The federal government’s new approach to medical marijuana is moving from regulatory language to dispensary floors. The Drug Enforcement Administration has begun conducting detailed inspections of state-licensed medical cannabis businesses seeking federal registration under the Schedule III framework established earlier this year, and newly disclosed documents show just how closely federal officials are examining the operations of an industry that, until recently, functioned almost entirely outside the federal controlled-substance system. A 26-question DEA questionnaire being used with Colorado applicants asks about suppliers, product types, interstate purchasing, synthetic cannabinoids, inventory, labeling, packaging, disposal and even whether dispensaries intend to grow cannabis plants at the retail location.
The inspections represent a striking reversal in the relationship between DEA and state-legal medical marijuana businesses. For decades, the agency regarded most commercial marijuana activity as prohibited Schedule I drug trafficking under federal law. Now DEA personnel are entering some of the same types of facilities not primarily to shut them down, but to determine whether they qualify to become federally registered handlers of Schedule III medical marijuana. Early operators describe the encounters as relatively cooperative, but the amount of information requested makes clear that Schedule III is bringing something the cannabis industry has rarely experienced: direct, ongoing federal controlled-substance oversight.
DEA Wants a Detailed Picture of How Dispensaries Operate
The newly disclosed questionnaire from DEA’s Rocky Mountain Division provides one of the clearest looks yet at what federal regulators want to know. Among its questions, applicants are asked whether they expect to order marijuana or marijuana products from other states, whether they will purchase synthetic cannabinoids, whether seeds or plants will be brought into the dispensary for cultivation and exactly what kinds of products the facility sells. DEA specifically lists flower, pre-rolls, gummies, concentrates, extracts, tinctures, topical products, oils and vape products as examples. Businesses are also being asked to identify medical-marijuana suppliers by name and address and provide their DEA registration numbers.
The questioning extends well beyond products on a shelf. DEA wants to know how expired, damaged, moldy, insect-infested or discontinued cannabis is destroyed; how products are packaged and sealed; and what procedures businesses use to prevent diversion. Applicants have already been required to describe standard operating procedures covering ordering, receiving, inventories, storage, security, dispensing, distribution, destruction, theft or loss reporting, due diligence and record maintenance. They must also disclose information about individuals expected to have access to controlled substances, including professional authorizations and histories involving controlled-substance discipline or convictions. The result looks increasingly less like a simple federal permit application and more like a comprehensive review of the entire chain of custody surrounding medical cannabis.
Early Inspections Have Lasted Hours and Required Extensive Documentation
The inspections did not begin in Colorado. Some of the first publicly reported visits occurred in Mississippi in June, when DEA officials visited at least two state-licensed dispensaries after the companies submitted federal registration applications. According to the Mississippi Medical Marijuana Association, teams of roughly five or six federal representatives participated in the visits. One dispensary owner reported that DEA personnel spent about six hours touring his Jackson facility, discussing business practices and requesting supporting records. Those involved described the tone as collaborative and inquisitive rather than adversarial, with even the visiting officials appearing to be working through the practical details of a regulatory system that did not exist several months earlier.
The paperwork requested during those early reviews shows the depth of the examination. Reported requests included documentation of license transfers and ownership changes, communications concerning state violations or fines, lists of owners and affiliated businesses, complete inventories, vendor lists, descriptions of ordering and purchasing procedures, patient intake and sales procedures, METRC purchase histories, employee records, training materials and detailed security plans identifying surveillance hardware and software. Operators were also asked about how sales records are retained and, in some cases, told that surveillance notices should be displayed outside the property. Cannabis attorneys following the process say DEA offices are commonly requesting information on beneficial ownership, responsible personnel, patient verification, security design, site control, employee screening and operating procedures before or during physical inspections.
Why DEA Is Inspecting State-Licensed Cannabis Businesses at All
The new process originates in an April 2026 Justice Department order that fundamentally changed the federal treatment of medical marijuana. Effective April 28, the government placed marijuana covered by qualifying state medical-marijuana licenses—as well as FDA-approved marijuana-containing drug products—into Schedule III of the Controlled Substances Act. The rule simultaneously created a federal registration pathway for state-licensed marijuana manufacturers, distributors and dispensers. DEA now maintains a dedicated medical-marijuana dispensary registration system through its Diversion Control Division.
The rule deliberately relies heavily on existing state regulation. Federal regulators acknowledged that mature state medical-cannabis systems already perform many of the functions DEA wants from controlled-substance regulation, including product tracking, facility inspections, security requirements, recordkeeping and controls against diversion. Under 21 CFR 1301.13(k), a state medical license serves as evidence that an applicant is authorized to perform the requested activity under state law, and DEA is directed generally to register qualifying applicants unless doing so would conflict with the public interest or international treaty requirements. But state authorization does not eliminate DEA review. The agency retains authority over federal registration and can investigate whether an applicant’s controls, personnel, records and operations satisfy the new framework.
Schedule III Does Not Mean Marijuana Has Been Federally Legalized
The distinction between medical rescheduling and legalization is critical. The April order did not legalize all marijuana nationwide. It placed cannabis covered by qualifying state medical-marijuana licenses into Schedule III while marijuana outside that category—including federally unauthorized adult-use cannabis—remains subject to a separate rescheduling process. DEA’s own preliminary order for this summer’s broader hearing explicitly stated that state-regulated medical marijuana had already been rescheduled and that the proceeding would instead determine whether the remainder of marijuana should also move from Schedule I to Schedule III.
