Colorado Controlled Substance License Requirements

To handle controlled substances in Colorado, you need two separate authorizations working in tandem: a state controlled substance license issued through the Division of Professions and Occupations (DPO) within the Department of Regulatory Agencies, and a federal registration with the Drug Enforcement Administration. The Colorado controlled substance license requirements apply to any individual or entity that manufactures, distributes, prescribes, or dispenses drugs in Schedules I through V under Title 18, Article 18 of the Colorado Revised Statutes, and the DEA will not register you until you hold the state side first.¹²

Who Needs Both Licenses

Physicians, dentists, veterinarians, nurse practitioners, physician assistants, pharmacists, hospitals, pharmacies, and research laboratories all fall within scope. Federal law independently requires every person who dispenses or proposes to dispense a controlled substance to hold a DEA registration.¹

You cannot substitute one for the other. The DEA will not issue a registration without state authorization in place, and Colorado’s licensing boards expect practitioners to secure DEA registration before practicing.² Working with only one piece in place leaves a gap that regulators on either side can enforce against.

Applying for the State License

DPO handles the state application. You can submit online through the Division’s portal or download the forms and mail them in.³ Expect to provide:

A valid, active Colorado professional license appropriate to your role (medical, dental, pharmacy, veterinary, or advanced practice nursing).
Fingerprinting and a criminal history review that screens for disqualifying offenses or prior professional misconduct.³
A non-refundable application fee, which varies by license category and is listed on the applicable form.
A description of how and why you will handle controlled substances in your practice or facility.

DPO may request additional documentation, and processing times vary, so start well before you plan to begin prescribing or dispensing.

Adding the DEA Registration

Once your state license is in hand, you file DEA Form 224 for a new registration or Form 224a for a renewal. The form takes your state license number, the drug schedules you intend to handle, your physical practice address, and your Social Security or Tax Identification Number, and you can submit it online or by mail.⁴

Two features of DEA registration catch practitioners off guard. First, registration is tied to a specific physical location, not to you as an individual across every site you work at. Practice at two offices and you need two registrations.² Practice in multiple states and you need separate state licensure and DEA registration in each. Second, the registration runs for three years and the fee is non-refundable.⁴ Knowingly providing false information on the form carries up to four years in prison and a fine of up to $250,000.

All practitioners except veterinarians must also satisfy the opioid-related training requirement from the Consolidated Appropriations Act of 2023, verified at new registration or renewal. The one-time minimum is eight hours of approved training on treating and managing patients with opioid or other substance use disorders, and it applies whether or not you personally prescribe opioids.²

Practitioner Licenses vs. Facility Registrations

Colorado’s framework splits into individual practitioner licenses and facility registrations, and the obligations diverge from there.

Individual Practitioners

Practitioner licenses cover physicians, dentists, veterinarians, podiatrists, nurse practitioners, physician assistants, and other prescribers authorized under Colorado law. You must hold an active license from the relevant Colorado board (the Medical Board, the Board of Pharmacy, and so on) before applying for controlled substance privileges, and that board verifies your credentials and monitors ongoing compliance.⁵ From there, you are responsible for accurate records of every controlled substance transaction: prescriptions written, drugs dispensed, substances administered in your practice. Sloppy recordkeeping is one of the most common inspection failures.

Hospitals, Pharmacies, and Other Facilities

Facilities that store or dispense controlled substances at scale face heavier infrastructure requirements. Federal regulations require “effective controls and procedures to guard against theft and diversion,” including monitoring the receipt, distribution, and disposition of every controlled substance in operations.⁶ In practice that means alarm systems, cameras, restricted-access storage, and detailed logs of who accesses the drug supply and when.

Querying the Prescription Drug Monitoring Program

Colorado law requires every prescriber to query the state Prescription Drug Monitoring Program (PDMP) before writing a prescription for an opioid or a benzodiazepine.⁷ The PDMP is a statewide electronic database of dispensed controlled substance prescriptions, used to spot patients obtaining medications from multiple providers at once.

Both prescribers and pharmacists must register for a PDMP account and attest that they are maintaining active access.⁷ Pharmacists separately submit dispensing data for all controlled substances to the PDMP.⁸ Repeated failure to query before prescribing is unprofessional conduct and can prompt disciplinary action from the licensing board.

There are narrow exceptions to the benzodiazepine query mandate, including prescriptions for hospice patients, seizure disorders, alcohol withdrawal, and certain neurological emergencies. The exceptions are narrow enough that running the query on every opioid or benzodiazepine prescription is the safer habit.

Records, Inventories, and Loss Reporting

Colorado regulations require all records and inventories of controlled substances to be retained for at least two years from the date of the transaction.⁹ That covers prescription records, receipt invoices, distribution logs, disposal documentation, and controlled substance inventories, and everything must be readily available for inspection during that window.

Hard copies of every prescription order must be retrievable for inspection within the same two-year period.⁹ Electronic Schedule II order records must remain available and legible for at least two years from the date of the last transaction on that order. Hospitals and other facilities must keep records of internal controlled substance transfers for the same two years.

