In June 2026, Trulieve became the first U.S. plant-touching cannabis company to trade on the New York Stock Exchange. Glass House followed weeks later under the ticker GLAS. Neither listing was possible before the April 2026 rescheduling order placed state-regulated medical marijuana in Schedule III, and both companies got there the same way: by restructuring to emphasize the federally recognized medical channel.
The capital markets have now put a price on federal-channel readiness. But the flip side of that value is the part that gets less attention: the registered channel comes with DEA oversight and, eventually, rules for interstate commerce. Operators who want the upside need to start preparing for the scrutiny. Here’s what that preparation actually looks like, along with the three strategic decisions underlying it.
What DEA oversight actually means: deference to your state program, with teeth
The rescheduling order does not drop a parallel federal rulebook on top of your state obligations; state-required records are accepted “to the maximum extent permissible.” And your state medical certification framework even suffices for dispensing. The order calls this cooperative federalism, and it means the compliance program you run for your state regulator is, functionally, the program you’ll be running for DEA. That’s the good news. Now the teeth:
- Your federal registration automatically suspends if your state license is suspended, revoked, or expires. A state enforcement action, or even a fumbled renewal, no longer costs you a state license while your federal posture rides it out. It takes both. State compliance hygiene just became a federal survival issue.
- Deference means your state records are the federal record. If DEA accepts your state-required records as the basis of federal oversight, then every gap, discrepancy, and unreconciled METRC entry in those records is now visible in a federal frame.
- “To the maximum extent permissible” is not defined, and the ceiling isn’t zero. The deference language is bounded by its own first clause: DEA accepts state records only to the extent consistent with what federal statute and the Single Convention strictly require. The Convention requires records showing quantities manufactured, distributed, dispensed, acquired, and disposed of, kept for two years, and the CSA has recordkeeping provisions of its own. Somewhere between “METRC is enough” and “full federal controlled-substance recordkeeping” is a line nobody can locate yet, because DEA hasn’t drawn it. Operators should not assume the answer is zero federal delta, and the safe posture is records that would satisfy both readings.
- DEA keeps public-interest authority. Registration can be denied or revoked under the 21 U.S.C. § 823 factors, and your documented compliance history is exactly what that analysis looks at.
The operators who will do well under this framework are the ones whose state compliance program can withstand being read as a federal record: records that reconcile, inventory that ties out, SOPs that are followed, licenses that never lapse.
Interstate commerce: the prize behind the registration
The registered medical channel is also the doorway to what this industry has wanted for a decade: lawful movement of product across state lines. The contours are still being worked out, but the direction is clear enough to prepare for. When interstate commerce arrives for registrants, the winners will be operators who can already prove provenance end to end, whose supply agreements are papered for a federal counterparty, and whose records can follow product across a state border without a gap. Cultivators and manufacturers in low-cost states, California very much included, have the most to gain, and Glass House’s positioning is a preview of that logic.
Two structural notes from the order itself. First, imports and exports remain permit-gated: the order adds state-licensed medical marijuana to the list of substances requiring a permit for every individual import or export, so international movement runs through DEA paperwork from day one. Second, the order exempts state-licensed marijuana from the Single Convention’s wholesale-monopoly requirement, which keeps ordinary wholesale trade in private hands; the government’s purchase-and-resale role for cultivators is a nominal-price formality, not a takeover of your distribution. The lane for registrant-to-registrant commerce is being built deliberately. Preparing means auditing your documentation chain now, building supply and distribution agreements with federal compliance terms rather than retrofitting them later, and understanding how your tax and entity posture changes when revenue starts crossing state lines.
Decision one: audit the compliance program before the government does
Everything above starts in the same place: a gap analysis between the program you run today and the program a federal registrant needs. A real audit covers your SOPs against both state rules and federal expectations, inventory and recordkeeping reconciliation, security and storage, personnel and training files, reporting readiness, and the paper trail a DEA inspection would ask for on day one. Given the undefined perimeter of the deference language, the audit should specifically map your state-required records against the Single Convention’s floor, so that whichever way DEA draws the line, your records already clear it. The output should be a severity-ranked findings list and a remediation roadmap, not a binder that says “generally adequate.”
Timing note: the order directed DEA to process applications filed within 60 days of publication on a six-month clock, with those early applicants allowed to operate under their state licenses during review. That window has closed. Applications remain available, but without the early-filer assurances, which makes the strength of your application file, and the compliance program behind it, matter more, not less.
