Colorado Controlled Substance License Requirements

To handle controlled substances in Colorado, you need three things stacked in the right order: an active Colorado professional license in your field, a state controlled substance license issued by the Division of Professions and Occupations (DPO) within the Department of Regulatory Agencies, and a federal DEA registration tied to your practice location. The Colorado controlled substance license requirements sit at the state layer, but you cannot practice on the state license alone, and the DEA will not register you without the state authorization already in hand.¹ Missing either registration exposes you to disciplinary action, criminal liability, or both.

Who Needs a State License

Colorado requires a state controlled substance license for any individual or entity that manufactures, distributes, prescribes, or dispenses drugs in Schedules I through V under Title 18, Article 18 of the Colorado Revised Statutes. That covers physicians, dentists, veterinarians, nurse practitioners, physician assistants, pharmacists, hospitals, pharmacies, and research laboratories. Federal law separately requires every person who dispenses or proposes to dispense a controlled substance to hold a DEA registration.²

You cannot substitute one for the other. Practicing on state authorization without DEA registration, or on DEA registration after your state credential has lapsed, creates a gap that regulators on either side can enforce against.

The Colorado Application

DPO manages state applications through its online portal, or by paper form downloaded from the Division’s website and mailed in.³ The application asks for:

A valid Colorado professional license in the relevant field (medical, dental, pharmacy, veterinary, or advanced practice nursing).
Fingerprinting and a criminal history review to screen for disqualifying offenses or prior professional misconduct.
A non-refundable application fee, which varies by license category and appears on the specific form.
A description of how and why you will handle controlled substances in your practice or facility.

DPO may request additional documentation before making a determination, and processing times vary. Apply well before you plan to begin handling controlled substances.

DEA Registration After the State License

Once your state license is in place, you apply for DEA registration using Form 224 for a new registration or Form 224a for renewal, online or by mail. The application asks for your state license number, the drug schedules you intend to handle, your physical practice address, and your Social Security or Tax Identification Number.⁴

Two features of DEA registration trip up new applicants. First, it attaches to a specific physical location, not to you as a person across all locations. If you practice at two offices, you need two registrations. If you practice in two states, you need a separate state license and DEA registration in each.¹ Second, the registration runs for three years, and the fee is non-refundable. Knowingly providing false information on the application carries a potential sentence of up to four years in prison and a fine of up to $250,000.

Under the Consolidated Appropriations Act of 2023, all non-veterinarian practitioners must also complete a one-time minimum of eight hours of approved training on treating and managing patients with opioid or other substance use disorders. The DEA verifies this at new registration or renewal, and the requirement applies whether or not you personally prescribe opioids.¹

Practitioner License or Facility Registration

Colorado’s framework splits into two tracks with different obligations.

Individual Practitioners

Practitioner licenses cover physicians, dentists, veterinarians, podiatrists, nurse practitioners, physician assistants, and other prescribers authorized under Colorado law to handle controlled substances. Before applying for controlled substance privileges, you must hold an active professional license from the relevant Colorado board — the Medical Board for physicians, the Board of Pharmacy for pharmacists, and so on. That board verifies your credentials and monitors compliance going forward.⁵ Once licensed, you must keep accurate records of every controlled substance transaction, including prescriptions written, drugs dispensed, and substances administered in your practice.

Facilities

Hospitals, pharmacies, clinics, research laboratories, and other entities that store or dispense controlled substances at scale hold facility registrations. Federal regulations require “effective controls and procedures to guard against theft and diversion,” including monitoring the receipt, distribution, and disposition of every controlled substance in the facility’s operations.⁶ In practice: alarm systems, security cameras, restricted-access storage, and detailed logging of who reaches the drug supply and when.

Querying the PDMP Before You Prescribe

Colorado law requires every prescriber to query the state’s Prescription Drug Monitoring Program before writing a prescription for an opioid or a benzodiazepine.⁷ The PDMP is a statewide electronic database of dispensed controlled substance prescriptions that lets prescribers and pharmacists spot patients obtaining medications from multiple providers.

Both prescribers and pharmacists must register for a PDMP account and attest that they maintain active access. Pharmacists are separately required to submit dispensing data for all controlled substances to the database.⁸ Repeated failure to query before prescribing counts as unprofessional conduct and can trigger discipline. Narrow exceptions exist for hospice patients, seizure disorders, alcohol withdrawal, and certain neurological emergencies on the benzodiazepine side, but the safe practice is to run the query on every opioid or benzodiazepine prescription.

Records You Must Keep

Colorado regulations require all records and inventories of controlled substances to be retained for at least two years from the date of the transaction.⁹ That covers prescription records, receipt invoices, distribution logs, disposal documentation, and inventories, all of which must be available for inspection at any point in that window.

