TLDR: Marijuana Moment has reported that a Mississippi dispensary owner is now facing a choice no operator wants: fire two employees with felony records, give up expedited processing to seek waivers for them, withdraw her DEA application, or let the agency initiate formal denial proceedings. However, that is not DEA inventing a new rule for cannabis. It is one of the older rules in the practitioner registration system doing exactly what it has always done, now applied to an industry that has never had to live under it, and that has prided itself on hiring people with past convictions. If you are applying for federal registration, or thinking about it, screen your employee roster against this rule BEFORE you file.
What happened in Mississippi
According to Marijuana Moment’s reporting, Nicole Huff, CEO of Wildflower Medical Dispensary in Aberdeen, Mississippi, applied for federal DEA registration under the April 2026 rescheduling framework. During review, a DEA diversion investigator flagged two of her employees for past felony convictions and laid out her options in an email: waive the right to expedited processing and pursue employment waivers for the workers, withdraw the application, or allow DEA to initiate an Order to Show Cause proceeding, after which she could request a hearing before a DEA administrative law judge. According to the report, DEA gave Huff until the end of the following Monday, Labor Day, to choose among the options, leaving her only the long holiday weekend to respond.
Huff told Marijuana Moment she intends to fight. She says each of the two employees has over a year of discipline-free service at the dispensary, and she wants DEA to evaluate each worker on the individual facts.
The rule that did this is not new
Under 21 C.F.R. § 1301.76(a), a practitioner registrant may not employ, in a position with access to controlled substances, a person who has been convicted of a felony offense relating to controlled substances, or who has certain adverse DEA-registration history. Note the scope: it is not necessarily a general felony bar; it turns on controlled-substance felonies and registration history. Pharmacies and other DEA practitioner registrants have lived under this restriction for decades. (Dispensing to patients is practitioner activity under the CSA, which is why the rule fits a medical marijuana dispensary; manufacturers and distributors are generally non-practitioners with their own separate employee-screening provisions, including § 1301.90.)
What changed in April 2026 is who counts as a practitioner registrant. When state-licensed medical cannabis dispensaries started applying for federal registration, they walked into the existing practitioner registration machinery, this rule included. And “access” in DEA’s framework is broader than physically touching product: DEA’s Pharmacist’s Manual describes it as including influence over the handling of controlled substances. That definition may reach many ordinary dispensary-floor roles, depending on their actual duties.
Now put that next to the industry’s reality. Cannabis has been one of the most second-chance-friendly industries in the country, and several states run social equity programs whose eligibility can rest on a past cannabis conviction. Where that conviction is a felony relating to controlled substances, the state program and the federal rule are in direct tension. And do not assume that state-level relief, whether sealing, expungement, a pardon, or eligibility for a social-equity program, necessarily answers the federal question. The effect of that relief should be analyzed before the application is filed.
The waiver path exists, and what it requires
DEA does allow employers to request waivers of the employment prohibition. The specific standards come from DEA’s Pharmacist’s Manual, which is nonbinding agency guidance rather than codified regulation (the regulatory hook is DEA’s general discretion to grant exceptions under 21 C.F.R. § 1307.03). Per that guidance, a waiver will not be considered unless there are valid reasons to believe diversion is unlikely to occur, the waiver must be approved before the employee is allowed access, and the agency weighs factors including the nature and extent of the individual’s past controlled-substance violations, current state licensure status, the extent of proposed access (including influence over handling), the employer’s proposed physical and professional safeguards against diversion, the employer’s own standing in handling controlled substances, anything DEA’s investigation uncovers, and all other relevant factors.
A waiver request, therefore, is an evidentiary package: the conviction records and their age, the state’s own licensing or agent-registration decision about this person, a precise description of what the employee can and cannot touch or influence, and written safeguards (access controls, dual custody, camera coverage, audit trails) that make diversion by this person implausible. The employer’s compliance posture is on the list too, which means your waiver request is only as strong as your own compliance program.
Note the tradeoff reported in the Mississippi case: in Huff’s case, DEA told her that pursuing the waiver would require giving up expedited processing. That is a real cost as applied to her. The expedited provision directs DEA to make every effort to process qualifying early applications within six months; whether every waiver request carries the same tradeoff is not established, but an operator should assume the question will come up. An operator who discovers this issue mid-application is forced to price the employees against the timeline in real time.
What an Order to Show Cause actually is
An Order to Show Cause is the formal process by which DEA proposes to deny an application. It is not itself a denial, and it does not automatically put anyone in front of a judge: the applicant then has the right to request a hearing before a DEA administrative law judge, and under current § 1301.37 the hearing request and answer generally must be filed within 30 days. It is a forum where the applicant’s evidence gets weighed. But it is a formal adversarial proceeding, and nobody should walk into it without counsel and a record built for it.
What to do with this information
This story shows how these issues surface: fast, mid-review, and framed by the agency’s options rather than yours. So, if federal registration is on your roadmap:
- Screen the employee roster now, against the federal rule, not your state’s. The screen is specific: a felony offense relating to controlled substances (or adverse DEA-registration history), in a position with access to or influence over product. State law may forgive or expunge a conviction the federal analysis still has to address. Any criminal-history review should also be conducted consistently with applicable federal, state, and local background-check and fair-chance laws.
- Map “access” honestly. Anyone with keys, codes, ordering authority, or influence over how product is handled. Deciding someone is outside the rule’s reach requires actually changing what they can touch and influence, in writing, not just relabeling their job title.
- Decide your posture per person before you file. For each flagged employee: restructure the role out of access, prepare a waiver package, or accept the potential timeline cost. Doing this before filing preserves choices that a mid-review email forecloses. Remember that under DEA’s guidance the waiver must be approved before the employee has access.
- Build the waiver evidence. Clean personnel files, documented performance, written safeguards, and your own compliance record are exactly what the factor list rewards.
- If the email has already arrived, get counsel before you answer. The options in that email are real, but how you respond, and what record you build from the first reply, shapes the waiver, the hearing, and everything after. Do not fire anyone, and do not withdraw anything, as a reflex.
The bigger picture for applicants
This case previews what federal review actually looks like. The registration application itself asks for lists of individuals with access to controlled substances, including criminal histories. Marijuana Moment has separately reported that DEA field offices are conducting on-site reviews and additional applicant interviews as part of the registration process, and that detailed questionnaires are going out, including the 26-question list sent to Colorado applicants that I broke down in a previous article. The pattern across all of it: the federal system runs on disclosure, and it checks. The operators who treat the application as a compliance project, screened, documented, and structured before filing, will be in the best position to thrive under federal oversight.
If You Applied For Registration Or Are Considering It
I handle DEA registration and compliance for state-licensed medical operators, from pre-filing screens through waiver requests and hearings, alongside a cannabis enforcement defense practice. If you are staring at your own version of this decision, or want your employee roster screened before DEA does it for you, call or text (916) 572-6445 for a free 30-minute consult.
Attorney advertising. This article is general information, not legal advice about your situation, and reading it does not create an attorney-client relationship.
