OREGON CANNABIS BUSINESS SECURITY
KNOWLEDGE CENTER

Created to provide helpful information about the Oregon cannabis industry

OREGON CANNABIS LICENSE INFO

Please note; while we aim to keep this pages fully up to date with the latest information, cannabis laws are always changing. We encourage you to verify these rules and regulations in the official legal text, which we’ve linked throughout the page for your convenience.

For compliance requirements related to cannabis seed to sale tracking and reporting for growers, manufacturers, and dispensaries in Oregon click here!

 

Click here for program webpage

Oregon Cannabis Business Security Requirements

*Please note that this section encompasses only the compliance requirements relevant to business security. Many parts of the rules and regulation shave been removed to focus exclusively on the security compliance aspects. To view the full set of rules and regulations for Oregon, click here!

Oregon Business Security Requirements for Cannabis Licensees

You can view the program webpage here.

Recreational

845-025-1175
Changing, Altering, or Modifying Licensed Premises

  • (5) If the Commission approves the change, the Commission may require a site inspection of the changed area and a modification of the licensee’s security plan prior to the licensee exercising any license privileges.
  • (6) For purposes of this rule a material or substantial change requiring approval includes, but is not limited to:
    • (c) Any physical change that would require the installation of additional video surveillance cameras or a change in the security system;

845-025-1400
Security Plans

  • (1) An applicant must have a security plan. The Commission will not conduct any prelicensing inspection under OAR 845-025-1090(3) until it has approved an applicant’s security plan.
  • (2) The Commission must notify an applicant in writing whether the security plan has been approved. If the security plan is approved with a waiver granted under OAR 845- 025-1405, the notice must specifically describe the alternate safeguards that are required and, if time limited, must state the time period the security plan is in effect.
  • (3) A licensee must notify the Commission of any proposed changes to a security plan and must have approval prior to implementing any change. The Commission will notify a licensee whether the change is approved in the same manner described in subsection (2) of this rule.
  • (4) The Commission may withdraw approval of the security plan at any time if there have been one or more documented instances of theft or loss of marijuana items on the licensed premises within the past year. If the Commission withdraws its approval of the security plan, the licensee will be given a reasonable period of time to modify the plan and if the security plan was approved with a waiver of any security requirements, will be given a reasonable period of time to come into compliance with the security requirements that were waived.
  • (5) Failure to comply with the terms of an approved security plan is a Category III violation.

845-025-1405
Security Waivers

  • (1) An applicant or licensee may, in writing, request that the Commission waive one or more of the security requirements described in OAR 845-025-1400 to 845-025-1470 by submitting a security waiver request for Commission approval. The waiver request must include:
    • (a) The specific rules and subsections of a rule that is requested to be waived;
    • (b) The reason for the waiver;
    • (c) A description of an alternative safeguard the licensee can put in place in lieu of the requirement that is the subject of the waiver; and
    • (d) An explanation of how and why the alternative safeguard accomplishes the goals of the security rules, specifically public safety, prevention of diversion, accountability, and prohibiting access to minors.
  • (2) The Commission may, in its discretion and on a case by case basis, approve the security waiver if it finds that the alternative safeguard that is proposed meets the goals of the security rules.
  • (3) Approved security waivers expire at the same time as the underlying license.

845-025-1410
Security Requirements

  • (1) A licensee is responsible for the security of all marijuana items on the licensed premises or in transit, including providing adequate safeguards against theft or diversion of marijuana items and records that are required to be kept.
  • (2) The licensee must ensure that commercial grade, non-residential door locks are installed on every external door, and gate if applicable, of a licensed premises where marijuana items are present.
  • (3) During all hours when the licensee is not operating a licensee must ensure that:
    • (a) All points of ingress and egress from a licensed premises are securely locked and any keys or key codes to the enclosed area remain in the possession of the licensee, licensee representative, or authorized personnel; Effective May 1, 2017 Page 28 of 94
    • (b) All marijuana items on a licensed retailer’s premises are kept in a safe or vault as those terms are defined in OAR 845-025-1015; and
    • (c) All usable marijuana, cut and drying mature marijuana plants, cannabinoid concentrates, extracts or products on the licensed premises of a licensee other than a retailer are kept in a locked, enclosed area within the licensed premises that is secured with at a minimum, a properly installed steel door with a steel frame, and a commercial grade, non-residential door lock.
  • (4) A licensee must:
    • (a) Have an electronic back-up system for all electronic records; and
    • (b) Keep all video recordings and archived required records not stored electronically in a locked storage area. Current records may be kept in a locked cupboard or desk outside the locked storage area during hours when the licensed business is open.

