The cannabis industry has spent the better part of two years treating federal rescheduling as an unqualified victory. The 280E relief alone justifies the celebration. But buried inside the move from Schedule I to Schedule III is a regulatory collision that compliance officers, state regulators, and industry lobbyists are only now beginning to grapple with — and the consequences could reshape how cannabis is regulated in America.
The core issue is straightforward: Schedule III substances are regulated by the FDA. State cannabis programs are not. What happens when federal pharmaceutical regulation meets state-level recreational markets that were built in the absence of any federal framework?
The Preemption Problem Nobody Is Discussing
Federal preemption — the legal doctrine that federal law overrides conflicting state law — is the elephant in the room. Under the Controlled Substances Act, the manufacture, distribution, and dispensing of Schedule III substances require compliance with federal regulations, including FDA approval for medical claims and DEA registration for handlers.
No state recreational cannabis program currently meets these requirements. Not California. Not Colorado. Not any of the 24 states with operational adult-use markets. These programs were built on a foundation of federal non-enforcement, not federal authorization.
The question is whether the federal government, post-rescheduling, will assert regulatory jurisdiction over state cannabis markets — and if it does, what that assertion looks like in practice.
The most likely answer, at least in the near term, is that it won’t. The Biden administration and the current DEA leadership have shown no appetite for disrupting state programs, and the political reality of shutting down a multi-billion-dollar legal industry that operates in half the country makes aggressive enforcement a non-starter. But “probably fine for now” is not a regulatory framework, and the legal ambiguity creates real risks for operators, investors, and the state agencies that oversee these programs.
What the CSA Actually Says About Schedule III Substances
The Controlled Substances Act establishes clear requirements for Schedule III substances. Manufacturers must register with the DEA and comply with production quotas. Distributors must maintain detailed records and follow chain-of-custody requirements. Dispensing requires a DEA-registered practitioner or pharmacy.
None of this maps onto the existing cannabis market structure. State-licensed cultivators are not DEA-registered manufacturers. Dispensaries are not pharmacies. Budtenders are not pharmacists. The entire supply chain — from seed to sale — operates under state-created regulatory frameworks that have no federal analog.
The practical implication is that Schedule III classification creates two parallel legal universes: one in which cannabis is a federally regulated substance subject to FDA and DEA oversight, and another in which it is a state-regulated consumer product sold through a separate licensing and compliance infrastructure.
This dual-track reality is sustainable only as long as the federal government chooses not to enforce its jurisdiction. That choice is a matter of policy, not law — and policies change with administrations.
State-by-State Regulatory Risk Assessment
Not all states face the same level of regulatory risk from rescheduling. The exposure depends on three factors: how the state’s program is structured, whether the state has built its regulations to anticipate federal alignment, and how dependent the state’s budget is on cannabis tax revenue.
States with mature, well-regulated programs — Colorado, Oregon, Washington — are best positioned. These states have invested heavily in testing requirements, seed-to-sale tracking, packaging standards, and quality control systems that, while not identical to FDA requirements, are broadly consistent with the direction federal regulation is likely to take.
States with newer or more loosely regulated programs face greater risk. New York’s adult-use market, which launched amid significant regulatory turmoil at the Office of Cannabis Management, has licensing and enforcement frameworks that remain works in progress. California’s market, despite its size, continues to struggle with widespread non-compliance and a regulatory structure spread across multiple agencies.
The wild card is states where cannabis tax revenue has become a significant budget line item. Illinois collected over $500 million in cannabis tax revenue in fiscal year 2025. Colorado exceeded $400 million. These states have a powerful fiscal incentive to resist any federal regulatory framework that would disrupt their markets — and they will lobby accordingly.
The FDA Approval Pathway
The FDA’s role post-rescheduling is the most consequential unknown. As the regulatory authority over Schedule III substances, the FDA would have jurisdiction over cannabis products marketed for medical use — and potentially broader authority depending on how it interprets its mandate.
The agency has been deliberate about signaling its approach. In a December 2025 statement, the FDA indicated that it would not seek to disrupt existing state programs during a “transition period” following rescheduling, and that it would initiate a separate rulemaking process to establish regulatory standards for cannabis products.
That rulemaking process is expected to take two to three years at minimum. The FDA has identified several priority areas: manufacturing standards (including Good Manufacturing Practice requirements), labeling and potency claims, contaminant testing thresholds, and marketing restrictions.
The manufacturing standards question is particularly significant. Current state-level requirements vary enormously. Colorado requires pesticide testing for 80 analytes. Florida requires 60. Some states require heavy metals testing; others do not. An FDA-mandated national standard would create compliance costs for operators in less stringent states while validating the investments made by operators in more rigorous markets.
How Operators Should Prepare
The operators who will navigate the post-rescheduling regulatory landscape most successfully are those who start preparing now — before the final rule is published and before the FDA begins its rulemaking.
First, invest in compliance infrastructure that can scale to meet federal standards. This means Good Manufacturing Practice-adjacent quality systems, comprehensive testing protocols, and documentation practices that go beyond minimum state requirements. The marginal cost of over-compliance now is far less than the cost of retrofitting operations to meet federal standards later.
Second, engage in the federal rulemaking process. The FDA will accept public comments on its proposed cannabis regulations, and the industry voices that participate in that process will shape the rules that everyone else has to follow. Trade organizations like the National Cannabis Industry Association and the Cannabis Trade Federation are already staffing up their federal regulatory teams.
Third, watch the state-level responses. Several states are already exploring legislation that would align their cannabis regulations with anticipated federal standards — a proactive strategy that reduces preemption risk and positions those states’ operators for a smooth transition.
The rescheduling of cannabis from Schedule I to Schedule III is not the end of the regulatory story. It is the beginning of a new chapter — one in which the industry must engage with federal regulators for the first time in its history. The operators who treat this as an opportunity rather than a threat will be the ones still standing when the regulatory dust settles.