Last updated: October 14, 2026, with the latest medical marijuana reclassification news: the paused DEA rescheduling hearing, DEA’s Oct. 9 response, the Oct. 6 registration expansion, and the delayed federal hemp deadline.
President Donald Trump has reclassified state-licensed medical marijuana. This medical marijuana reclassification moved it from Schedule I to Schedule III under federal drug law. This does not make cannabis legal at the federal level, but it does change how Washington sees licensed medical cannabis. And that changes the rules for compliance, security, and tech at cannabis businesses across the country.
This is more than a one-time policy change. It shows the federal government now treats medical cannabis more like a regulated business and less like a dangerous drug such as heroin. That shift affects the systems, security, and records your business needs to keep.
Medical Marijuana Reclassification: Key Takeaways for Operators
- Medical marijuana is now Schedule III. State-licensed medical marijuana moved from Schedule I to Schedule III in April 2026. Adult-use (recreational) marijuana is still Schedule I.
- There is a new federal layer of rules. For well-run businesses, the gap is smaller than most people think. The main jobs are checking your records, adding DEA reports, updating labels, and screening staff.
- Security rules are lighter than you might expect. Schedule III security rules are less strict than the old Schedule I rules. Most state-licensed businesses already meet them. You just need to prove it with records the DEA can see.
- Now is the time to check your tech. Review your POS, network, and compliance tools. Make sure they keep complete records and can produce them fast for a DEA inspection.
What Changed With the Medical Marijuana Reclassification?
Under the new order, products from state-licensed medical marijuana programs moved to Schedule III. So did some FDA-approved medicines made from cannabis. Schedule III drugs include medicines like Tylenol with codeine. The government says these drugs have “a moderate to low potential for physical and psychological dependence.”
Todd Blanche, the Acting Attorney General, said the change is meant to expand access to medical treatment. As quoted by the BBC, he said the move allows research on how safe and effective cannabis is. That should give patients better care and give doctors better information.
This is one of several signs that the federal government will treat medical cannabis as a legal, regulated product. Federal law has not changed across the board. But the shift brings new, specific duties for how you track, report, and secure your business.
Update (October 2026): Where Rescheduling Stands Now
A lot has happened since the medical marijuana reclassification order. Here is where things stand as of mid-October 2026.
- The broader rescheduling hearing is paused. The order covered medical marijuana only. A separate DEA hearing looks at moving all marijuana, including adult-use, to Schedule III. That hearing ran from June 29 to July 15, 2026. On Sept. 28, three groups that oppose rescheduling asked to add a new Government Accountability Office (GAO) report to the record. On Sept. 29, the DEA’s chief judge paused the case and asked the government to respond by Oct. 13 (DEA order).
- The DEA responded on Oct. 9. It left it up to the judge whether to add the GAO report. But it argued against more rounds of written arguments, which would slow things down. It took no side on the pause (Cannabis Business Times). The case is still paused. Opponents also want new testimony and more documents, which could add more delay (Marijuana Moment). There is no firm date for a decision.
- DEA registration now covers more businesses. On Oct. 6, 2026, the DEA opened registration to medical marijuana manufacturers, distributors, and labs. If you run more than one license type, check which ones need their own registration.
- 280E tax relief is on the IRS to-do list. Section 280E is the tax rule that blocks most cannabis businesses from deducting normal costs. The IRS added 280E guidance to its 2026 to 2027 priority plan. No guidance has come out yet.
- The federal hemp deadline moved. The new federal hemp THC rules were set to start Nov. 12, 2026. The main date is now Dec. 11, 2026. Some parts may still start Nov. 12.
DEA Registration: The Early Window Has Closed
The most urgent deadline has now passed. State medical marijuana licensees that applied for DEA registration within 60 days of the order (by June 22, 2026) can keep operating under their state license while the DEA reviews them. The DEA said it would process those early applications within six months.
If you missed June 22, you can still apply. But you do not get the same protection to keep operating while your application is reviewed. Talk to your lawyer about what that means for your business before you file.
Either way, you need clean records. You can use your state license as proof that the state has approved you. So keep your state license papers and compliance records organized and easy to pull up. This is where your tech matters most.
One more key point: a DEA registration is suspended automatically if your state license is suspended, revoked, or expires. That means any lapse in your state license now hits your federal standing right away.
Why the Compliance Gap Is Smaller Than You Think (But Still Real)
For years, federal cannabis rules were a gray area. But in most legal states, businesses already followed strict state rules for money, records, and security.
Here is the good news. Schedule III rules for security and records are less strict than the rules for Schedule I and II drugs. Most state-licensed dispensaries and growers already meet them. State track-and-trace systems like METRC already capture most of the same data the DEA wants. So most businesses do not need to rebuild their systems. They need to check them for gaps and make sure the DEA can see the records.
Still, some new federal duties do need action. They fall into four areas: records, DEA reports, labels, and staff screening.
How Your Tech Stack Should Adapt to the Medical Marijuana Reclassification
Recordkeeping and Your POS System
Your seed-to-sale tracking and POS system likely already line up with most Schedule III rules. Check these points:
- Keep records for at least two years. Some states already require this.
