Pharmaceutical cold chain compliance intelligenceThursday, April 30, 2026

ColdChainCheck

The definitive source for pharmaceutical cold chain compliance

Regulatory Update

DEA Marijuana Rescheduling 2026 | Distributor Impact — ColdChainCheck

DEA proposes moving marijuana to Schedule III, requiring wholesale drug distributors handling FDA-approved cannabis products to obtain DEA registration and maintain controlled substance storage protocols. ColdChainCheck tracks 1,234 FDA-registered entities and explains compliance impact.

By ColdChainCheck Compliance TeamPublished April 30, 2026

DEA Marijuana Rescheduling: What Wholesale Drug Distributors Need to Know

On August 27, 2024, the DEA published a notice of proposed rulemaking to move marijuana from Schedule I to Schedule III under the Controlled Substances Act. If finalized, this rescheduling will require wholesale drug distributors handling FDA-approved cannabis products to register with the DEA and maintain Schedule III controlled substance storage and handling protocols.

Regulatory Background

Marijuana has been classified as a Schedule I controlled substance since the Controlled Substances Act (CSA) took effect in 1970. Schedule I designation means the DEA considers the substance to have no accepted medical use and a high potential for abuse. This classification has prevented wholesale drug distributors from legally handling marijuana products, even if approved by the FDA.

The proposed rescheduling follows a Department of Health and Human Services recommendation submitted to the DEA in August 2023. HHS based its recommendation on FDA's review of marijuana's abuse potential, pharmacological effects, and therapeutic applications. The CSA requires the DEA to consider HHS's scientific and medical evaluation but allows the DEA to make the final scheduling determination.

Schedule III substances include anabolic steroids, ketamine, and products containing less than 90 milligrams of codeine per dosage unit. Under 21 CFR Part 1301, entities that handle Schedule III controlled substances must register with the DEA and comply with specific security, recordkeeping, and reporting requirements.

Key Regulatory Changes

The proposed rule would take effect 60 days after publication of a final rule in the Federal Register. The DEA accepted public comments through October 14, 2024. As of this writing, the DEA has not published a final rule.

DEA Registration Requirements: Wholesale drug distributors that handle Schedule III marijuana products will need to obtain a DEA Distributor Registration (DEA Form 225). This is separate from existing state wholesale drug distributor licenses. Current processing time for DEA distributor registrations averages 45-60 days.

Security Requirements: Under 21 CFR 1301.71-1301.76, distributors handling Schedule III substances must implement physical security measures including controlled access areas, alarm systems, and locked storage. The required security level depends on the quantity of controlled substances stored. Distributors holding more than 800 dosage units of Schedule III substances must maintain an alarm system or vault storage.

Recordkeeping: Distributors must maintain DEA Form 222 (Official Order Form) records for all Schedule III transactions. Under 21 CFR 1304.21, these records must be kept separate from other business records and retained for two years. The DSCSA requires transaction history, transaction information, and transaction statements for all prescription drug products. Distributors handling marijuana products must comply with both DSCSA and DEA recordkeeping requirements — they are not duplicative.

Inventory Requirements: 21 CFR 1304.11 requires distributors to conduct biennial controlled substance inventories. Initial inventory must be taken on the date the distributor first engages in Schedule III marijuana distribution. Inventory records must list the name and dosage form of each substance, the number of units, and the total quantity.

Impact on Wholesale Drug Distributors

State Licensing: Rescheduling does not change state-level cannabis licensing frameworks. States with medical or recreational marijuana programs maintain separate licensing requirements. A distributor with a DEA Schedule III registration and state wholesale drug distributor license may still be prohibited from handling non-FDA-approved cannabis products under state law.

FDA-Approved vs. State-Legal Products: The rescheduling applies to marijuana as a substance. For wholesale drug distributors, the practical distinction is between FDA-approved drug products containing marijuana (which would follow standard pharmaceutical distribution channels) and state-legal cannabis products (which remain outside federal pharmaceutical regulations).

As of November 2024, FDA has approved three marijuana-derived drug products: Epidiolex (cannabidiol oral solution), Marinol (dronabinol capsules), and Syndros (dronabinol oral solution). These products are currently marketed under Schedule V (Epidiolex) or Schedule II (Marinol, Syndros) classifications. If marijuana is rescheduled to Schedule III, FDA may reassign these products to match the active ingredient's schedule, or maintain their current schedules under the "except when in [specific formulation]" provision of the CSA.

