TL;DR: The DEA’s Medical Marijuana Dispensary Registration Portal at https://mmapplication.diversion.dea.gov/ presents an eight-section application under 21 C.F.R. § 1301.13(k). Several questions look simple but hide real interpretive risk, particularly the past-experience question (Section 1), the medical-vs.-recreational disclosure (Section 2), the “any such action pending” liability questions (Section 4), and the “without a DEA registration authorizing such activity” question (Section 4.5). This guide walks through each section, identifies what the DEA appears to be testing, and flags where nuance may hide. It is not a checklist of “right” answers.
Overview: The DEA Medical Marijuana Dispensary Registration Application
The DEA’s Medical Marijuana Dispensary Registration Portal is available at https://mmapplication.diversion.dea.gov/.
The application is structured into eight sections:
- Business Information
- Activity
- State License(s)
- Liabilities
- Compliance (Part 1)
- Compliance (Part 2)
- Compliance (Part 3)
- Submission
This post walks through each section, identifies what the DEA appears to be asking, and flags where nuance may hide.
It is not a checklist or endorsement of “right” answers. Several of the questions on this form may not have “correct” answers in the abstract. Some may have answers that depend on the operator’s facts, the operator’s risk tolerance, and the DEA’s interpretation of ambiguous language.
Rather, the point of this post is to:
- Evaluate the potential issues presented by the application questions and associated risk; and
- Reiterate that it is critical to answer all questions accurately.
Section 1: Business Information
Section 1 collects basic entity identity information (legal name, organization type, EIN, business phone, and email) and asks three additional questions:
- Whether ownership has changed in the past 12 months;
- Whether the entity holds any other DEA-controlled-substance registrations; and
- Whether the entity has prior experience handling controlled substances.
What the DEA Appears to Be Testing
Several things at once:
- Whether the applicant is a real, properly formed business whose identity is consistent across federal tax records, state-license records, and this application;
- Whether the ownership reflected here matches what state regulators currently have on file;
- Whether the entity carries any prior DEA registration history;
- Perhaps most consequentially, the applicant’s “experience in dispensing controlled substances”; and
- Whether the federal registration is tied to a real, identifiable, licensed premises the DEA can inspect.
Where to Look Carefully in Section 1
- Entity-name mismatches between the state license, the formation documents, and the application invite — at a minimum — reconciliation questions. For example, a California licensee whose state license shows “Green Mountain Holdings, LLC” but whose application lists “Green Mountain LLC” is, technically, a different entity. Consider mentioning DBA/FBNs in the “Additional Company Information” area to avoid confusion.
- Ownership-change disclosures. An ownership change disclosed to one regulator but not to the other is a red flag.
- Past-experience question. Applicants should consider this context: while state-licensed cannabis activity has been conducted under state authority for years, marijuana has been a Schedule I controlled substance during that entire period. One could argue that this question should be read narrowly to include only federal-registration-track experience. However, I’d proceed with caution with that interpretation based on the structure of the question.
- Business Address. What an applicant lists as the Business Address effectively defines the scope of premises authority under the federal registration. A corporate headquarters address when actual dispensing occurs elsewhere, a virtual office, or a P.O. Box raises questions about which activities the federal registration would cover. The risk runs in two directions: (1) the registration may not authorize activity at the premises where dispensing actually happens; and (2) at the certification step, the truthfulness of the listed address against the operator’s actual operations becomes a federal representation. Operators with multi-premises operations or non-traditional address structures should work through this with counsel before populating the field.
- Designated contact. The designated contact should be a person who has the authority to bind the entity and who actually monitors the listed channels. A founder’s personal cell paired with a personal email may be fine in the abstract, but if processing runs months and that person becomes unavailable, important communications can sit unread. Some operators designate counsel, a compliance officer, or a regulatory affairs lead who has institutional persistence.
Make sure you don’t overlook this section and consult with counsel where necessary (particularly on the past-experience question).
Section 2: Activity
Section 2 establishes the scope of the registration. It asks which drug codes apply (marijuana, marijuana extract, and naturally derived delta-9-THC), whether the firm handles medical or recreational marijuana, and the firm’s state license details.
What the DEA Appears to Be Testing
Whether the activity the applicant is seeking authorization for falls within the rescheduling order pathway, which, by its terms, covers only medical channel activity.
Where to Look Carefully in Section 2
Two places.
First, the drug codes. Under-selection limits what the registration authorizes; over-selection may invite review of the operator’s actual product mix. For most state-licensed dispensers handling a typical product range, all three codes may be relevant.
