Cannabis operations in California face unique security challenges due to their high-value inventory, cash-intensive nature, and stringent regulatory oversight. The California Department of Cannabis Control (DCC) enforces comprehensive security requirements that affect every aspect of operations, from facility design to daily protocols. Non-compliance not only risks substantial penalties ($5,000-$30,000 per violation) but can result in license suspension or revocation, effectively ending your cannabis business.
This guide covers the complete security requirements your cannabis business must implement to maintain DCC compliance in 2025, including recent regulatory updates and enforcement priorities for legal cannabis operations in California.
Have a security project?
California’s Cannabis Regulatory Framework
The Department of Cannabis Control (DCC)
The DCC serves as California’s unified regulatory authority for all commercial cannabis activities. Formed through the consolidation of previous cannabis regulatory agencies, the DCC now oversees licensing, compliance enforcement, and regulatory development for cultivation operations, manufacturing facilities, testing laboratories, distributors, retailers, and delivery services across multiple locations in the cannabis industry.
Local vs. State Requirements
It’s crucial to understand that cannabis businesses must comply with both:
- State regulations: The baseline requirements established by the DCC
- Local ordinances: Additional requirements imposed by your specific city or county
Local jurisdictions can implement security requirements that exceed state standards but cannot reduce them. Before designing your security system, always consult both DCC regulations and your local cannabis ordinances to ensure your licensed premises operate legally.
Video Surveillance Requirements
Camera System Specifications
The DCC mandates comprehensive video surveillance systems with specific technical requirements:
- Resolution: Minimum 1280 x 720 pixels (exceeding standard HD)
- Frame rate: Minimum 15 frames per second
- Coverage: Continuous 24/7 recording (motion-activated systems prohibited)
- Lighting: Sufficient illumination for clear identification in all conditions
- Weatherproofing: Outdoor cameras must be rated for environmental exposure
- Positioning: Permanently mounted in fixed locations that prevent tampering while maximizing coverage
Required Camera Coverage Areas
Security cameras must provide clear, unobstructed views of:
- All limited access areas where cannabis is present
- All points of entry/exit to the premises (interior and exterior)
- All point-of-sale locations showing customer faces and transactions
- Loading/unloading areas for deliveries and shipments
- Security rooms containing surveillance equipment
- All cannabis storage areas, including safes and vaults
- Cultivation areas showing the entire canopy
- Weighing/packaging stations where products are prepared
- Destruction of areas where cannabis waste is processed
- Perimeter boundaries of the licensed premises
Video Storage and Retention
Current DCC regulations require:
- Minimum 90-day retention of all surveillance footage
- Secure storage in a locked, limited-access room
- Off-site backup options (cloud storage allowed if meeting security standards)
- Immediate access capability for DCC inspectors
- Digital watermarking or authentication methods to prevent tampering
- Automatic failure notification systems that alert to camera malfunctions
- Backup power systems capable of maintaining recording during outages
⚠️ Note: Some local jurisdictions, such as Lynwood, CA, specifically require surveillance systems to include a minimum of four hours of backup power to maintain recording during power interruptions. Requirements can vary by city or county, so it’s important to confirm your local cannabis security ordinances in addition to DCC rules when designing your system.
Recommendation: While DCC rules do not specify an exact backup duration, maintaining at least 4–8 hours of emergency power is recommended to ensure uninterrupted compliance and protect your operation from data loss during outages.
Remote Access Requirements
Your digital video surveillance system must provide:
- Owner/management remote access to view live and recorded footage
- DCC-accessible feeds during inspections
- Law enforcement access is required when a warrant or emergency
- Secure transmission protocols with encryption for remote viewing
Industry best practice recommendation: While the DCC requires 90-day storage, we recommend 180-day retention to ensure full documentation for any regulatory investigations or security incidents. This helps cannabis businesses maintain compliance with changing regulations.
