Cannabis Security Camera and Video Retention Compliance
Last reviewed · By Chad Griffith
Most state Cannabis Regulatory Authorities require licensed cannabis businesses to operate continuous video surveillance covering specific areas, with retention periods of typically 90 days (some states 30-60 days). Failure to retain required footage, gaps in coverage, or non-functional cameras are common citations during state CRA inspections.
Required Coverage Areas
State CRA video coverage requirements typically include: vault and storage areas (interior and entry points), retail floor (customer transactions), cultivation rooms (interior coverage), processing/extraction areas, scale areas (where cannabis is weighed for transactions), transport loading/unloading, exterior (entry/exit points, parking, perimeter), and waste/disposal areas.
Recording Quality Requirements
Most states require: minimum resolution sufficient to identify individuals (typically 1080p or higher); minimum frame rate (typically 15 fps continuous, higher during activity); date/time stamps overlaid on footage; backup power systems for cameras and recording equipment; and tamper-evident recording (footage cannot be modified or deleted within retention window without audit trail).
Retention Periods by State
California (CCR Title 4 Section 15044) — 90 days. Colorado MED — 40 days minimum. Michigan CRA (R 420.209) — 30 days minimum. Massachusetts CCC — 90 days. Multi-state operators typically retain 90 days across all locations to satisfy the most stringent requirement and simplify operations.
Breach Notification
If video systems fail or are tampered with, most states require notification to the state CRA within 24 hours. Notification must include: incident date/time, affected cameras/areas, expected restoration time, and corrective action. Failure to maintain video coverage during business hours is itself a violation, regardless of whether any other incident occurred.
Frequently Asked Questions
What is the typical cannabis video retention period?
Most state Cannabis Regulatory Authorities require 90 days of video retention. Some require 30-60 days minimum. Multi-state operators typically default to 90 days across all locations for operational consistency. Footage from incident events (theft, breach, regulatory event) typically must be retained longer — often the duration of any active investigation.
What happens if cameras malfunction?
Most state CRAs require the licensee to notify the regulator within 24 hours of a video system malfunction affecting required coverage. Operations may be required to cease in affected areas until cameras are restored. Failure to notify or operating without coverage is a separate citation.
Can I use cloud storage for cannabis video retention?
Yes, in most states, provided the cloud storage system meets state requirements for tamper-evidence, retention, and on-demand retrieval. The licensee remains responsible for ensuring footage is retrievable to regulators within the response window (typically 24-72 hours).
Who can access cannabis video footage?
Footage access is typically restricted to: state CRA inspectors (immediate access with proper credentials), law enforcement with warrant, and designated employees of the licensee with limited access logs. Many states require a written video access policy identifying who can view footage and under what circumstances.
Authoritative sources