DRUG LEGALIZATION SERIES
PART 19
If you’re new to the series, start here.

Why governments already run complicated drug controls every day—and why the real obstacle is political will, not administrative capacity.

Executive Summary

One of the laziest objections to serious drug policy reform goes like this: even if a more rational system sounds good on paper, it would be too complicated to administer in real life.

That sounds practical. It is not.

The United States already administers complex drug systems every single day. We already run controlled substance regulation through federal scheduling, DEA registration, inventory rules, security requirements, suspicious-order reporting, pharmacy oversight, and state monitoring tools.[2][3][10] We already use prescription drug monitoring program databases to track controlled-substance prescribing and help clinicians identify overdose risk.[4] We already run high-structure access systems through opioid treatment programs, where methadone for opioid use disorder can be dispensed only through SAMHSA-certified programs that operate under federal rules.[5][6][7] We already loosened access under newer buprenorphine prescribing rules while keeping DEA registration and state-law constraints in place.[8][9] We already regulate alcohol distribution through licensing and trade-practice rules.[12] We already run cannabis inventory tracking and cannabis track and trace systems in multiple states.[13][14][15]

The idea that regulated drug systems are too complex to run is not a serious objection. It is an excuse.

And it matters because the status quo is still catastrophic. Final CDC mortality data showed 79,384 drug overdose deaths in 2024.[1] If mass death is still the baseline, then pretending administration is impossible is not caution. It is surrender.

This chapter makes a simple argument:

• Controlled substance regulation is already real, daily administrative work.
• A prescription drug monitoring program is proof that real-time oversight is not exotic.
• Methadone clinic regulations already operate a tightly governed high-risk access lane.
• Buprenorphine prescribing rules show access can be expanded without abandoning oversight.
• The regulated pharmacy model proposed earlier in this series is not bureaucratic science fiction. It is a logical extension of systems that already exist.

Part 9 already argued for risk-based drug regulation instead of one rule for every substance.

Part 14 made the case for a regulated pharmacy model in the highest-risk lane.

Part 16 argued for pilot, measure, scale.

Part 18 argued that policy should be built on public health, not moral panic.

This chapter answers the next obvious objection: can governments actually run a serious regulated system?

Yes. They already are.

The Administrative Myth This Chapter Answers

The anti-reform argument usually comes in one of two forms.

The first is moral: people do not deserve a better system.

The second pretends to be technical: even if you wanted something better, no state could administer it.

That second argument collapses the moment you look at what governments and health systems already do.

A serious drug legalization model does not start from zero. It starts from existing institutions, existing databases, existing licensure systems, existing inspections, existing audit trails, existing diversion control rules, and existing confidentiality law. The real question is not whether administration is possible. The real question is whether policymakers are willing to adapt existing tools into a more rational structure.

That is where risk-based drug regulation matters. The point is not to invent one giant new bureaucracy. The point is to assign tighter or looser controls depending on real risk, use systems that already work, and build treatment on demand, overdose prevention, public safety, and accountability into the structure from the start.

That is not fantasy. That is ordinary public administration.

Controlled Substance Regulation Already Exists

Controlled substance regulation is not a theory seminar. It is already the operating reality of American medicine, pharmacy, manufacturing, distribution, and enforcement.

DEA states plainly that the Controlled Substances Act places substances into five schedules based on medical use, abuse potential, and safety or dependence liability.[2] DEA also explains in its own drug manual that the CSA created a closed system of distribution in which people and companies authorized to handle controlled substances must register with DEA, keep complete and accurate inventories and transaction records, and maintain security for storage.[3]

That means the system already does all of the following:

• licenses legitimate handlers
• distinguishes between schedules
• requires inventories
• requires recordkeeping
• requires storage and security
• allows inspections and enforcement
• creates sanctions when rules are ignored

That is controlled substance regulation.

Hospitals do it. Pharmacies do it. Distributors do it. Manufacturers do it. Researchers do it. The country does not wake up every morning confused about whether fentanyl, amphetamine, morphine, and buprenorphine should all be handled the same way. The system already knows they should not.

