AB 584 defines what counts as a “secure facility” for licensed firearms dealers and manufacturers and creates enforceable minimums for how those premises must be constructed, locked, monitored, and used. The bill does not create new licensing categories; it ties the label “secure facility” to a checklist of physical protections — alarms, reinforced doors and windows, secured vents and walls, and rules about storing firearms and ammunition.
The practical effect is straightforward: licensed businesses that store or manufacture firearms will face clear baseline obligations that are likely to trigger capital upgrades, changed employee practices (locked rooms, restricted access), and closer scrutiny from insurers and regulators. The rulebook-style approach narrows ambiguity but raises implementation questions — for example, how to treat leased storefronts, historic buildings, or egress and building-code conflicts — that compliance officers and landlords will need to resolve on receipt of the law.
At a Glance
What It Does
Creates a statutory definition of “secure facility” and requires licensed firearm businesses to meet that definition to be in compliance with the chapter. The definition lists specific hardware and configuration options — monitored burglar alarms, specified door constructions and locking systems, secured openings and walls, and policies for locking rooms and separating ammunition from stored firearms.
Who It Affects
Licensed firearm dealers and manufacturers operating premises in California, their landlords, and third-party security contractors who install and maintain alarms, doors, and grates. Insurers, local code officials, and ATF investigators will also be affected because the law establishes a statewide physical-security baseline.
Why It Matters
By converting detailed security best practices into statutory minimums, the bill shifts decisions about acceptable risk from insurers and local practices into law, changing cost and compliance calculus for small shops and larger manufacturers alike. The prescribed hardware and storage rules will be the new yardstick for enforcement, liability, and insurance underwriting.
More articles like this one.
A weekly email with all the latest developments on this topic.
What This Bill Actually Does
AB 584 spells out, in granular terms, the physical elements a location must have to qualify as a “secure facility.” The statute requires a centrally monitored burglar alarm and then treats windows, skylights, and other perimeter entries as security features that must either be physically barred or individually alarmed. The text gives business owners options rather than mandating a single construction style: doors and openings can meet security goals through several alternative designs, but each option has technical requirements (for example, minimum bar thickness or gauge for grating) that a compliance officer will need to validate.
The bill devotes significant attention to door construction and locking. It lists six acceptable doorway approaches, from windowless steel security doors with deadbolts to multipoint panic-hardware systems that bolt into the door frame with protective latch guards.
Another option is a metal grate that is separately padlocked and anchored to the premises independently of the door assembly — an important feature for businesses that use storefront roll-grates. Hinges and hasps must be installed or affixed so they cannot be removed from the outside, either by welding, riveting, bolting with nuts on the inside, or by through-hinge installations that block outside removal.Beyond doors and windows, the statute requires that HVAC and service openings be physically secured (bars, grating) or monitored by alarm, and it prohibits any perimeter grates or bars that a person could use to enter the premises.
It establishes a construction floor for rooms used to store firearms: perimeter walls must be concrete or incorporate at least 10-gauge expanded steel wire mesh in the wall assembly, and firearms must be kept in a dedicated storage room separate from general work or living spaces. Finally, the bill places operational limits on access: perimeter doors (including loading docks) must be locked whenever unattended by paid or contracted personnel, and ammunition must be stored separately from firearms except when a firearm is actively being tested or when both ammunition and gun are secured together in a locked safe.
The Five Things You Need to Know
The law requires a burglar alarm with central monitoring as a baseline security element for any facility meeting the “secure facility” definition.
Door standards in the statute provide six alternative compliance paths, including windowless steel doors, windowed metal doors with guards, independent padlocked metal grates, welded or interior-nutted hinges/hasps, and multipoint panic hardware with latch guards.
If a door window has any opening five inches or larger in any direction, the statute requires that opening be covered with steel bars of at least 1/2-inch diameter or metal grating of at least 9-gauge.
Perimeter storage rooms must use concrete or at minimum 10-gauge expanded steel wire mesh incorporated with conventional frame/drywall construction; firearms must be kept in a separate locked room and doors locked while unattended.
Ammunition must be separated from firearms and stored in a locked room, cabinet, or box unless a weapon is being tested or both ammunition and weapon are secured together in a locked safe; loading docks must be locked when no paid or contracted staff are present.
Section-by-Section Breakdown
Every bill we cover gets an analysis of its key sections.
Monitored burglar alarm requirement
Subsection (a) makes a monitored burglar alarm a statutory floor for the secure-facility definition. Practically, the business must contract with a central-monitoring provider and maintain that service; silence or local-only alarms will not meet this element. Compliance officers should verify monitoring contracts and alarm schematics during inspections or audits.
Perimeter openings: bars or individual alarms
Subsection (b) treats every perimeter entry other than doors — windows, skylights, and similar penetrations — as either needing physical barriers (steel guards) or individual intrusion detection. That creates two compliance pathways but also an inspection requirement to confirm either the physical grade of bars or the alarm wiring/sensor placement. Businesses that mix approaches (some openings barred, others alarmed) will need clear documentation to prove compliance for each opening.
