DEA EMS Controlled Substance Compliance: What the 2026 PPAEMA Rule Requires

DEA EMS controlled substance compliance is a direct obligation for every agency that dispenses, administers, or orders controlled substances. On February 5, 2026, the Drug Enforcement Administration (DEA) published its final rule implementing the Protecting Patient Access to Emergency Medications Act of 2017 (PPAEMA). The rule takes effect March 9, 2026, and it changes the way EMS agencies must register with the DEA, store controlled substances, document their use, and authorize their field administration.

In this post, we’ll break down each part of the rule: what it requires, how it affects your agency, and what’s next.

 

Background: Why This Rule Exists

Prior to PPAEMA, EMS agencies had no purpose-built DEA registration category. Most operated under the DEA registration of an affiliated hospital or medical director, and in some cases agencies registered under the Mid-Level Practitioner – Ambulance Service (MLP-AS) category, though it provided limited practical value. Congress fixed the legal foundation in 2017 by passing PPAEMA, which amended the Controlled Substances Act to create a specific EMS agency registration category and establish uniform standards for storage, recordkeeping, and restocking. DEA did not publish implementing regulations until 2020 and did not finalize them until now. This rule closes nearly a decade-long gap.

Part 1: DEA Registration

If your agency handles controlled substances you are required under the Controlled Substances Act to be covered by a DEA registration. This obligation is not new. What is new is the specific EMS registration category that now exists. Under new 21 CFR Section 1301.20, a registered EMS agency obtains a single DEA registration per State rather than needing a separate registration for every station or location. If your agency operates in more than one State, a separate DEA registration can be obtained in each State where controlled substances are administered.

The new EMS registration category is optional

The final rule does not require agencies operating under a valid existing arrangement to transition. The MLP-AS registration will transfer to the new EMS agency category. Otherwise, DEA has characterized adoption of the new model as optional, and the regulatory text does not repeal or invalidate your current arrangements.

If your agency wants to register, State authorization is required

The new EMS registration category is only available to agencies authorized to administer controlled substances under the laws of their State. Per 21 U.S.C. 823(k)(1), an agency’s DEA registration application must demonstrate that State authorization. If your State does not authorize EMS agencies to independently handle controlled substances, this rule’s registration pathway does not apply to you in the same way, and your agency’s current arrangements, whether under a hospital’s registration or a medical director’s registration, remains appropriate. Currently, DEA has not provided guidance on what counts as State authorization. Check with your State EMS office or legal counsel to confirm what your State authorizes before taking any steps toward obtaining a new EMS registration.

It is worth noting that every substantive requirement covered in Parts 2 through 6 of this post: designated locations, storage and security, standing orders, recordkeeping, and restocking applies specifically to a “registered emergency medical services agency” as defined in 21 U.S.C. 823(k)(13)(J). If your agency does not register, or cannot register under your State’s law, these requirements do not apply to you directly. Your agency’s obligations continue to flow from whatever registration arrangement currently covers your controlled substance operations. If your agency has the option to use the new registration category, we recommend you review the pros and cons of the new rules to determine what is best for your agency.

What Registration Does Your Agency Currently Have?

There are three common situations EMS agencies find themselves in:

  1. You already hold an MLP-AS registration. Some EMS agencies have already registered with DEA under the “Mid-Level Practitioner — Ambulance Service” (MLP-AS) category.  Under the new rule, these agencies will automatically transition their existing registration to the new EMS agency category. If your agency holds multiple MLP-AS registrations in the same state, those can now be consolidated into a single EMS registration for that state, reducing paperwork and, for fee-paying agencies, potentially reducing fees.
  2. You operate under your medical director’s personal DEA registration. Some EMS agencies have historically operated under the DEA registration held by their licensed physician medical director in two scenarios: a registration based on the medical director’s personal place of business, or based on the agency’s location. Under the new rule, if your agency is able and willing to register, a new EMS agency registration must be obtained for agencies where the registration is for the medical director’s personal place of business. For medical director registrations located at the agency’s location, a medical director may transfer their existing registrations to the EMS agency.
  3. You operate under a hospital’s DEA registration. Hospital-based EMS agencies (agencies owned or operated by a hospital) may continue operating under the hospital’s existing DEA registration without obtaining a separate one, per 21 U.S.C. Section 823(k)(3). This is an explicit statutory exemption that remains fully available under the final rule. If your agency is hospital-owned and using the hospital’s registration under a formal written agreement, you are covered for registration purposes. Hospital-based EMS agencies should not read this registration exemption as relieving them of compliance obligations under the final rule. Because they fall within the definition of “registered emergency medical services agency” under 21 U.S.C. 823(k)(13)(J)(ii), all of the operational requirements discussed in Parts 2 through 6 of this post apply to them.

What About Registration Fees?

The registration fee is $888 for a three-year period, consistent with other controlled substance dispensers under 21 CFR Section 1301.13(e). However, agencies “operated by an agency of the United States, of any State, or any political subdivision or agency thereof[,]” which includes government fire departments, county EMS services, and other publicly operated agencies are exempt from the registration fee under 21 CFR Section 1301.21(a)(1). To be clear, fee-exempt agencies still need to register, they just pay nothing to do so. Privately-operated agencies are not fee-exempt.