Hard copies of every prescription order must be retrievable for the same two-year period. Electronic Schedule II order records must remain legible and available for at least two years from the last transaction on that order. Hospitals and other facilities must also keep distribution records for internal transfers of controlled substances for two years.

Beyond storage, any discrepancy, theft, or loss of controlled substances must be reported promptly. Federal regulations require registrants to report unusual or excessive losses to the DEA’s Special Agent in Charge for their area, orally at the earliest opportunity and followed by a written report describing the circumstances.¹⁰

Disposal of Controlled Substances

Expired, damaged, or unwanted controlled substances cannot go in the trash. Federal regulations under 21 CFR Part 1317 give DEA registrants four approved disposal paths:¹¹

On-site destruction at your registered location using an approved method that renders the substance non-retrievable.
Delivery to a DEA-registered reverse distributor, which handles final destruction, typically by incineration.¹²
Return to the manufacturer or the registered person you purchased the substance from.
Assistance from the DEA Special Agent in Charge, who may direct you to transfer the substance to an authorized registrant, deliver it to a DEA office, or destroy it in the presence of a DEA agent.

Document every disposal. Inspectors cross-reference disposal records against inventory logs, and gaps between the two are one of the first things they notice.

Continuing Education

Ongoing education is tied to your professional license renewal. Physicians and physician assistants must complete at least two hours of substance use disorder training every two years. Advanced practice nurses with opioid-prescribing authority face the same two-hour requirement per renewal period. The federal eight-hour training is a one-time floor on top of that, verified by the DEA.¹

Renewal Deadlines

Colorado runs a biennial cycle. Individual pharmacy licenses expire on October 31 of odd-numbered years; business (facility) registrations expire on October 31 of even-numbered years.³ The renewal window opens roughly four to five weeks before expiration. Renewal requires updated documentation confirming your professional license remains active, your practice information is current, and continuing education is satisfied. Fees vary by license type.

Letting a license lapse past its expiration date exposes you to late penalties and can suspend your authority to handle controlled substances, meaning any prescription you write during the gap is potentially unauthorized. DEA registration runs on its own three-year cycle through Form 224a. The DEA sends reminders, but tracking your own expiration date is your responsibility, and practicing on an expired DEA registration carries the same exposure as practicing without one.

What Happens When You Fall Out of Compliance

DPO and its inspectors examine licensed pharmacies and facilities before initial licensing, after a change of ownership or location, on routine cycles, and in response to complaints. They look at storage security, inventory records, prescription dispensing logs, DEA forms, and whether staff actually follow the written protocols.

The Colorado Board of Pharmacy has broad authority to discipline license holders. Grounds include having a license revoked or suspended in another state and failing to meet generally accepted standards of practice, among others.¹³ When the Board finds grounds for discipline, it can restrict a license, impose probation, suspend the registration of a facility that owns or employs the offender, or revoke the license outright after a formal investigation and hearing.

Fines for general violations run from $500 to $5,000 per violation. Violations of the PDMP-related provisions in Part 4 of Article 280 follow a graduated scale: up to $1,000 for a first offense, up to $2,000 for a second, and up to $5,000 for a third or subsequent offense.¹⁴ Administrative discipline is separate from any criminal prosecution that may follow if inspectors uncover evidence of unlawful distribution or possession under Colorado Revised Statutes Title 18, Article 18.¹⁵

1
Drug Enforcement Administration. Registration Q&A
2
Office of the Law Revision Counsel. 21 USC 822 – Persons Required to Register
3
Division of Professions and Occupations. Colorado Pharmacy Applications and Forms
4
Reginfo.gov. DEA Form 224 – Application for Registration Under the Controlled Substances Act
5
Drug Enforcement Administration. Practitioner’s State License Requirements
6
eCFR. 21 CFR Part 1301 – Security Requirements
7
Colorado General Assembly. HB22-1115 Prescription Drug Monitoring Program
8
Division of Professions and Occupations. Colorado PDMP Homepage
9
Legal Information Institute. 3 CCR 719-1-11.00.00 – Records and Recordkeeping
10
eCFR. 21 CFR 1314.15 – Loss Reporting
11
eCFR. 21 CFR 1317.05 – Registrant Disposal
12
Drug Enforcement Administration. Disposal Q&A
13
Justia Law. Colorado Revised Statutes Title 12 Section 12-280-126 – Unprofessional Conduct – Grounds for Discipline
14
Justia Law. Colorado Revised Statutes Title 12 Section 12-280-127 – Disciplinary Actions
15
Justia Law. Colorado Revised Statutes Title 18 Section 18-18-405 – Unlawful Distribution, Manufacturing, Dispensing, or Sale