Any discrepancy, theft, or loss must be reported promptly. Federal regulations require registrants to report unusual or excessive losses to the DEA’s Special Agent in Charge for their area, orally at the earliest opportunity and followed by a written report describing the circumstances.¹⁰

Disposing of Controlled Substances

Expired, damaged, or unwanted controlled substances cannot go in ordinary waste. Federal regulations under 21 CFR Part 1317 lay out four approved paths for registrants:¹¹

On-site destruction at your registered location using a method that renders the substance non-retrievable.
Delivery to a DEA-registered reverse distributor, who handles final destruction, typically through incineration.¹²
Return of the substance to the manufacturer or to the registered person you purchased it from.
Assistance from the DEA Special Agent in Charge, who may direct transfer to another authorized registrant, delivery to a DEA office, or destruction in the presence of a DEA agent.

A reverse distributor must destroy any controlled substance received for destruction within 30 calendar days of receipt, and all deliveries must be received personally by an employee at the reverse distributor’s registered location.¹¹¹² Document every disposal; inspectors will cross-reference disposal records against inventory logs.

Continuing Education

License renewal brings ongoing education obligations. Physicians and physician assistants must complete at least two hours of substance use disorder training every two years as a condition of renewal. Advanced practice nurses with opioid-prescribing authority face the same two-hour requirement per renewal period.

The federal eight-hour opioid training requirement described above sits on top of the Colorado requirements, verified at the time of new DEA registration or renewal.²

Renewal Cycles

Colorado licenses are not permanent. Individual pharmacy licenses expire on October 31 of odd-numbered years. Business (facility) registrations expire on October 31 of even-numbered years. Both run on a biennial cycle, and the renewal window opens roughly four to five weeks before the expiration date.³

Renewal requires updated documentation that your professional license remains active, your practice information is current, and continuing education is satisfied. Fees apply and vary by license type. A lapsed license exposes you to late penalties and can suspend your authority to handle controlled substances, which means prescriptions written or drugs dispensed during the gap are potentially unauthorized.

DEA registration follows its own three-year cycle on Form 224a. The DEA sends reminders, but tracking the expiration date is on you. Practicing with an expired DEA registration carries the same legal exposure as practicing without one.

Inspections, Discipline, and Penalties

DPO and its inspectors visit licensed pharmacies and facilities before initial licensing, after a change of ownership or location, on routine compliance cycles, and in response to complaints. They focus on storage security, inventory records, prescription dispensing logs, DEA forms, and whether staff actually understand the protocols they are supposed to follow. The recurring deficiencies are predictable: controlled substances not recorded on the correct forms, Schedule II records not kept separate from Schedule III through V records, missing biennial inventories, inadequate security, and loose access control to secured areas.

The Colorado Board of Pharmacy has broad authority to discipline license holders for unprofessional conduct, including having a license revoked or suspended in another state and failing to meet generally accepted standards of practice.¹³ When grounds are found, available penalties include license restriction, probation, suspension of a facility’s registration, fines, and revocation after a formal investigation and hearing. General violations draw fines of $500 to $5,000 per violation. PDMP-related violations (Part 4 of Article 280) follow a graduated scale: up to $1,000 for a first offense, up to $2,000 for a second, and up to $5,000 for a third or subsequent offense.¹⁴

Administrative discipline is separate from criminal exposure. Unlawful distribution or possession of controlled substances can be prosecuted under Colorado Revised Statutes Title 18, Article 18, with penalties that vary by schedule, quantity, and history.¹⁵ A criminal conviction will almost certainly end both state and federal controlled substance privileges.

1
Office of the Law Revision Counsel. 21 USC 822 – Persons Required to Register
2
Drug Enforcement Administration. Registration Q&A
3
Division of Professions and Occupations. Colorado Pharmacy Applications and Forms
4
Reginfo.gov. DEA Form 224 – Application for Registration Under the Controlled Substances Act
5
Drug Enforcement Administration. Practitioner’s State License Requirements
6
eCFR. 21 CFR Part 1301 – Security Requirements
7
Colorado General Assembly. HB22-1115 Prescription Drug Monitoring Program
8
Division of Professions and Occupations. Colorado PDMP Homepage
9
Legal Information Institute. 3 CCR 719-1-11.00.00 – Records and Recordkeeping
10
eCFR. 21 CFR 1314.15 – Loss Reporting
11
eCFR. 21 CFR 1317.05 – Registrant Disposal
12
Drug Enforcement Administration. Disposal Q&A
13
Justia Law. Colorado Revised Statutes Title 12 Section 12-280-126 – Unprofessional Conduct – Grounds for Discipline
14
Justia Law. Colorado Revised Statutes Title 12 Section 12-280-127 – Disciplinary Actions
15
Justia Law. Colorado Revised Statutes Title 18 Section 18-18-405 – Unlawful Distribution, Manufacturing, Dispensing, or Sale