And when registrants fail, enforcement is not theoretical either. DEA repeatedly brings civil and administrative actions over inaccurate inventories, poor recordkeeping, weak controls, and conduct that increases the risk of diversion into the illegal market.[3][10]

So, when critics say a future regulated system would require impossible levels of paperwork, tracking, and compliance, the answer is simple: we already do paperwork, tracking, and compliance for controlled substances every day. The issue is not whether controlled substance regulation can be administered. The issue is which objectives the existing system is aimed at.

Right now, too much of that system still leaves people trapped between a punitive illegal market and a treatment system that is too hard to enter. That is a design failure, not an administrative impossibility.

Prescription Drug Monitoring Program Systems Prove Real-Time Oversight Is Routine

A prescription drug monitoring program is one of the clearest examples of a regulatory tool that many people already accept without thinking about it.

CDC defines a prescription drug monitoring program as an electronic database that tracks controlled-substance prescriptions in a state.[4] CDC also says a prescription drug monitoring program gives clinicians information that can identify patients at risk for overdose and inform interventions that may save lives.[4]

That is important for two reasons.

First, it proves governments already run shared, near-real-time oversight systems touching prescribers, pharmacies, and patients.

Second, it proves that complex drug administration is not some futuristic dream. A prescription drug monitoring program already exists precisely because policymakers understood that controlled substances require monitoring, auditing, and course correction.

The point here is not that PDMPs are perfect. They are not. But perfection is not the question.

The question is whether the state can administer a drug-tracking system with defined users, reporting duties, clinical decision points, and data-driven interventions.

The answer is obviously yes. A prescription drug monitoring program already does that.

And that matters for the rest of this series. If the country can already administer controlled-prescription databases, then it can administer a narrow, high-risk dispensing lane tied to overdose prevention, diversion control, and treatment on demand. The data layer is not the obstacle.

Methadone Clinic Regulations Already Run a High-Risk Access Lane

The phrase methadone clinic regulations is sometimes used dismissively, as if it proves regulated treatment is too cumbersome to expand.

It proves the opposite.

SAMHSA explains that methadone used to treat opioid use disorder can only be dispensed through a SAMHSA-certified opioid treatment program.[7] SAMHSA also says its Division of Pharmacologic Therapies oversees and facilitates these systems, supports the certification and accreditation of more than 1,900 opioid treatment programs, and that those programs collectively treat more than 600,000 patients each year.[5]

That is not a thought experiment. That is a nationwide, high-risk medication system already in operation.

The 2024 revision to 42 CFR Part 8 made the structure even clearer. SAMHSA says the final rule modernized OTP regulation, expanded access, supported patient-centered treatment, preserved safeguards, and updated take-home dosing criteria while keeping diversion control procedures in place.[6] The revised rule also allows more flexible screening and certain telehealth pathways, which shows that methadone clinic regulations can evolve without collapsing.[6]

This is exactly why the “too complex to administer” argument is weak.

A high-risk opioid medication is already:

• dispensed in certified facilities
• governed by federal standards
• tied to accreditation
• supervised by regulators
• documented in records
• adjusted through new rulemaking
• balanced between access and public safety

That is an administratively intensive system, and it already exists.

When this series argues for a tightly controlled high-risk lane, it is not demanding bureaucratic magic. It is pointing to an operating example. Methadone clinic regulations are not proof that regulated access is impossible. They are proof that the state already runs a structured, high-risk medication lane and can adjust it when evidence or conditions change.

Buprenorphine Prescribing Rules Already Balance Access and Control

If methadone clinic regulations show the highest-structure end of treatment access, buprenorphine prescribing rules show that access can be widened without destroying the regulatory frame.

SAMHSA states that the MAT Act eliminated the old federal waiver requirement, meaning practitioners with a current DEA registration that includes Schedule III authority may prescribe buprenorphine for opioid use disorder if permitted by state law.[8] CDC says the same thing in clinical guidance: buprenorphine can be prescribed by any clinician with a current, standard DEA registration with Schedule III authority, in any clinical setting.[9]

That is a major policy shift, and it is the perfect answer to people who act like every rule change has to be all-or-nothing.

