DEA Scheduling III Requirements for Cannabis

DEA Schedule III Medical Cannabis Registrations and the November 29 Supply-Chain Deadline

Summary

On October 30, 2026, the Drug Enforcement Administration issued the first federal registrations to state-licensed medical cannabis dispensaries, and at the same time set a November 29, 2026 deadline for every medical cannabis business to confirm that it buys from and sells to only DEA registrants or timely DEA applicants. Operators that miss the deadline, or that keep dealing with businesses outside the federal system, risk denial of their pending applications or revocation of their registrations.

These developments implement the Attorney General’s April 2026 order moving state-licensed medical cannabis to Schedule III of the Controlled Substances Act. The order also lifted the Internal Revenue Code Section 280E deduction disallowance for covered medical activities, with Treasury guidance on transition and allocation still pending. Adult-use cannabis remains in Schedule I, outside both the registration pathway and the tax relief.

This alert covers who must register, what the November 29 deadline requires, how Section 280E now applies, and the steps clients should take now.

Background: The April 2026 Order and the Two-Track Framework

On April 22–23, 2026, Acting Attorney General Todd Blanche issued a final order (AG Order No. 6754-2026), effective April 28, 2026, that immediately moved two categories of cannabis from Schedule I to Schedule III under 21 U.S.C. § 811(d)(1):

1. Marijuana contained in an FDA-approved drug product; and
2. Marijuana manufactured, distributed, or dispensed under a qualifying state-issued medical cannabis license.

Everything else — adult-use product, cannabis held outside a medical license, and synthetically derived THC — remains in Schedule I. The order did not reschedule “marijuana” as a whole.

The broader question is on a separate track. The DEA convened a new administrative hearing from June 29 through July 15, 2026, on whether marijuana generally should move to Schedule III. No decision has issued, and the DEA has given no timeline. Until it does, the Schedule III framework described in this alert applies only to state-licensed medical cannabis and FDA-approved products.

For operators in medical-only states (including Alabama, Florida, Mississippi, South Dakota, Texas, Virginia, and West Virginia), the entire licensed industry falls within the carve-out. For operators in adult-use states such as California, only the medical-licensed portion of the business qualifies, and the Department of Justice has made clear it will continue to prosecute marijuana activity outside the state-regulated medical system.

DEA Registration: Who Must Register and Where the Rollout Stands

Schedule III status brings state-licensed medical cannabis inside the Controlled Substances Act’s registration regime. Every person who manufactures, distributes, or dispenses covered medical cannabis must hold a DEA registration to do so lawfully, and registrants must comply with federal security, recordkeeping, inventory-control, labeling, and disposal requirements applicable to Schedule III substances. The DEA has stated plainly that a state license alone does not confer federal registration, and that applicants must clear a pre-registration investigation, which has included multi-hour on-site inspections.

These are standard DEA registrations under existing forms, not a new license category. Medical cannabis is identified by drug codes 7362, 7353, and 7386.

The DEA’s published list of timely applicants shows 6,983 locations: more than 4,000 dispensaries, more than 2,000 manufacturers, and roughly 700 distributors. Oklahoma accounts for 2,442 entries, followed by Florida (812) and California (771). Notably, no registrations have yet issued to operators in any adult-use state, even where those operators applied on time.

Operators that did not apply during the initial window are not foreclosed from registering, but they lose “Timely Applicant” status, which, as explained below, now determines whether other licensees may lawfully do business with them.

The November 29, 2026 Deadline: Compliant Supply Chains

Alongside the first registrations, the DEA released guidance on October 30, 2026 that effectively closes the lawful medical supply chain to anyone outside the federal system. The key rules:

• Who may transact with whom. Businesses that applied during the initial window (“Timely Applicants”) may continue to buy from and sell to one another, and to newly registered companies, while their own applications are pending. They may not transact in Schedule III medical cannabis with anyone else. The DEA has stated that doing so could be grounds for denial of a pending application or revocation of a registration.
• The deadline. Operators have until Nov 29, 2026 to verify their trading partners and establish “compliant supply chains.”
• Required diligence. For each supplier and customer, operators are expected to (1) obtain the counterparty’s DEA submission confirmation or certificate of registration, (2) confirm the counterparty holds an active state license, and (3) retain records of that diligence.
• Existing inventory. Product acquired before the guidance, including from businesses that do not qualify, may still be sold.
• Lab-testing exception. Because few testing laboratories are DEA-registered, the DEA has stated it does not intend to penalize operators that send de minimis quantities to a non-registered in-state laboratory for state-mandated testing, provided they keep detailed records and using a registered lab would violate state law.

The practical effect is that a licensee that did not apply, or that dropped out of the process, becomes a commercial dead end: registered and timely-applicant licensees can no longer lawfully buy its product or sell to it after November 29. Clients should assume their counterparties will begin asking for proof of DEA status immediately.

Section 280E and Federal Tax Reporting

Section 280E of the Internal Revenue Code disallows ordinary business deductions and credits for any trade or business that consists of trafficking in a Schedule I or Schedule II controlled substance. Because the statute does not reach Schedule III, the April order took state-licensed medical cannabis activity outside Section 280E as of its effective date. Adult-use activity remains in Schedule I and remains fully subject to Section 280E.