When Does This Need to Happen?

The rule sets no hard deadline for transition; DEA recommends agencies transition immediately, at the end of their current registration period, or three to six months before their next renewal. DEA encourages agencies to contact their local DEA field office to manage the transition.

What you should do: Identify which registration arrangement currently covers your agency and confirm it is properly documented. If you are evaluating the new EMS registration, first confirm your State authorizes it, then weigh the pros and cons of the following sections of the rule. If you have no clear registration coverage of any kind, contact your local DEA field office before an enforcement situation arises.

 

Part 2: Designated Locations

Many EMS agencies use a hub-and-spoke model: one main registered station and several satellite locations throughout the service area. Under the old rules, only a registered location could lawfully receive and store controlled substances.

The final rule addresses this directly. A registered EMS agency may now designate unregistered satellite locations called “designated locations” where controlled substances can be delivered and stored, per 21 U.S.C. Section 823(k)(5) and new 21 CFR Section 1301.20(b). To designate a location, the agency must notify the DEA at least 30 days before the first delivery of controlled substances to that location. Notification is submitted through the DEA Diversion Control Division website. If DEA does not object within 30 days, the location is automatically approved.

What Qualifies as a Designated Location?

The eligible type of designated location is defined as a “stationhouse” in 21 CFR Section 1300.06: an enclosed structure within a State where the emergency medical services agency is registered, which may house EMS vehicles at its premises, and which is actively and primarily being used by that emergency medical services agency. Importantly, the final rule removed the originally proposed requirement that the structure must house EMS vehicles inside. Following public comment from agencies in rural and urban settings, DEA recognized that many facilities used primarily for EMS operations, including supply storage, training, administrative functions, don’t house vehicles indoors. Vehicles can be parked at the premises outside the structure and still qualify, as long as the controlled substances in those vehicles are properly secured.

Note that deliveries from the registered location to a designated stationhouse are not treated as “distribution” under the CSA, resolving prior legal ambiguity about intra-agency transfers. Distributors, however, cannot deliver directly to designated locations. Controlled substances must first be received at the registered location and then moved to the designated location by the agency.

What you should do: Map out every location where your agency currently stores controlled substances. Any satellite station that has not been formally designated with DEA needs to go through the 30-day notification process. Document every step, including the date of notification and any response from DEA.

 

Part 3: Storage and Security on Vehicles and at Stations

Whether on an ambulance or in a station, controlled substances now have specific federal storage requirements under 21 CFR Section 1301.80. This is where many agencies will need to take a close look at their current practices.

A registered EMS agency may store controlled substances at a registered location, a designated location (after the 30-day notification period), in an EMS vehicle at a registered or designated location, or in an EMS vehicle that is actively in use, meaning it is responding to an emergency, transporting patients, or on call. “On call” includes any period where the vehicle and crew are available and ready to respond, even if not currently running a call.

When controlled substances are stored, not actively being used, they must be kept in a securely locked, substantially constructed cabinet or safe that cannot be readily removed, per 21 CFR Section 1301.80(c)(1). A qualifying automated dispensing system (ADS) at a registered or designated location is also an acceptable storage option, provided it is not used to directly dispense to patients and complies with State law.

Vehicle Locking and the Jump Bag Rule

EMS vehicles must be locked whenever they are parked outside of an enclosed registered or designated location, or when they are actively in use but left unattended. For example, when a crew stops for a meal break. A vehicle does not need to be locked when it is inside an enclosed registered or designated location, when it is at the scene of an emergency, or when EMS personnel are “in attendance,” meaning physically present and monitoring the vehicle.

One of the most operationally welcome provisions in the final rule: 21 CFR Section 1301.80(d) now explicitly allows EMS personnel to carry controlled substances on their person or in a jump bag while actively responding to an emergency. This came directly from public comments raising the practical reality that returning to a vehicle safe during a time-critical call is simply not feasible. The rule draws a clear line between “storing” and “carrying during an emergency response.” When the emergency response ends, at the end of a shift, during a meal break, or when the vehicle is left unattended, substances must be returned to proper secure storage.

What you should do: Audit your vehicles. Ensure the vehicle itself properly locks. Every EMS vehicle that carries controlled substances also needs a securely locked, substantially constructed cabinet or safe that cannot be easily removed. So, ensure each vehicle’s secure storage meets the requirements. Update your policies to reflect the jump bag allowance and the clear requirement that substances return to secure storage as soon as the active emergency response ends.

 

Part 4: Standing Orders, Verbal Orders, and Field Administration

This part of the rule addresses the authority of EMS professionals to administer controlled substances in the field without a physician physically present. In determining whether to pursue the new registration category, this new federal authority (which still requires State authority) is one of the most meaningful reasons an agency may make the switch.