The country did not respond to the old system’s access failures by abolishing regulation. It changed the buprenorphine prescribing rules inside an existing regulated structure.

That matters.

Buprenorphine prescribing rules now show a workable middle path:

• the waiver barrier is gone
• DEA registration still matters
• state law still matters
• clinical standards still matter
• pharmacies still dispense within ordinary controlled-substance systems
• misuse and diversion concerns are managed through the same broader infrastructure that governs other Schedule III medications

That is exactly the kind of policy learning Part 16 was arguing for. Pilot, measure, scale does not mean tearing up the whole administrative state. It means changing specific rules where they are blocking better outcomes.

And CDC and NIDA both stress that medications for opioid use disorder reduce overdose risk and save lives.[9][18] So the broader lesson from buprenorphine prescribing rules is not just administrative. It is moral. The state can loosen barriers without abandoning accountability. It just has to decide that access matters.

Diversion Control Is Already a Standard Operating Function

Whenever critics want to make a regulated model sound impossible, they eventually say the same word: diversion.

Good. They should.

Diversion control is not a side issue. It is one of the main reasons any serious regulatory model has to be designed carefully. But that does not make regulation unworkable. It makes regulation necessary.

DEA’s Suspicious Orders Report System is a good example. DEA says the SUPPORT Act requires DEA registrants that distribute controlled substances to report suspicious orders to DEA through SORS Online.[10] DEA defines suspicious orders to include unusual size, unusual frequency, or orders deviating substantially from a normal pattern.[10]

That means the state already expects the system to monitor itself for red flags.

The same logic shows up in the FDA’s Drug Supply Chain Security Act. FDA says DSCSA is meant to create interoperable electronic tracing at the package level for certain prescription drugs as they move through the supply chain, helping prevent harmful or illegitimate drugs from entering the U.S. supply and enabling rapid response when they do.[11] FDA also says trading partners have to notify FDA within 24 hours after determining a product is illegitimate.[11]

That is not casual governance. That is dense, rule-based administration with reporting, quarantine, notification, and enforcement.

And yes, the privacy side can also be administered. HHS’s 2024 final rule on 42 CFR Part 2 aligned key parts of substance use disorder confidentiality with HIPAA while still maintaining protections meant to reduce fear of prosecution or discrimination.[17] So even the “but the data would be too sensitive” objection is weaker than it sounds. We already administer sensitive health data systems with specific rules.

In other words, diversion control is not a reason regulated systems cannot work. Diversion control is proof that regulators already know how to write, audit, and enforce complex systems when they actually choose to.

Alcohol Rules and Cannabis Track and Trace Show Markets Can Be Structured

The argument that drug regulation would be too complicated gets even weaker once you step outside medicine and look at other legally regulated markets.

Alcohol is an obvious example. TTB enforces trade-practice laws under the Federal Alcohol Administration Act, including rules against tied houses, exclusive outlets, commercial bribery, and consignment sales.[12] That is not the absence of regulation. That is a structured market with licensing rules, marketing restrictions, and enforcement designed to prevent domination, corruption, and distorted retail relationships.[12]

Cannabis is another example.

Colorado’s Marijuana Enforcement Division says all licensed medical and retail marijuana businesses are required to use METRC as the primary inventory tracking system of record, and that a licensed business without an activated and functional METRC account cannot operate.[13] California’s Department of Cannabis Control says its CCTT system uses unique identifiers to report the movement of cannabis and cannabis products through the licensed commercial distribution chain.[14] Washington’s Liquor and Cannabis Board says its Cannabis Central Reporting System is the state-designated traceability system and that licensees and examiners use it to report and review compliance data.[15]

That is cannabis track and trace in practice.

