The DEA visit: records they may see and how to be ready
Summary
A DEA inspection checks you as a registrant: your registration, your controlled-substance recordkeeping, and any drugs you keep on-site — not your clinical judgment. Investigators may present a Notice of Inspection you can consent to, or return with an administrative inspection warrant. A solo prescriber who only writes prescriptions has a small footprint; keep the registration current, the records accurate, and a short plan for who greets them and what gets disclosed.
By Gale Editorial · Updated 2026-07-26. Every figure cited to a dated source. How we write.
What a DEA inspection actually is
A DEA inspection is an administrative check of you as a registrant, focused on controlled-substance compliance — registration, recordkeeping, and any drugs you keep on-site — not a review of your clinical judgment. Investigators from the Diversion Control Division may arrive with a Notice of Inspection, which you can consent to, or with an administrative inspection warrant if you do not. Most solo prescribers who only write prescriptions, and dispense nothing, present a small records footprint.
The Diversion Control Division is the DEA arm that administers registration, EPCS requirements, and controlled-substance recordkeeping and inventory rules, and it is the office whose investigators conduct these reviews 1Ref 1Drug Enforcement Administration (2026).Diversion Control Division.DEA's Diversion Control Division administers registration, EPCS, and controlled-substance recordkeeping and inventory rules, including the initial and biennial inventory and order-form records that inspectors review.. Consenting to an inspection is common and often the path of least friction, but declining is a right, not an admission — if you decline, an administrative inspection warrant is the mechanism they use to proceed. Knowing that distinction in advance keeps a routine visit from feeling like an ambush.
Which records they may see
What an inspection reaches depends on what you actually handle. If you only write prescriptions and keep no controlled substances on-site, the reviewable set is mostly your registration and your prescribing records. If you keep any office stock — buprenorphine for in-office use, long-acting injectables, or samples — you also owe an initial and a biennial inventory, receipt records, and, for the highest schedule, official order-form records 1Ref 1Drug Enforcement Administration (2026).Diversion Control Division.DEA's Diversion Control Division administers registration, EPCS, and controlled-substance recordkeeping and inventory rules, including the initial and biennial inventory and order-form records that inspectors review.. Know which category you are in before anyone asks.
| If you… | The records that matter |
|---|---|
| Only write prescriptions | Current registration; prescribing records; electronic-prescribing audit logs |
| Keep office samples or stock | Initial and biennial inventory; receipt records (invoices) |
| Stock a Schedule II medication | Above, plus official order-form or electronic order records |
| Administer or dispense on-site | Above, plus an administration or dispensing log |
The pattern is simple: obligations scale with how much controlled-substance material you touch. A prescriber who never stocks anything carries the lightest load, which is one reason many solo behavioral-health prescribers deliberately keep no drugs in the office.
The registration details they check first
The fastest thing an inspector verifies is your registration: that the certificate is current, that the registered address matches where you practice and store any drugs, and that the schedules on it cover what you prescribe. If you treat opioid use disorder with buprenorphine, they will expect your registration to reflect that authority and your one-time training attestation to be on file 2Ref 2Substance Abuse and Mental Health Services Administration (2026).Buprenorphine.Since the X-waiver was eliminated in 2023, buprenorphine prescribing for OUD rests on Schedule III authority, a current DEA registration, and a one-time training attestation kept on file.. A lapsed or mismatched registration is the easiest finding to avoid and the easiest to get caught on.
That training attestation comes from the MATE Act's eight-hour requirement, tied to your registration and its renewal; keep the certificate of completion where you can produce it. Calendar your dea renewal so the registration never lapses, because the lapsed dea is a worse problem than an inspection — it can strand every patient on a scheduled medication with no lawful way for you to continue their prescriptions until it is restored. Treat the renewal date as one of the few hard deadlines in your practice.
PDMP checks and prescribing patterns
Many diversion inquiries begin with prescribing data, not a random visit, so your documented database checks are part of being ready. Most states require a query of the prescription drug monitoring program before a controlled substance is written, and a chart that shows you ran and considered those checks demonstrates the diligence an inspector is looking for 3Ref 3PDMP Training and Technical Assistance Center (2026).Prescription Drug Monitoring Program Training and Technical Assistance Center.Most states require a PDMP query before controlled-substance prescribing, with the trigger and frequency varying by state; documented checks demonstrate diligence.. What triggers a mandatory query, and how often, differs by state, so build your practice to your own state's rule.
The practical implication is that your defense is written months before any visit, in the ordinary habit of querying the database and documenting what you found. A note that records the check, the result, and your reasoning turns a prescribing pattern from a bare data point into a documented clinical decision. If your state's mandate is periodic rather than per-prescription, calendar the re-check so it does not slip — the gap between what the rule requires and what your chart shows is exactly what an inquiry looks for.
