After 900 DEA Registrations, a Nov. 29 Deadline to Cut Off Unregistered Cannabis Suppliers

Steph Sherer founded Americans for Safe Access to fight for medical cannabis patients and the dispensaries that serve them. On Friday, October 30, after the Justice Department in Washington announced that the Drug Enforcement Administration had issued federal registrations to more than 900 state-licensed dispensaries, Sherer put out a written statement that read like a victory lap. "For the first time, the federal government is recognizing and registering the medical cannabis dispensaries that patients fought to establish," she wrote. She noted that the certificates arrived days before the 30th anniversary of California becoming the first state to legalize medical use. (S1, S6, S9)

The same day, the DEA's Diversion Control Division posted a second document, linked in a single line at the bottom of the department's release. It was four pages long and addressed to the businesses that had applied for registration between April 28 and June 26, 2026. Its eighth paragraph held the sentence that matters most to anyone who buys or sells medical cannabis: if an applicant or a registrant handles Schedule III medical marijuana with someone who is neither, "such conduct could be potential grounds for denial of a Timely Applicant's application or revocation of a certificate of registration, respectively." (S1, S2, S11)

The dispensaries Sherer celebrated now had certificates, or were in line for them. What the second document asked was where their products would come from, and it set a date for the answer. Applicants, the DEA wrote, "are expected to complete these activities and establish compliant supply chains no later than November 29, 2026." That is 30 days. (S2)

The registrations are the first concrete result of Attorney General Todd Blanche's April order moving marijuana regulated under a state medical license into Schedule III of the Controlled Substances Act. The Justice Department said the first batch covers more than 900 dispensaries in Alabama, Florida, Mississippi, South Dakota, Texas, Virginia and West Virginia, each of which had to pass a DEA pre-registration investigation. It did not name a single business. "State licensure alone does not automatically grant federal registration," the department said, and registered dispensaries now answer to federal security, recordkeeping and inventory rules. (S1, S7)

The timing was close to the line the rule itself drew. The final rule published in the Federal Register on April 28 told the DEA Administrator to "make every effort" to process applications filed within 60 days of publication within six months. Six months from April 28 is October 28. The certificates came two days later, and only for dispensaries; the department said manufacturers and distributors, the businesses that grow, process and move product to those dispensaries, still face facility inspections, production controls and quota determinations. (S1, S4)

That gap is what the four-page notice addresses. Under the rule, an applicant that filed a complete application, with the fee paid, inside the April 28 to June 26 window may keep operating under its state license while its application is pending. The DEA calls these businesses Timely Applicants. The notice says they may buy from and sell to each other and to DEA registrants, so a registered dispensary can keep receiving product from a timely distributor that is still waiting on its own certificate. Everyone else, the notice says, is out: Timely Applicants and registrants "may not lawfully engage in any schedule III medical marijuana activities" with entities that missed the window or never applied, "until those entities become DEA registrants." (S2, S4)

Ryan Kocot, a cannabis attorney licensed in California, New York and Massachusetts, read that paragraph the way a supplier would. A late application that is still pending, he wrote in an analysis published the same day, is not enough to put a business back in the chain. Neither is an incomplete one. The business has to be registered first. (S5)

The DEA also published the list operators will check against. The text file, dated October 30, contains 6,983 entries: 4,197 dispensaries, 2,076 manufacturers and 710 distributors. It gives a state, a business type and a document control number for each, and no company names. Counting the file line by line, the entries span 42 states, Washington, D.C., and Puerto Rico. (S3, S8)

Oklahoma dominates it. The state accounts for 2,442 entries, including 1,158 manufacturers, more than half of every manufacturer entry in the country. Florida follows with 812, nearly all of them dispensaries: 748, against 45 manufacturer and 19 distributor entries, the shape of a vertically integrated market where the same company grows, processes and sells. California has 771. (S3)

The list is not a census of the market, and the DEA says so. Entries can drop off as applicants are granted registrations, withdraw or lose timely status, which means the 900-plus dispensaries registered on Friday may already be missing from it. That is one way to read the Alabama line, which shows a single dispensary and two manufacturers in a state the Justice Department says received registrations. The list also cannot show which licensed growers never applied. Kocot's warning was that a dispensary may qualify while its key suppliers do not, and a grower may qualify while losing the buyers it had. (S3, S5, S8)

