Chronic Risk
July 8, 2026·By Alex Hearding

How to Prepare for DEA Registration if Schedule III Moves Forward

Industry News Brief
How to Prepare for DEA Registration if Schedule III Moves Forward

For years, cannabis operators have focused almost exclusively on state compliance. If cannabis is ultimately moved to Schedule III under the federal Controlled Substances Act, that will no longer be enough for many businesses.

One of the biggest misconceptions surrounding rescheduling is that businesses will simply continue operating as they do today, only with fewer tax burdens. The reality is likely to be far more complex.

If your business intends to manufacture, distribute, research, or potentially supply products within a federally regulated framework, DEA registration may become part of your future.

Operators who begin preparing now will have a significant advantage over those waiting for regulations to be finalized.

What Is DEA Registration?

The U.S. Drug Enforcement Administration (DEA) regulates the manufacture, distribution, research, import, export, and handling of controlled substances.

Every company handling federally controlled pharmaceuticals, including manufacturers, distributors, researchers, analytical laboratories, and reverse distributors, must operate under DEA registration appropriate for its activities.

If cannabis becomes a Schedule III controlled substance, certain cannabis businesses could eventually need DEA registration depending on their role in the supply chain and the final regulatory framework adopted by federal agencies.

The exact requirements will depend on future federal rules, but operators should expect significantly greater federal oversight than exists today.

DEA Registration Is More Than an Application

Many operators assume DEA registration is simply paperwork. It isn't.

The application is only one small part of demonstrating that your business can securely and responsibly handle controlled substances. Federal regulators are likely to evaluate whether your organization has the operational controls necessary to prevent diversion, maintain accountability, and protect public health.

In other words: your systems matter as much as your application.

Areas Operators Should Strengthen Today

While no one knows the exact framework that will apply to cannabis, decades of DEA oversight in other industries provide a strong indication of what regulators value.

1. Physical Security

DEA places tremendous emphasis on preventing theft and diversion. Your facility should already have:

Controlled access areas

Visitor management

Alarm systems

Video surveillance

Inventory protection

Restricted storage

Key and badge accountability

Many cannabis businesses already have strong security, but federal expectations may require additional documentation and procedural controls.

2. Inventory Accountability

Every gram should be traceable. Operators should ensure they have:

Accurate inventory reconciliation

Batch traceability

Documented adjustments

Loss investigations

Waste tracking

Chain-of-custody procedures

Federal regulators expect discrepancies to be investigated, not simply corrected.

3. Quality Management Systems

DEA registration does not replace quality management. In fact, quality systems become even more important.

A mature Quality Management System (QMS) should include:

Document control

Change management

Corrective and Preventive Actions (CAPA)

Internal audits

Training records

Equipment maintenance

Supplier qualification

Complaint handling

These systems demonstrate that your business operates consistently and can identify problems before they become regulatory issues.

4. Standard Operating Procedures

Every critical activity should be documented, including procedures for:

Receiving material

Production

Packaging

Labeling

Shipping

Inventory counts

Security

Cleaning

Equipment operation

Incident reporting

Record retention

If knowledge only exists in employees' heads, it isn't a system.

5. Employee Training

Federal inspectors rarely ask only what your procedures say. They ask whether employees actually understand them.

Training should be:

Documented

Role-specific

Current

Competency-based

Routinely refreshed

Training records are often just as important as the procedures themselves.

6. Documentation

If there is one lesson every regulated industry learns, it is this: if it isn't documented, it didn't happen.

Good documentation includes:

Maintenance logs

Cleaning records

Calibration records

Batch documentation

Incident investigations

CAPAs

Training records

Internal audits

Documentation builds credibility with regulators and supports your business if questions arise later.

DEA Registration Will Likely Be Only One Piece of Federal Readiness

DEA oversight is only part of the picture. Depending on your products and business model, operators may also need to align with requirements administered by the FDA, such as current Good Manufacturing Practice (cGMP) regulations, as well as broader quality management principles like ISO 9001.

Preparing for one agency while ignoring the others creates unnecessary risk. The companies best positioned for the future will build integrated management systems that support compliance across multiple regulatory frameworks.

Don't Wait for the Rules to Become Final

Many businesses are delaying investment because they believe it's too early. History suggests otherwise.

Companies that wait until regulations are finalized often find themselves rushing to implement systems, train employees, rewrite procedures, and purchase new technology under tight deadlines. Organizations that prepare now can spread those investments over time while improving their operations immediately.

Better documentation. Better training. Better quality. Better insurance. Better operational performance.

Those benefits exist whether federal reform arrives next year or five years from now.

The Bottom Line

No one knows exactly what the final federal framework will look like if cannabis is moved to Schedule III. But one thing is already clear: businesses with mature systems, disciplined documentation, strong security, and a culture of quality will be in the best position to adapt.

Federal readiness isn't about predicting every regulation. It's about building an organization that is ready for whatever regulations come next.

Prepare Before You're Required To

At Red Wolf Risk, we help cannabis operators build the operational foundation needed for the next era of regulation. Our Federal Readiness Assessment evaluates your quality systems, documentation, security, operational controls, and risk management practices to identify gaps and prioritize improvements.

Whether DEA registration becomes part of your future or not, the steps you take today can strengthen your business, reduce risk, improve insurability, and position you for long-term success.

The best time to prepare for federal oversight is before federal oversight arrives.

Alex Hearding is the Founder and President of Red Wolf Risk and has more than 17 years of experience in cannabis operations, risk management, quality systems, and regulatory compliance.

This piece is part of Chronic Risk, the insights publication of Red Wolf Risk. Read the full article, comments, and related essays on the original publication.

Read the full article
Get in touch

Let's talk about where your operation stands today.

Contact Red Wolf Risk