Vatic Global Advisors
Frequently Asked Questions
Federal regulatory guidance for U.S. state medical cannabis operators navigating DEA Schedule III registration, Section 280E relief, and the separation of medical and adult-use operations.
The answers below provide general information about a developing area of federal law and do not constitute legal advice.
The April 2026 Order and What It Changed
What did the April 2026 Final Order actually do?
It moved two categories of marijuana from Schedule I to Schedule III of the Controlled Substances Act. The first is marijuana contained in an FDA approved drug product. The second is marijuana subject to a qualifying state medical marijuana license.
The order was issued under the Attorney General's treaty implementation authority, which allowed it to take effect on publication without notice and comment rulemaking.
Does this legalize marijuana under federal law?
No. A Schedule III substance is a controlled substance. It may be handled lawfully only by a person holding a DEA registration, and only for the activities that registration authorizes for legitimate purposes.
Was adult-use marijuana rescheduled, and why is the same plant treated differently?
Adult use marijuana was not rescheduled. It remains in Schedule I, as does synthetically derived tetrahydrocannabinol, which stays in Schedule I regardless of its intended use.
The same plant is treated differently because federal law sorts it by two separate measures, each independent of the plant itself.
The first measure is THC content by dry weight. Under the 2018 Farm Bill, cannabis carrying no more than 0.3 percent delta 9 THC on a dry weight basis is hemp, which sits outside the Controlled Substances Act, while cannabis above that threshold is marijuana and remains federally controlled. The dividing line is a concentration, so two plants of the same species can fall on opposite sides of federal control based only on how much THC they carry. Separate legislation has since narrowed this definition so that it turns on total THC concentration rather than delta 9 THC alone, and that change takes effect in November 2026, moving additional products across the line into the controlled category.
The second measure applies once cannabis qualifies as marijuana. The April 2026 order placed marijuana in Schedule III where it is subject to a qualifying state medical marijuana license or incorporated into an FDA approved drug product, because each of those supplies the recognized medical use and framework of controls that Schedule III placement requires. Marijuana handled for adult use carries no such framework, so it stays in Schedule I even though it is the same plant.
A separate administrative proceeding is considering whether marijuana more broadly should move to Schedule III. The results of that proceeding has not been published.
Deciding Whether to File
Is DEA registration required, and does it affect my Section 280E relief?
DEA registration is optional. The reschedule attaches to a state medical license, not to a DEA registration, so a state medical cannabis operator's qualified products remain Schedule III and Section 280E relief applies whether or not they are registered with the DEA.
Section 280E disallows deductions for businesses trafficking in a Schedule I or Schedule II controlled substance. It is a two part test that gates on schedule status, and once state licensed medical marijuana moved to Schedule III, that gate closed. The relief follows from the reschedule and attaches to the state license. It does not depend on holding a DEA registration.
What registration adds is separate. It gives your controlled substance activities lawful federal status, opens the research supply channel reserved for registrants, supports banking and insurance on conventional commercial terms, and places you in position for interstate commerce and export as state authorization allows. An operator who does not register keeps the tax relief but forgoes those channels, and the activity remains federally unauthorized even though the substance itself is Schedule III.
What was the filing deadline, and what did I lose by missing it?
The order provided an expedited review window running sixty days from publication in the Federal Register. The window closed at the end of June 2026.
Applications are still accepted. What a late applicant gives up is the expedited six month review target and the protection that allowed applicants inside the window to keep operating while the DEA reviewed the file.
Which form do I file, and what does registration cost?
Cultivators, manufacturers, distributors, and analytical laboratories file DEA Form 225 using the medical marijuana drug codes. Dispensers file Form 224-MMP. Applications are submitted through the DEA diversion registration portal.
Plan for a non-refundable application fee, plus an annual registration fee that varies by activity, with manufacturers at the high end and dispensers lower and renewed on a multi-year cycle. Budget separately for the security build and professional support the application assumes are already in place. Fees and the portal interface change from time to time, so confirm the current figures on the DEA Diversion website before you file.
Vatic guides you through drug code selection, the liability and supplier disclosures, and submission, so the file is complete and consistent before it reaches the agency.
Will filing expose me or my employees to added federal risk?
The application requires candid answers about the business and disclosures covering owners, officers, and the people who will handle the controlled substance. Because state legal operators have generally been filing federal tax returns since inception, the application does not make the operation newly visible to the federal government, though it remains a consideration to weigh carefully with counsel.
One practical step matters. Confirm that your people, including front line staff, are comfortable having their names and identifying information provided to the DEA. Make any required disclosure a known condition, give advance notice, and allow those who prefer not to be disclosed to make that choice, since disclosing identifying information without notice can create liability of its own.
I operate under tribal law. Can I register?
Yes, in the same way a state-licensed operator can. For controlled substance purposes, tribal lands are treated much as states are. Tribal nations are sovereign, but Congress and the Department of Justice have exercised federal authority over controlled substances that reaches conduct on tribal land, so the Controlled Substances Act and the DEA registration framework apply there.
