(a) Authorization. — Subject to subsection (b), a grower or processor may do all of the following in accordance with bureau rules:

1. (1) Obtain seed from outside this state to initially grow medical cannabis.
2. (2) Obtain seed and plant material from another grower/processor within this state to grow medical cannabis.

(b) Limitations. — A grower or processor may only grow, store, harvest or process medical cannabis in an indoor, enclosed, secure facility which:

1. (1) Includes electronic locking systems, electronic surveillance and other features required by the bureau; and
2. (2) Is located within this state.