That creates particularly complicated questions for companies operating both medical and recreational businesses under the same roof. DEA’s dispensary application specifically asks whether an applicant also handles recreational marijuana. Federal registration authorizes activities involving medical cannabis within the scope of the business’s state medical license; it does not automatically extend Schedule III protection to nonmedical sales. Cannabis regulatory attorneys have identified the separation of medical and adult-use operations as one of the important unresolved implementation issues, especially when inventory, employees, facilities and corporate structures overlap.
Federal Inspectors Are Focusing Heavily on Diversion and the Supply Chain
Many of DEA’s questions make more sense when viewed through the Controlled Substances Act rather than ordinary cannabis regulation. When evaluating Schedule III manufacturers and distributors, federal law directs DEA to consider whether businesses maintain effective controls against diversion into unauthorized channels, comply with state and local law and have acceptable histories handling controlled substances. That helps explain why federal officials want supplier names, vendor histories, product lists, ownership details, security systems and descriptions of exactly how marijuana moves from receiving through dispensing or disposal.
The question about obtaining cannabis from other states is especially interesting, but it should not be mistaken for an announcement that unrestricted interstate cannabis commerce has begun. DEA appears to be mapping applicants’ proposed supply chains and determining which federally registered parties would be involved. Whether a particular interstate transaction is lawful can still depend on federal registration, the scope of state licenses and the laws of the states involved. Similarly, asking about synthetic cannabinoids does not imply that all synthetic THC products have been incorporated into the medical Schedule III framework. The April rule specifically addresses marijuana, marijuana extracts and naturally derived delta-9 THC covered by FDA approval or qualifying medical licenses while maintaining separate treatment for previously scheduled synthetic cannabinoids.
Packaging, Records and Disposal Are Becoming Federal Compliance Issues
One seemingly small requirement illustrates how federal law will now overlay existing state cannabis regulations. DEA’s Colorado questionnaire asks applicants to provide their labeling, packaging and sealing policies and points to the federal warning required for Schedule III drugs dispensed to patients: labels must clearly warn that transferring the drug to anyone other than the patient is a crime. The Controlled Substances Act already contains that requirement for Schedule II, III and IV drugs. The new medical-marijuana framework generally allows businesses to rely on state packaging and labeling rules, but the federal transfer warning must still be incorporated.
Federal rules likewise emphasize records, inventory and disposal. The April order says state-required records should be accepted to the maximum extent possible, an approach intended to avoid forcing operators to maintain two entirely separate compliance systems. Nevertheless, DEA is now asking businesses to demonstrate that those records actually account for products from receipt through sale or destruction. The agency’s interest in deadstock, expired cannabis, defective products and METRC histories shows that federal registration will involve more than obtaining a certificate and continuing business as usual. DEA wants evidence that controlled marijuana remains traceable throughout its lifecycle.
Registration Offers Major Benefits, but It Comes With a New Regulator
There are significant reasons businesses would voluntarily enter this system. Applicants that submitted during the initial 60-day window received an expedited pathway under which DEA was directed to make every effort to process applications within six months, while qualifying early applicants could continue state-authorized medical operations while their applications remained pending. DEA continues to accept applications after that period, although later applications do not receive the same expedited provision.
Schedule III also carries potentially enormous tax consequences. Internal Revenue Code Section 280E prevents businesses trafficking in Schedule I or II controlled substances from taking many ordinary federal deductions. DEA’s final rule specifically noted that holders of state medical-marijuana licenses are no longer within 280E’s Schedule I-or-II trigger for their qualifying medical activity, although federal tax agencies are expected to provide additional guidance and operators with mixed medical and adult-use businesses face more complicated questions. The trade-off is becoming increasingly visible: medical cannabis operators can gain federal recognition and potentially substantial financial benefits, but in exchange they are entering the same federal diversion-control structure that supervises other controlled substances.
Different DEA Regions Appear to Be Applying the New System Differently
One emerging issue is consistency. Newly obtained 26-question document comes from DEA’s Rocky Mountain Division, which covers Colorado, Montana, Utah and Wyoming. Earlier Mississippi inspections were handled by the New Orleans Division and involved overlapping but not identical requests. Mississippi operators were reportedly questioned about state disciplinary history, ownership transfers and detailed security matters that do not appear as stand-alone questions on the Colorado document. DEA had not publicly explained the regional differences when asked about them.
Cannabis attorneys monitoring applicants nationally have observed the same pattern. DEA application reviews are being handled by regional offices, and the timing of outreach has differed between medical-only states and states operating both medical and recreational markets. The core themes—ownership, SOPs, security, patient verification, responsible personnel and diversion controls—appear consistent, but the exact documents and follow-up questions can vary. That could change as DEA gains experience and develops more standardized procedures. For now, however, state-licensed businesses should not assume that passing a state inspection predicts exactly what federal inspectors will ask.
DEA Inspections Mark a New Phase of Federal Marijuana Policy
The broader marijuana rescheduling story is still developing. DEA’s formal hearing on moving the remainder of marijuana to Schedule III ran from June 29 through July 15, and in an August 17 post-hearing brief the federal government itself argued that marijuana can no longer remain in Schedule I and should be transferred to Schedule III. That recommendation has not yet completed the broader rescheduling process, meaning the current inspection and registration system remains most directly relevant to state-regulated medical cannabis.
What is already clear is that federal recognition is not producing deregulation. It is producing a different kind of regulation. Medical marijuana businesses that once operated in a strange legal space—licensed and intensively inspected by states while prohibited federally—are beginning to encounter DEA as an ordinary regulator of their inventories, employees, suppliers, security systems and patient-dispensing practices. The agency’s 26-question Colorado questionnaire and hours-long facility visits are early evidence of what Schedule III medical cannabis may look like in practice: fewer absolute federal prohibitions, but significantly more direct federal accountability. For the medical cannabis industry, that may ultimately prove to be one of the most consequential changes of rescheduling.