The broader timing argument is simple: remediating on your own schedule is cheap, and remediating during an application review or after an inspection finding is not. Trulieve and Glass House didn’t pass exchange diligence with programs they cleaned up the week before.
Decision two: the medical-only question, especially in California
Rescheduling only reached the medical channel, which forces a strategic question most operators haven’t had to answer before: does the adult-use side of your business still earn its place? California makes this question unusually interesting. Under state rules, medical producers aren’t walled off from the adult-use market; a medicinal-designated operation can work with both adult-use and medicinal licensees, so going medical-first doesn’t necessarily mean abandoning your existing commercial relationships. That flexibility makes California one of the easier states in which to lean medical without shrinking your business.
But there’s a genuinely open federal question sitting on top of it: whether DEA will allow a Schedule III registrant to have any relationship with the adult-use market at all. That hasn’t been settled, the pending hearings may shape the answer, and anyone who tells you they know how it comes out is guessing. Which means the practical move right now isn’t to pick a lane blind. It’s to position so that either answer is survivable: understand exactly which of your revenue streams and relationships touch adult-use, know what a medical-only version of your business looks like on paper, and be ready to move when the rule crystallizes instead of starting the analysis that day.
Decision three: entity separation if you’re keeping a foot in adult-use
If you want the federal channel and you’re not ready to give up adult-use revenue, structure is how you hold both. The goal is that a regulator, a lender, an exchange, or an acquirer can look at your organization and see a clean federally compliant business that isn’t commingled with a Schedule I one. The order itself draws the line in blunt terms: marijuana outside an FDA-approved product or a state medical license remains Schedule I, subject to the full administrative, civil, and criminal exposure that has always come with it.
That generally means separate entities for the medical and adult-use operations, with separate books, bank accounts, inventory, and records, and real arm’s-length agreements for anything shared: premises, IP, management services, equipment. Ownership chains matter too, because state disclosure rules and any federal registration analysis will both look through the structure, and a sloppy holding company can contaminate the very separation it was built to create. Done well, the structure also preserves optionality: if the hearings land badly for dual operators, a cleanly separated adult-use entity can be sold, spun off, or wound down without dragging the registered business through the transaction. Done late, that same separation becomes a rushed restructuring under regulatory deadline pressure, at restructuring-under-pressure prices.
If your longer-term plan is to exit adult-use entirely, the same logic applies in reverse: separation first, so the eventual divestiture or wind-down is an entity-level event with clean records, not a surgical extraction from commingled operations.
The uplistings are the proof of concept
Two companies just demonstrated that restructuring around the federal medical channel unlocks value the industry has chased for years. The prerequisite in both cases was the unglamorous part: compliance programs, records, and structures that survive institutional diligence. That work is available to operators at every size, and it starts with an honest audit.
Kocot Law conducts cannabis compliance audits built for exactly this moment: a severity-ranked review of your program against state requirements and federal expectations. We also handle DEA registration, entity structuring, and the agreements that make separation real. Call or text (916) 572-6445 for a free 15-minute consult.
FAQ
Does rescheduling add new federal recordkeeping requirements on top of my state obligations?
Mostly no, with an asterisk. The order limits federal reporting and recordkeeping to what statute and treaty strictly require and accepts state-required records “to the maximum extent permissible.” But that phrase is undefined, and the Single Convention sets a records floor DEA cannot waive. Until DEA draws the line, prudent operators keep records that would satisfy both readings.
Does rescheduling let cannabis move across state lines today?
No. The registered medical channel creates the framework where federal interstate commerce can develop, and registrants should prepare for it, but the operational rules are still taking shape. International imports and exports require a DEA permit for each transaction.
Can I keep my adult-use business and pursue a DEA registration?
It’s unsettled. Whether DEA will permit a Schedule III registrant to operate in or alongside the adult-use market is an open question pending further proceedings. Structuring the two sides separately preserves your options under either outcome.
What happens to my DEA registration if my state license lapses?
Under the order, a federal registration automatically suspends upon suspension, revocation, or expiration of the underlying state license. State compliance and renewal calendars are now federal risk items.
What does a compliance audit cover?
SOPs, inventory and recordkeeping reconciliation against both state rules and the federal treaty floor, security, personnel and training files, reporting readiness, and entity and ownership posture, with severity-ranked findings and a remediation roadmap.
Attorney Advertising. This article is for general information only and is not legal advice; reading it or contacting Kocot Law does not create an attorney-client relationship. The federal framework described is evolving; obligations in any specific case are controlled by current statute, regulation, and agency guidance.
