8.2 DEA Registration & Facility Licensing

8.2 DEA Registration & Facility Licensing

The federal Controlled Substances Act creates a closed system of distribution designed to prevent the diversion of controlled substances into illicit channels. Every entity that participates in the legitimate supply chain—from bulk chemical manufacturers and distributors to hospital and community pharmacies, individual prescribers, and researchers—must be registered with the federal government and state authorities. For Utah pharmacy practitioners, licensure involves navigating both federal Drug Enforcement Administration (DEA) mandates under 21 CFR Part 1301 and Utah's unique dual-licensure statutory framework under Utah Code Ann. Title 58 Chapter 37 and Utah Administrative Code R156-37.

The Closed System of Distribution & Federal DEA Registration

Under 21 CFR Part 1301, federal DEA registration serves as the legal foundation authorizing a facility or practitioner to possess, procure, store, and dispense controlled substances. The DEA strictly categorizes registrants by business activity, including:

• Dispensers: Retail pharmacies, hospital/institutional pharmacies, clinics, and practitioners (physicians, dentists, veterinarians, podiatrists, and authorized mid-level practitioners).
• Distributors and Reverse Distributors: Wholesale distributors, and reverse distributors that accept controlled substances for return or destruction.
• Manufacturers: Including bulk manufacturers and repackagers or relabelers.
• Researchers & Analytical Laboratories: Facilities conducting clinical investigations or chemical testing.
• Narcotic Treatment Programs (NTPs / OTPs): Specialized maintenance facilities utilizing methadone or buprenorphine.

Physical Location & Business Activity Requirements (§ 1301.12)

Federal law strictly enforces two independent registration rules under 21 CFR § 1301.12:

1. Independent Registration for Each Physical Location: A separate DEA registration is required for each principal place of business or professional practice where controlled substances are manufactured, distributed, or dispensed. If an owner operates three retail pharmacies in Salt Lake City, Sandy, and Draper, each pharmacy must hold its own separate, unique DEA registration number. Controlled substances belonging to the Salt Lake City pharmacy cannot be casually transferred or shared with the Sandy store without executing formal commercial distribution transfer records (DEA Form 222 or CSOS for Schedule II; invoices for Schedule III-V).
2. Registration by Business Activity: Registrations are specific to the authorized activity. A standard pharmacy holds a "Dispenser" registration. Dispenser authority permits the pharmacy to dispense controlled substances to ultimate users (patients) pursuant to valid prescriptions. It does not authorize bulk commercial manufacturing or open wholesale distribution.

Dispenser Registration & Triennial Renewal: DEA Forms 224 and 224a

Retail community pharmacies, hospital pharmacies, surgical center pharmacies, and practitioner dispensers register with the DEA using specific administrative forms:

• DEA Form 224 (Initial Application): Used for initial registration as a new retail pharmacy, hospital/clinic, teaching institution, or practitioner dispenser. The application requires disclosure of state licensing credentials, physical address, business structure, and ownership/officer background.
• DEA Form 224a (Triennial Renewal Application): Dispenser registrations are issued for a three-year term (triennial). Registrations must be renewed every three years using DEA Form 224a, which is submitted electronically through the DEA Diversion Control Division portal.
• Renewal Timing: A registrant may apply to be re-registered no more than 60 days before its registration expires (21 CFR 1301.13(b)). Retail pharmacies, hospitals and clinics, and practitioners are assigned to monthly groups and renew every three years (the fee schedule lists $888 for dispensers). A pharmacy whose registration lapses loses federal authority to order, handle, or dispense controlled substances until it is re-registered.
• Other Registration Forms: Wholesale distributors and manufacturers utilize DEA Form 225 (renewed annually via DEA Form 225a). Narcotic treatment programs utilize DEA Form 363 (renewed via DEA Form 363a).

The 5% Distribution Rule for Pharmacies (21 CFR § 1307.11)

While a retail or hospital pharmacy dispenser cannot operate as a commercial wholesaler, the CSA provides a critical statutory exemption known as the 5% Distribution Rule under 21 CFR § 1307.11.

A pharmacy registered as a dispenser may distribute a controlled substance to another practitioner or registrant (such as another pharmacy, an urgent care clinic, or an ambulatory surgery center) for general dispensing to its patients without registering as a DEA distributor, provided that:

1. The receiving practitioner or pharmacy is properly registered with the DEA and state authorities to handle that schedule of controlled substances.
2. The transfer is properly recorded: Schedule II transfers must be executed via official DEA Form 222 or CSOS; Schedule III through V transfers must be documented via an invoice containing all required federal recordkeeping elements.
3. The total number of dosage units of all controlled substances distributed by the pharmacy during a calendar year does not exceed 5% of the total number of dosage units of all controlled substances distributed and dispensed by the pharmacy during the same calendar year.

Utah Controlled Substance License (Utah Code § 58-37-105 & R156-37)

Federal DEA registration alone is not enough in Utah. Under § 58-37-105(2) (formerly § 58-37-6(2)), every person who manufactures, produces, distributes, prescribes, dispenses, administers, conducts research with, or does laboratory analysis on Schedule I–V controlled substances in Utah must obtain a license from DOPL. The license runs on a two-year renewal cycle set by rule, and a separate license is required at each principal place of business or practice. Under R156-37-102(6), that means any location where controlled substances are received or stored.