Treasury and the IRS announced on April 23, 2026 that they will issue guidance addressing the tax consequences of the order. As of this alert, that guidance has not been finalized. The announcement previewed three points:

• Transition rule. For Section 280E purposes, rescheduling is expected to apply to the full taxable year that includes the order’s April 28, 2026 effective date — for calendar-year taxpayers, all of 2026.
• Allocation for mixed businesses. The guidance is expected to address how Section 280E applies to businesses with both covered activities (medical) and non-covered activities (adult-use), including expense apportionment. Vertically integrated and dual-license operators should expect allocation rules and should begin segregating medical-licensed entities, inventory, revenue, and expenses now.
• No ruling on registration. Neither the announcement nor the DEA order states whether DEA registration is a condition of Section 280E relief. The DEA has expressly disclaimed any determination of federal tax liability.

On the registration question, the stronger textual reading is that Section 280E turns on the substance’s schedule, not on the taxpayer’s registration status, so a state-licensed medical operator should be outside Section 280E regardless of whether its DEA application has been approved. That said, an operator that has not applied, or whose application is denied, will face a harder audit posture, and the IRS has not addressed the point. Our recommendation is that clients (1) file for registration if they have not, (2) claim deductions for the medical-licensed side of the business for 2026 under a documented allocation methodology, and (3) reserve for the possibility that forthcoming guidance narrows the relief for unregistered operators.

If the DEA ultimately adopts broader Schedule III treatment through the pending hearing, Section 280E would cease to apply to adult-use activity as well, subject to whatever transition guidance Treasury issues at that time.

What Clients Should Do Now

Before Nov 29, 2026

• ☐ Confirm your own DEA status: registered, Timely Applicant (application submitted during the initial window), or neither. If neither, file the appropriate application immediately; the registration category and fee depend on the activity.
• ☐ Build a counterparty register listing every supplier, distributor, customer, and laboratory you transact with in medical cannabis.
• ☐ For each counterparty, collect and file (1) its DEA submission confirmation or certificate of registration and (2) evidence of its active state license. Calendar a re-check cadence (quarterly at minimum).
• ☐ Identify counterparties that cannot produce DEA status. Plan to wind down those relationships, or to sell through existing inventory acquired before October 30, before the deadline.
• ☐ Document any reliance on the lab-testing exception: which lab, why no registered lab is available under state law, and the quantities sent.
• ☐ Add DEA-status representations, covenants, and termination rights to supply, distribution, and purchase agreements.

Ongoing

• ☐ Prepare for pre-registration inspection: physical security, controlled-substance recordkeeping, inventory controls, and disposal procedures consistent with Schedule III requirements.
• ☐ For dual medical and adult-use operators, segregate the medical-licensed entity, inventory, and books in anticipation of Treasury’s allocation guidance.
• ☐ Review 2026 tax positions and estimated payments with your tax advisor in light of Section 280E relief for medical activity and the expected full-taxable-year transition rule.
• ☐ Monitor the DEA’s phased approvals and any decision in the broader rescheduling proceeding.

Transactions, Lenders, and Distressed Operators

DEA registration status is now a core diligence item in any medical cannabis transaction and a direct driver of asset value. Buyers, lenders, and secured creditors should take three points into account:

• Transferability. DEA registrations are personal to the registrant and are generally not assignable without the agency’s involvement. A sale of a registered dispensary or manufacturer will likely require a new registration or DEA consent in addition to the state license transfer. The DEA has not yet issued transfer guidance for medical cannabis registrants; until it does, deal timelines should allow for a federal step.
• Supply-chain cutoff. After November 29, a licensee without registered or timely-applicant status cannot lawfully sell medical product to, or buy from, the compliant market. That constrains inventory liquidation for a distressed operator, narrows the buyer pool for its assets, and should be reflected in lender borrowing-base and collateral analyses.
• Receiverships and assignments. A receiver, assignee for the benefit of creditors, or other fiduciary stepping into a medical cannabis business should determine the entity’s DEA status at the outset and preserve timely-applicant standing where it exists. Court orders appointing a receiver, and ABC engagement documents, should address authority to maintain, pursue, or surrender the federal registration alongside the state license.

Buchalter’s Cannabis Group and Receivership and Restructuring practices can assist with federal registration, counterparty diligence, transaction structuring, and the handling of registrations in distressed situations.

Contacts

For questions about this alert, please contact Richard P. Ormond or any member of Buchalter’s Cannabis Group.

This client alert is provided for general informational purposes only and does not constitute legal or tax advice. It is not a substitute for advice from counsel regarding your specific circumstances. The DEA, Department of Justice, and Treasury continue to issue guidance in this area, and the information above is current as of November 4, 2026.

This communication is not intended to create or constitute, nor does it create or constitute, an attorney-client or any other legal relationship. No statement in this communication constitutes legal advice nor should any communication herein be construed, relied upon, or interpreted as legal advice. This communication is for general information purposes only regarding recent legal developments of interest, and is not a substitute for legal counsel on any subject matter. No reader should act or refrain from acting on the basis of any information included herein without seeking appropriate legal advice on the particular facts and circumstances affecting that reader. For more information, visit www.buchalter.com.