Patient records, confidentiality, and Part 2
A controlled-substance inspection is not a license to read your psychotherapy notes. What any demand reaches is bounded by the legal instrument behind it — an administrative inspection warrant, a subpoena, and a court order authorize different things — so the first move is to read the paper and disclose only what it actually compels. Behavioral-health records also carry confidentiality protections that survive an inspection, and substance use disorder records carry more.
HHS guidance draws the line between a court order — disclose only what the order authorizes — and a subpoena without a court order, which permits disclosure only with satisfactory assurances of notice or a protective order 4Ref 4HHS Office for Civil Rights (2026).Court Orders and Subpoenas.HIPAA distinguishes a court order (disclose only what it authorizes) from a subpoena without a court order (disclose only with satisfactory assurances of notice or a protective order).. For SUD records, 42 CFR Part 2 adds its own consent-and-redisclosure regime on top, so a demand that would reach an ordinary record may not reach a Part 2 record without meeting Part 2's terms 5Ref 5Office of the Federal Register (2026).42 CFR Part 2 — Confidentiality of Substance Use Disorder Patient Records.42 CFR Part 2 imposes a consent-and-redisclosure regime on SUD records that reaches beyond ordinary privacy rules, so a demand may not reach a Part 2 record without meeting Part 2's terms.. Your professional ethics code independently obligates you to safeguard confidentiality and records, which means matching every disclosure to its legal basis rather than handing over a whole chart to avoid friction 6Ref 6American Psychological Association (2017).Ethical Principles of Psychologists and Code of Conduct.The professional ethics code obligates safeguarding confidentiality and records, requiring disclosures to be matched to their legal basis rather than handing over an entire chart..
How to be ready before anyone knocks
Readiness is a set of standing habits, not a scramble when someone arrives. Keep your registration current and your address accurate; if you hold any office stock, keep the inventory and receipts current; retain your electronic-prescribing audit logs; and know, in advance, who in your practice greets an inspector and what they say. The single most useful preparation is that your controlled-substance records are current on an ordinary Tuesday, not reconstructed under pressure.
A workable readiness plan for a one-person practice:
- Keep the DEA registration current, and confirm the address and schedules match reality
- If you stock anything, keep the initial and biennial inventory and all receipts on hand
- Retain electronic-prescribing audit logs and know where they live
- Decide who greets an inspector, asks for identification, and pulls the records
- Agree with yourself to stay cooperative and factual, and to consult counsel before signing any statement
If you hold dea registrations across state lines, keep each one current and matched to a real practice or storage location in that state, since each is inspectable on its own. You are entitled to have counsel present, and teaching yourself that trigger in advance — cooperate, but pause before signing — beats deciding it at the door.
Common questions
Run your practice on Gale
The software is free. Gale earns one flat 3.5% all-in per paid transaction — only on transactions that actually pay. No subscription, no setup fee, no network cut.
Start or manage a practice →References
- 1.Drug Enforcement Administration (2026). Diversion Control Division. U.S. Drug Enforcement Administration. link ✓DEA's Diversion Control Division administers registration, EPCS, and controlled-substance recordkeeping and inventory rules, including the initial and biennial inventory and order-form records that inspectors review.
- 2.Substance Abuse and Mental Health Services Administration (2026). Buprenorphine. SAMHSA. link ✓Since the X-waiver was eliminated in 2023, buprenorphine prescribing for OUD rests on Schedule III authority, a current DEA registration, and a one-time training attestation kept on file.
- 3.PDMP Training and Technical Assistance Center (2026). Prescription Drug Monitoring Program Training and Technical Assistance Center. PDMP TTAC (Brandeis University, BJA-funded). link ✓Most states require a PDMP query before controlled-substance prescribing, with the trigger and frequency varying by state; documented checks demonstrate diligence.
- 4.HHS Office for Civil Rights (2026). Court Orders and Subpoenas. U.S. Department of Health and Human Services. linkHIPAA distinguishes a court order (disclose only what it authorizes) from a subpoena without a court order (disclose only with satisfactory assurances of notice or a protective order).
- 5.Office of the Federal Register (2026). 42 CFR Part 2 — Confidentiality of Substance Use Disorder Patient Records. eCFR. link ✓42 CFR Part 2 imposes a consent-and-redisclosure regime on SUD records that reaches beyond ordinary privacy rules, so a demand may not reach a Part 2 record without meeting Part 2's terms.
- 6.American Psychological Association (2017). Ethical Principles of Psychologists and Code of Conduct. American Psychological Association. link ✓The professional ethics code obligates safeguarding confidentiality and records, requiring disclosures to be matched to their legal basis rather than handing over an entire chart.
https://www.gale.care/for-providers/bhp-dea-inspection-readiness · 6 sources. Competitor details are cited to dated public sources and maintained as they change; figures are estimates, not commitments. Synthetic demonstration.