An operator on tribal land is welcome to register, provided the tribe maintains a medical cannabis program and regulatory framework comparable to a qualifying state program. What matters to the DEA is whether that framework is one the agency would find satisfactory under the registration provisions of 21 CFR 1301.13(k), the public interest factors it weighs on any application, and the treaty obligations that govern marijuana registrations. Where the tribal program supplies the recognized medical use and the controls those standards require, the tribal license serves as the underlying credential the registration is built on, just as a state medical license does.
As with every question here, this is general information and not legal advice. Tribal programs vary in structure and maturity, so a tribal operator should confirm with counsel that its own framework meets the standard the DEA applies before filing.
State Law, Interstate Movement, and Export
Does my state's own law affect my federal DEA registration?
Yes, in two ways. First, a DEA registration requires a valid underlying state license, and the registration automatically suspends if that license is suspended, revoked, or allowed to expire. Federal authorization tracks the state credential, which makes keeping the state license in good standing a federal compliance matter and not only a state one.
Second, your state's substantive rules can foreclose opportunities that the federal registration would otherwise permit. A state prohibition on export or interstate transport is the clearest example. Mapping this state level exposure before you file is essential, and the state by state screen is the analysis Vatic leads with, because federal permission alone does not overcome a state law bar.
Can I ship medical cannabis across state lines once I am registered?
Not yet on a reliable basis. A transfer between two DEA registrants is theoretically available, but the FDA has not clarified whether such transfers are permitted under the Food, Drug, and Cosmetic Act. Until it does, the activity carries legal risk. Enforcement discretion may cover the gap in practice, but that is not a foundation on which to build a business.
State law is the second gate. Where a state has legislated to allow interstate transport, transfers will carry far less uncertainty once federal legality is settled. Where the exporting or importing state bars the movement, the federal registration does not cure it, and constitutional questions about how states may restrict such commerce remain open.
Can I move product between my own facilities in different states?
Possibly, and the analysis differs from an arm's length sale. A transfer between locations you own that hold separate registrations may not amount to a sale or marketing activity under the Food, Drug, and Cosmetic Act, which could keep federal food and drug law out of the picture. If that holds, state law governs what may ultimately be sold.
Transfers between separately owned registrations are a different matter and remain subject to the Act, so FDA guidance will be decisive there. The whole area is unsettled, and an operator should take counsel before acting on either assumption.
Research, Quota, and Ongoing Federal Obligations
Can registered researchers buy product from us?
Yes. A DEA registered researcher may now obtain marijuana and marijuana derived products directly from a state licensed operator, provided both parties held valid federal registrations at the time of the transfer. The order further provides that the DEA shall not treat the use of state licensed marijuana products in federally registered research as a basis for adverse action against a researcher's registration.
This opens a business to business channel serving universities, drug developers, and clinical research organizations. An unregistered operator cannot supply a researcher, and a researcher cannot lawfully accept product from one.
What is the crop purchase and sell back requirement?
A treaty obligation. The Single Convention requires that a government agency serve as the exclusive purchaser of cannabis production. To satisfy it, registered manufacturers establish a nominal price for their crops. The DEA purchases at that price and immediately resells at the same price plus an administrative fee.
The crop does not move. What does matter is that registered manufacturers must store crops in a facility to which the DEA maintains access until the transaction completes, and each manufacturer registration must specify the areas where cultivation is permitted. That has real consequences for how a site is designed and documented.
Will I be subject to production quota and federal reporting?
Manufacturers should plan for it. The Single Convention requires quota controls, and the order directs the Administrator to take the Single Convention's requirements, including any quota requirement, into account when evaluating applications. The Administrator is also authorized to require the recordkeeping and reporting necessary to comply with the treaty.
Nothing has been issued on the matter yet, but that is not a reason to ignore it. Quota administration and controlled substance reporting are among the more demanding obligations a registrant carries, and the operators who understand them before they arrive will have a considerable advantage over the ones who meet them for the first time in a notice.
Which DEA regulations will actually apply to me, and which defer to my state program?
The order largely defers to state medical programs and does not spell out which of the broader controlled substance regulations in 21 CFR Part 1300 and following will be required of state licensed registrants and which will yield to state requirements. In practical terms, registering today means entering a federal framework whose full contours are still being drawn. Vatic helps you prepare for the requirements that are already clear while tracking those that are not.
Decoupling Medical and Adult-Use Operations
I hold both a medical and an adult use license. Is separating operations enough?
You are inside two federal regimes at once. Your medical activity is Schedule III and can be registered. Your adult use activity remains Schedule I and cannot be. The obligation to keep them apart arrived with the reclassification, not with the registration, and it applies whether or not you file.
You have most likely been told to separate operations and recordkeeping. That is the advice circulating in the market, and it may not answer the test that actually applies.
Federal registration law examines the applicant, and the applicant includes its owners. The public interest inquiry asks whether the applicant maintains effective controls against diversion into other than legitimate medical, scientific, and industrial channels.
The DEA has denied a registration based on an owner's conduct, rejecting the argument that the owner was not involved in daily operations. Separating operations does not sever common ownership. No published guidance has addressed the difference, and the DEA has not said how it will resolve it.
