Home / Blog / Security Glass for California Pharmacies
Security Glass for California Pharmacies: What DEA and Board of Pharmacy Rules Say (and What They Don't)
If you own a pharmacy, or lease space to one, in Los Angeles or Orange County, someone has probably told you that DEA or the Board of Pharmacy wants security glass on the storefront. We read the federal and California texts to see what they actually say. The short version: a lot about locked storage, keys, deliveries and break-in reports, and nothing about windows or glass. This is general information, not legal advice and not a recommendation for your building.
Published November 11, 2026 · Armored Glass Solutions
The Short Answer
Neither DEA nor the Board of Pharmacy says anything about your windows
DEA's physical-security rules for controlled substances are in Title 21 of the Code of Federal Regulations, sections 1301.71 through 1301.76. We read the text in the eCFR on November 9 and again on November 10, 2026, and searched all six sections for window, glass, glazing and storefront. There were no hits.
California's pharmacy rules are collected in the Board of Pharmacy's 2026 Lawbook for Pharmacy (revision 7/2026). We searched all 844 pages for glass, glazing, burglar and smash and found nothing. The word window appears twice, both times as “drive-through window” in a staffing section, Business and Professions Code section 4113.5.
One caution on our own work. That lawbook is a compilation, and the Board says so itself: it “is not an official edition of those laws and regulations.” The Board points to the legislature's site and Westlaw as the official sources. We tried the official state code site and it refused our requests, so we read the Board's compilation. Confirm the current wording before you act on anything here.
If someone tells you DEA or the Board requires security film, laminated glass or bullet-resistant glass on a pharmacy, ask them to show you the section. We could not find one. That does not mean your glass does not matter, only that the rules do not tell you what to do about it.
What DEA Says
A locked cabinet or dispersal, and “effective controls”
The general federal rule is short: “All applicants and registrants shall provide effective controls and procedures to guard against theft and diversion of controlled substances.” DEA says it will use sections 1301.72 through 1301.76 “as standards for the physical security controls and operating procedures necessary to prevent diversion.”
The only place DEA's text touches the building at all is a list of factors it weighs case by case. They include “The location of the premises and the relationship such location bears on security needs,” “The type of building construction comprising the facility and the general characteristics of the building or buildings,” and “The adequacy of electric detection and alarm systems, if any including use of supervised transmittal lines and standby power sources.”
The storage rule for pharmacies is section 1301.75(b): controlled substances in Schedules II, III, IV and V “shall be stored in a securely locked, substantially constructed cabinet. However, pharmacies and institutional practitioners may disperse such substances throughout the stock of noncontrolled substances in such a manner as to obstruct the theft or diversion of the controlled substances.” That is a rule about where the drugs go inside the pharmacy: a cabinet, or dispersal through ordinary stock. It says nothing about the storefront.
You may have seen the heavier vault and safe language, such as “10 man-minutes against forced entry.” That is section 1301.72, which is headed “Physical security controls for non-practitioners.” It is written for other kinds of registrants, not for a retail pharmacy, and it should not be quoted as a pharmacy requirement.
What California Adds
“Secured,” pharmacist responsibility, and who holds the key
California's language is about people and keys. Business and Professions Code section 4116 limits who may be in the licensed area where drugs are stored, and lets the Board “establish reasonable security measures” by regulation to keep unauthorized people out. It is an access statute, not a building-materials statute. (Section 4117 looks similar but covers licensed hospitals, not retail pharmacies.)
The main regulation is California Code of Regulations, title 16, section 1714. It says a pharmacy must keep its facilities, space, fixtures and equipment so that drugs are “safely and properly prepared, maintained, secured and distributed.” It makes the pharmacist on duty “responsible for the security of the prescription department, including provisions for effective control against theft or diversion of dangerous drugs and devices.” It also says “Possession of a key to the pharmacy where dangerous drugs and controlled substances are stored shall be restricted to a pharmacist.” The word is “secured,” with no method attached.
The Board's own self-assessment form, Form 17M-13 (approved January 27, 2026), puts it the same way: “The pharmacy is secure to prevent unauthorized access and effective control to prevent theft.” We searched the whole form for alarm, window, glass, burglar and break-in and found none of them.
Landlords should read one more part of section 1714. The pharmacy owner, the building owner or manager, or a family member of a pharmacist owner, but not more than one of them, may hold a key kept “in a tamper evident container,” and only to hand it to a pharmacist or to give access in an emergency such as fire, flood or earthquake. We read that narrowly. Do not assume a building owner can let a crew into the pharmacy. Plan any work with the pharmacist-in-charge, and see our post on window film in a rented home or leased storefront for the lease side.
After Hours
Deliveries have a rule. We found no general alarm rule.
For an ordinary community pharmacy, the after-hours text we found is about deliveries. Under Business and Professions Code section 4059.5(f), a pharmacy may take delivery when closed and no pharmacist is on duty only if, among other conditions, “The drugs are placed in a secure storage facility in the same building as the pharmacy” and that facility “has a means of indicating whether it has been entered after dangerous drugs or dangerous devices have been delivered.”
