Camera Setup for Diversion Prevention
Physical surveillance is one of the most effective deterrents and detection tools for drug diversion — but only if the cameras are placed, configured, and managed correctly.
Core Principles for Diversion Surveillance Cameras
You Must Be Able to See Their Hands
The single most important requirement. If a nurse reaches into a medication cabinet and you can't see what they do with their hands — whether they pocket a vial, swap a syringe, or tamper with a cassette — the camera is useless for diversion detection. Cameras must be positioned to provide a clear, unobstructed view of the hands and the medication handling surface at all times. Over-the-shoulder angles are preferred; ceiling-mounted wide angles often miss the critical detail.
45-Day Minimum Retention (90 Preferred)
Diversion is rarely caught in real time. It's discovered weeks or months later when a pattern emerges — a discrepancy trend, a behavioral report, a post-investigation review. If your footage only retains for 30 days and the suspicious event happened 45 days ago, the evidence is gone. 45 days is the minimum for diversion investigations. 90 days is preferred for litigation readiness, DEA inquiries, and Joint Commission surveys. Storage is cheap compared to losing a case because the footage was overwritten.
Cover All Medication Access Points
This means each medication dispense cabinet, controlled substance storage rooms, pharmacy compounding areas, anesthesia workstations, and waste disposal/destruction stations. If medications are accessed in a location without camera coverage, that location is a diversion vulnerability. Map every point where controlled substances are handled and ensure coverage before adding cameras elsewhere.
Time-Synced with Transaction Logs
Camera footage is only useful if you can correlate it with ADC transaction logs, MAR records, and waste documentation. All systems must be synchronized to the same time source (NTP). A 3-minute discrepancy between camera time and ADC time means you can't conclusively match a transaction to a person. Document the time sync process and verify it weekly.
Camera Placement by Location
| Location | Recommended Angle | What It Must Capture | Common Mistakes |
|---|---|---|---|
| Medication Dispense Cabinet | Over-the-shoulder height, positioned 6-8ft directly facing the cabinet screen and drawer area | User's face (for ID), both hands on the keyboard/drawer, medication removed, any pocketing or transfer to pockets | Ceiling-wide angle that shows the room but not hand detail; camera too far to read medication labels |
| Pharmacy Controlled Substance Vault | Door-adjacent (captures entry/exit) + internal overhead covering the workbench | Who enters, what they bring to the workbench, hands during counting/repackaging, removal from premises | Single camera at the door that misses workbench activity; no coverage of the safe itself |
| Anesthesia Workstation / OR | Fish eye / wide-angle lens mounted on the wall or ceiling, positioned to cover the full range of the anesthesia cart's movement. OR carts are frequently repositioned between cases — a fixed narrow-angle camera will lose coverage when the cart moves. A fish eye lens captures the entire zone. Use digital privacy masking to block the surgical field/procedure area from view while leaving the medication handling zone visible. | Syringe preparation, drawing from vials, waste disposal, pocketing of unused medication — all visible even as the cart moves around the room | Fixed narrow-angle lens that only covers one cart position; no masking of the procedure area (HIPAA risk); camera placed behind the provider (can't see hands) |
| Waste Disposal / Destruction Station | Direct overhead or eye-level side angle at 3-4ft | The medication being wasted, the witness observing, the actual destruction act (not just the documentation) | Camera only showing the sink or bin, not the drugs being handled; no witness face capture |
| Controlled Substance Storage Room | Door coverage + internal corner mount covering the main storage rack/safe | All persons entering, duration of stay, items removed from storage, items concealed on person | Blind spot near the door; camera positioned behind the door swing |
| Cabinet Restocking / Pharmacy Delivery Area | Wide angle at ceiling height covering the entire restocking station | Controlled substance deliveries being unpacked, count verification, any diversion during transport | No camera coverage at all — restocking is a high-vulnerability moment |
If you wouldn't be able to see a nurse switch a saline syringe for a fentanyl syringe in the video, the angle is wrong. Test each camera by having a staff member simulate a diversion motion (pocketing a vial, swapping a syringe, concealment) and review the footage. Adjust until the motion is clearly visible.
Technical Specifications
Recording & Retention
- Resolution: Minimum 1080p (1920x1080). 4K recommended for medication-handling detail.
- Frames per second: Minimum 15fps for general surveillance, 30fps for hand-detail areas (med cabinets, anesthesia carts).
- Retention: 45 days minimum, 90 days preferred. Some DEA investigations require footage from 3+ months prior. Do not go below 45 days.
- Storage: 1 camera at 1080p/15fps = ~120GB/month. A 20-camera system with 90-day retention needs ~24TB.
- Recording mode: Continuous (not motion-activated). Motion-only recording may miss critical moments.