- Store records at the registered location, and make sure you can pull them up quickly for a DEA inspection.
- Take a full starting inventory. On or around the day you register with the DEA, you must count all controlled products on hand. Set up your POS and inventory system to support this. Schedule III does not require a running count after every sale. It requires a full count every two years plus records of each transaction.
- Test a random week. Pick a week of records in your system. If any entries are missing required fields, fix the intake process now. After you register, one missing field becomes a federal problem.
New DEA Reporting Workflows
This is likely the biggest gap for most businesses. Most current systems are not set up for it. There are two new forms:
- DEA Form 106 is for theft or significant loss. You must file it once you finish looking into what happened. You can’t just log a loss in your own records. You have to report it to the DEA.
- DEA Form 41 is for destroying controlled products. You must destroy them on site so they can’t be used again. Two employees must watch, and both must sign the form with their names.
So once you register, you need a formal way to handle these reports. Your compliance software and POS may need settings that flag theft, loss, and destruction. They should record these events in a format that is ready for federal reporting.
Labeling: One Update Every Medical Operator Needs
This is the one change that applies to every medical cannabis business. Under 21 U.S.C. §825(c), a Schedule III drug label must include a clear warning when it is dispensed to a patient. The warning says it is a crime to give the drug to anyone other than the patient.
Beyond this warning, federal law lets state label and packaging rules count. You do not need to switch to drug-store-style labels. But if your state labels don’t already include this warning, update them now.
If your POS or inventory system prints labels for you, this is a quick template change. Just make sure it happens soon.
Employee Screening: A New Federal Layer
State background checks vary a lot. So you need to check staff against this federal standard too, not just your state’s rules.
Your HR and compliance tools may need updates to screen for this. It is easy to miss, and it affects how you hire and onboard staff.
Physical Security: Confirm, Don’t Overhaul
Schedule III security rules are easier to meet than Schedule I and II rules. Those stricter rules call for heavy-duty safes, rated vaults, and several alarm systems. For Schedule III, a well-built, alarmed space with controlled access is enough. Most state-licensed businesses already meet this bar.
Check two things. First, make sure your alarm sends signals to a central monitoring station or local police, not just to an internal log. Second, make sure your access logs are complete and easy to pull up.
For most well-run businesses, this is about paperwork and checking, not new hardware.
Cybersecurity
More of your data will now flow into federal reports. That makes protecting it even more important. Run regular security checks to find weak spots. Train staff to protect data and spot phishing emails. Turn on multifactor authentication (a second login step, like a code sent to your phone) for every key system. Strong cybersecurity also protects your compliance records as the rules keep changing.
How to Future-Proof Your Business After the Medical Marijuana Reclassification
The medical marijuana reclassification is only the start. Keep an eye on these:
- The paused DEA hearing on all marijuana. Watch for the judge’s ruling on the GAO report and any new delays.
- IRS and Treasury guidance on 280E. This could bring tax relief and possible refunds for medical operators.
- The SAFER Banking Act. If Congress moves on it, cannabis businesses could get much easier access to banks.
- The federal hemp THC rules. The main date is Dec. 11, 2026, with some parts possibly starting Nov. 12. This changes how THC limits work for hemp-derived products.
To stay ready, stick to a few basic ideas:
- Invest in systems that can grow with you.
- Automate compliance tasks to cut down on human error.
- Partner with tech and compliance experts like Cure8 who know cannabis rules.
Businesses that plan for where the industry is going will be in the best spot as the rules become clear.
Medical Marijuana Reclassification Checklist: What to Do Next
Here is a simple checklist based on the actual new rules:
- Handle DEA registration:
- If you applied by June 22, 2026, track your application and keep your records ready.
- If you missed it, talk to your lawyer and apply as soon as you can.
- If you run manufacturing, distribution, or lab licenses, check if they need to register under the Oct. 6 expansion.
- Check your records for federal gaps:
- Make sure your POS and track-and-trace records are complete, stored at the registered location, and easy to pull up.
- Plan your full starting inventory for your DEA registration date.
- Build DEA reporting into daily work:
- Set up your systems to support DEA Form 106 (theft and loss) and DEA Form 41 (destruction).
- For most businesses, this is the biggest tech gap.
- Update product labels:
- Add the federal warning under 21 U.S.C. §825(c) to all medical cannabis labels.
- Update the label templates in your POS or inventory system.
- Screen staff against the federal felony drug standard:
- Update your HR and onboarding tools to check for it.
- Confirm your security meets Schedule III rules:
- Make sure alarms report to a central station or police, and that access logs are complete.
- For most businesses, this is a check, not an upgrade.
- Strengthen cybersecurity:
- Run a security check, turn on multifactor authentication, and train your staff.
- Watch what comes next:
- Follow the paused DEA hearing, IRS guidance on 280E, the SAFER Banking Act, and the Dec. 11 hemp deadline.
Not sure how the medical marijuana reclassification affects your business? Cure8’s team can tell you if you need any quick tech or security changes for compliance. We can also review your whole setup to make sure it can grow and keep up with federal rules.
The cannabis industry is changing fast. If your compliance isn’t keeping up, your risk is growing. Get a quick compliance check by reaching out to us today.