Marijuana's Rescheduling Hits Reality: DEA’s New Dispensary Registration is Still a Moving Target
By Hunter DeKoninck
This post is for general informational purposes and does not constitute legal advice.
Nearly five months after DOJ moved medical marijuana into Schedule III, DEA is still rushing to build a new registration framework for dispensers and implement a broader regulatory scheme for all FDA-approved products containing marijuana (currently, no such products exist) and state-regulated marijuana products for which a state license is issued. Despite DEA’s best efforts to meaningfully implement and timely react to DOJ’s rescheduling order, applicants and registrants are becoming increasingly confused on what is required of them. Even Congress is left confused. Just last month, a bipartisan group of congressmen sent a letter to the Trump administration requesting that it provide basic information related to DEA’s implementation by the end of September. Here's the background, and what we're actually seeing in practice.
The Background
On April 23, 2026, DOJ issued an order—following an executive order President Trump issued last year that directed DEA to expedite marijuana rescheduling—placing two specific categories of marijuana into Schedule III of the CSA:
Marijuana contained in FDA-approved drug products (currently, no such product exists)
Marijuana subject to a state medical marijuana license
To emphasize, these are the only types of marijuana products that were moved to Schedule III. This was not a general rescheduling of all marijuana, and it's an important distinction I flag for any registrant reading headlines that say “marijuana moved to Schedule III” without qualification. Recreational and adult-use marijuana, unlicensed marijuana, bulk marijuana, and marijuana extracts or derivatives that fall outside an FDA-approved product or a state medical license all remain Schedule I. A decision on the broader rescheduling of all marijuana is not expected to come from DEA until late 2026 or early 2027.
In short, DOJ's narrow, two-category order is what is in effect right now, triggering registration obligations today; everything else about marijuana's scheduling status remains pending.
The New Dispensary Registration Requirement
DOJ's April order requires DEA to register state-licensed medical marijuana businesses across the supply chain unless registration would conflict with the public interest or a treaty obligation. DEA implemented that as a new registration category, separate from a pharmacy's existing Schedule II–V registration. A pharmacy that already holds a standard controlled substance registration cannot use it to handle non-FDA-approved medical marijuana products. It would need to obtain the new medical marijuana dispensary registration on top of what it already has, which it cannot obtain until it has been issued a state license.
DEA built a dedicated Medical Marijuana Dispensary Registration Portal for the application, and set June 26, 2026 as the deadline to apply for expedited review.
So, Who is Confused and What is the Confusion?
On August 18, 2026, four House members sent a bipartisan letter to President Trump, HHS Secretary Kennedy, Treasury Secretary Bessent, and Attorney General Blanche seeking clarity on a number of aspects of how DEA is implementing DOJ's April 2026 order. The congressmen are asking for answers by September 30, 2026 on:
Whether marijuana grown by a patient or their registered caregiver under state law is currently Schedule I or Schedule III.
Whether DOJ is coordinating with CMS on Medicare coverage or reimbursement for Schedule III medical marijuana products, and how insurance coverage is expected to work at all for compliant patients.
How the framework applies to operators in states with a single license covering both medical and adult-use activity, versus states with separate licenses.
How DEA will treat businesses who don't obtain registrations.
What information DEA will require to obtain and maintain registration, how DEA will use it, and what safeguards will prevent misuse of that information.
The letter credits the administration for the progress made rather than attacking the rescheduling decision itself. That friendly tone may make a substantive response by September 30 more likely.
Beyond the open policy questions, the on-the-ground experience appears to have been inconsistent. Some DEA divisions have been sending applicants detailed follow-up questionnaires after facility inspections. One version we've seen runs 26 questions across four categories: company background (ownership and management structure, hours of operation, specific products offered, employees with physical access to marijuana, prior controlled-substance experience, testing labs used, and any powers of attorney on file); suppliers (identity, DEA registration numbers, shipping methods, and whether the applicant will order from other states, order synthetic cannabinoids, or bring in seeds or plants to grow on-site); ordering, receiving, and dispensing (SOPs for inventory and sales, patient verification procedures, and labeling and packaging policies — including the federal requirement under 21 CFR § 1301.13(k)(8) that dispensed marijuana products carry a warning that transferring the drug to anyone but the patient is a crime); and records and reporting (inventory frequency, return policies, theft and loss procedures, and disposal of defective or expired product).
That's a thorough, legitimate list of information being requested of applicants. Other divisions have reportedly asked applicants for additional information, like license transfer histories and full security plans. For an applicant, that means there's no single template to rely on. What DEA requires of you may depend on which division happens to be handling your application.
My Read
DOJ's April order itself is a clean, narrow rule: (1) it moved two categories of products to Schedule III while the rest of marijuana remains in Schedule I and (2) it requires DEA to register state-licensed applicants, unless there is a specific public interest problem. As DEA rulemaking goes, that's about as clear as it can get. The confusion is entirely with the order's implementation, which should not surprising given the impossible timeline DEA was forced under—an executive order pushing for speed, an expedited review deadline, and an entirely new registration category that must be built for a type of registrant DEA's field offices have no institutional experience vetting.
What stands out to me is how much work DEA still has in front of it. By the time Congress sent its letter in August, DEA had already held its full hearing on the broader marijuana rescheduling issue back in June and July of 2026. And, yet, DEA still has not resolved basic operational questions about the narrower rule that's already in effect and already generating registration obligations today. The bipartisan congressional letter tells me the pressure here is for DEA to finish building the plane it's already flying, not to ground it, so I'd expect incremental guidance rather than any rollback of DOJ's April order.
What This Means for Dispensaries
If you want to handle non-FDA-approved medical marijuana products, a pharmacy's existing Schedule II–V registration is not sufficient. Pharmacies need the separate medical marijuana dispensary registration, and they need their state license in hand before DEA will issue it.
Apply through DEA's Medical Marijuana Dispensary Registration Portal. The expedited-review track under the April order has already had a hard deadline attached to it once (June 26).
If a business touches home cultivation, hemp-derived products, or dual medical/recreational licensing, don't assume Schedule III treatment reaches those products. It currently doesn't; and Congress's own letter shows that the government is still sorting out exactly where those lines fall.
The Bottom Line
DEA's medical marijuana dispensary registration is a real, narrow and current requirement, not a future proposal. But six months into the rollout, both Congress and applicants on the ground are still waiting on basic information on DEA's implementation and clarity on how DEA will enforce the new requirements.
