If you’re a California operator who registered with the DEA under the rescheduling order, or you’re about to, the hands-off federal enforcement may be over: registration makes your licensed premises federally inspectable. That’s not a threat, it’s the deal. The operators who treat a DEA inspection as a scheduled exam they’ve already rehearsed will pass it. The ones who treat it as a surprise will generate findings. Here’s how to be in the first group.
Why inspections are part of the package
Registration brings your operation inside the federal system that governs every other controlled-substance handler in the country, from pharmacies to pharmaceutical manufacturers, and site inspections are how that system verifies itself. The good news for state licensees is the order’s deference framework: DEA accepts state-required records to the maximum extent permissible. Practically, that means an investigator’s raw material is largely the compliance program you already run for the DCC. Which is exactly the point of preparation: your state records are now part of the federal record, and an inspection is where that stops being abstract.
What an inspection looks at
Expect a DEA site visit to concern itself with the same fundamentals the agency checks at any registrant, adapted to the deference framework:
- Records and reconciliation. Inventory records, acquisition and disposition, METRC data, and whether the physical stock on hand ties to the paper. Unreconciled variance is the finding that matters most, because variance is the vocabulary of diversion.
- Security and storage. Your state-compliant physical security, and access controls.
- Licensure and registration alignment. Current state license, registration certificate, and whether what’s happening on the premises matches what both authorize, including designated cultivation areas for manufacturers.
- Personnel and process. Who handles product, how they’re trained, and whether your SOPs describe the operation the investigator is actually watching.
The preparation program
- Run the reconciliation before they do. On a recurring schedule, count physical inventory against METRC and your internal records, document the count, investigate every variance, and log the resolution. An operator who hands an investigator their own variance log with explanations attached has answered the diversion question before it’s asked. This is the single highest-value habit in this article.
- Stage the document set. An inspection goes smoothly in proportion to how fast you produce things. Keep an inspection binder (physical and digital) that a manager can open in five minutes: state license, premises diagrams and designated cultivation areas, inventory and reconciliation records, SOPs, training logs, security system documentation, and disposal records. If assembling that binder takes your team a week, that’s your gap.
- Write the door protocol and train it. Same discipline as a transport stop, different room. Every front-desk employee and shift lead should know: verify the investigators’ credentials, contact the designated inspection lead and counsel immediately, and be polite and cooperative without guessing or volunteering. Employees answer what they know and say “that’s a records question, let me get the right person” for everything else. Improvised answers become findings.
- Designate an inspection lead, with a backup. One named person escorts investigators, provides documents, logs everything reviewed or copied, and is authorized to reach counsel in real time. Inspections that go sideways usually do so because nobody owns the response.
- Run a mock inspection. Have someone outside your team, counsel, or a qualified consultant, walk in unannounced to the staff and run the sequence: door protocol, document production, facility walkthrough, reconciliation pull. Score it, fix what failed, log the exercise. The mock inspection log is itself evidence of a compliance culture, and it’s the difference between a rehearsed exam and a surprise.
The California double layer
You already host DCC inspections, and your local jurisdiction may inspect too. Don’t build a separate “federal binder” universe; build one inspection-readiness program that satisfies the strictest reader, and use each state inspection as a live rehearsal for the federal one. One caution flowing from the rescheduling order’s structure: because your DEA registration automatically suspends if your state license is suspended, revoked, or expires, a bad state inspection now has federal consequences. Preparing for the DEA visit and staying clean with the DCC are the same project.
Start with the gap, not the binder
Before building binders and protocols, find out what an investigator would actually find: where your records don’t reconcile, which SOPs don’t match practice, which training logs have gaps. Kocot Law conducts fixed-price compliance audits for California operators, with severity-ranked findings and a remediation roadmap, and we build inspection-response protocols and run mock inspections as part of the engagement. Call or text (916) 572-6445 for a free 15-minute consult.
FAQ
Does DEA inspect state-licensed cannabis businesses?
DEA inspects its registrants. If you hold a DEA registration under the rescheduling order’s pathway for state medical licensees, your registered premises are subject to federal administrative inspection.
What records will an inspector want to see?
Under the order’s deference framework, largely your state-required records: inventory and METRC data, acquisition and disposition records, SOPs, training and personnel files, security documentation, and your licenses and registration. The critical question is whether physical inventory reconciles with those records.
How do I know if I’m ready?
If your team can produce the full document set within the hour, your last three inventory reconciliations are documented with variances resolved, and your staff knows the door protocol without prompting, you’re ready. If any of those is untrue, that’s the gap to close, ideally via an audit and a mock inspection.
Attorney Advertising. This article is for general information only and is not legal advice; reading it or contacting Kocot Law does not create an attorney-client relationship. Inspection rights and obligations in any specific case are controlled by current statute, regulation, and the terms of your registration, if any.