845-025-1420
Alarm System

  • (1) A licensed premises must have a fully operational security alarm system, activated at all times when the licensed premises is closed for business.
  • (2) The security alarm system for the licensed premises must:
    • (a) Be able to detect unauthorized entry onto the licensed premises and unauthorized activity within any limited access area where mature marijuana plants, usable marijuana, cannabinoid concentrates, extracts or products are present;
    • (b) Be programmed to notify a the licensee, licensee representative or authorized personnel in the event of an unauthorized entry; and
    • (c) Have a mechanism to ensure that the licensee, licensee’s employees and authorized representatives can immediately notify law enforcement or a security company of any unauthorized entry. This subsection may be satisfied in one of the following ways:
      • (A) Having at least two operational “panic buttons” located inside the licensed premises that are linked with the alarm system that immediately notifies a security company or law enforcement; or
      • (B) Having operational “panic buttons” physically carried by all licensee representatives present on the licensed premises that are linked with the alarm system that immediately notifies a security company or law enforcement; or
      • (C) Having a landline telephone present in all limited access areas that is capable of immediately calling a security company or law enforcement.
  • (3) A licensee that has at least one authorized representative physically present on the licensed premises at all times when it is closed for business is not required to comply with section (1) and sections (2)(a) and (b) of this rule.
  • (4) Upon request, licensees shall make all information related to security alarm systems, monitoring and alarm activity available to the Commission.

845-025-1430
Video Surveillance Equipment

  • (1) A licensed premises must have a fully operational video surveillance recording system.
  • (2) Video surveillance equipment must, at a minimum:
    • (a) Consist of:
      • (A) Digital or network video recorders;
      • (B) Cameras capable of meeting the requirements of OAR 845-025-1450 and this rule;
      • (C) Video monitors;
      • (D) Digital archiving devices;
      • (E) A minimum of one monitor on premise capable of viewing video; and
      • (F) A printer capable of producing still photos.
    • (b) Have the capability of producing a still photograph from any camera image;
    • (c) Be equipped with a failure notification system that provides, within one hour, notification to the licensee or an authorized representative of any prolonged surveillance interruption or failure; and
    • (d) Have sufficient battery backup to support a minimum of one hour of recording time in the event of a power outage.
  • (3) Except for mounted cameras, all video surveillance equipment and recordings must be stored in a locked secure area that is accessible only to the licensee, licensee representatives and authorized personnel, Commission employees and contractors, and other state or local government officials that have jurisdiction over some aspect of the licensed premises or licensee.

845-025-1440
Required Camera Coverage and Camera Placement

  • (1) A licensed premises must have camera coverage, as applicable, for:
    • (a) All points of ingress and egress to and from the licensed premises;
    • (b) All limited access areas as that term is defined in OAR 845-025-1015;
    • (c) All consumer sales areas;
    • (d) All points of entry to or exit from limited access areas;
    • (e) The surveillance room or surveillance area as defined in OAR 845-025-1460(1)(a) and (b); and
    • (f) Any other area that the Commission believes presents a public safety risk based on the overall operation and characteristics of the licensed premises.
  • (2) A licensee must ensure that cameras are placed so that they capture clear and certain images of any individual and activity occurring:
    • (a) Within 15 feet both inside and outside of all points of ingress and egress to and from the licensed premises; and
    • (b) In all locations within limited access, and consumer sales areas on the licensed premises.

