Utah Admin. Code R66-10-8 - Security Standards

(1) A closed-door medical cannabis pharmacy shall comply with security standards established in Section 4-41a-1101 and this rule.
(2) A closed-door medical cannabis pharmacy shall have security equipment sufficient to deter and prevent unauthorized entrance into the closed-door medical cannabis pharmacy that includes equipment required in this section.
(3) A closed-door medical cannabis pharmacy shall be equipped with a secure lock on the entrance to the closed-door medical cannabis pharmacy.
(4) A closed-door medical cannabis pharmacy shall have electronic monitoring including:
(a) at least one 19-inch or greater call-up monitor;
(b) a printer, capable of immediately producing a clear still photo from any video camera image;
(c) video cameras that:
(i) have a recording resolution of at least 640 x 470, or the equivalent;
(ii) provide coverage of the single entrance to and exits from the building;
(iii) are capable of identifying any activity occurring in or adjacent to the closed-door medical cannabis pharmacy building;
(iv) record continuously, 24 hours a day, 7 days a week or are motion activated;
(v) record at each product packaging and product destruction or disposal location; and
(vi) will allow for the identification of a medical cannabis visitor or closed-door pharmacy employee;
(d) a method for storing recordings from the video camera for at least 45 calendar days:
(i) a surveillance system storage device used for locally stored footage shall be secured in the facility in a lock box, cabinet, closet, or secured in another manner, to protect from employee tampering or criminal theft; and
(ii) access to footage stored on a remote server shall be restricted to protect from employee tampering;
(e) a failure notification system that provides an audible and visual notification of failure in the electronic monitoring system;
(f) sufficient battery backup for the video camera and recording equipment to support recording in the event of a power outage; and
(g) a date and time stamp embedded on video camera recordings that is set correctly.
(5) Security measures implemented by a closed-door medical cannabis pharmacy to deter and prevent unauthorized entrance or theft of products and to ensure the safety of employees, shall include measures to:
(a) store medical cannabis products and medical cannabis devices in a secure locked limited access area in a manner as to prevent diversion, theft, and loss;
(b) keep safes, vaults, and any other equipment or areas used for storage, including before disposal of the product, securely locked and protected during times other than the time required to remove or replace medical cannabis product or medical cannabis devices;
(c) keep locks and security equipment in good working order and document that equipment is functioning properly at least two times per calendar year;
(d) prohibit keys from being left in locks, stored, or placed in a location accessible to any person other than specifically authorized personnel;
(e) prohibit accessibility to any person other than specifically authorized personnel;
(f) ensure that the outside perimeter of the building is sufficiently lit to facilitate surveillance;
(g) ensure that medical cannabis products and medical cannabis devices are kept out of plain sight and are not visible from a public place; and
(h) secure each product following any instance of diversion, theft, or loss of product, and conduct an assessment to determine whether additional safeguards are necessary.
(6)
(a) While inside the closed-door medical cannabis pharmacy, each employee shall wear an identification tag or similar form of identification.
(b) The tag shall list the employees' position at the closed-door medical cannabis pharmacy as a PMP or pharmacy agent.
(c) A PMP shall carry their registration card when:
(i) they are on the premises of a closed-door medical cannabis pharmacy; and
(ii) they are transporting a cannabis product in a medicinal dosage form, or a medical cannabis device.
(7) A closed-door medical cannabis pharmacy shall keep and maintain a log showing:
(a) the full name of each visitor entering the facility;
(b) the badge number issued;
(c) the date and time of arrival;
(d) the date and time of departure; and
(e) the purpose of the visit.
(8) The visitor log shall be maintained by the closed-door medical cannabis pharmacy for a minimum of one year.
(9) The closed-door medical cannabis pharmacy shall make the visitor log available to the department upon request.
(10) Only a PMP or a pharmacy agent shall have access to the closed-door medical cannabis pharmacy when the closed-door pharmacy is closed.
(11) The closed-door medical cannabis pharmacy, or parent company, shall maintain a record of not less than five years of the names and work schedules of each PMP or pharmacy agent that has worked at the facility.

Notes

Utah Admin. Code R66-10-8
Adopted by Utah State Bulletin Number 2025-03, effective 1/23/2025 Amended by Utah State Bulletin Number 2025-06, effective 2/24/2025

State regulations are updated quarterly; we currently have two versions available. Below is a comparison between our most recent version and the prior quarterly release. More comparison features will be added as we have more versions to compare.


No prior version found.