Cannabis distribution entities in Ohio—including both medical and adult-use operations—must adhere to stringent security and surveillance standards to ensure public safety, prevent diversion, and comply with regulator expectations. These protocols are governed by the Ohio Administrative Code (OAC), the Division of Cannabis Control (DCC), and the Ohio Board of Pharmacy.

1. Controlled Access & Physical Barriers

All dispensaries must maintain designated secure, limited-access areas for inventory storage, surveillance systems, delivery receipt, and waste destruction. These areas require clear signage such as “Restricted Access – Authorized Employees Only” and are accessible solely to authorized, registered staff. Physical security includes barriers from floor to ceiling, secure vaults for marijuana products, and separate rooms for receiving and packaging.

2. 24/7 Surveillance & Alarm Systems

Dispensaries must operate continuous video surveillance—recording or live-streaming—covering all limited-access zones, retail areas, entrances, windows, delivery bays, and curbside/drive-up areas. Commercial-grade alarm systems, including door/window sensors and motion detectors, must be active at all hours, with separate code access restricted to key employees.

3. Written Policies & Ongoing Monitoring

Each facility is required to create and maintain written standard operating procedures (SOPs) addressing security, surveillance, inventory control, cash handling, incident responses, and emergency protocols. Security and surveillance systems must be tested and inspected at least every 30 days, with documented logs. Any system failures must be reported to the DCC and rectified within 24 hours.

4. Employee Controls & Access Management

Employees must be registered and display state-issued badges. They are granted access based on role-specific permissions, enforced via key cards or codes. Dispensaries must maintain up-to-date vendor and employee lists for state review.

5. Inventory Tracking & Supervision

All cannabis products must be tracked from receipt through destruction via Ohio’s statewide inventory system. Supervising licensed personnel must oversee inventory, or goods must be stored behind locked barriers with electronic entry detection when not supervised.

6. Cash & Product Handling Protocols

Cash registers must be located in secure zones separated from public access. SOPs must address cash and product security during business hours, shutdown procedures, and emergency situations. Surveillance must cover all cash and product transactions.

7. Delivery, Curbside, & Drive-Up Security

For dispensaries approved to offer drive-up or curbside services, surveillance and restricted-access controls must extend to these areas. A registered employee with appropriate badges must always monitor transactions and verify customer IDs before completing any transfer.

8. Incident Reporting & Quality Assurance

The state mandates immediate reporting of any theft, diversion, or unauthorized access to the Ohio Board of Pharmacy and local law enforcement. Written incident reports are required within 48 hours. Internal audits and quality assurance systems must be implemented, documenting security breaches and corrective actions.

Summary of Applicable Regulations

• Ohio Administrative Code §3796:6-3-05 to 16
  Outlines requirements for controlled access, surveillance zones, secure vaults, staff uniforms, and facility inspection standards.
• Ohio Administrative Code 1301:18-7-05
  Mandates minimum security protocols, alarm systems, surveillance camera coverage, and written security plans.
• Board of Pharmacy Rules
  Governs operational SOPs, vault and cash handling procedures, incident reporting timelines, and system inspection frequency.