Second, the channel-disclosure questions, where many operators with both medical and adult-use authority will pause. Adult-use marijuana remains in Schedule I. A “Yes” to recreational sits in some tension with a federal registration designed only for medical activity; if the DEA reads it that way, it could view the registration as inconsistent with what the rescheduling order authorizes. A “No” carries its own obvious risk if the entity does, in fact, handle recreational marijuana at the licensed premises.
Some operators may consider restructuring their business as one way to address this tension. The idea: split medical and adult-use into separate operating entities, with the federal registration held only by the medical entity.
However, whether this approach works as a matter of answering the form may turn, in part, on how the DEA reads the term “firm.” The form does not define it.
- If the DEA reads “firm” narrowly as the applicant entity itself, separation may yield a defensible “No” answer for the medical entity.
- If the DEA reads “firm” broadly to include affiliated entities under common ownership or control, the medical entity may still be answering “Yes” to the recreational question because the broader “firm” handles recreational marijuana.
Operators should also be careful when making structural changes without the appropriate disclosures to local and/or state regulators.
Again, the point of this content is not to arrive at a “correct answer.” Rather than endorsing one position, the point is that operators who answer these questions without thinking through the operational and regulatory consequences of each option are exposing themselves to risks on both sides.
Also, this is a good opportunity to reemphasize: the application must be filled out accurately. For example, forming a separate medical entity (assuming this is even a valid path in light of the definition of “firm”) without a genuine intent to operate separately could result in a rejected application — or worse.
Be sure the application reflects the true realities of the business and consult with counsel to determine the best course.
Section 3: State License(s)
This section collects the state license number, issuing state, and expiration date, with an Add button for multiple licenses. The page carries an explicit warning: failure to provide a valid, active state license will result in the application being declared defective and withdrawn, without a refund of the application fee.
What the DEA Appears to Be Testing
That the applicant is actually authorized under state law to handle medical marijuana, and that the authorization is current.
Where to Look Carefully in Section 3
- Expiration timing. DEA processing may run months, and a license that expires mid-pendency creates a problem. Operators with renewal dates in the next six to nine months should pay close attention to this.
- License status. A license that is technically active but carries a pending administrative action (a DCC Notice to Comply that could escalate to suspension, for example) raises the same forward-looking concern, and ties into the Liabilities disclosures below.
- License scope. A cultivation-only license does not support a dispensary registration. A microbusiness license that covers multiple verticals may need careful mapping to the federal registration being sought.
- Name reconciliation. The license-holder name should match the legal entity name in the Business Information section. A licensee whose state license contains a DBA but whose application uses the legal entity name (or vice versa) creates an avoidable mismatch.
Section 4: Liabilities
Section 4 contains five liability disclosure questions. Let’s review each of them.
Question 4.1 — Controlled-Substance Convictions and Healthcare Exclusions
Question 4.1 asks about prior controlled-substance convictions, healthcare-program exclusions, and “any such action pending.”
That last phrase has a bit of nuance that may be overlooked. Here are three non-exhaustive readings to consider:
- It applies to both clauses and covers pending criminal matters (arrests, charges, post-plea, pre-sentencing) as well as pending healthcare exclusion proceedings.
- It applies to both clauses, but doesn’t cover pending criminal or healthcare matters.
- It attaches only to the nearest antecedent (the healthcare exclusion clause), thereby capturing pending exclusion proceedings but leaving pending criminal proceedings entirely outside the question.
Reading 1 may be the most conservative, but it is also a bit of a stretch because convictions are outcomes; they don’t usually “pend.” Reading 3 may be the most defensible as a matter of grammar (under the last-antecedent canon). Still, that may produce a narrower disclosure than a reader might intuitively expect from a question of this kind.
Even within Reading 1, there are edge cases. A deferred judgment deal, where a defendant pleads with the understanding that the plea will be withdrawn and the case dismissed if conditions are met, arguably constitutes a “pending” conviction. So does a post-plea pre-sentencing posture. So might a conviction on appeal. The line is not obvious. Also, what’s meant by “applicant”? The entity applying? The individual? Both?
Again, the point here is not to arrive at a correct answer. Doing that would require specific facts and a specific operator’s risk tolerance, and even then, the DEA’s interpretive view on these questions is only beginning to develop. The point is to flag that the application contains questions whose apparent simplicity may be misleading, and that breezing through the form to get it filed risks overlooking interpretive issues that can cause problems later.