Time Synchronization
- All cameras must use NTP (Network Time Protocol) synced to the same time source as your ADC system and EHR.
- Verify time sync weekly — document the time offset between camera system and ADC system. Any drift > 5 seconds must be corrected.
- Include a visible timestamp overlay on the video that shows date and time to the second.
- Time zone: All cameras should record in the facility's local time zone. If the facility spans time zones, use a single reference time zone and document it.
Security & Access
- Access control: Camera footage access must be restricted to personnel with a legitimate investigatory need (compliance officer, security director, HR).
- Audit log: The camera system must log every instance of footage being viewed, exported, or deleted — with user ID, timestamp, and reason.
- Encryption: Video in transit should use TLS 1.2+. Video at rest should be encrypted.
- Chain of custody: Any footage exported for an investigation must follow a documented chain-of-custody procedure to be admissible in disciplinary or legal proceedings.
- Privacy: Cameras should not be placed in patient care areas where they could capture patient exams, conversations, or procedural details unrelated to medication handling. Focus only on medication access points.
Maintenance
- Daily: Verify all cameras are recording and unobstructed. A camera blocked by a supply cart, post-it note, or "accidentally" turned angle is the #1 physical security failure. Assign a specific person to check each camera feed daily and log the check. If the same camera is "blocked" on three consecutive checks, treat it as a diversion signal — someone may be deliberately obstructing the view.
- Weekly: Confirm time sync with NTP. Document the offset between camera system and ADC system.
- Monthly: Test footage export and playback. Test that the chain-of-custody process works.
- Quarterly: Review camera angles — has the medication cabinet been moved? Has a new storage area been added? Adjust coverage accordingly.
- After any diversion investigation: Review whether camera placement could have been improved to catch the method used. Update placements.
- Power backup: Cameras and NVR should be on battery backup/UPS. A power outage that kills recording during a critical time is a failure of the program.
Using Camera Footage in a Diversion Investigation
- A staff member is identified as a person of interest through data analytics (override rate, waste rate, dispense-admin gap).
- A controlled substance discrepancy is reported and the time window is known.
- A behavioral report is filed (e.g., nurse seen behaving erratically near the medication dispense cabinet, colleagues express concern).
- A patient reports that medication was not given despite charting, or that pain relief didn't match what was administered.
- Routine audit of admin-access transactions reveals an unexplained removal.
- Fishing expeditions — reviewing footage for an entire unit without a specific transaction or person in mind. This erodes trust and may violate labor agreements.
- Without a documented reason and approval from compliance/HR/legal. Unauthorized footage review creates liability.
- Without time-syncing the footage to the specific transaction first. Reviewing hours of footage hoping to find something is inefficient and may miss the critical moment.
Investigation Workflow
Identify the Transaction
Pull the ADC transaction log for the specific medication, time, and staff member. Note the exact timestamp from the ADC system.
Locate the Footage
Using the ADC timestamp, locate the corresponding camera footage. Apply time offset correction if needed.
Observe & Document
Watch the footage from 5 minutes before to 5 minutes after the transaction. Document exactly what the hands do: medication removed, pocketing, syringe swap, waste handling.
Export with Chain of Custody
Export the relevant clip with timestamp overlay. Document who exported it, when, and why. Store in a secure, access-controlled location.
Common Camera System Failures
Camera Too Far
A camera mounted 20ft away on the ceiling can see the room but can't see hands at the medication dispense cabinet. The footage is useless for diversion even though it covers the area. Solution: dedicated close-range cameras for each medication workstation.
Bad Lighting / Glare
Cabinet screens are bright. If the camera is directly facing the screen, the auto-exposure will darken everything else — including the user's hands. Solution: position cameras to the side of the screen, not facing it. Test in day and night lighting conditions.
Insufficient Retention
30-day retention (or worse, motion-only with 14-day retention) is the most common vulnerability cited during DEA diversion investigations. If the investigation starts on day 46, the evidence is gone. Minimum 45 days, preferred 90. Document the retention policy and test that old footage is actually retrievable — not just showing in the UI but playable.
Time Not Synced
If the camera timestamp doesn't match the ADC timestamp, you can't prove that the person on camera is the person who made the transaction. A 5-minute discrepancy is enough to defeat a disciplinary proceeding. Solution: weekly NTP sync verification.
Motion-Only Recording
Cameras set to record only on motion may miss small hand movements, vial transfers, or slow, deliberate actions that don't trigger the motion sensor. Solution: continuous recording at medication access points.
No Coverage of Restocking
Diversion during restocking is one of the hardest methods to catch because the person stocking has unsupervised access to all the drugs in the cabinet. If the restocking process isn't covered, you have a blind spot the size of the entire inventory.
Camera System Audit Checklist
Use this checklist quarterly to verify your camera system is diversion-ready.