Under new 21 CFR Section 1306.07(g), codifying 21 U.S.C. Section 823(k)(4), EMS professionals of a registered agency may administer controlled substances in Schedules II through V outside the physical presence of a medical director or authorizing medical professional, provided two conditions are met: (1) the administration is authorized by State law, and (2) it is done pursuant to a qualifying standing order or verbal order.

A standing order must be a written medical protocol containing a determination by the medical director. A verbal order is a real-time oral authorization from a medical director or other authorized medical professional. Both terms are now formally defined in 21 CFR Section 1300.06. In mass casualty situations, verbal orders may be issued more broadly under specific conditions set out in the rule.

State law still controls whether and how standing and verbal orders are authorized in your State. DEA defers to State licensing bodies on what EMS personnel are qualified to do. Your State EMS protocols and your medical director’s standing orders remain the first line of authority.

What you should do: Confirm that your agency’s standing orders are in writing, reflect the medical director’s authorization, and are kept as part of your records. Review your State EMS protocols to confirm that field administration of controlled substances is properly authorized under State law. Make sure your medical director understands their role in this framework.

 

Part 5: Recordkeeping

New 21 CFR § 1304.27 creates the first EMS-specific federal recordkeeping standard. Records must be maintained for at least two years under 21 CFR § 1304.04(a)(5), kept at each registered and designated location, and available for DEA inspection. Electronic systems that meet CSA standards are acceptable.

Administered or disposed substances.

For each dose administered or disposed of, document: substance name, form, date, amount, and patient identifier; last name or initials of the administering provider; and last name or initials of the medical director or authorizing professional who issued the standing or verbal order. The medical director does not need to personally initial each record. The record must simply identify who issued the order. For disposal, also document the manner of disposal and the identities of the disposer and any witness.

Acquisitions from another registrant.

For each controlled substance received from another registrant, including hospital restocking, record the substance name and form, quantity, date of acquisition, and the name, address, and DEA registration number of the supplying entity.

Distributions to another registrant

For each transfer to another registrant, document the same data elements in reverse, including the receiving entity’s name, address, and DEA registration number.

Destructions

Destruction records must include the substance name and form, quantity, date, manner of disposal, and the name and title of the person carrying out the destruction. If transferred to a reverse distributor, that party’s registration information must also be documented. Citation: 21 CFR Part 1317.

Deliveries between registered and designated locations

For each intra-agency delivery, record the substance name and form, quantity, date, name and address of the designated location, and name and title of the person receiving the delivery.

What you should do: Compare your PCR template against the required fields for administered and disposed substances. Update it where fields are missing. Beyond the PCR, confirm your agency has a records process for acquisitions, distributions, destructions, and intra-agency deliveries. These typically require a separate tracking process outside the PCR system.

 

Part 6: Restocking and Emergency Deliveries Between Agencies

Two provisions in the final rule address situations that directors of rural services especially will recognize immediately.

Under new 21 CFR Section 1307.14, codifying 21 U.S.C. Section 823(k)(8), a registered EMS agency may receive controlled substances from a hospital for restocking purposes following an emergency response, without going through the standard DEA ordering process. This directly addresses the operational reality where, especially in rural systems where transport distances to the nearest hospital may be 20 to 100 miles, returning to a home station to restock between calls is not always possible. Both the hospital and the EMS agency’s registered location must maintain records of the transfer. If the vehicle is restocked at a designated location rather than the registered location (either from a hospital or from another designated location), the designated location must notify the registered location within 72 hours of receiving the controlled substances. Note that hospital-based agencies may also restock at other hospitals, not just their registered hospital.

For special situations such as shortages, public health emergencies, or mass casualty events, new 21 CFR Section 1307.15 allows hospitals and EMS agencies to deliver controlled substances to each other with written approval from the DEA Special Agent in Charge (SAC) for the area or from DEA Headquarters. Under normal circumstances this kind of agency-to-agency transfer is not permitted, because DEA closely controls distribution of controlled substances. This provision creates a formal emergency pathway. Contact information for DEA field offices and Headquarters is available on the DEA Diversion Control Division website.

What you should do: Write restocking procedures into your agency’s policies. Document how hospital restocking is handled, who keeps the required records, and how the 72-hour notification requirement is met. Make sure supervisors know the SAC approval process for mass casualty situations before they need it.

 

Putting It All Together

There are a lot of important parts to this new rule. As a refresher, your agency should address the following:

  • Confirm which DEA registration arrangement covers your agency and that it is properly documented.
  • Evaluate the new EMS registration category against your State’s authorization status and the standing orders authority factor in Part 4.
  • Formally designate every satellite location through the 30-day DEA notification process.
  • Audit vehicle and station storage against the substantially constructed, not-readily-removable standard.
  • Confirm standing orders are written, authorized by your medical director, and on file at a registered location.
  • Update your PCR template to capture all required controlled substance documentation fields.
  • Establish records processes for acquisitions, distributions, destructions, and intra-agency deliveries.
  • Update restocking procedures to reflect the any-hospital rule and the full scope of the 72-hour notification requirement.

If you have questions about how this rule affects your agency, we are here to help. Use the Contact button on our website to reach our team, and we will be happy to help.