We found two alarm mandates in the whole lawbook, both for other businesses. Section 4135 requires an alarm or comparable monitoring at remote dispensing site pharmacies. Section 1780 requires an alarm to detect entry after hours at wholesalers and third-party logistics providers. We did not find an alarm mandate for a typical community pharmacy. That is what we found searching the Board's compilation, not a legal opinion. If you are deciding on an alarm, it is your decision and your insurer's, and your alarm company can tell you what a given system covers.
After A Break-In
Two agencies, two clocks
The most useful, least-discussed part of these rules is what happens after something goes wrong.
- DEA (21 CFR 1301.76(b)). The registrant “shall notify the Field Division Office of the Administration in his area, in writing, of the theft or significant loss of any controlled substances within one business day of discovery of such loss or theft.” It must also file a complete and accurate DEA Form 106 “within 45 days after discovery of the theft or loss.”
- California Board of Pharmacy (16 CCR 1715.6). The owner reports to the Board “no later than thirty (30) days after the date of discovery,” with dosage-unit thresholds for some losses. Employee theft of a controlled substance is reportable regardless of amount.
- Police. DEA's Pharmacist's Manual (revised 2022) says: “Although not specifically required by federal law or regulations, the registrant should also notify local law enforcement and state regulatory agencies.”
The manual describes the one-business-day notice but predates the 45-day wording, which is why we point you to the current regulation for deadlines.
What DEA's Data Shows
How common are break-ins? Read DEA's caution first
DEA publishes state-by-state counts from the theft and loss reports registrants must file. The page is headed “Pharmacy Burglary and Armed Robbery Theft Reports of Controlled Substances for January 2020 – July 2024,” and it carries this warning: “CAUTION should be exercised in drawing conclusions from this data. Material reported as a theft or loss does not necessarily equate to illicit use.”
Here is what DEA's own state PDFs show for California. We summed the state rows in each file and they matched the printed totals.
| Year | California burglary reports | U.S. total burglary reports | California armed-robbery reports | U.S. total armed-robbery reports |
|---|---|---|---|---|
| 2020 | 499 | 1,661 | 151 | 491 |
| 2021 | 152 | 750 | 103 | 440 |
| 2022 | 220 | 834 | 71 | 419 |
| 2023 | 289 | 872 | 22 | 196 |
| 2024 (January to July only) | 225 | 524 | 23 | 91 |
Read these as DEA's counts of burglary reports involving controlled substances, which DEA presents as pharmacy data. The PDFs are titled “Burglary Reports of Controlled Substances” and carry no breakdown by type of registrant, so the 2023 figure of 289 for California is not a count of pharmacies. By our arithmetic, not DEA's, California's 289 is about a third of the 872 national total, and it was the highest state count in that file.
DEA's pharmacy news page adds one sentence we will leave to DEA: “Nearly 900 burglaries involving the theft of controlled substances were reported to DEA in 2023, a significant increase in burglaries across the country.” DEA's page stops at July 2024, and we found no newer numbers.
Where Glass Fits
Options, not obligations
Nothing above requires any glazing product. Glass is an owner's choice about risk, so here is what each option is and is not. We install security window film, overglaze polycarbonate and door reglaze. Security film is engineered to delay entry and to hold broken glass together when struck. It does not make glass something nobody can get through, and we will not describe it that way. Our post on what security film does and does not do goes deeper, and our security window film page covers what we install.
Overglaze polycarbonate is a retrofit panel installed over existing glass. DefenseLite, a maker of retrofit polycarbonate glazing, says: “This tier is for higher-risk locations such as jewelers, pharmacies, telecom stores, cannabis dispensaries, and properties that have already experienced an attempted smash and grab.” Read our overglaze guide and our DefenseLite and BulletShield page. Door reglaze means replacing the glass in an existing door; if you need a new storefront, new doors or replacement windows, that is work for a glazier, and we will say so.
The one government document we found that mentions glazing in a pharmacy setting is OSHA's workplace-violence guidance for healthcare and social service workers, which lists pharmacies in scope. Its checklist asks “Are bullet-resistant windows or similar barriers used when money is exchanged with the public?” OSHA states that the document “is advisory in nature and informational in content,” and that it is “not a standard or regulation.” Ballistic barriers are outside what film does, and a rated product depends on the exact tested assembly. Our ratings guide explains what to ask for.
If you run a different regulated retail business, our cannabis retailer post covers the same pattern with a different regulator: lots of detail about locks and alarms, and silence on glass.
Before Anyone Quotes You
Questions for your pharmacist-in-charge, landlord, city and installer
- Who will be in the licensed area during the work? Business and Professions Code section 4116 limits who may be there. Plan the schedule with your pharmacist-in-charge, and do not assume a landlord can let a crew in.
- Does the work need a permit? We did not research local rules for Los Angeles or Orange County cities. Ask your city's building department about the exact product and the exact openings.
- Does the Board or DEA need to hear about it? We did not find an answer either way, so ask first, and get the answer in writing.
