FCAM Newsletter: April 2026

DEA Compliance Question with Controlled Substances Act

At the core of the new rule is the expectation that every controlled substance can be tracked throughout its entire lifecycle. Agencies must be able to demonstrate who handled the medication, where it was stored, how it was transferred, and what ultimately happened to it—whether it was administered, wasted, or disposed of. This level of oversight requires more than basic recordkeeping; it demands a system in which all documentation is accurate, complete, and immediately retrievable. In an audit, the ability to quickly reconstruct the history of a single vial is no longer ideal—it is expected.

Operationally, the DEA has introduced a hub-and-spoke model that reshapes how EMS systems distribute narcotics. A central registered location, typically the agency headquarters, serves as the legal point of receipt and primary control site. From there, medications are distributed to designated locations such as stations, ambulances, or satellite facilities. While these secondary locations do not require separate DEA registration, they must still operate under strict tracking and documentation standards. Any movement of controlled substances between locations must be recorded, reinforcing a continuous and verifiable chain of custody.

Documentation requirements have become more comprehensive and more critical to compliance. Agencies must maintain detailed records for ordering, inventory, transfers, administration, and waste, as well as procedures for reporting theft or loss. However, compliance is not achieved
simply by having these records—it depends on consistency and reconciliation. Inventory counts must align with administration reports and restocking logs, and discrepancies must be identified and resolved immediately. Delayed or incomplete documentation is now considered a significant
compliance risk.

Security expectations have also been elevated. The DEA requires that controlled substances be stored in secure, tamper-resistant environments with access limited to authorized personnel. This typically involves the use of reinforced safes, controlled access systems, and layered security measures, particularly within response vehicles. Simply securing narcotics inside an ambulance is no longer sufficient; agencies must demonstrate that access is both restricted and traceable.

The greatest risks under this new framework remain internal diversion, inconsistent documentation practices, and a lack of system-wide visibility, especially in multi-station or
decentralized EMS systems. These risks are compounded when agencies fail to align federal requirements with state-specific regulations, such as those that may still apply in places like
Massachusetts.

Ultimately, the 2026 DEA rule is not just a regulatory update; it is an operational mandate. EMS agencies must now function with a level of control and accountability comparable to other highly regulated healthcare entities. Success under this model depends on strong policies, consistent training, effective oversight, and, where appropriate, the integration of technology to support tracking and documentation. Agencies that adapt to this framework will not only meet compliance expectations but also strengthen the integrity and safety of their operations.

FCAM sent an email to the Massachusetts Controlled Substance Registration (MCSR) on March 30, 2026, asking whether ambulance services had to register with the DEA under these new guidelines. The response from Traci Westgate from MCSR, on that same day, stated, “Since most ambulance services in Massachusetts have medical directors and affiliation agreements with hospitals to obtain their federally scheduled drugs, these services would not be required to obtain a DEA, but it is optional. The Commonwealth of Massachusetts does not require the DEA and I do see us ever requiring it as this would cause a lot of burden on these ambulance services.”

In short, agencies do not have to register with the DEA as they are covered under their affiliation agreements with the hospital through their ambulance license.
Here is a link to the most recent webinar outlining these updates for those who may be
interested: https://www.youtube.com/watch?v=-tPTEstsupc