Security Operations
A Security Footage Request Log for Dispensaries
DispensaryVA Editorial TeamPublished
security footagecamera requestschain of custodydispensary security
Powered by StealthAgents
Powered by StealthAgents
Security Operations
A police officer asks for the camera footage from last Tuesday. An insurer wants a clip of a slip-and-fall. A landlord's attorney sends a preservation letter. Each request sounds straightforward, but each one can create a privacy, retention, or evidence problem if the dispensary hands over the wrong file or overwrites the original.
A footage request log gives the team one place to record who asked, what authority they presented, what was preserved, what was exported, and who approved the release. It is not a legal opinion. It is a control that makes the legal review possible.
The first risk is not the release; it is the automatic overwrite. Many camera systems retain footage for a fixed period. By the time the owner reviews a request, the relevant window may be gone.
When a request arrives, preserve the relevant time range before doing anything else. If the system supports it, lock or export the footage to a separate evidence folder. Record the original camera, channel, start and end time, and time zone. Do not trim the clip so tightly that context disappears. A few minutes before and after the event often matter.
The preserve step should be available to a trained manager, not only to the security vendor. If only the vendor can export footage, record the vendor ticket and the expected completion time. Do not promise the requester a copy until the export is secured.
Not every person who asks for footage is entitled to it. Record the requester's name, organization, role, phone, email, and the authority they cite. For law enforcement, record the agency, badge or identifier, and whether they presented a warrant, subpoena, court order, or a verbal request. For an insurer or attorney, record the claim number, matter, and the basis for the request.
If the request is voluntary, the operator may choose to cooperate, but the decision should be made by the designated owner. If the request is compulsory, route it to counsel immediately. Do not negotiate the scope of a warrant or subpoena with the requester.
Verify the contact through an independent channel. A caller who claims to be from an agency may be using a convincing number. Call the agency's published main line and confirm the person and the request. Record the verification.
Define the exact time range, cameras, and events. Write the scope in the log and have the requester confirm it in writing when possible. A broad request for "all footage from last month" should be narrowed to the relevant date, time, and area unless the authority requires otherwise.
Record whether the export includes audio. Many retail camera systems do not, but if audio exists, it may capture customer conversations and create additional privacy issues. Do not include audio unless it is within the approved scope.
Redact or avoid unrelated customers and staff where the process allows. The goal is to provide the requested evidence, not to hand over the entire store's activity. If redaction is not possible, document that and route the release decision to the owner.
An export is evidence only if the dispensary can show what happened to it. Record:
Keep the original export in a restricted folder. Provide a copy to the requester through an approved transfer method. Do not send footage through personal email, a public link, or a messaging app unless the owner has approved that channel and the file is protected.
If the requester provides a storage device, record the serial number and the person who connected it. If the dispensary uploads to a portal, record the portal, case number, and confirmation.
Camera footage can contain customer faces, license plates, payment activity, and conversations. Limit access to the people who need it for the request or the investigation. Do not post clips to social media or use them in marketing without a separate review and consent analysis.
Follow the retention schedule for the original recording and the exported copy. A preservation request may pause the normal deletion schedule. Record the hold, the scope, and the release date. When the hold ends, delete the copy according to policy and record the deletion. The front-of-house support team can maintain the intake while the security owner controls the release.
The security incident handoff record should link to the footage request. The incident record explains what happened; the footage log explains what evidence was preserved and released.
A robbery or violent incident may require immediate cooperation with law enforcement. The team should prioritize safety, call emergency services, and preserve the scene. The footage log can be completed after the immediate response, but the preservation step should happen as soon as it is safe.
For an urgent request, record the time, the agency, the officer, and the scope on a temporary form or a shared note. Move it into the permanent log the same day. Do not let urgency become a reason to skip the chain of custody.
A monthly review should answer four questions. Are there requests with no authority record? Are exports sitting in unrestricted folders? Are holds still active after the matter closed? Are the same cameras or time windows requested repeatedly?
A pattern of requests around a particular entrance may indicate a security or training issue. A pattern of missing exports may indicate that the camera system or vendor is unreliable. The review is an opportunity to fix the system, not just to close tickets.
The CISA physical security resources provide a useful framework for thinking about layered controls, but the dispensary's legal obligations and camera system capabilities will determine the actual process.
A virtual assistant can maintain the log, verify contact information through public channels, request the export from the vendor, and track deadlines. The assistant should not decide whether a request is legally valid, redact evidence without training, or release footage without the designated owner's approval.
Escalate every warrant, subpoena, court order, law-enforcement request, or attorney preservation letter to the owner or counsel. Preserve the footage and the request record while the decision is made.
Create a one-page request form, a restricted evidence folder, and a named owner. Train the closing manager on preservation and the front desk on intake. Test the process with a mock request for a non-sensitive time range. Confirm that the export can be found, the hash is recorded, and the release is logged.
The test is not whether the dispensary can produce a clip. The test is whether it can explain where the clip came from and who saw it. That is what makes the footage useful and the release defensible.