access to the surveillance room must be available to the Commission upon request. If the surveillance room is on-site of the Marijuana Establishment, it shall remain locked and shall not be used for any other function.
    • (d) All security equipment shall be in good working order and shall be inspected and tested at regular intervals, not to exceed 30 calendar days from the previous inspection and test.
    • (e) Security plans and procedures shared with law enforcement authorities pursuant to 935 CMR 500.110(1)(o) shall include:
      • 1. a description of the location and operation of the security system, including the location of the central control on the premises;
      • 2. a schematic of security zones;
      • 3. the name of the security alarm company and monitoring company, if any;
      • 4. a floor plan or layout of the facility in a manner and scope as required by the municipality.
  • (7) Incident Reporting.
    • (a) A Marijuana Establishment shall notify appropriate law enforcement authorities and the Commission of any breach of security immediately and, in no instance, more than 24 hours following discovery of the breach. Notification shall occur, but not be limited to,
      • 1. discovery of discrepancies identified during inventory;
      • 2. diversion, theft or loss of any marijuana product;
      • 3. any criminal action involving or occurring on or in the Marijuana Establishment Premises;
      • 4. any suspicious act involving the sale, cultivation, distribution, processing or production of marijuana by any person;
      • 5. unauthorized destruction of marijuana;
      • 6. any loss or unauthorized alteration of records related to marijuana;
      • 7. an alarm activation or other event that requires response by public safety personnel or security personnel privately engaged by the Marijuana Establishment;
      • 8. the failure of any security alarm system due to a loss of electrical power or mechanical malfunction that is expected to last more than eight hours; or
      • 9. any other breach of security.
    • (b) A Marijuana Establishment shall, within ten calendar days, provide notice to the Commission of any incident described in 935 CMR 500.110(7)(a) by submitting an incident report in the form and manner determined by the Commission which details the circumstances of the event, any corrective action taken, and confirmation that the appropriate law enforcement authorities were notified.
    • (c) All documentation related to an incident that is reportable pursuant to 935 CMR 500.110(7)(a) shall be maintained by a Marijuana Establishment for not less than one year or the duration of an open investigation, whichever is longer, and made available to the Commission and law enforcement authorities acting upon request.
  • (8) Security Audits. A Marijuana Establishment must, on an annual basis, obtain at its own expense, a security system audit by a vendor approved by the Commission. A report of such audit must be submitted, in a form and manner determined by the Commission, no later than 30 calendar days after the audit is conducted. If the audit identifies concerns related to the establishment’s security system, the Marijuana Establishment must also submit a plan to mitigate those concerns within ten business days of submitting the audit.

The adult use marijuana program is operated by the Massachusetts Cannabis Control Commission.

For a full set of rules and regulations, click here.

*Please note that this section encompasses only the compliance requirements relevant to business security. Many parts of the rules and regulations have been removed to focus exclusively on the security compliance aspects. To view the full set of rules and regulations for Massachusetts adult use cannabis, click here! For medical cannabis rules and regulations, click here!

Why Choose Helix Cannabis Security?

Focused on Safety, Security, and Compliance

 

Our top priority is making sure your staff, your business, and your investment, are safe and secure. We provide cost-effective solutions to satisfy every    compliance requirement in your state as well as end-to-end expert security consultation, and of course, development and implementation of services.

Helix Dispensary Security Services

Compliance

Maintain full compliance with your state and local cannabis business security requirements through Helix’s full-service security firm. Our team of cannabis security experts have implemented compliance-centric security frameworks in dozens of legal cannabis markets for grow warehouses, manufacturing facilities, laboratories and dispensaries.

digital-security

360 Security Systems

From cameras and remote monitoring services to alarm systems and rapid response, Helix Digital Security Systems can address all of your security needs and beyond. Cover every square inch of your facility with comprehensive security camera systems, ensuring 24/7 visibility, DVR capabilities, and more.

physical-security

Security Training

Your staff isn’t expected to stop criminals in action, but ensuring your staff is trained on security best practices can provide essential steps in de-escalation, situational control, and threat identification to allow team members to resolve a situation before it arises.

Want to learn more about Helix Security’s comprehensive services and expertise?

Remote, Eyes-On Monitoring

monitoring

The most-cost effective approach to 24/7 active monitoring of your legal cannabis business.

Remote monitoring provides live, eyes-on guards monitoring your business security camera systems 24 hours a day, 7 days a week. Our guards will activate timely response times and ensure your business is secure, especially when you can’t be there.

At Helix Cannabis Security, we consider it a cannabis security best practice to have guards on-site at your facility at all times that people are present. If people are not present on the premise, there’s no need to risk the safety of a security guard. Remote monitoring provides the same, high-level attention and security, without risking a guards life, or incurring unnecessary costs.

Click to learn more.

Receive Our Pricing Guide