845-025-1450
Video Recording Requirements for Licensed Facilities

  • (1) A licensee must have cameras that continuously record, 24 hours a day:
    • (a) In all areas where mature marijuana plants, immature marijuana plants, usable marijuana, cannabinoid concentrates, extracts or products may be present on the licensed premises; and
    • (b) All points of ingress and egress to and from areas where mature marijuana plants, immature marijuana plants, usable marijuana, cannabinoid concentrates, extracts or products are present.
  • (2) A licensee must:
    • (a) In limited access and consumer sales areas, use cameras that record at a minimum resolution of 1280 x 720 px and record at 10 fps (frames per second);
    • (b) In exterior perimeter and areas on the licensed premises that are not limited access areas, use cameras that record at a minimum resolution of 1280 x 720 px and record at least 5 fps, except where coverage overlaps any limited access areas such as entrances or exits and in those overlap areas cameras must record at 10 fps;
    • (c) Use cameras that are capable of recording in all lighting conditions;
    • (d) Keep surveillance recordings, except for off-site backup recordings described in (2)(l) of this rule, for a minimum of:
      • (A) 90 calendar days for licenses issued or renewed after August 31, 2016; and
      • (B) 30 calendar days for licenses issued prior to August 31, 2016.
    • (e) Keep off-site backup recordings described in (2)(l) of this rule for a minimum of 30 days;
    • (f) Maintain surveillance recordings in a format approved by the Commission that can be easily accessed for viewing and easily reproduced;
    • (g) Upon request of the Commission, keep surveillance recordings for periods exceeding the retention period specified in section (2)(d) of this rule;
    • (h) Have the date and time embedded on all surveillance recordings without significantly obscuring the picture;
    • (i) Archive video recordings in a format that ensures authentication of the recording as a legitimately-captured video and guarantees that no alterations of the recorded image has taken place;
    • (j) Make video surveillance records and recordings available immediately upon request to the Commission in a format specified by the Commission for the purpose of ensuring compliance with ORS Chapter 475B and these rules;
    • (k) Immediately notify the Commission of any equipment failure or system outage lasting 30 minutes or more; and
    • (l) Back up the video surveillance recordings off-site and in real time for the surveillance room or surveillance area.
  • (3) Notwithstanding the requirements in section (1) of this rule a licensee may stop recording in areas where marijuana items are not present due to seasonal closures or prolonged periods of inactivity. The licensee must provide notice to OLCC when recording is stopped and must keep a log of all times that recording is stopped due to marijuana items not being present. The log and notice must identify which cameras were not recording, the date and time recording stops, the date and time recording resumes or is scheduled to resume, and a description of the reason why the recording stopped and started.
  • (4) Failure to comply with subsections (2)(d)(e), (f), (h) or (i) of this rule is a Category I violation and may result in license revocation.

845-025-1460
Location and Maintenance of Surveillance Equipment

  • (1) A licensee must:
    • (a) Have the surveillance room or surveillance area in a limited access area; and
    • (b) Have the surveillance recording equipment housed in a designated, locked, and secured room or other enclosure with access limited to:
      • (A) The licensee, licensee representatives, and authorized personnel
      • (B) Employees of the Commission;
      • (C) State or local law enforcement agencies for a purpose authorized under ORS Chapter 475B, these rules, or for any other state or local law enforcement purpose; and
      • (D) Service personnel or contractors.
  • (2) Off-site storage must be secure and the recordings must be kept in a format approved by the Commission that can be easily accessed for viewing and easily reproduced.
  • (3) A licensee must keep a current list of all authorized employees and service personnel who have access to the surveillance system and room on the licensed premises.
  • (4) Licensees must keep a surveillance equipment maintenance activity log on the licensed premises to record all service activity including the identity of any individual performing the service, the service date and time and the reason for service to the surveillance system.
  • (5) Off-site monitoring of the licensed premises by a licensee or an independent third party is authorized as long as standards exercised at the remote location meet or exceed all standards for on-site monitoring

845-025-1470
Producer Security Requirements

  • (1) A producer must effectively prevent public access to all areas of the licensed premises used in the production of marijuana. In addition to the security requirements in OAR 845-025-1400 to 845-025-1460, a producer’s approved security plan as described in OAR 845-025-1400 must include a method to prevent public access to all areas of the licensed premises used in the production of marijuana.
  • (2) If a producer chooses to dispose of marijuana items by any method of composting, as described in OAR 845-025-7750, the producer must prevent public access to the composting area.

845-025-1600
State and Local Safety Inspections

  • (1) All marijuana licensees may be subject to inspection of licensed premises by state or local government officials to determine compliance with state or local health and safety laws.
  • (2) A licensee must contact any utility provider to ensure that the licensee complies with any local ordinance or utility requirements such as water use, discharge into the sewer system, or electrical use.