- What does my lease allow? Get your landlord's written consent.
- What does my insurer say? We did not read any insurer guidance on pharmacy glazing.
- What assembly was tested? If a quote cites a rating, ask for the glass, film, anchoring and frame behind it, and the maker's report for that exact assembly.
Prefer to talk it through? Call us at (310) 488-5626 or 888-960-TINT. We will tell you what we can do and what belongs to someone else.
Questions
Pharmacy security glass: FAQ.
Does the DEA require security glass or window film for pharmacies?
Not in the text we read. We searched DEA's physical-security sections, 21 CFR 1301.71 through 1301.76, for window, glass, glazing and storefront and found no hits. For a pharmacy, the storage rule is section 1301.75(b): a “securely locked, substantially constructed cabinet,” or dispersal of controlled substances through the stock of noncontrolled substances. DEA also looks at the overall system, including factors such as the type of building construction. Nothing we read says film or glazing is required, and film is not a stand-in for DEA's overall review.
What does the California Board of Pharmacy say about pharmacy security?
The language is general. Title 16, section 1714 says drugs must be “secured,” makes the pharmacist on duty responsible for “the security of the prescription department,” and restricts key possession. The Board's self-assessment form says “The pharmacy is secure to prevent unauthorized access and effective control to prevent theft.” We searched the Board's 2026 lawbook, an unofficial compilation, and found no method named and no mention of glass or glazing. Confirm current wording with the Board.
Is a pharmacy in California required to have an alarm?
We did not find that requirement for a typical community pharmacy. The two alarm mandates we found in the Board's lawbook apply to remote dispensing site pharmacies and to wholesalers and third-party logistics providers. DEA's building factors mention alarm systems “if any.” This is what we found in the text we read, not legal advice. Ask your pharmacist-in-charge, your insurer and your alarm company.
What do we have to report after a break-in, and how fast?
Under 21 CFR 1301.76(b), written notice to the DEA Field Division Office is due within one business day of discovery of a theft or significant loss of controlled substances, and DEA Form 106 is due within 45 days after discovery. Under 16 CCR 1715.6, the Board's report is due no later than 30 days after discovery, with thresholds that depend on the loss. DEA's manual says notifying police is recommended but not specifically required by federal law or regulations. Confirm the current process for your license before you rely on these deadlines.
Can our landlord let an installer into the pharmacy after hours?
Do not assume so. Section 1714(e) lets a building owner or manager hold a key only in a tamper evident container, to hand it to a pharmacist or to give access in an emergency, and Business and Professions Code section 4116 limits who may be in the licensed area. We read those rules narrowly. Plan the schedule with your pharmacist-in-charge, and ask before anyone is scheduled.
Sources
Where these findings came from.
We read the federal and California documents on November 9 and 10, 2026. The Board of Pharmacy lawbook is the Board's own compilation and says it is not an official edition; we could not open the official state code site. We did not research local rules in Los Angeles or Orange County cities, any building-permit or Board-notice question for glazing work, or insurer guidance. Regulations change, so confirm current text with the agency before you rely on any of this. This post is general information, not legal advice.
- U.S. Government, Electronic Code of Federal Regulations, Title 21, Part 1301 (sections 1301.71 to 1301.76; read as of November 2026). Federal regulation. Link.
- DEA Diversion Control Division, Pharmacist's Manual (revised 2022). Federal agency guidance. Link.
- DEA Diversion Control Division, Theft/Loss Reports for January 2020 – July 2024 and its state PDFs. Federal agency data. Link.
- DEA Diversion Control Division, Pharmacy News. Federal agency. Link.
- California State Board of Pharmacy, 2026 Lawbook for Pharmacy (Rev 7/2026). State agency compilation, not an official edition. Link.
- California State Board of Pharmacy, Community Pharmacy Self-Assessment, Form 17M-13 (approved January 27, 2026). State agency. Link.
- Cornell Legal Information Institute, 16 CCR 1714 and 16 CCR 1715.6 (used to cross-check wording). Legal reference mirror. Link.
- OSHA, Guidelines for Preventing Workplace Violence for Healthcare and Social Service Workers (OSHA 3148-06R, 2016). Federal agency guidance. Link.
- Impact Security, LLC (DefenseLite), Retrofit Security Glazing: Modern Protection for Existing Windows and Doors. Manufacturer. Link.
Keep Reading
Related reading.
Cannabis retailer security glass
How California's cannabis rules treat storefront glass: the same pattern, a different regulator.
Read the post →Security glass for banks and credit unions
What federal bank-security rules require, what changed in 1991, and what they leave to your security officer.
Read the post →Overglaze polycarbonate, explained
How retrofit polycarbonate goes over existing glass, and where it fits.
Read the post →Planning storefront glass for a pharmacy?
Call us and we will talk through what to confirm with your pharmacist-in-charge, your landlord and your city before anyone orders film. If film or overglaze turns out to be a fit, we put the product and the terms in writing. Call (310) 488-5626 or 888-960-TINT.