The notice offers two other pieces of relief. Inventory that timely dispensers and distributors acquired before the notice issued may still be sold, even if it came from a business that does not qualify, though Kocot pointed out that the language does not expressly cover manufacturers. And because some states require third-party testing and some businesses have no access to a DEA-registered lab, the agency said it will not penalize them for sending de minimis samples to an unregistered lab in the same state, with detailed records, when no registered lab is available. The lab cannot send product back. (S2, S5)

Oklahoma's growers already had a deadline of their own. As cannabis.inc reported last week, the state's narcotics bureau told marijuana businesses in May that manufacturers and distributors must obtain DEA registration and that it may move against those without one starting January 1, 2027. The Nov. 29 line arrives about a month earlier and runs in the other direction: it is the dispensaries and distributors buying from those growers that now carry the risk of a denied application or a revoked certificate. (S2, S3)

Some of the country's largest operators planned for this. Trulieve said on April 29, the day after the rule was published, that it had filed DEA applications for its medical business. "DEA registration for our medical business marks a historic step forward for Trulieve and the patients we serve," Chief Executive Kim Rivers said then, adding that the company had more than 200 dispensaries serving only medical patients. Whether any Trulieve store is among the 900 is not public. (S10, S1)

Chris Lindsey, vice president of policy and state advocacy at the American Trade Association for Cannabis and Hemp, welcomed the registrations and said the industry's real question was what comes next. "What everybody's watching for is, what can we expect to see now that we have companies that are going to be operating in this class? What are they going to have to start to do?" he told the Associated Press. The AP noted that it remains unclear how the DEA will treat businesses that handle both medical and adult-use cannabis, a live question in every state that has merged the two markets. (S6)

“It does not establish that enough eligible suppliers, distributors, laboratories and buyers exist to support the market.”

— Ryan Kocot, attorney, Kocot Law, on the DEA's Oct. 30 notice

Kocot's objection is about capacity, not intent. The notice explains who may participate, he wrote, but until businesses have a realistic way to keep obtaining inventory, fulfilling contracts and finding customers, he has difficulty calling the system workable. He warned that prices could be squeezed from both ends of the same chain: fewer eligible buyers could push down what growers receive, while fewer eligible suppliers could push up what dispensaries pay. (S5)

The Justice Department framed the day as order, not disruption. "The American people deserve access to the best medical treatments in the world," Blanche said, before adding that the department "will continue prosecuting illegal marijuana trafficking and related criminal activity in accordance with federal law." Marijuana outside the order, including every adult-use product, remains in Schedule I. (S1)

Smaller operators have already learned how slowly the process can move. Nicole Huff, who runs Wildflower Medical Dispensary in Aberdeen, Mississippi, was told this summer that two employees with old felony convictions stood between her application and a certificate, and that a waiver would take an unknown amount of time. Mississippi is one of the seven states in Friday's batch. The department's announcement does not say whether Wildflower is in it. (S1, S8)

1. Nov. 29, 2026: Timely Applicants expected to have compliant supply chains, trading only with other Timely Applicants and DEA registrants.
2. Rolling: the DEA says it will keep issuing dispensary registrations in phases while it inspects manufacturers and distributors and sets production quotas.
3. Daily: the DEA has said its timely-applicant list is updated as registrations are granted, applications are withdrawn or applicants lose timely status.
4. Jan. 1, 2027: Oklahoma's narcotics bureau may begin action against manufacturers and distributors that lack DEA registration.

Sherer's statement ended on a forward note, calling the registrations "an opportunity to build on 30 years of progress." The progress she has in mind began with patients and storefronts, and Friday's certificates went to storefronts. The four-page notice reaches past them, to the greenhouse and the extraction lab. Before November 29, the dispensaries she fought for will need a document control number or a certificate from every grower and distributor they buy from, checked against a list that does not carry a single company name. (S9, S2, S3)

Keep Reading

Supply Chain

Voters Fired the Judges in Texas's Hemp Case. The Dec. 8 Hearing Went With Them

Two days after Democrats swept the 15th Court of Appeals, its clerk cancelled the THCA argument and handed the case to three justices who take office in January. Lt. Gov.-elect Vikki Goodwin says DSHS lacked the authority to write the rules at all.

By Cannabis Inc, Editorial Staff·7 min read

Supply Chain

Systems & technologyCannabis.Inc

Colorado's Auditor Put a Number on the Delay: 223 Days on Shelves Before the State Said Anything.

The Office of the State Auditor found that from 2023 through 2025, potentially harmful cannabis products stayed available to consumers an average of 223 days, just under 7.5 months, before the Marijuana Enforcement Division issued an advisory. The division agreed with every recommendation.

By Cannabis Inc, Editorial Staff·8 min read