Alarm System Requirements
Intrusion Detection
Cannabis facilities must implement comprehensive alarm systems covering:
- Perimeter security: Door/window contacts on all possible entry points
- Motion detection: Coverage of all interior spaces when premises are closed
- Glass break detection: For all windows and glass partitions
- Sensor zones: Separate alarm zones for different areas of operation
- Silent alarm capability: For duress situations during operating hours
- Immediate notification: Direct alerts to security personnel and management
Alarm Response Protocols
Your security plan must document:
- Alarm company monitoring with 24/7 coverage
- Verification procedures to confirm actual intrusions
- Response time standards for security personnel and law enforcement
- Staff notification hierarchy for different types of alarms
- Documentation requirements for all alarm events
- False alarm reduction measures and protocols
Panic Button Systems
Strategic placement of panic buttons is required:
- Sales areas: Accessible to staff but not visible to customers
- Reception areas: For front-desk personnel
- Limited access rooms: Where high-value products are stored
- Loading areas: Where deliveries and shipments occur
- Office spaces: For management access during emergencies
Fire and Environmental Monitoring
Beyond intrusion detection, cannabis facilities must implement:
- Fire detection systems with smoke and heat sensors
- Water detection for cultivation areas to prevent flooding
- Temperature monitoring for storage areas to prevent product degradation
- HVAC failure alerts for cultivation environments
Access Control Systems
Limited Access Areas
The DCC requires strict control over restricted areas containing cannabis:
- Clear designation of limited access zones with signage
- Electronic access control for all limited-access doors
- Visitor escort requirements for non-employees
- Documented access levels for different employee roles
- Revocation protocols for terminated employees
Electronic Access Systems
Modern access control systems are required for:
- Entry verification: Key cards, PIN pads, or biometric authentication
- Access scheduling: Time-restricted permissions based on work shifts
- Detailed logging: Records of all entry/exit activity
- Integration with video surveillance: Synchronized access events with camera recordings
- Anti-passback features: Prevention of credential sharing
- Tailgating prevention: Door sensors or mantrap configurations
Record Keeping Requirements
Access control records must include:
- Employee identification for each access event
- Timestamp data for entry and exit times
- Area accessed within the facility
- Duration of access for limited areas
- Exception reports for unusual access patterns
- Minimum 12-month retention of all access logs
Physical Security Measures
Building Security
Cannabis facilities must incorporate:
- Commercial-grade doors and frames at all entry points
- Security-rated locks meeting UL 437 standards
- Reinforced walls for rooms containing cannabis products
- Ballistic glass for public-facing service windows (retail)
- Secured HVAC openings to prevent unauthorized entry
- Rooftop access controls for multi-story buildings
Product Storage Requirements
Cannabis goods require:
- Commercial safes/vaults when business is closed (TL-15 rating minimum)
- Fixed anchoring of safes to prevent removal
- Inventory segregation between medical cannabis and adult-use products
- Climate control for product preservation
- Automatic locking on storage room doors with solid door construction
Cash Handling Security
For cash management:
- Drop safes for point-of-sale areas
- Cash counting rooms with restricted access
- Duress codes for safe access under threat
- Cash limits for registers with regular transfers to secure storage
- Cash transport protocols for banking deposits
Have a security project?
Security Personnel Requirements
Guard Qualifications
Security guards must:
- Hold valid Bureau of Security and Investigative Services (BSIS) licenses
- Be at least 21 years old
- Pass comprehensive background checks
- Complete cannabis-specific security training
- Maintain CPR and first aid certification
- Understand cannabis regulations and compliance requirements
Staffing Requirements
DCC regulations specify:
- Minimum staffing levels based on facility size and type
- 24/7 coverage for certain license types
- Dedicated monitoring personnel for large operations
- Posted guard locations at entry points and high-security areas
- Patrol schedules for perimeter and interior checks
Training Standards
Security staff must receive training in:
- Conflict de-escalation techniques
- Emergency response protocols
- Cannabis compliance requirements
- Cash handling procedures
- Product theft prevention
- Customer management
- Regulatory inspection protocols
Transportation Security
Vehicle Requirements
Cannabis transport vehicles must have:
- GPS tracking systems with real-time monitoring
- Secure, locked storage compartments
- No cannabis identification on vehicle exterior
- Communication systems for driver contact
- Dash cameras for incident documentation
- Vehicle alarm systems with immobilization features
Delivery Protocols
Compliant transportation requires:
- Detailed manifests for all products in transit
- Planned routes with predetermined stops only
- Two-person teams for high-value shipments
- Secure loading/unloading areas at the origin and destination
- Chain of custody documentation with signatures
- Real-time inventory tracking through METRC
Security Plan Documentation
Required Components
Your security plan must include:
