Having security cameras is not a HIPAA violation. However, failure to properly prevent unauthorized access to those tapes and video of patients going in and out leak on the internet would be a violation since we now know you as a patient visit this medical establishment.

That would be a violation.

Also medical only dispensaries aren't open to the public in a normal sense. Right now if I wanted to, I by law cannot step foot in a medical dispensary. They also have to verify I'm a valid patient as well before I'm allowed through that door.