A veterinary practice's controlled-substance compliance runs on a federal registration that belongs to a licensed practitioner — not to the practice, and not to any staff member who handles the drugs.
DEA rules set the registration, the inventory schedule, how long records must be kept, and what happens after a theft or loss.
States then add their own requirements on top, and they genuinely differ.
Who actually holds the registration
There is no such thing as a "DEA-registered veterinary technician," and the reason is written into the regulation itself.
Under 21 CFR §1301.22(a)-(b), registration is waived for an agent or employee of a registrant "acting in the usual course of his/her business or employment," and an individual practitioner who is an employee of another registered practitioner may administer or dispense controlled substances "under the registration of the employer or principal practitioner in lieu of being registered him/herself."
In practice, that means the registration sits with a licensed veterinarian — registering as a "Dispensing or instructing" practitioner covering Schedules II–V on DEA Form 224 (Form 224a to renew), currently $888 for a three-year term — or, in an institutional setting, with the hospital's own registration under §1301.22(c).
Everyone else who touches the drugs, including a credentialed technician or a practice manager, is acting as that registrant's agent, not as an independent authority.
A relief veterinarian is the exception worth flagging: because they are themselves a registerable individual practitioner rather than an employee working under someone else's registration, relief work generally means holding your own.
What this means for the org chart
One registration per location — and the mobile-practice exception
Federal law requires a separate registration at each principal place of business or professional practice where controlled substances are dispensed (21 U.S.C. §822(e)(1)).
A multi-site group does not get to run every location off one registration.
The one built-in exception is for ambulatory and mobile practice.
The Veterinary Medicine Mobility Act of 2014 provides, verbatim, that "a registrant who is a veterinarian shall not be required to have a separate registration in order to transport and dispense controlled substances in the usual course of veterinary practice at a site other than the registrant's registered principal place of business or professional practice, so long as the site of transporting and dispensing is located in a State where the veterinarian is licensed to practice veterinary medicine and is not a principal place of business or professional practice" (21 U.S.C. §822(e)(2)).
Three conditions are bundled into that one sentence, and all three have to hold: the transport and dispensing has to be in the usual course of practice, the site has to be in the same state as the veterinarian's license, and the site itself can't be a principal place of business.
This is what lets a farm-call or ambulatory vet carry controlled substances between locations without registering each stop — but it is a transport-and-dispense exception only.
It does not create a registration for the site itself, and it does not change where inventory and records have to live.
The inventory: initial, biennial, and what counts
A registrant takes an initial inventory "on the date he/she first engages in the manufacture, distribution, or dispensing of controlled substances," then a full biennial inventory after that — "the registrant shall take a new inventory of all stocks of controlled substances on hand at least every two years... on any date which is within two years of the previous biennial inventory date" (21 CFR §1304.11(b)-(c)).
There's no fixed calendar date DEA assigns; the practice sets its own inventory date and then has to stay within the two-year window of it going forward.
Inventory is taken per registered location — a separate inventory is required for each one, and stock stored at an unregistered location is folded into the inventory of whichever registered location controls it or whichever person is responsible for it (21 CFR §1304.11(a)).
For a group with several sites, that means the inventory can't be run as one combined count across the practice; it's a location-by-location obligation.
Records retention and Schedule II ordering
Controlled-substance records — inventories, receipts, dispensing logs — have to be kept for at least two years from the date of the record and available for DEA inspection (21 CFR §1304.04(a)).
Financial and shipping records can be centralized somewhere other than the registered location, but only with prior written notice to the local DEA Special Agent in Charge — that notice step is easy to skip and is part of the requirement, not a formality.
Ordering has its own rule that trips up a common assumption. Schedule I and II distributions require a DEA Form 222 or its electronic equivalent, CSOS (Controlled Substance Ordering System) — essentially every Schedule I or II transfer needs one, with narrow exceptions (21 CFR §1305.03). Schedules III through V do not use Form 222 at all. Treating the order-form requirement as if it covers every controlled substance, rather than just Schedules I and II, is one of the more common practice-manager errors in this area.
Storage and security
Schedule I substances and Schedules II through V must be stored in a securely locked, substantially constructed cabinet (21 CFR §1301.75(a)-(b)).
One tier sits above that bar and is easy to miss: a short, named list of ultra-potent large-animal immobilization drugs — thiafentanil, carfentanil, etorphine hydrochloride, and diprenorphine — requires a safe or steel cabinet equivalent to a U.S. Government Class V security container, not just a locked cabinet (21 CFR §1301.75(e)).
That materially higher bar is specific to those drugs and directly relevant to zoo, wildlife, and some large-animal practices; general "lock it up" compliance guidance routinely misses it.
Beyond the physical cabinet, DEA requires effective controls and procedures against theft and diversion generally, and evaluates whether a registrant's overall security is in "substantial compliance" against factors like the type of activity, the form of the drug, and the location (21 CFR §1301.71(a)-(b)).
One security control is a hiring-side duty most practice managers never think to check: a registrant may not employ, as an agent or employee with access to controlled substances, anyone convicted of a felony drug offense or who has had a DEA registration denied, revoked, or surrendered "for cause" (21 CFR §1301.76(a)).
A background-check gap on staff with drug access is a DEA compliance issue, not only an HR one.
Theft, loss, and disposal
A theft or significant loss has a short clock.
It has to be reported to the local DEA Field Division Office in writing within one business day of discovery, followed by a complete DEA Form 106 filed through DEA's Diversion Control Division network within 45 days of discovery (21 CFR §1301.76(b)).
Whether a loss counts as "significant" turns on factors like the quantity relative to the size of the practice, which substances are involved, whether it's traceable to specific individuals, whether it fits a pattern over time, and the likelihood of diversion.
Disposal isn't a matter of pouring expired product down a drain or into general waste.
A registrant in lawful possession of controlled substances to dispose of has four routes: destroy on-site under Part 1317 Subpart C, deliver to a reverse distributor, return or recall the product to the original registered supplier or manufacturer, or request DEA Special-Agent-in-Charge assistance using DEA Form 41 (21 CFR §1317.05(a)).
For most practices without on-site destruction capability, a reverse distributor is the standard commercial route.
State rules stack on top of the federal baseline
DEA registration is a floor, not the whole picture, and two states make a clean contrast pair. Texas requires a separate state registration in addition to DEA — the Texas Department of Public Safety Controlled Substances Registration is required of anyone who distributes, delivers, prescribes, possesses, dispenses, or researches with controlled substances in the state, and the Board's own guidance states plainly that "there are no waivers or exceptions." The Texas board publishes that guidance specifically because licensees keep confusing the two registrations — a DPS registration and a DEA registration are not substitutes for each other. Florida, by contrast, does not require a second state controlled-substance license beyond DEA registration and an active veterinary license.
Prescription drug monitoring programs (PDMPs) add a further layer that varies by state and is easy to misread.
An industry advocacy brief claims most states exempt veterinarians from reporting into their PDMP while a minority require querying it — treat that as a directional, undated advocacy figure rather than a verified national count, and check your own state board rather than assuming a national pattern.
Colorado is a documented example of how granular this gets: veterinarians there are required to enroll as PDMP data requesters and may query the database if they suspect drug abuse or mistreatment, but the same state program shows no separate dispensing-report mandate for veterinarians — enrollment and querying are not the same obligation as reporting every dispense.
General information, not legal advice