- Site diagrams showing camera locations, access points, and security zones
- Equipment specifications for all security systems
- Standard operating procedures for daily security operations
- Staff responsibilities and security roles
- Emergency response protocols for various scenarios
- Maintenance schedules for all security equipment
- Contact information for security vendors and monitoring services
Plan Updates and Maintenance
Security plans require:
- Annual review and updating
- Documentation of changes to security systems
- Notification to DCC of significant alterations
- Testing procedures for all security components
- Drill schedules for emergency scenarios
- Continuous improvement processes based on security incidents
Compliance Enforcement and Inspections
DCC Inspection Process
During regulatory inspections, DCC officials will:
- Review security camera footage from specific date ranges
- Test alarm systems for proper functioning
- Verify access control operations and logs
- Examine security personnel’s credentials
- Check the security plan documentation
- Confirm proper signage for limited access areas
- Test panic button functionality
- Verify proper storage of cannabis products
Common Violations and Penalties
Security-related violations frequently include:
- Violation Typical Penalty
- Inoperable cameras: $5,000-$15,000 fine
- Insufficient camera coverage: $5,000-$10,000 fine
- Inadequate video retention: $2,500-$10,000 fine
- Improper access controls: $5,000-$15,000 fine
- Unlicensed security personnel: $10,000 fine + possible suspension
- No alarm system:m $10,000-$20,000 fine + possible suspension
- Improper product storage: $5,000-$15,000 fine
- Security plan deficiencies:s $2,500-$5,000 fine
Case Study: Recent Enforcement Actions
In February 2025, the DCC inspected the “Off the Charts” dispensary in San Francisco, identifying several security compliance issues:
- Certain promotional samples lacked proper batch tracking stickers
- Employee identification badges were outdated and missing license numbers
- Limited access areas had insufficient signage
The dispensary implemented immediate corrective actions:
- Created a blue sticker system for backstock identification
- Digitized personnel records and updated all badges
- Installed proper signage for restricted areas
The facility passed a follow-up inspection after making the necessary corrections within the required 14-day remediation period. This example demonstrates how California’s strictly regulated cannabis industry requires vigilant compliance monitoring.
2025 Regulatory Updates
Recent Security Requirement Changes
New DCC regulations effective March 2025 include:
- Enhanced camera specifications for cultivation sites
- Updated retention requirements for access logs
- Additional panic button placement at all points of sale
- Strengthened storage standards for high-potency products
- New requirements for seed-to-sale tracking integration with security systems
- Expanded background check requirements for security personnel
Pending Legislation
Several bills currently under consideration would impact security requirements:
- Assembly Bill 1475: Would prohibit disposable cannabis vaporizers, affecting inventory security protocols
- Senate Bill 789: Proposes enhanced security for testing laboratories
- Assembly Bill 2402: Would implement new data privacy requirements for customer information
Industry Best Practices Beyond Compliance
Advanced Security Technologies
Forward-thinking cannabis businesses are implementing:
- AI-powered video analytics for threat detection and prevention
- Biometric access control using fingerprint or facial recognition
- Remote monitoring services with live guard intervention capability
- Drone surveillance for large outdoor cultivation sites
- Integrated security management platforms connect all security systems
- Cloud-based security solutions with enhanced redundancy
- Blockchain inventory verification for enhanced tracking
Risk-Based Security Approach
Develop a comprehensive security strategy by:
- Conducting facility-specific risk assessments
- Identifying high-value targets within your operation
- Implementing layered security measures
- Establishing clear security metrics and performance indicators
- Conducting regular penetration testing
- Creating continuous improvement processes
Getting Expert Cannabis Security Assistance
With over 19 years of experience implementing security systems for more than 20,000 locations nationwide, Safe and Sound Security specializes in cannabis security compliance. Our team understands both DCC requirements and local ordinances, designing custom security solutions that not only meet regulatory standards but also provide practical, cost-effective protection for your cannabis business.
Our cannabis security specialists can help you:
- Develop compliant security plans for license applications
- Design comprehensive security systems integrating video surveillance, alarm systems, and access control
- Implement professionally-installed security solutions with ongoing support
- Prepare for regulatory inspections with pre-inspection audits
- Update existing systems to meet new requirements
- Provide documentation for compliance verification
Contact Us for a Cannabis Security Assessment
Our cannabis security specialists will provide a comprehensive evaluation of your facility, identifying compliance gaps and recommending appropriate solutions. We’ll help you navigate the complex landscape of cannabis security laws in California, ensuring your business remains compliant while protecting your investment, staff, and customers.
Request a Free Cannabis Security Consultation
Have a security project?
