DEA Form 363 Registration: Requirements, Security, and Penalties

DEA Form 363 is the federal application a narcotic treatment program submits to register with the Drug Enforcement Administration before it can dispense controlled substances like methadone for opioid use disorder. The registration lasts one year and costs $296.¹ Filing the form is the start of the work, not the end of it; the same rules that get you registered are the ones that keep you registered.

Who Files Form 363

Federal law requires any practitioner who dispenses narcotic drugs to patients for maintenance or detoxification treatment to hold a separate, annual DEA registration for that activity.² Form 363 is how that registration is initiated. Opioid treatment programs and narcotic treatment programs fall directly within the requirement.

Each physical location where controlled substances are stored or dispensed needs its own registration. One DEA number does not cover multiple sites.³ There is a narrow exception for practitioners who prescribe at a secondary office in the same state but do not administer or store controlled substances there. Otherwise, a separate Form 363 goes in for every location.

What You Need in Place Before Applying

The DEA will not process the form until two things exist: state authorization and SAMHSA certification. Handling these first saves weeks.

State Controlled Substance License

You need a valid state license or authorization to handle controlled substances in the schedules you plan to use. The DEA defers to state authorities on qualification to practice, so state licensing is the foundation the federal registration sits on. State timelines and fees vary, but plan for several months.

SAMHSA Certification and Accreditation

An opioid treatment program cannot operate without certification from the Substance Abuse and Mental Health Services Administration under 42 CFR Part 8.⁴ This is a separate process covering patient care standards, staffing, and medication administration, and it requires accreditation by a SAMHSA-approved accrediting body. DEA registration for a narcotic treatment program depends on the Secretary of Health and Human Services determining that the applicant is qualified, and that determination runs through the SAMHSA process.² Treating it as something to sort out after the DEA approves you is a common and costly mistake.

MATE Act Training

Since June 2023, every DEA-registered practitioner other than veterinarians must complete a one-time, eight-hour training on treating patients with opioid and other substance use disorders. It applies to new applicants and to anyone renewing an existing registration, and you attest to completion when you submit.⁵

Information the Form Requires

Have this ready before you start:

Your state professional license and any state-issued controlled substance registration number, with expiration dates.
The exact physical address where controlled substances will be stored and dispensed. A P.O. box will not work.
Whether the program will provide maintenance treatment, detoxification treatment, or both.
The controlled substance schedules you intend to handle.
Your organizational structure and federal tax identification number.
Documentation that your program has obtained, or is obtaining, SAMHSA OTP certification.

Inconsistent information is the single biggest cause of processing delays. The facility address on your state license, your SAMHSA certification, and your DEA application should match exactly.

Submitting the Application

The DEA accepts Form 363 online through the Diversion Control Division website, and online submission is the preferred method.⁶ The fee is $296, annual, and non-refundable.¹ The wrong fee amount gets the application returned unprocessed.

Processing generally takes four to eight weeks for a complete submission. Two things stretch that timeline. A DEA investigator may contact you to schedule a pre-registration inspection of the facility to confirm physical security meets federal standards. A background review, if triggered, adds more time. Keep a copy of everything you submitted along with your application control number so you can check status through the DEA’s online system.

Physical Security You Have to Have

Security is the fastest place to lose an application or a registration. Federal regulations require controlled substances to be stored in a safe or steel cabinet meeting specific resistance standards against forced entry, surreptitious entry, lock manipulation, and radiological attack.⁷ A safe under 750 pounds must be bolted or cemented in place so it cannot be readily removed.

Depending on the type and quantity of substances stored, you may also need an alarm system that transmits to a central monitoring company, local police, or a 24-hour in-house control station.⁷ Keys and combinations should be limited to the registrant and specifically authorized personnel. Loose access control is one of the most frequently cited inspection findings.

Records and Inventory

Every controlled substance moving into or out of the program has to be documented. Records must be complete, accurate, and available for DEA inspection for at least two years.⁸

Two formal counts are mandatory. An initial inventory of all controlled substances on hand on the date you begin dispensing; if you start with none, you record that as the initial inventory. And a biennial inventory of all stocks at least every two years.⁹ Many programs count more often. Catching a discrepancy in-house is far easier than explaining one to an auditor.