What exactly has to be separated between the two operations?
Separation is not a single wall. It runs across every dimension a regulator or a bank can examine. In practice that means separate facilities rather than divided space within a shared building, physically segregated inventory, separate personnel, separate financial accounts with cost accounting that isolates the medical activity, and recordkeeping and data kept apart from the adult use side. Vatic assesses each of these dimensions and identifies where your current setup falls short of what the federal position requires.
As a dual-license operator, does the separation apply only at the store, or further up the supply chain?
Across the entire supply chain. Separation runs the full length of the operation, from cultivation through manufacturing, distribution, and retail. This is not an open question awaiting DEA guidance. It is already built into federal law. Once the medical side holds a DEA registration, it is manufacturing and handling a Schedule III controlled substance under federal authority, while the adult use side is manufacturing and handling a Schedule I controlled substance that federal law does not permit. The two cannot share an operation. No registrant can run one half of a business lawfully within the controlled substance framework and the other half outside it, and the DEA will not allow a registration to sit on top of that arrangement.
The line is firm at every level. Registered medical cultivation, manufacturing, distribution, and dispensing have to be wholly distinct from their adult use counterparts. That means separate facilities rather than divided space within a shared building, along with separate inventory, separate personnel, and separate records and financial accounts. The registered medical operation stands on its own physical footprint. There is no point in the chain where the two sides share a site or where commingling becomes acceptable.
Registration also narrows who the medical side may transact with. Under 21 CFR 1301.13(k), a registrant may move controlled substances only to and from other DEA registrants. The registered medical operation therefore cannot source from or supply the adult use side, and it cannot transact with any counterparty that does not itself hold a registration. That restriction reinforces the separation from the outside, because the lawful supply chain for the medical entity is closed to non-registrants.
Should I split into two separate legal entities, and what does that involve?
Often yes, and several states are already pushing operators in that direction. California's emergency rule, for example, lets a dual designated operator divide a single license into two entities, each with its own tax identification number, its own permits, and separately maintained records. Other states offer conversion routes, such as allowing an adult use dispensary to opt into a medical dispensary license, which can change the structure available to you.
A legal split is a structural step, and it sits on top of genuine physical separation rather than in place of it. Two entities that still share a facility do not satisfy the federal requirement, so the medical entity needs its own site along with its own inventory, personnel, records, and accounts. The structural split then addresses the ownership problem that physical separation alone does not solve, since dividing operations does not by itself sever common ownership. The right structure is specific to your states, your license types, and your tax position, and it should be set with your legal and tax advisors. Vatic scopes the separation build and coordinates with those advisors so the operational design and the legal structure fit together.
How do I keep the finances separate so my 280E relief and banking hold up?
The financial separation has to be real and demonstrable, not notional. The medical activity sits outside Section 280E while the adult use activity remains inside it, and holding that benefit means keeping separate accounts and cost accounting that cleanly isolates the medical deductions rather than blending them with Schedule I activity.
How should I answer the application question that asks whether I handled controlled substances, meaning marijuana, without federal authority?
Truthfully, without hesitation. Every applicant answers every question on the application honestly, in full, every time, whatever the operating history has been. There is no version of this question where anything other than a complete and truthful answer is the right one.
The concern behind the question is understandable but misplaced. Prior handling of marijuana without federal authority is already a given from the DEA's point of view. You are applying as an operating business, so the agency knows the activity has been taking place. What the application does is put that history in front of the agency to evaluate, not to discover. The DEA's task is to weigh that record against the public interest factors and decide whether it counts against the registration. A truthful disclosure lets that evaluation proceed on its merits.
A false answer removes any of that in one step. Misrepresentation on a federal controlled substance application is a violation in its own right, and because the underlying history is already visible, a false answer is one the agency is positioned to catch. Being caught in it converts a record the DEA was weighing into a near certain denial. Honesty preserves the applicant's standing. A misstatement forfeits it.
Where the history is significant, the productive work is preparing to address it on the record, showing the controls now in place and the separation that has been built, so the agency weighs a corrected and well documented posture rather than an unexplained one. Vatic helps you assemble that picture. What Vatic will never do is help you characterize the answer as anything other than the truth.
The registration window has closed. Is it too late to decouple and register my medical side?
No. Missing the expedited window did not close eligibility, and applications are still accepted.
Decoupling, in any case, was never a filing window task. It is the foundation that makes a defensible medical registration possible in the first place. An operator whose medical inventory and finances are not cleanly separated does not have a clean Schedule III position to register, or to build a future export on. Separation is arguably step zero, and it is worth doing now regardless of when you file.
What does a Vatic decoupling engagement include?
It begins with a gap assessment across the dimensions that matter, namely inventory, facilities and material flow, personnel and access, financial accounts and cost accounting, and recordkeeping. From there Vatic designs the physical segregation, with a mock inspection where it is useful, and prepares the standard operating procedures and quality system documentation that evidence the separation. Where a structural split or a state license conversion is indicated, Vatic coordinates with your legal and tax advisors so the operational design and the legal structure align.