Or. Admin. Code § 333-008-2080

Current through Register Vol. 63, No. 12, December 1, 2024

Section 333-008-2080 - General Requirements for Medical Marijuana Processing Sites and Dispensaries: Security Requirements

In order to be registered and remain registered a registrant must:

(1) Have an installed and fully operational security alarm system, installed by an alarm installation company, activated at all times when the premises is closed for business on all:

(a) Entry or exit points to and from the premises; and

(b) Perimeter windows, if applicable.

(2) Have a security alarm system that:

(a) Detects movement inside the premises;

(b) Is programmed to notify a security company that will notify a registrant representative or his or her designee in the event of a breach; and

(c) Has at least two operational "panic buttons" located inside the premises that are linked with the alarm system that notifies a security company.

(3) Have commercial grade, non-residential door locks installed on every external door of a registered premises where marijuana items are present.

(4) During all hours when the registrant is not operating:

(a) Securely lock all entrances to and exits from the registered premises and ensure any keys or key codes to the enclosed area remain in the possession of the registrant or registrant representative;

(b) Have a safe or vault as those terms are defined in OAR 333-008-0010 for the purpose of securing all marijuana items as required by these rules, except that a registered processing site may keep all usable marijuana, cut and drying mature marijuana plants, cannabinoid concentrates, extracts or products on the premises in a secure area.

(5) Have a password protected network infrastructure.

(6) Have an electronic back-up system for all electronic records.

(7) Keep all video recordings and archived required records not stored electronically in a locked storage area. Current records may be kept in a locked cupboard or desk outside the locked storage area during hours when the registered business is open.

(8) Notwithstanding OAR 333-008-2090 to 333-008-2120 a registered processing site and registered dispensary under common ownership that share a premises are not required to install redundant security systems if the premises are directly accessible to each other by an adjoining door. If a shared security system is utilized:

(a) Any point of common ingress and egress between the premises shall be treated as an external door, for purposes of this rule, and must have security coverage in accordance with sections (1) and (3) of this rule; and

(b) The registrants must maintain the system and provide access to the Authority in accordance with these rules.

Or. Admin. Code § 333-008-2080

PH 9-2016, f. 2-26-16, cert. ef. 3/1/2016; PH 21-2016, f. 6-24-16, cert. ef. 6/28/2016; PH 33-2016, f. & cert. ef. 11/28/2016; PH 193-2018, minor correction filed 04/30/2018, effective 4/30/2018; PH 146-2022, minor correction filed 06/10/2022, effective 6/10/2022

Statutory/Other Authority: ORS 475C.815, 475C.833 & 475C.919

Statutes/Other Implemented: ORS 475C.815 & 475C.833