The DEA’s April 22, 2026 order moving state-licensed medical cannabis to Schedule III was, by any measure, a historic federal embrace of medical marijuana. It was also the beginning of a confusing new phase rather than the end of one. In the weeks since, the dominant message from state regulators has been remarkably consistent: our laws have not changed, and we are waiting for federal guidance.
That posture — federal classification moving while state rules stay put — has created a gap that operators now have to live inside. And the gap is more dangerous than either the old prohibition or a clean legalization would be, because it invites a specific and costly error: assuming that what is true federally is now true at the state level, or vice versa.
What the states actually said
Following the rescheduling order, multiple state cannabis commissions acknowledged the federal action but stressed that their own statutes and regulations remain in force unchanged. They are awaiting further federal guidance — from DOJ, FDA, and DEA — on what Schedule III status means operationally for businesses licensed under state law. A group of U.S. representatives even sent a letter urging “clear, timely guidance” for state-licensed medical businesses, an unusual step that itself signals how much confusion the order created.
In other words, the federal government changed the classification of the plant without resolving how that classification interacts with the fifty-plus distinct regulatory regimes that actually govern day-to-day cannabis operations. The states are right to say their laws have not changed. The problem is what operators do in the meantime.
The three traps in the gap
Trap 1: Assuming Schedule III relaxes state compliance
It does not. State licensing, security, testing, labeling, and reporting requirements all remain fully in force. An operator who eases off state compliance because “we’re Schedule III now” is courting a state enforcement action that has nothing to do with federal scheduling. The federal embrace changes the federal posture; it does not grant relief from a single state obligation.
Trap 2: Assuming the tax and registration benefits are automatic
The benefits operators care about most — relief from 280E, the legitimacy of federal registration — depend on documentation and on guidance that has not fully arrived. Treating those benefits as already banked, before the operational guidance lands and before your records can defensibly support the position, is a recipe for an unpleasant audit. The benefits are real but conditional.
Trap 3: Assuming your data systems already reflect the new reality
This is the trap that catches the operationally unprepared. Federal Schedule III status applies to state-licensed medical product. Your point-of-sale, seed-to-sale, and accounting systems may not cleanly distinguish medical from adult-use, or may not tag activity in a way that maps to the federal classification at all. The gap between federal classification and your own data is exactly where defensibility breaks down.
How to operate well in the gap
Maintain full state compliance as if nothing changed federally
Because, from the state’s perspective, nothing has. Keep every state obligation current — licensing, security plans, testing, labeling, reporting. The federal embrace is a tailwind, not a waiver.
Build the documentation now to claim federal benefits later
You cannot control when DOJ, FDA, and DEA issue guidance. You can control whether your records will support a clean federal position when it does. Make sure your medical activity is cleanly separable in your data, your cost allocations are defensible, and your registration documentation is accurate and current. The operators who benefit fastest from the eventual guidance will be the ones whose books are already ready for it.
Watch for guidance and assign someone to own the response
The relevant updates will come from federal agencies on an unpredictable schedule. Designate who monitors for that guidance and who is responsible for translating it into operational change. The gap will close in pieces, and each piece will carry a short implementation runway.
Reconcile your data to the federal-state distinction
Audit whether your systems can answer the question a regulator or auditor will eventually ask: which of your activity is state-licensed medical product that qualifies for Schedule III treatment, and can you prove it transaction by transaction? If the answer is no, that is the project to start now, while there is time.
Do not let the federal story distract from privacy obligations
Patient records, loyalty data, and employee information remain governed by state privacy law regardless of how the plant is scheduled federally. A higher federal profile for the industry tends to attract more scrutiny, not less. The gap period is a good moment to confirm your data governance is sound, not to let it slide while attention goes to scheduling.
The bigger picture
The federal embrace of medical cannabis is genuine progress, and the eventual guidance will likely resolve much of the current confusion. But “eventually” is the operative word. Right now operators are managing two regimes that have not been reconciled: a federal classification that moved and state rules that did not. The states are being honest when they say their laws are unchanged. The mistake would be to hear that and conclude that nothing is required of you — when in fact the gap demands more diligence, not less, because you are now accountable to both regimes at once and to the seams between them.
The operators who treat this period as a documentation and data-governance exercise — keeping state compliance airtight, building the records to claim federal benefits cleanly, and reconciling their systems to the federal-state distinction — will move first and safely when the guidance lands. The ones who treat the federal embrace as a finish line will discover, the hard way, that it was a starting gun.
For the federal backdrop, see our coverage of the June 29 DEA rescheduling hearing and California’s emergency dual-license rules.
This article is provided for informational purposes only and does not constitute legal advice.
