Introduction
On March 20, 2026, the Drug Enforcement Administration (DEA) published a final rule making technical amendments to its regulations governing DEA Form 222, the official order form used to purchase Schedule I and II controlled substances. While the rule does not introduce new compliance burdens, it is highly significant for registrants because it eliminates lingering regulatory ambiguities and tightens alignment across key provisions in 21 CFR Part 1305.
If your organization orders Schedule I or II controlled substances—whether via paper DEA Form 222 or the Controlled Substances Ordering System (CSOS)—this update is worth a careful review.
Background: The Shift to a Single-Sheet DEA Form 222
In September 2019, DEA finalized a major modernization effort by transitioning from the long‑standing triplicate DEA Form 222 to a single‑sheet format. Registrants were allowed a two‑year transition period to use remaining triplicate forms, but that transition ended on October 30, 2021, when DEA stopped accepting the triplicate format altogether.
Although the 2019 rule clearly established the new form and process, several associated regulatory provisions were not fully updated at the time. This resulted in conflicting language across different sections of the regulations—especially concerning who is legally authorized to execute powers of attorney (POA), revoke them, and sign DEA Form 222s.
The 2026 final rule corrects those inconsistencies.
The Core Issue: Who Can Sign and Delegate Form 222 Authority?
Ordering Schedule I and II substances carries heightened diversion risk, which is why DEA has long treated Form 222 signature authority as a sensitive compliance function. In the 2019 rulemaking, DEA intentionally narrowed the category of individuals authorized to execute or revoke a Form 222 Power of Attorney.
Specifically, DEA clarified that only the following individuals may grant or revoke a POA for Form 222 or electronic orders:
- The registrant, if the registration is held by an individual
- A partner, if the registrant is a partnership
- An officer, if the registrant is a corporation, corporate division, association, trust, or other entity
However, due to an administrative oversight, two related provisions, 21 CFR 1305.05(c) and 1305.05(e), still contained older language allowing the person who signed the most recent DEA registration application to execute or revoke a POA. That broader language conflicted with 21 CFR 1305.05(d)(1), creating uncertainty during audits and inspections.
The 2026 technical amendment resolves this issue by making the language identical and consistent across all of these sections.
What the Final Rule Does (and Does Not Do)
It is important to emphasize that this rule:
- Does clarify existing requirements
- Does promote consistency and regulatory clarity
- Does reduce inspection and enforcement ambiguity
But it:
- Does not impose new substantive obligations
- Does not expand DEA’s enforcement authority
- Does not require re‑execution of properly granted POAs
DEA explicitly characterized the amendments as technical and invoked the Administrative Procedure Act’s “good cause” exception to issue the rule without prior notice and comment. According to DEA, public input was unnecessary because the changes merely correct drafting errors and impose no new regulatory burden.
Removal of Obsolete Triplicate Form Regulations
The final rule also formally removes 21 CFR 1305.20, which governed the now‑expired transition period from triplicate to single‑sheet DEA Form 222s. Since the triplicate form has been invalid for more than four years, this section had become obsolete.
By removing it entirely, DEA cleans up the regulatory text and eliminates an outdated provision that no longer serves any operational or compliance purpose.
Practical Compliance Takeaways for Registrants
While the rule does not require immediate action, registrants should take this opportunity to revisit their internal controls. Recommended steps include:
- Review existing Form 222 Powers of Attorney to confirm they were executed by an authorized individual (registrant, partner, or officer).
- Update internal policies and training materials to reflect the clarified language.
- Ensure revocation procedures align with the revised 21 CFR 1305.05(e) requirements, including the two‑witness requirement.
- Prepare for inspections, where DEA Diversion Investigators may rely on these clarified provisions to assess compliance.
Organizations that rely heavily on delegated ordering authority—such as hospitals, distributors, and research institutions—should pay particular attention to documentation consistency.
Final Thoughts
Although technical in nature, this final rule is a reminder that small regulatory inconsistencies can create large compliance risks. By aligning DEA Form 222 signature and power‑of‑attorney requirements across the board, DEA has eliminated a longstanding source of confusion for registrants and investigators alike.
Smart registrants will not dismiss this update as mere housekeeping. Instead, they will use it as an opportunity to strengthen governance, validate authorization practices, and ensure that their most sensitive controlled substance ordering functions remain fully compliant.
If you have questions about how this rule affects your organization, or whether your current Form 222 practices withstand scrutiny, now is the time to review them carefully.
Any questions please reach out to Brinks DEA Consulting.