Reporting Theft or Loss

Discover a theft or significant loss and the clock starts that day. You must notify the DEA Field Division Office in writing within one business day of discovery.¹⁰ That notification is separate from what follows.

Within 45 calendar days, you must file a complete DEA Form 106 through the Diversion Control Division’s secure online system, documenting what was taken, in what quantity, and what you know about the circumstances.¹¹ Failing to report, or filing late, is a standard ground for enforcement action.

Who You Can Hire Around Controlled Substances

Federal regulations flatly prohibit giving an employee access to controlled substances if that person has been convicted of a drug-related felony, had a DEA registration application denied, had a registration revoked, or surrendered a registration to avoid enforcement action.¹⁰

One exception: if the prospective employee currently holds their own active DEA registration, the restriction doesn’t apply. Otherwise, the only path is an employment waiver from the DEA’s Diversion Control Division. The waiver request has to address the nature of the past violation, what the person has done since, the scope of proposed access, and the safeguards you’ll put in place. Waivers are not transferable. If the employee moves to another employer, that employer files a fresh waiver.

Renewing With Form 363a

NTP registrations run 12 months, though the initial period may be slightly shorter or longer.¹² Renewal uses DEA Form 363a through the DEA’s online portal.¹³

The DEA sends electronic renewal reminders to the email address on file at 60, 45, 30, 15, and 5 days before expiration. Paper notices stopped in 2020, so an out-of-date email means no warning at all.¹⁴

Once a registration expires, the DEA allows reinstatement within one calendar month. Miss that window and you submit an entirely new Form 363 and start over.¹⁴ During any gap, your program cannot legally administer or dispense controlled substances, and patients lose access to treatment while a fresh application processes.

What Can Cost You the Registration

The DEA can suspend or revoke an NTP’s registration for falsifying information on the application, losing the underlying state license, being convicted of a felony involving controlled substances, being excluded from Medicare or Medicaid, or committing acts inconsistent with the public interest.¹⁵

For narcotic treatment programs, the statute adds another trigger: failing to comply with the security, record-keeping, and patient medication quantity standards set by the Attorney General and HHS.¹⁵ When the DEA finds an imminent danger to public health or safety, it can issue an immediate suspension order without waiting for the normal hearing process. A history of prior suspensions or revocations can lead the Attorney General to bar the registrant from registering at all.

Financial and criminal exposure runs alongside the registration itself. Civil penalties for most violations can reach $25,000 per violation. Knowing violations prosecuted criminally can bring up to one year of imprisonment, a fine, or both, with a second or subsequent offense doubling the maximum prison term to two years.¹⁶ Record-keeping failures that look minor in isolation are exactly the ones that generate enforcement referrals.

1
Federal Register. Registration and Reregistration Fees for Controlled Substance and List I Chemical Registrants
2
GovInfo. 21 USC 823 – Registration Requirements
3
eCFR. 21 CFR 1301.12 – Separate Registrations for Separate Locations
4
SAMHSA. Become an Opioid Treatment Program (OTP)
5
Drug Enforcement Administration. Medication Assisted Treatment Training Requirement
6
RegInfo.gov. DEA Form 363 – New Application for Registration
7
eCFR. 21 CFR 1301.72 – Physical Security Controls for Non-Practitioners, Narcotic Treatment Programs, and Compounders
8
GovInfo. 21 CFR 1304.04 – Maintenance of Records and Inventories
9
eCFR. 21 CFR 1304.11 – Inventory Requirements
10
eCFR. 21 CFR 1301.76 – Other Security Controls for Practitioners
11
Federal Register. Reporting Theft or Significant Loss of Controlled Substances
12
Drug Enforcement Administration. Narcotic Treatment Program Manual
13
Drug Enforcement Administration Diversion Control Division. DEA Forms and Applications
14
Diversion Control Division. Registration – Revised Announcement Regarding Renewal Applications
15
Office of the Law Revision Counsel. 21 USC 824 – Denial, Revocation, or Suspension of Registration
16
Office of the Law Revision Counsel. 21 USC 842 – Prohibited Acts B