Question 4.2 — Prior Federal DEA Registration History
Question 4.2 covers prior federal controlled-substance registration history. The risk surface is most relevant for applicants who have ever held a DEA registration in any context. Operators with even a thin DEA history should reconstruct the full record before answering.
Question 4.3 — State Administrative History
Question 4.3 covers state-side administrative history. This question carries the same “any such action pending” tail as Question 4.1, and the same parsing problem: how far the “pending” reaches and what counts as a “pending” action under each clause are not self-evident. Operators with any state administrative history should think this question through carefully rather than answer reflexively.
Question 4.4 — Officer, Partner, Stockholder, and Proprietor Disclosures
Question 4.4 is the broadest question on the form. It applies to officers, partners, stockholders, and proprietors of the applicant (excluding stockholders of publicly traded corporations) and asks liability questions at the individual level. The exposure is real: a single officer or stockholder with a prior history that the applicant doesn’t know about or doesn’t think to disclose is problematic.
The work behind this question is intake: a thorough disclosure pass across every covered person, with documented confirmations from each. Whether the applicant has done that work materially affects how exposed a “Yes” or “No” answer is.
Question 4.5 — Prior Handling “Without a DEA Registration”
Question 4.5 asks whether anyone in ownership or operation has previously handled controlled substances “without a DEA registration authorizing such activity.”
This may be the question with the widest gap between the literal text and its intended purpose. The literal text captures anyone who has done state-licensed cannabis work, because that activity was state-authorized but federally unregistered (Schedule I status precluded DEA registration).
But the purpose of the question may be to identify rogue or unauthorized activity outside the state-licensed framework, not bona fide state-licensed activity conducted under state authority during the pre-rescheduling period. However, the literal text is broader than its apparent purpose, and the DEA has not, as of this writing, published interpretive guidance to distinguish between the two.
Again, risks run both directions:
- A reflexive “Yes,” without explanatory narrative, may invite the DEA to read the answer as an admission of unauthorized activity rather than state-licensed activity.
- A reflexive “No,” without analysis of what the question is actually asking, may be inaccurate under a literal reading of the question.
Be sure to discuss these questions with counsel to determine the best approach.
Section 5: Compliance (Part 1)
Section 5 has three pieces:
- A supplier list;
- A yes/no question about whether the firm repackages or relabels products; and
- A twelve-item checklist of SOPs covering ordering, receiving, inventory, storage, security, dispensing, distribution, destruction, theft/loss reporting, due diligence, corresponding responsibility, and recordkeeping.
What the DEA Appears to Be Testing
Operational readiness. Whether the firm has the supply-chain visibility, packaging-line clarity, and written-procedure infrastructure expected of a federally registered dispenser.
Where to Look Carefully in Section 5
Three places.
First, the supplier list. During the 60-day window, most state-licensed cannabis suppliers will not yet have DEA registration numbers because they are applying contemporaneously. How operators populate this field is an open question. Some applicants may list state license numbers with a notation that the federal registration is pending. The DEA has not yet published guidance. Whatever an applicant decides, the answer should be consistent across the application and explainable to a reviewer.
Second, repackaging. The line between dispenser-permitted handling and manufacturer- or distributor-required repackaging is not always obvious. A “Yes” may suggest the applicant needs a separate manufacturer registration in addition to the dispenser registration. A “No” carries risk if the operator’s actual workflow includes repackaging activity that the DEA might characterize as manufacturer activity.
Third, the SOP checklist. Each “Yes” indicates that the firm has a written SOP for that activity. Most state-licensed dispensaries have SOPs for the state-required categories (ordering, receiving, inventory, storage, security, dispensing, destruction). Fewer have federally-framed SOPs for theft/loss reporting at DEA standards, due diligence at federal scope, and “corresponding responsibility.”
That last one deserves a moment. “Corresponding responsibility” is a federal pharmacy law concept referring to the dispensing pharmacist’s duty to determine that a prescription is valid for a legitimate medical purpose, separate from the prescriber’s duty. Translated to medical marijuana dispensaries, it implies a duty to verify each transaction is for a legitimate medical purpose with a valid state-authorized certification/recommendation.
Operators answering “Yes” here should have SOPs that actually address this duty; operators answering “No” should consider whether the answer reflects an SOP gap that should be remediated.
Section 6: Compliance (Part 2)
Section 6 collects key personnel disclosure. For each individual with controlled-substance access, the form requires identifying details, including date of birth and Social Security number, professional credentials, and yes/no responses on prior disciplinary actions and controlled-substance convictions.
