The Drug Enforcement Administration has begun issuing federal registrations to state-licensed medical marijuana dispensaries, and the Justice Department puts the first batch at more than 900 dispensaries in seven states: Alabama, Florida, Mississippi, South Dakota, Texas, Virginia and West Virginia. On the same day, October 30, 2026, DEA published guidance telling every “Timely Applicant” in the program to have a compliant supply chain “no later than November 29, 2026.” For operators, the second document matters more than the first.
Under the Attorney General’s April 2026 order, which moved qualifying state-licensed medical marijuana into Schedule III, DEA is registering medical businesses in phases. The Justice Department’s announcement says a dispensary qualifies only if it applied within the order’s initial 60-day window, operates under a state medical framework consistent with federal law and treaty obligations, and passes DEA’s pre-registration investigation. State licensure alone does not produce a federal registration. Registered dispensaries must follow federal rules on security, recordkeeping and inventory controls.
Manufacturers and distributors are not in this first round. Their applications are still under review and require facility inspections, production-control decisions and quota determinations, and the department has not published dates. Applicants with pending applications may continue certain medical marijuana transactions, subject to the order’s requirements. The order covers only defined medical activity. It does not authorize adult-use sales, marijuana outside the order stays in Schedule I, and the broader reclassification fight is a separate proceeding, tracked in our coverage of the Schedule III rescheduling proceeding.
DEA’s informational letter, posted the same day, defines the group it governs. A Timely Applicant is a state-licensed medical business that filed a complete application, fee included, under 21 CFR 1301.13(k) between April 28 and June 26, 2026. Withdrawn or denied applicants, and businesses without the state medical license, are outside the definition. The program recognizes three subcategories: dispenser, manufacturer and distributor.
The operative sentence is a prohibition on mixing systems. Timely Applicants and registrants may not lawfully engage in any schedule III medical marijuana activities with entities that neither applied in the window nor hold a DEA registration, and DEA expects compliant supply chains to be in place no later than November 29, 2026, a Sunday. The letter’s minimum diligence is concrete: verify the counterparty’s DEA control number (DCN) against the public list or obtain its certificate, confirm its active state license, and keep records of both. The letter allows the DCN to stand in for a DEA registration number on the part 1304 records.
| Status after Nov. 29 | May trade schedule III medical marijuana with | Key condition |
|---|---|---|
| DEA registrant | Other registrants and Timely Applicants | Verify and document counterparty status |
| Timely Applicant (registration pending) | Other Timely Applicants and registrants | Application at risk if a non-qualifying partner is used |
| State-licensed business that did not file in the window | Not with registrants or Timely Applicants | Adult-use sales are outside the order entirely |
Two carve-outs matter. Inventory acquired before the guidance may still be possessed, dispensed and distributed by Timely Dispenser and Distributor Applicants. And for lab testing, DEA says it does not intend to penalize sending de minimis quantities to a lab that is not DEA-registered, but only in narrow circumstances: the lab is in-state, detailed records are kept, and using a registered lab would violate state law while either no U.S. lab is registered or state law bars out-of-state testing and no in-state lab is registered. The letter does not permit receiving product back from such a lab.
The letter states that it does not have the force and effect of law. Its leverage is the application itself: DEA says dealing with a non-qualifying entity “could be potential grounds for denial of a Timely Applicant’s application,” and the same logic reaches a registration through revocation. That is a softer instrument than a rule and a harder one than it looks, because the penalty lands on the thing every operator is waiting for.
That sequencing produces the point most coverage skips. On November 29, most medical operators, including many in the first seven states, will still hold Timely Applicant status rather than a certificate, because manufacturer and distributor applications are unresolved. So the compliance task is not waiting for your own registration. It is auditing every supplier, buyer and lab against the public Timely Applicant list, which is tab-delimited, lists state, business activity and control number but not business names, and is updated daily. A state-licensed supplier that never filed is now an unusable counterparty, however clean its state record.
Exposure depends on market structure. Florida’s medical operators are vertically integrated by statute, so much of the supply chain sits inside one licensee and the counterparty list is short. Oklahoma is the opposite case: by Marijuana Moment’s tally of the DEA file it has the most Timely Applicants of any state, 2,442, a fragmented wholesale market, and no place in the first registration batch, which makes the November 29 audit the larger job there.
California shows the structural problem from another angle. Its combined adult-use and medicinal licenses do not map cleanly to a medical-only applicant, which is why the Department of Cannabis Control moved to let licensees split them. Its current proposed rule, with comments due December 14, 2026, builds on the process described in our earlier coverage of the DCC’s expedited A/M split. For the tax stakes of being on the federal side of that line, see our 280E and Schedule III playbook, and for how the two federal tiers differ, medical versus adult-use after rescheduling. Banking and payment terms for registered operators are covered in our payments and banking guide. The background on the stayed rescheduling proceeding is in our report on the ALJ stay, and how the hearing closed.
Partly. Under the April 2026 order, qualifying state-licensed medical marijuana is in Schedule III for registrants and timely applicants. Adult-use marijuana is not covered, remains in Schedule I, and a broader rescheduling proceeding is separate.
A state-licensed medical marijuana business that filed a complete DEA application, including the fee, between April 28 and June 26, 2026, and has not withdrawn it or been denied.
DEA expects Timely Applicants and registrants to have supply chains that deal only with other Timely Applicants or DEA registrants. Dealing with non-qualifying entities can be grounds for denying an application or revoking a registration.
No. The Justice Department says state licensure alone does not produce a registration. A business must also have applied in the initial window and pass DEA’s pre-registration investigation.
No. The order covers only defined medical marijuana activity, and adult-use sales remain outside it.
This is regulatory journalism, not legal advice — talk to your counsel.