In practice a Utah pharmacy needs three credentials:

1. a DOPL pharmacy license in the right class (Section 1.3);
2. a Utah controlled substance license, which DOPL may issue to Class A–E pharmacies and to individual licensees in eligible classes (R156-37-301); and
3. a DEA registration.

Other key rules:

• An individual who obtains a Utah CS license must obtain a DEA registration within 120 days. The exception is an individual with written consent to use the employer's hospital or institutional DEA registration (R156-37-305). Failing to do so is unprofessional conduct (R156-37-502(9)).
• The CS license depends on the underlying license. If that license expires or is revoked, surrendered, or suspended, DOPL immediately suspends the CS license (R156-37-305(3)). If DEA denies, revokes, surrenders, or suspends the federal registration, DOPL immediately suspends the Utah CS license until the federal registration is reinstated (§ 58-37-105(4)(g)).
• DOPL may deny, suspend, revoke, or place a CS license on probation for listed grounds, including falsified applications, drug convictions, loss of DEA registration, and refusing inspection. It may suspend at the same time proceedings begin if there is imminent danger (§ 58-37-105(4)).
• Agents and employees of a registered dispenser acting in the usual course of employment, carriers, and ultimate users do not need their own license (§ 58-37-105(2)(c)).

Registration Certificate Maintenance & Modification Protocols

• Certificate Display: Under 21 CFR § 1301.35, the DEA Certificate of Registration (DEA Form 223) must be prominently displayed or maintained at the registered location and be readily retrievable for inspection by DEA diversion investigators, DOPL compliance inspectors, and law enforcement officers.
• Change of Address (21 CFR § 1301.51): A registrant cannot unilaterally move controlled substance stock to a new facility address. Prior to relocating, the registrant must submit an application for modification of registration to the DEA. The registrant must receive written approval and an updated Certificate of Registration reflecting the new physical address before any controlled substances are transferred or handled at the new site. In Utah, the pharmacy license is tied to one address. A request to change it must reach DOPL at least 90 days before operating at the new address and include a request to inspect the new site (§ 58-17b-306(3); R156-17b-618(3)). The pharmacy must also give written notice at least 10 business days before relocating (§ 58-17b-614).
• Change of Legal Name: For a name change without an ownership change, the pharmacy notifies DEA and must file its request with DOPL at least 10 business days before the effective date (R156-17b-618(2)). A qualifying ownership change requires a new Utah pharmacy license approved at least 10 business days in advance (R156-17b-618(1)).

Discontinuance and Transfer of Business (21 CFR § 1301.52)

When a pharmacy registrant closes its doors, discontinues operations, or transfers its business and inventory to another registrant (such as during an acquisition or sale), rigorous procedural protocols must be observed:

Mandatory 14-Day Advance Notice to the DEA

Under 21 CFR § 1301.52, the registrant must submit written notification to the Special Agent in Charge (SAC) of the DEA field division at least 14 calendar days prior to the proposed transfer date.

The written notice must specify:

1. The name, address, DEA registration number, and authorized business activity of the registrant transferring the business (transferor).
2. The name, address, DEA registration number, and authorized business activity of the person or entity acquiring the business (transferee).
3. Whether business activities will continue at the current registered location or be moved to a new physical address.
4. The exact calendar date on which the transfer of controlled substances will take place.

Day of Transfer Inventory & Transfer Protocols

On the effective transfer date:

• A complete, formal controlled substance inventory (Schedule II through V) must be conducted (either prior to opening or after closing). This inventory serves as the final closing inventory for the transferring pharmacy and the official initial opening inventory for the acquiring pharmacy.
• Transfer of Schedule II substances requires the acquiring registrant to issue an official DEA Form 222 (or CSOS electronic order) to the transferring pharmacy.
• Transfer of Schedule III, IV, and V substances must be documented through a detailed commercial invoice showing the drug name, dosage form, strength, quantity, container count, date, and names/addresses/DEA numbers of both parties.
• If operations are discontinued without transfer to another registrant, the transferring pharmacy must return its Certificate of Registration and any unexecuted DEA Forms 222 to DEA's Registration Unit for cancellation, and may dispose of remaining controlled substances under 21 CFR Part 1317 (21 CFR § 1301.52(c)).

Common MPJE Traps & Scenario Analysis

• The Multi-Store Sharing Trap: A pharmacy chain operates two stores 5 miles apart in Salt Lake County. Store A runs out of oxycodone 30 mg and asks Store B to bring over 100 tablets in an employee's vehicle. Exam Trap: Controlled substances cannot be casually shared between locations. Because each store has a separate DEA registration, Store A must issue an official DEA Form 222 to Store B, and Store B must document the transfer under the 5% distribution rule.
• The 14-Day Notice Rule: Exam questions frequently test the transfer notification window, offering choices of 7, 10, 14, or 30 days. Under 21 CFR § 1301.52, notification must be submitted to the DEA SAC at least 14 days prior to the transfer.
• The Dual-Licensure Gap: An out-of-state pharmacist moving to Utah assumes that holding a Utah pharmacist license and a DEA number is sufficient. Exam Trap: Utah strictly requires a separate Utah Controlled Substance License issued by DOPL before any controlled substance dispensing or ordering may occur.