Medical cannabis operators have a short window to act on the DEA's Schedule III rescheduling order, and the cost of missing it shows up in tax dollars and license risk. This article is written for dispensary operators, multi-state operators, compliance officers, and seed-to-sale managers who need to know what changed on April 28, 2026, what it does to their federal tax position, and what to file before the DEA's priority registration window closes.
On April 23, 2026, the U.S. Drug Enforcement Administration issued a final order moving two categories of marijuana from Schedule I to Schedule III. The order took effect April 28. The U.S. Treasury and IRS have already said the change carries significant positive tax consequences for the medical cannabis industry. The benefit is real, but it is not automatic, it does not apply to every product on the shelf, and the registration step that grants federal standing is already counting down.
What the April 28 order actually changed
The order reclassifies two things. The first is marijuana inside FDA-approved drug products. The second, and the one that matters to almost every operator reading this, is marijuana that is subject to a state medical marijuana license. That phrase carries the weight. Cultivation, manufacturing, distribution, and dispensing of cannabis under a valid state medical program now sit on Schedule III, alongside products such as ketamine and anabolic steroids, rather than on Schedule I next to heroin.
Schedule III stops well short of legalization. The order does not federally legalize cannabis, it does not resolve interstate commerce, and it does not remove the state regulators operators already answer to. The effect is narrower and more immediate. It strips out the harshest federal tax provision the industry has carried, and it opens a federal registration path that did not exist five weeks ago. For multi-state operators, it also draws a new line straight through the middle of the product mix, because the order leaves a large part of the industry on Schedule I.
The 280E tax relief and why it is not automatic
Internal Revenue Code Section 280E has been the financial weight on the cannabis industry. It applies to any business trafficking in a Schedule I or Schedule II controlled substance, and it blocks those businesses from deducting ordinary operating costs such as rent, payroll, marketing, utilities, and professional fees. Many dispensaries have run effective federal tax rates north of 60 to 70 percent because of it. Moving to Schedule III generally removes the 280E block for state-licensed medical cannabis operations, because Schedule III substances fall outside the provision.
The math is hard to overstate. A medical dispensary doing $5 million in revenue that previously could not deduct $1.5 million in operating costs was paying federal tax on income it never kept. Restoring those deductions can move hundreds of thousands of dollars per location off the IRS ledger and back to the operator. For a multi-state operator running a dozen medical-licensed sites, the yearly swing reaches into the millions.
Three operational facts should temper the celebration. First, the relief attaches to medical-licensed activity, so an operator with blended medical and adult-use revenue has to segregate the two cleanly in the books, because only the medical side escapes 280E. Second, the change looks forward. It does not rewrite prior-year returns, and aggressive retroactive positions invite audit exposure. Third, the tax position now rests on documentation proving the activity is subject to a state medical marijuana license, which turns the state license file into a federal tax record. Compliance officers should be working now with cannabis-specialized CPAs to rebuild chart-of-accounts segregation, revisit 2026 estimated payments, and assemble the evidence trail before the first post-rescheduling quarterly filing.
The DEA registration window and the 60-day clock
The tax relief arrives with a new obligation: federal registration. The DEA opened its Medical Marijuana Dispensary Registration Portal on April 29, 2026, and built an expedited path for existing operators. Under that path, a business holding a state medical marijuana license can submit its existing state credentials as conclusive evidence of state-law authorization when it applies for DEA registration as a manufacturer, distributor, or dispenser. The state license moves the applicant to the front of the federal line, but the application still has to be filed.
Two numbers belong on every operator's whiteboard. The first is the fee. Registration carries an annual $794 application fee per registrant. The second is the clock. The DEA has said it will prioritize applications submitted within 60 days of the order's publication, and it aims to process those priority applications within six months. Applications filed after that window are still accepted, but they lose the place in the expedited queue, which means a longer and less predictable path to federal registration and a longer stretch of operating in the gap between state authorization and federal recognition.
States are already enforcing the expectation. An Oklahoma regulatory bulletin dated May 8, 2026, advised that cannabis manufacturers and distributors in the state must pursue DEA registration or risk losing their state permits next year. Other medical-program states are likely to copy that approach, making federal registration a practical condition of keeping the state license operators already hold. Treating DEA registration as optional bets the entire license portfolio on regulators staying quiet.
In practice, the registration project should sit with a named compliance lead rather than getting passed around. Pull every active state medical license, confirm legal entity names match across state and federal filings, budget the $794 per-registrant fee across every manufacturing, distribution, and dispensing entity in the corporate structure, and file inside the priority window. For a multi-state operator, this is portfolio-wide project management. A 15-location operator may file dozens of separate registrations, each tied to a specific entity and activity type.