Medical

333-008-2080
General Requirements for Medical Marijuana Processing Sites and Dispensaries: Security Requirements
In order to be registered and remain registered a registrant must:

 

  • (1) Have an installed and fully operational security alarm system, installed by an alarm installation company, activated at all times when the premises is closed for business on all:
    • (a) Entry or exit points to and from the premises; and
    • (b) Perimeter windows, if applicable.
  • (2) Have a security alarm system that:
    • (a) Detects movement inside the premises;
    • (b) Is programmed to notify a security company that will notify a registrant representative or his or her designee in the event of a breach; and
    • (c) Has at least two operational “panic buttons” located inside the premises that are linked with the alarm system that notifies a security company.
  • (3) Have commercial grade, non-residential door locks installed on every external door of a registered premises where marijuana items are present.
  • (4) During all hours when the registrant is not operating:
    • (a) Securely lock all entrances to and exits from the registered premises and ensure any keys or key codes to the enclosed area remain in the possession of the registrant or registrant representative;
    • (b) Have a safe or vault as those terms are defined in OAR 333-008-0010 for the purpose of securing all marijuana items as required by these rules, except that a registered processing site may keep all usable marijuana, cut and drying mature marijuana plants, cannabinoid concentrates, extracts or products on the premises in a secure area.
  • (5) Have a password protected network infrastructure.
  • (6) Have an electronic back-up system for all electronic records.
  • (7) Keep all video recordings and archived required records not stored electronically in a locked storage area. Current records may be kept in a locked cupboard or desk outside the locked storage area during hours when the registered business is open.
  • (8) Notwithstanding OAR 333-008-2090 to 333-008-2120 a registered processing site and registered dispensary under common ownership that share a premises are not required to install redundant security systems if the premises are directly accessible to each other by an adjoining door. If a shared security system is utilized:
    • (a) Any point of common ingress and egress between the premises shall be treated as an external door, for purposes of this rule, and must have security coverage in accordance with sections (1) and (3) of this rule; and
    • (b) The registrants must maintain the system and provide access to the Authority in accordance with these rules.

 

333-008-2090
General Requirements for Medical Marijuana Processing Sites and Dispensaries: Video Surveillance Equipment
In order to be registered and remain registered a registrant must:

 

  • (1) Have an installed and fully operational video surveillance recording system with video surveillance equipment that at a minimum:
    • (a) Consists of:
      • (A) Digital or network video recorders;
      • (B) Cameras capable of meeting the requirements of OAR 333-008-2110 and this rule;
      • (C) Video monitors;
      • (D) Digital archiving devices;
      • (E) A minimum of one monitor on premises capable of viewing video; and
      • (F) A color printer capable of producing still photos.
    • (b) Is equipped with a failure notification system that immediately notifies a registrant representative of any surveillance interruption or failure that is longer than five minutes; and
    • (c) Has sufficient battery backup to support a minimum of one hour of recording time in the event of a power outage.
  • (2) Have a video surveillance system capable of recording all pre-determined surveillance areas in any lighting conditions.
  • (3) Have, in limited access and point of sale areas, cameras that have minimum resolution of 1280 x 720 pixels (px) and record at 10 fps (frames per second).
  • (4) Have, in exterior perimeter and non-limited access areas (except for restrooms) cameras that have a minimum resolution of 1280 x 720 px and record at least 5 fps, except where coverage overlaps any limited access areas such as entrances or exits and in those overlap areas cameras must record at 10 fps.

 

 

333-008-2100

General Requirements for Medical Marijuana Processing Sites and Dispensaries: Required Camera Coverage and Camera Placement
In order to be registered and remain registered a registrant must:

 

  • (1) Have security camera coverage for:
    • (a) All secure and limited access areas;
    • (b) All areas where marijuana items will be and are transferred to or from a registered premises;
    • (c) All areas where the general public is permitted (except for restrooms);
    • (d) All points of entry to and exit from limited access areas and areas where marijuana items will be and are transferred to or from a registered premises; and
    • (e) All points of entry to and exit from the premises.
  • (2) Have cameras that are positioned so that they capture clear and certain images of any individual and activity occurring:
    • (a) Within 15 feet both inside and outside of all points of entry to and exit from the premises;
    • (b) Anywhere within a secure or limited access area on the premises; and
    • (c) Anywhere within an area where marijuana items will be and are transferred to or from a registered premises.

