Newly licensed cultivators, processors, safety compliance facilities, and dispensaries will have to comply with robust security and surveillance requirements for their business.
At the outset, all licensees must establish and maintain standard operating procedures (SOPs) for security measures tailored to their business category. These SOPs must be readily available to the Office of Medical Cannabis (OMC) upon request. Businesses are required to implement security measures designed to deter and prevent theft and unauthorized access into areas containing medicinal cannabis. Kentucky law mandates the use of commercial-grade, professionally monitored security systems, including surveillance cameras, and requires specific policies for accessing security recordings and equipment.
OMC is authorized to conduct both announced or unannounced inspections or investigations of businesses to ensure compliance with security regulations.
Security Systems
Licensees must implement security systems that provide comprehensive coverage for their facilities. All entrances, exits, rooms with exterior access, storage areas, including medical cannabis and safes, and the facility perimeter must be monitored. In addition to standard smoke and fire alarms, alarm systems must include both audible panic and silent alarm signals.
In the event of a security system failure, security personnel must be able to be alerted within five minutes via phone, email, or text. Security systems must also include an auxiliary power backup capable of running for a minimum of 24 hours. Any security alarm activation or event requiring law enforcement or security personnel response must be promptly reported.
Surveillance Cameras
Surveillance systems must operate 24/7 and record all activity in high-resolution images with sufficient detail to capture facial features. Camera placement must cover key areas, including but not limited to:
- All limited-access areas
- Rooms housing security and surveillance equipment
- Entrances and exits (both indoor and outdoor views)
- Storage rooms
- All rooms with exterior windows and walls
- A 20-foot perimeter beyond the facility’s exterior
Cameras must be able to operate under normal lighting conditions of each area and be capable of immediately producing clear, color digital still images with date and time stamps. Cameras must also have auxiliary power backup for a minimum of 24 hours.
Access to Security Recordings and Equipment
Licensees must be able to easily export video recordings, still photos, and screenshots of unaltered surveillance footage upon request. Surveillance footage must be accessible for a minimum of 60 days and have a secure electronic back-up system.
To prevent theft or tampering, surveillance recordings and images must be stored in a limited access area (e.g., locked cabinet, closet, or secure space). Only essential personnel, law enforcement, system service vendors, the OMC, and others with prior written approval from the OMC may access the recordings.
All rooms containing security and surveillance equipment must remain locked at all times and cannot be used for any other purpose. Additionally, a list of authorized employees, service personnel, and contractors must be placed near access doors to surveillance equipment areas and made available to the OMC upon request.
Training and Personnel
Employees need to be well-versed in security protocols and standard operating procedures. Responsible personnel must oversee the implementation of all mandated security measures. Licensees are responsible for ensuring that security and surveillance systems remain fully operational at all times and that access control measures are enforced during both working and non-working hours.
Strict adherence to Kentucky’s security requirements is essential for maintaining compliance and protecting business assets. If your business needs guidance on security requirements or assistance in developing compliant standard operating procedures, our team is here to help.