Storage and Handling: Distributors currently handling Schedule II narcotics already maintain DEA-compliant controlled substance storage. Adding Schedule III marijuana products to inventory does not require separate storage infrastructure — Schedule II and Schedule III substances may be stored together if security requirements for the higher schedule (Schedule II) are met.

Cold Chain Considerations: Epidiolex requires storage at 20-25°C (68-77°F). If rescheduling leads to additional FDA approvals for cannabis-derived biologics or temperature-sensitive formulations, distributors will need to reconcile DEA controlled substance security requirements with cGMP cold chain protocols. 21 CFR 1301.75 does not prohibit temperature-controlled storage but requires that controlled substance storage areas remain locked and alarmed regardless of environmental controls.

DSCSA Compliance: Marijuana-derived FDA-approved products are prescription drugs subject to DSCSA. Distributors must provide transaction information (TI), transaction history (TH), and transaction statements (TS) for each sale. Enhanced drug distribution security requirements under DSCSA Section 582(d) apply — distributors must verify that trading partners are authorized and must quarantine and investigate suspect and illegitimate products. For detailed DSCSA requirements, see the DSCSA compliance checklist for wholesale distributors.

What ColdChainCheck Data Shows

ColdChainCheck tracks 1,234 entities with active FDA registration (96.8% of the 1,275 wholesale drug distributors in the directory). DEA controlled substance registration is not currently included in ColdChainCheck's compliance scoring model. DEA registration data is maintained separately by the Diversion Control Division and is not cross-referenced with FDA establishment registration. ColdChainCheck has applied for access to DEA registration data via the Registration Data Access (RDA) process. If approved, DEA Schedule III registration status will be added as a scored compliance dimension.

The current average compliance score across all tracked entities is 51/100. This reflects state licensing coverage, FDA registration, NABP accreditation status, recall history, and enforcement action records. The score distribution shows 281 entities in the "Good" tier (60-79 points) and 919 in the "Fair" tier (40-59 points). Entities in the Fair tier typically hold state licenses in their operating jurisdictions but lack NABP accreditation or have limited multi-state coverage.

For distributors planning to handle Schedule III marijuana products, existing compliance infrastructure matters. The 63 entities with NABP VAWD accreditation have already demonstrated compliance with enhanced storage, handling, and documentation requirements that align with DEA controlled substance protocols. VAWD accreditation criteria include secure storage areas, inventory management systems, and handling procedures for high-value or high-risk products — all prerequisite capabilities for Schedule III distribution.

Practical next steps for compliance officers:

  • Verify DEA registration status of current trading partners: Contact distributors directly to confirm whether they hold an active DEA Distributor Registration. ColdChainCheck does not yet display DEA registration in entity profiles.
  • Cross-reference FDA registration with state licensing: Use the ColdChainCheck directory to confirm that distributors handling controlled substances maintain active licenses in all states where they operate. A distributor with FDA registration but limited state coverage may not be authorized to distribute Schedule III products in your state.
  • Review NABP accreditation status: The 63 VAWD-accredited entities in ColdChainCheck's database represent the subset of distributors with third-party verification of secure handling capabilities. Filter the directory by NABP accreditation status to identify distributors with existing controlled substance handling infrastructure.
  • Monitor for DEA enforcement actions: ColdChainCheck tracks FDA warning letters and state enforcement actions. DEA enforcement actions (diversion investigations, registration denials, suspension orders) will be added to entity profiles when DEA registration data becomes available.

ColdChainCheck will update this article when the DEA publishes a final rescheduling rule. For ongoing coverage of DSCSA compliance requirements and wholesale distributor regulatory developments, see the ColdChainCheck compliance guides.


Disclaimer: This article provides regulatory information based on publicly available DEA notices and CFR citations. It is not legal advice. Wholesale drug distributors should consult legal counsel and contact the DEA Diversion Control Division for entity-specific guidance on controlled substance registration requirements.

Disclaimer: This article is for informational purposes only and does not constitute legal or regulatory advice. Always verify current details with the relevant regulatory authorities before making compliance decisions.