 

333-008-2110

General Requirements for Medical Marijuana Processing Sites and Dispensaries: Video Recording Requirements

 

  • (1) In order to be registered and remain registered a registrant must:
    • (a) Have cameras that are installed, operational, and continuously record 24 hours a day in all areas where marijuana items will be or are on the premises, including areas where the general public is permitted (except restrooms).
    • (b) Use cameras that record at a minimum resolution of 1280 x 720 px;
    • (c) Have an installed and operational surveillance system that:
      • (A) Can produce a color still photograph from any camera image; and
      • (B) Embeds the date and time on all surveillance recordings without significantly obscuring the picture;
  • (2) A registrant must:
    • (a) Keep all surveillance recordings a minimum of 45 calendar days and in a format that can be easily accessed for viewing;
    • (b) Archive video recordings in a format that ensures authentication of the recording as a legitimately-captured video and guarantees that no alterations of the recorded image has taken place;
    • (c) Provide video surveillance records and recordings immediately upon request to the Authority for the purpose of ensuring compliance with ORS 475B.858 and these rules;
    • (d) Keep surveillance recordings for periods exceeding 45 calendar days upon request of the Authority; and
    • (e) Immediately notify the Authority of any equipment failure or system outage lasting 30 minutes or more.

 

333-008-2120

General Requirements for Medical Marijuana Processing Sites and Dispensaries Location and Maintenance of Surveillance Equipment

 

  • (1) A registrant must:
    • (a) Have the surveillance recording equipment housed in a designated secure area or other locked enclosure with access limited to:
      • (A) The registrant and authorized personnel of the registrant;
      • (B) Employees of the Authority;
      • (C) State or local law enforcement agencies for any other state or local law enforcement purpose; and
      • (D) Service personnel or contractors.
    • (b) Keep a current list of all authorized personnel and service personnel who have access to the surveillance system and room on the registered premises.
    • (c) Keep a surveillance equipment maintenance activity log on the registered premises to record all service activity including the identity of any individual performing the service, the service date and time and the reason for service to the surveillance system.
  • (2) A registrant may store video recordings offsite as long as a PRD or PRP can demonstrate that the recordings are secure and protected, that the recordings are kept for a minimum of 45 calendar days as required in OAR 333-008-2110 and that the Authority can access the video recordings upon request.

 

333-008-2140

General Requirements for Medical Marijuana Processing Sites and Dispensaries: State and Local Safety Inspections

 

  • (1) A registered premises may be subject to inspection by state or local government officials to determine compliance with state or local health and safety laws.
  • (2) A person responsible for a registered marijuana processing site must contact any utility provider to ensure that the registrant complies with any local ordinance or utility requirements such as water use, discharge into the sewer system, or electrical use.
  • (3) The Authority may require a registered processing site or dispensary to obtain a certificate of occupancy issued by a local building official or the Department of Consumer and Business Services Building Codes Division if the Authority has concerns about the public health and safety of the registered premises.

 

 

You can view the program webpage here.

Why Choose Helix Cannabis Security?

Focused on Safety, Security, and Compliance

 

Our top priority is making sure your staff, your business, and your investment, are safe and secure. We provide cost-effective solutions to satisfy every    compliance requirement in your state as well as end-to-end expert security consultation, and of course, development and implementation of services.

Helix Dispensary Security Services

Compliance

Maintain full compliance with your state and local cannabis business security requirements through Helix’s full-service security firm. Our team of cannabis security experts have implemented compliance-centric security frameworks in dozens of legal cannabis markets for grow warehouses, manufacturing facilities, laboratories and dispensaries.

digital-security

360 Security Systems

From cameras and remote monitoring services to alarm systems and rapid response, Helix Digital Security Systems can address all of your security needs and beyond. Cover every square inch of your facility with comprehensive security camera systems, ensuring 24/7 visibility, DVR capabilities, and more.

physical-security

Security Training

Your staff isn’t expected to stop criminals in action, but ensuring your staff is trained on security best practices can provide essential steps in de-escalation, situational control, and threat identification to allow team members to resolve a situation before it arises.

Want to learn more about Helix Security’s comprehensive services and expertise?

Remote, Eyes-On Monitoring

monitoring

The most-cost effective approach to 24/7 active monitoring of your legal cannabis business.

Remote monitoring provides live, eyes-on guards monitoring your business security camera systems 24 hours a day, 7 days a week. Our guards will activate timely response times and ensure your business is secure, especially when you can’t be there.

At Helix Cannabis Security, we consider it a cannabis security best practice to have guards on-site at your facility at all times that people are present. If people are not present on the premise, there’s no need to risk the safety of a security guard. Remote monitoring provides the same, high-level attention and security, without risking a guards life, or incurring unnecessary costs.

Click to learn more.

Receive Our Pricing Guide