Door construction options and hardening details
Subsection (c) is the most detailed: it enumerates six acceptable door/hardening approaches and adds specifications tied to those approaches (e.g., protective latch guards, multipoint locks, minimum bar diameters). The multiple alternatives give designers flexibility, but they also force technical judgments about equivalence; for example, whether a tenant’s existing metal door plus aftermarket deadbolt meets the standard, or whether retrofitted panic hardware will achieve the bolt penetration required by the text. Inspectors will need to inspect bolt locations, hinge types, and attachment methods rather than relying on a simple checklist.
Service openings, perimeter walls, and interior storage rooms
These paragraphs require that HVAC and service openings be secured with bars/grating or alarms, prohibit grates that can be used as entry points, and set a construction standard for storage-room perimeters (concrete or 10-gauge expanded steel mesh integrated with standard framing). Paragraph (g) also requires a separate storage room physically separated from work or living areas; if a vault is not used, an exterior security-type door and a high-security single-key deadbolt are required. This is a de facto masonry or mesh requirement that will affect remodels and leased spaces where landlords control structural changes.
Key control, access policy, and ammunition separation
Subsection (h) mandates locking of perimeter doorways (explicitly including loading docks) whenever they are not attended by paid or contracted staff; that extends beyond normal retail hours to any period with only unpaid personnel present. Subsection (i) requires ammunition be removed from manufactured guns and stored separately unless the gun is being tested, or both are secured in a locked safe. These provisions create explicit operational practices for employees and delivery operations and will factor into standard operating procedures and training.
This bill is one of many.
Codify tracks hundreds of bills on Justice across all five countries.
Explore Justice in Codify Search →Who Benefits and Who Bears the Cost
Every bill creates winners and losers. Here's who stands to gain and who bears the cost.
Who Benefits
- Law enforcement and public safety agencies — fewer easy-entry thefts should reduce the pool of commercially stolen firearms that often enter criminal markets, simplifying recovery and tracing.
- Insurance underwriters and risk managers — a statutory minimum reduces ambiguity about a proprietor’s security posture and can lower claim volatility if businesses comply with the specified practices.
- Large manufacturers and multi-location dealers — these entities are better positioned to absorb retrofit costs and therefore gain a competitive compliance advantage over small operators who may struggle to meet capital requirements.
- Employees and customers of licensed premises — mandatory locked storage rooms and stricter access controls reduce the chance of on-site thefts and potentially improve workplace safety.
Who Bears the Cost
- Small licensed firearm dealers and single-shop manufacturers — they will likely shoulder the heaviest relative financial burden for retrofitting doors, bars, alarm systems, and wall treatments, or for negotiating costly lease modifications.
- Property owners and landlords of leased storefronts — structural changes (welded hinges, added steel mesh, exterior security doors) may require landlord consent and capital investment that the lease may not anticipate.
- Security contractors and installers — while they stand to benefit commercially, they also face capacity and compliance risk: installers will need to certify installations meet statutory thresholds and may be held to higher liability standards.
- Regulatory agencies and local code inspectors — enforcement requires technical inspections and may impose administrative costs if agencies must validate compliance, adjudicate exceptions, or reconcile conflicts with building and fire codes.
Key Issues
The Core Tension
The central dilemma is a trade-off between preventing commercial firearm theft through prescriptive, enforceable hardware standards and the real-world costs and safety conflicts that such prescriptions create for small businesses, landlords, and local code authorities; the more precise the mandate, the clearer the compliance path — but also the greater the risk of unintended collisions with building codes, lease terms, and operational realities.
The statute’s prescriptive, hardware-focused approach solves the problem of ambiguity — it tells inspectors what to look for — but it creates implementation tensions. First, some required features (bars, grates, welded hinges) can conflict with municipal building and fire-egress codes or landlord obligations in lease agreements, producing a practical compliance bind for tenants and owners.
The bill gives technical thresholds (bar diameter, grill gauge, 10-gauge mesh) but leaves open how those measures interact with standards for emergency egress or accessibility; resolving those conflicts will require coordination between code officials and the agencies charged with enforcing this chapter.
Second, the law references central monitoring and explicit construction standards but does not define terms like “central monitoring,” “secure facility” beyond the listed hardware, or the process for inspecting and certifying compliance. There is also an exception reference (Section 29142) that is not included in the text provided; that cross-reference could create narrow or broad carve-outs that materially affect which premises must retrofit.
Finally, the operational rules — locking loading docks when unattended and separating ammunition from firearms — reduce certain risks but impose recurring operational burdens (key management, supervision) that create new failure points for compliance audits and liability claims.
Try it yourself.
Ask a question in plain English, or pick a topic below. Results in seconds.