The country already runs:

• licensed alcohol systems with anti-corruption rules
• licensed cannabis systems with product movement tracking
• controlled-substance systems with registration and inventories
• prescription drug monitoring program databases
• opioid treatment programs under methadone clinic regulations

Again, the problem is not feasibility.

The problem is that some people hear “regulated drug system” and imagine chaos because they are ignoring the fact that highly regulated intoxicant and medication markets already exist.

That is why this series keeps separating substances by risk. Lower-risk lanes can look more like tightly controlled retail. Higher-risk lanes should look more like the regulated pharmacy model. That is risk-based drug regulation, not administrative fantasy.

Why the Regulated Pharmacy Model Is Administrative, Not Fantasy

The best objection to the regulated pharmacy model is not moral. It is operational.

Could a state actually run it?

The answer is yes, if it stops pretending it needs to invent an entirely new civilization.

The regulated pharmacy model would pull together pieces the country already administers:

• scheduling and licensure logic from controlled substance regulation
• data visibility logic from a prescription drug monitoring program
• high-risk dispensing logic from methadone clinic regulations
• broader office-based access logic from buprenorphine prescribing rules
• packaging, inventory, and product-security logic from existing pharmacy and supply-chain rules
• audit and alert logic from diversion control systems
• outcome monitoring logic from a Medicaid 1115 waiver demonstration framework[16]

Medicaid’s SUD section 1115 demonstration opportunity is a good example of that last point. CMS says states can use this authority to test and evaluate reforms that improve access to clinically appropriate substance use disorder treatment, while incorporating metrics that demonstrate whether outcomes are actually improving.[16] That is the exact governance posture Part 16 was calling for.

So a serious high-risk pilot could already be assembled from familiar parts:

• licensed dispensing locations
• narrow eligibility
• standardized products
• quantity limits
• required documentation
• real-time flags for irregular patterns
• treatment on demand at the point of contact
• quarterly reporting on overdose prevention, public safety, and accountability

That is the core insight.

The regulated pharmacy model is not radical because it requires too much administration. It is radical only in the sense that it would repurpose administration toward fewer funerals and less black-market chaos instead of leaving high-risk users to the street market.

If we can already administer methadone, buprenorphine, suspicious-order reporting, package-level tracing, state cannabis inventory systems, and trade-practice enforcement in alcohol, then the claim that a tightly governed high-risk lane is beyond human capability is absurd.

The real barrier is not administration.

The real barrier is political courage.

The Bottom Line

This chapter is not arguing that regulation is easy.

It is arguing something much more important: regulation is already being run.

The United States already administers controlled substance regulation. It already uses prescription drug monitoring program systems. It already operates under methadone clinic regulations. It already changed buprenorphine prescribing rules to widen access while keeping oversight. It already enforces diversion control, audits supply chains, and tracks cannabis inventories. It already knows how to balance data, privacy, safety, and licensure.

So the phrase “too complicated to administer” should not be taken seriously anymore.

A serious drug policy reform model still needs public safety rules. It still needs accountability. It still needs overdose prevention. It still needs treatment on demand. It still needs risk-based drug regulation instead of a one-size-fits-all fantasy.

But the administrative machinery is not the missing piece.

The missing piece is the willingness to use that machinery for life-saving goals instead of defending the same failing default forever.

Frequently Asked Questions

What does this chapter mean by controlled substance regulation?

It means the real system already operating under the Controlled Substances Act: schedules, DEA registration, inventories, recordkeeping, storage rules, inspections, and enforcement.[2][3]

Why use prescription drug monitoring program systems as an example?

Because a prescription drug monitoring program proves that states already run electronic databases tracking controlled-substance prescribing and use that information for clinical safety and overdose risk decisions.[4]

What do methadone clinic regulations prove?

Methadone clinic regulations prove that the state already runs a tightly governed high-risk medication lane with certification, accreditation, dispensing rules, and updated federal standards.[5][6][7]

Why are buprenorphine prescribing rules important here?

Buprenorphine prescribing rules show that access barriers can be loosened inside a regulated system. The X-waiver is gone, but DEA registration, state law, and clinical standards still exist.[8][9]

How does the regulated pharmacy model fit into this?