The split-schedule problem for medical and adult-use operators
Here is the line the order draws, and where many multi-state operators will take damage. Any marijuana that is neither in an FDA-approved drug product nor subject to a state medical marijuana license stays a Schedule I controlled substance. Adult-use cannabis was not rescheduled. It remains on Schedule I.
For the many operators running co-located medical and adult-use businesses, that creates two compliance regimes inside one building. Medical inventory and medical-licensed activity get Schedule III treatment and 280E relief. The adult-use inventory on the next shelf stays Schedule I, stays fully exposed to 280E, and stays federally illegal in the pre-rescheduling sense. Seed-to-sale systems now have to tag and segregate inventory by schedule status, not only by product type. Accounting has to wall off medical and adult-use revenue. Marketing, banking conversations, and insurance applications all have to reflect an enterprise that straddles two federal classifications at once.
There is a forward reason to build that structure now. The DEA has scheduled an expedited administrative hearing to begin June 29, 2026, to examine whether all forms of marijuana, adult-use included, should move from Schedule I to Schedule III through formal rulemaking. Operators who build clean medical and adult-use segregation today can absorb a favorable June outcome without a scramble. Operators who blur the line face a messy reconciliation whichever way the hearing lands.
State rules that did not pause for federal action
Federal rescheduling did not slow state rulemaking. Two recent changes show the operational drag compliance teams should plan around.
In Montana, starting July 1, 2026, the maximum THC per serving for ingestible infused products drops from 10 milligrams to 5 milligrams. The same rule requires updated exit packaging: revised warnings placed next to the universal marijuana symbol, an addiction-resource QR code printed on all exit packaging, and the required warning language reproduced verbatim in black ink on a white background. That is a product reformulation project and a packaging redesign running at the same time, against a hard July date. Montana operators who have not already briefed manufacturing and packaging vendors are behind.
Massachusetts moved the opposite way, loosening restrictions on advertising, marketing, and branding for licensed dispensaries. Stores can now promote sales, discounts, and loyalty programs inside the shop and through opt-in email. That is a real commercial opening. The operative word is opt-in, and it leads straight into the exposure most operators still underrate.
Marketing compliance is the next exposure
As loyalty programs and SMS marketing grow, the Telephone Consumer Protection Act has become a litigation hotspot for cannabis. The TCPA sets a $500 penalty per unlawful call or text, rising to $1,500 per message for willful or knowing violations, and plaintiffs can bring those claims as class actions. That is how one non-compliant text blast becomes a six or seven-figure exposure. Most cannabis TCPA suits follow a familiar pattern. A customer's phone number is collected at the door or in an app, but the intake form lacked proper express written consent language, so every later marketing text counts as a violation, though the customer handed over the number.
The carrier layer stacks a second penalty. Under 2026 application-to-person SMS rules, first-offense fines for SHAFT and cannabis content start in the $1,000 to $2,000 per-message range, with repeat violations often above $10,000. Broader cannabis advertising mistakes can draw regulatory fines as high as $43,792 per violation. Before scaling any opt-in loyalty or SMS program, compliance officers should audit consent-capture language, confirm proper A2P campaign registration, and record consent at the contact level in the CRM. The marketing upside is real, and the downside is built to compound.
Priority actions for the next 30 days
File DEA registration inside the priority window. Identify every entity that manufactures, distributes, or dispenses medical cannabis, confirm legal entity names match state filings, budget the $794 per-registrant annual fee, and submit through the DEA portal before the 60-day priority window from the April 28 effective date closes. Late filers lose the six-month processing target.
Engage a cannabis-specialized CPA on 280E restructuring before the next quarterly filing. Segregate medical and adult-use revenue in the chart of accounts, revisit 2026 estimated payments, and build the documentation that proves the activity is subject to a state medical marijuana license.
Rebuild seed-to-sale and accounting for the split-schedule reality. Tag inventory by schedule status, wall off medical and adult-use revenue, and prepare the data model to absorb the outcome of the June 29 rulemaking hearing.
Hit the state deadlines that did not pause. Montana operators need the 5 milligram reformulation and packaging redesign briefed to vendors right away for the July 1 date.
Audit marketing consent before scaling. Review TCPA express written consent language, confirm A2P SMS campaign registration, and record consent per contact before expanding loyalty or SMS programs.
Operators who treat April 28 as a deadline-driven project will turn this rescheduling into durable tax savings and federal standing. Operators who wait will spend the back half of 2026 paying for the delay.
