Drug Scheduling: While DEA Decisions Have Aligned with Recent HHS Recommendations, Both Need Comprehensive Policies
GAO reviewed DEA scheduling actions from 2020 through 2025 and found DEA considered HHS evaluations where required and, for all 84 substances with final rules as of December 31, 2025, aligned with HHS recommendations; 11 additional substances remained under extended temporary scheduling orders.…

Intelligence Package
Drug Scheduling: While DEA Decisions Have Aligned with Recent HHS Recommendations, Both Need Comprehensive Policies
Breaking analysis of what happened and who is affected.
GAO reviewed DEA scheduling actions from 2020 through 2025 and found DEA considered HHS evaluations where required and, for all 84 substances with final rules as of December 31, 2025, aligned with HHS recommendations; 11 additional substances remained under extended temporary scheduling orders.…
Read full report →Segment ImpactDrug Scheduling: While DEA Decisions Have Aligned with Recent HHS Recommendations, Both Need Comprehensive Policies
Deep dive into how this impacts each market segment.
What GAO Found Under the Controlled Substances Act, substances that pose a risk of abuse and dependence are placed in categories—referred to as schedules. To carry out certain scheduling actions, the Drug Enforcement Administration (DEA) is required to obtain a scheduling recommendation from the…
Read full report →Action KitDrug Scheduling: While DEA Decisions Have Aligned with Recent HHS Recommendations, Both Need Comprehensive Policies
Actionable checklists and implementation guidance.
The GAO review found that under the Controlled Substances Act the DEA must obtain scheduling recommendations from HHS (based on FDA evaluations) for certain substances; GAO assessed DEA scheduling actions from 2020–2025.…
Read full report →TL;DR
GAO reviewed DEA scheduling actions from 2020 through 2025 and found DEA considered HHS evaluations where required and, for all 84 substances with final rules as of December 31, 2025, aligned with HHS recommendations; 11 additional substances remained under extended temporary scheduling orders. Despite alignment on final decisions, GAO identified gaps in DEA and FDA policies and procedures: DEA lacks documented roles, responsibilities, and procedures for scheduling actions, and FDA lacks written policies for how staff conduct evaluations and develop recommendations. GAO also found FDA’s MOU with NIH/NIDA is over 40 years old and overdue for update, risking unclear coordination procedures. These findings matter because scheduling decisions drive enforcement risk, regulatory obligations, and compliance requirements under the Controlled Substances Act. Immediate implications for contractors include increased need to monitor agency scheduling activity, validate compliance matrices for affected products and services, and prepare for possible procedural shifts if agencies formalize new policies. Take immediate steps to inventory affected offerings, update compliance controls, and activate capture and monitoring workflows.
Key Points
- What happened: GAO found that, for DEA scheduling actions from 2020–2025, DEA considered HHS evaluations when required and aligned with HHS recommendations for all 84 substances with final rules as of December 31, 2025, while 11 substances remained under extended temporary scheduling orders; GAO also identified policy and coordination gaps at DEA and FDA and an outdated FDA–NIH/NIDA MOU.
- Who is affected: Market segments and NAICS codes in the Segmentation: Pharmaceutical Manufacturing; Drug Testing and Analysis; Healthcare Services; Scientific Research and Development; Regulatory Compliance Consulting; Laboratory Services; Medical Research; Substance Abuse Treatment. Specific NAICS codes: 325412, 325414, 541711, 541990, 621111, 621112, 621420, 621999, 541380, 541690. Agencies: DOJ, HHS, DEA, FDA, NIH.
- Timeline: GAO selected the 2020 through 2025 timeframe and reported alignment status as of December 31, 2025; other scheduling items remain pending (11 substances under extended temporary scheduling orders).
- What contractors should do NOW: Inventory products/services that could be impacted by scheduling changes; update compliance matrices and capture strategies tied to the Controlled Substances Act; monitor agency dockets and FDA/DEA policy updates; assign accountable roles for regulatory watch, capture, and proposal readiness.
Who Is Affected
Specific NAICS codes, agencies, and contract vehicles pending source review.
Note: Market segments indicated in Segmentation are likely to monitor and be affected: Pharmaceutical Manufacturing; Drug Testing and Analysis; Healthcare Services; Scientific Research and Development; Regulatory Compliance Consulting; Laboratory Services; Medical Research; Substance Abuse Treatment.
Frequently Asked Questions
Q: Did DEA follow HHS recommendations for scheduling during 2020–2025?
A: GAO found that DEA considered HHS evaluations when required and that DEA’s final scheduling decisions aligned with HHS recommendations for all 84 substances for which DEA had published a final rule as of December 31, 2025; 11 additional substances remained under extended temporary scheduling orders.
Q: Are agency policies governing scheduling adequate?
A: GAO identified gaps. DEA lacks policies that define roles, responsibilities, and procedures related to scheduling. FDA lacks written policies or procedures specifying how staff should conduct evaluations or develop recommendations. GAO also noted FDA’s MOU with NIH/NIDA is over 40 years old and should be updated.
Q: Will contractors see immediate solicitations tied to these findings?
A: Pending source review. GAO’s report identifies procedural and policy gaps that may prompt agencies to update internal policies; contractors should monitor agency notices and dockets for follow-on solicitations or formal policy changes.
Definitions
- Controlled Substances Act: Federal statute under which substances posing a risk of abuse and dependence are placed into schedules that control criminal penalties and regulatory controls.
- Schedules: Categories under the Controlled Substances Act that classify substances by abuse and dependence risk and determine the level of control and penalties.
- MOU (Memorandum of Understanding): A document describing coordination and information-sharing procedures between agencies (e.g., FDA and NIH/NIDA).
Intelligence Response
- Cabrillo products to leverage: Cabrillo Signals War Room, Cabrillo Signals Match Engine, Cabrillo Signals Intelligence Hub, Proposal Studio (Proposal OS), and Proposal Studio Workflow Tracker. Use the War Room to receive this briefing and monitor follow-on policy actions; use the Intelligence Hub to track affected agencies, NAICS codes, and saved searches; use the Match Engine to rescore opportunity pipelines for changing compliance or enforcement risk; use Proposal Studio and the Workflow Tracker to update compliance matrices and manage capture activity and audit-ready documentation.
- Who to notify: Capture Lead (for opportunity posture), Regulatory/Compliance Lead (for Controlled Substances Act impact), Legal Counsel (for policy interpretation), R&D/Lab Director (for product classification), and Proposal Manager (to update bid/no-bid decisions).
- First 48-hour playbook:
- Hour 0–4: Convene emergency regulatory sync with Capture Lead, Compliance Lead, and Legal Counsel. Assign owner to track GAO report and agency dockets.
- Hour 4–12: Run a targeted inventory of offerings against Controlled Substances Act exposure. Flag items for immediate compliance review.
- Hour 12–24: Configure saved searches in Cabrillo Signals Intelligence Hub for DOJ, HHS, DEA, FDA, and NIH; enable alerts for docket notices, policy updates, and temporary scheduling orders.
- Hour 24–48: Use Cabrillo Signals Match Engine to rescore active opportunities and Proposal Studio to update compliance matrices, win themes, and bid/no-bid recommendations. Begin drafting any required technical or compliance clarifications for upcoming solicitations.
Related reading and internal guidance:
- Secure Operations Guide (/insights/secure-operations-guide)
- CMMC (Cybersecurity Maturity Model Certification) Compliance Guide (/insights/cmmc-compliance-guide)
- CUI (Controlled Unclassified Information)-Safe CRM Guide (/insights/cui-safe-crm-guide)