The regulated pharmacy model is the logical next step for a high-risk lane. It would borrow from systems that already exist instead of inventing a brand-new bureaucracy from nothing.

Where does Medicaid 1115 waiver authority fit in?

A Medicaid 1115 waiver is a familiar way states already test and evaluate substance use disorder system reforms with metrics, implementation plans, and outcome reporting.[16]

Does this mean every drug should be sold through the same system?

No. The entire point of risk-based drug regulation is that different substances require different lanes. Lower-risk products can be handled one way. Higher-risk products need tighter structure, stronger diversion control, and better links to care.

References

[1] Centers for Disease Control and Prevention, National Center for Health Statistics. U.S. Life Expectancy Hits Record High as Drug Overdose Deaths Decline in 2024. https://www.cdc.gov/nchs/pressroom/releases/20260129.html

[2] U.S. Drug Enforcement Administration. The Controlled Substances Act. https://www.dea.gov/drug-information/csa

[3] U.S. Drug Enforcement Administration. Drugs of Abuse. https://www.dea.gov/sites/default/files/2024-12/2024-Drugs-of-Abuse-508.pdf

[4] Centers for Disease Control and Prevention. Prescription Drug Monitoring Programs (PDMPs). https://www.cdc.gov/overdose-prevention/hcp/clinical-guidance/prescription-drug-monitoring-programs.html

[5] Substance Abuse and Mental Health Services Administration. Opioid Treatment Program Information for Providers. https://www.samhsa.gov/substance-use/treatment/opioid-treatment-program

[6] Substance Abuse and Mental Health Services Administration. 42 CFR Part 8 Final Rule. https://www.samhsa.gov/substance-use/treatment/opioid-treatment-program/42-cfr-part-8

[7] Substance Abuse and Mental Health Services Administration. Methadone. https://www.samhsa.gov/substance-use/treatment/options/methadone

[8] Substance Abuse and Mental Health Services Administration. Waiver Elimination (MAT Act). https://www.samhsa.gov/medications-substance-use-disorders/waiver-elimination-mat-act

[9] Centers for Disease Control and Prevention. Opioid Use Disorder: Treating. https://www.cdc.gov/overdose-prevention/hcp/clinical-care/opioid-use-disorder-treating.html

[10] U.S. Drug Enforcement Administration, Diversion Control Division. Suspicious Orders Report System (SORS). https://www.deadiversion.usdoj.gov/sors/sors.html

[11] U.S. Food and Drug Administration. Drug Supply Chain Security Act (DSCSA). https://www.fda.gov/Drugs/DrugSafety/DrugIntegrityandSupplyChainSecurity/DrugSupplyChainSecurityAct/

[12] Alcohol and Tobacco Tax and Trade Bureau. Trade Practices Laws and Regulations. https://www.ttb.gov/business-central/trade-practices/laws-and-regulations

[13] Colorado Marijuana Enforcement Division. Metrc. https://med.colorado.gov/metrc

[14] California Department of Food and Agriculture. About the California Cannabis Track-and-Trace System. https://www.cdfa.ca.gov/calcannabis/documents/CCTT_FAQ.pdf

[15] Washington State Liquor and Cannabis Board. Cannabis Central Reporting System (CCRS). https://lcb.wa.gov/ccrs

[16] Medicaid.gov. Substance Use Disorder Section 1115 Demonstration Opportunity. https://www.medicaid.gov/medicaid/section-1115-demonstrations/substance-use-disorder-section-1115-demonstration-opportunity

[17] U.S. Department of Health and Human Services. Fact Sheet: 42 CFR Part 2 Final Rule. https://www.hhs.gov/hipaa/for-professionals/regulatory-initiatives/fact-sheet-42-cfr-part-2-final-rule/index.html

[18] National Institute on Drug Abuse. Medications for Opioid Use Disorder. https://nida.nih.gov/research-topics/medications-opioid-use-disorder