What the DEA Appears to Be Testing
Who actually has access to controlled substances at the licensed premises, and whether any of those people carry a history that needs to be evaluated.
Where to Look Carefully in Section 6
- Data collection sensitivity. Full SSNs across the personnel list are a substantial data collection. Operators should consider secure intake protocols, documented consent from each individual, and retention practices before assembling this section.
- Individual-level disclosures. Each “Yes” on the disciplinary or conviction questions also opens the same interpretive issues as Section 4 at the individual level, including the parsing problems around “pending” actions.
Section 7: Compliance (Part 3)
Section 7 is a yes/no checklist of seven security measures at the licensed premises:
- Vault;
- Safe;
- Secure storage room;
- Other secure storage;
- Premises access controls;
- Alarm system; and
- Onsite security personnel.
What the DEA Appears to Be Testing
Whether the premises’ security infrastructure is appropriate to the operational scale.
Where to Look Carefully in Section 7
The risk here lies in the gap between what the form says and the actual security infrastructure at the premises. A “Yes” on a measure that doesn’t exist is a representation problem; a “No” that understates actual security infrastructure is equally problematic. Accuracy is the through-line.
Section 8: Submission
Section 8 contains the certification, the fee acknowledgment, and the e-signature. It reinforces the warnings given throughout this post regarding filling out the application accurately:
WARNING: 21 U.S.C. § 843(d) states that any person who knowingly or intentionally furnishes false or fraudulent information in the application is subject to a term of imprisonment of not more than 4 years, and a fine under Title 18 U.S.C. of not more than $250,000, or both.
What the DEA Appears to Be Testing
That the applicant has read and understood the truthfulness warning, that the signatory is authorized to make the certification, and that the application fee has been paid.
Where to Look Carefully in Section 8
Once the submit button is clicked, interpretive questions throughout the form become locked-in representations. Ensure that answers are accurate and up to date.
A Closing Thought
The right answer for each question may depend on facts and risk tolerance in addition to the text of the question alone. That’s why the point of this article is to evaluate potential interpretations of the questions and associated risk rather than endorse one “correct” path. Be sure to consult with competent legal counsel if you have questions.
Frequently Asked Questions
Where is the DEA Medical Marijuana Dispensary Registration application located?
The DEA’s Medical Marijuana Dispensary Registration Portal is at https://mmapplication.diversion.dea.gov/.
How many sections does the DEA medical marijuana application have?
The application is structured into eight sections: Business Information, Activity, State Licenses, Liabilities, Compliance (Part 1), Compliance (Part 2), Compliance (Part 3), and Submission.
What is the most consequential question in Section 1 of the DEA medical marijuana application?
The applicant’s prior “experience in dispensing controlled substances.” Because state-licensed cannabis activity occurred while marijuana was Schedule I, applicants must think carefully about whether their answer reflects federal-registration-track experience or state-licensed activity, and proceed with caution given the structure of the question.
Can a dispensary holding both medical and adult-use licenses still apply for DEA registration?
Possibly, but Section 2 creates real tension. Adult-use marijuana remains in Schedule I, and the rescheduling order’s registration pathway covers only medical-channel activity. Some operators consider restructuring (splitting medical and adult-use into separate entities), but whether that approach works depends in part on how the DEA reads the undefined term “firm.”
What happens if my state license expires while my DEA application is pending?
The application page warns that failure to provide a valid, active state license will result in the application being declared defective and withdrawn — without a refund. Because DEA processing can run months, operators with renewals due in the next six to nine months should plan accordingly.
What is “corresponding responsibility” in the SOP checklist?
“Corresponding responsibility” is a federal pharmacy law concept: the dispenser’s independent duty to determine that a prescription (or, in the cannabis context, a state-authorized certification/recommendation) is valid for a legitimate medical purpose, separate from the prescriber’s duty.
Need Help with Your DEA Medical Marijuana Application?
We advise state-licensed medical operators on DEA registration applications for all qualifying license types. State-licensed medical marijuana operators who need federal DEA registration counsel can reach Kocot Law at:
- Email: ryan@kocotlaw.com
- Phone: (916) 572-6445
- Schedule a consultation: Calendly
DISCLAIMERS: This article is not legal or tax advice, nor is it an endorsement of any specific answer to any specific application question. Applicants should consult with competent counsel before submitting an application. Attorney advertising.
