What Happens During a DEA Inspection at Your Site?

A DEA inspection rarely becomes difficult because of one missing document. The greater risk is what that document reveals: weak accountability, inconsistent practices, unresolved discrepancies, or an organization that cannot demonstrate control over its controlled substances. For registrants asking what happens during a DEA inspection, the answer is not a single checklist. It is a structured assessment of whether your operation is meeting its obligations and whether diversion risks are being identified, investigated, and controlled.

For pharmacies, hospitals, practitioners, distributors, manufacturers, and other DEA registrants, inspection readiness must be an operating discipline. The actions taken by staff in the first hour, the condition of records, and the quality of management oversight can all shape the course of the inspection.

What Happens During a DEA Inspection?

DEA Diversion Investigators conduct inspections to verify compliance with the Controlled Substances Act and applicable DEA regulations. The scope depends on the type of registrant, the nature of its operations, known risk indicators, and information available to the agency. A routine inspection can broaden if investigators identify discrepancies, unusual ordering patterns, inadequate security, questionable prescribing or dispensing activity, or signs of diversion.

An inspection is not necessarily an accusation of wrongdoing. However, it should never be treated as a casual visit. Investigators are trained to evaluate the practical effectiveness of controls, not simply whether policies exist in a binder. A written policy that employees do not follow offers limited protection.

Arrival, Credentials, and Inspection Authority

Investigators will identify themselves and present their DEA credentials. As I like to tell registrants, Investigators are like penguins - they travel in pairs. They may request to speak with the registrant, pharmacist-in-charge, compliance officer, facility administrator, or another responsible employee. The organization should verify credentials, promptly notify the designated internal contacts, and establish a professional point of contact for the inspection.

Investigators will also present a DEA Form 82, Notice of Inspection of Controlled Premises. This is basically DEA seeking voluntary consent to inspect a controlled premise. A registrant has the right to understand the request and may consult legal counsel or an appropriate compliance representative. Refusing consent does not make an inspection disappear. DEA may pursue an Administrative Inspection Warrant (AIW) in order to conduct the inspection. Staff should remain cooperative, factual, and orderly without volunteering speculation or altering normal records practices.

The appropriate response is controlled, not confrontational. Do not obstruct investigators, conceal records, backdate documents, or attempt to reconcile inventory after learning that an inspection has begun. Those decisions can turn an operational compliance problem into a much more serious enforcement concern.

Records Review Is Often the Center of the Inspection

A substantial portion of a DEA inspection is usually devoted to records. Investigators want to determine whether controlled substances can be traced from receipt through storage, administration, dispensing, transfer, return, destruction, or other final disposition. The required records vary by business model, but the underlying expectation is consistent: records must be complete, accurate, readily retrievable, and maintained for the required period, which for DEA is two years.

For many registrants, investigators may review initial and biennial inventories, invoices, receiving records, DEA Form 222 records or Controlled Substances Ordering System documentation, dispensing logs, administration records, prescription files, perpetual inventory records, return documentation, and records of destruction. They may compare one record source against another. For example, a purchase invoice may be tested against inventory records, dispensing activity, and physical stock on hand.

This is where unresolved discrepancies become significant. A variance may result from a clerical error, timing issue, waste documentation problem, receiving error, or system configuration issue. An organization that cannot explain the variance, show the investigation performed, and demonstrate corrective action creates avoidable risk. Investigators assess not only whether a discrepancy occurred, but whether leadership recognized it and responded appropriately.

For distributors and manufacturers, the review may extend to customer due diligence, suspicious order monitoring, order review decisions, reporting processes, quota-related activity, and controls over transfers or returns. For practitioners and medical facilities, the focus may include prescribing, administration, storage, wastage, and the separation of professional practice from improper controlled substance activity. The inspection should be anticipated as relevant to your registration type, not approached with a one-size-fits-all pharmacy checklist.

Physical Inventory and Reconciliation

Investigators may conduct or observe a physical count of controlled substances. The count can be targeted to selected schedules, high-risk medications, fast-moving items, or drugs associated with known diversion concerns. They may compare the actual count with perpetual inventory balances, dispensing activity, automated dispensing cabinet reports, wholesaler invoices, and prior inventory records.

A physical count is not merely a math exercise. It tests whether the organization has reliable processes for receiving, stocking, transferring, administering, dispensing, wasting, and reconciling controlled substances. A small discrepancy that is fully documented and investigated is different from a pattern of unexplained shortages that no one has escalated.

Security Controls Are Examined in Practice

DEA requirements include physical security obligations, but an inspection often evaluates how security works in day-to-day operations. Investigators may inspect safes, vaults, cages, locked cabinets, alarm systems, camera coverage, access controls, key management, and storage areas. They may observe whether controlled substances are secured when staff are busy, during shift changes, or after normal business hours.

Access is a common point of weakness. Organizations should be able to identify who has access, why that access is necessary, how access is approved, and how it is removed when roles change or employment ends. Shared credentials, unsecured keys, propped doors, incomplete camera retention, and uncontrolled after-hours access can undermine otherwise sound policies.

For healthcare settings, investigators may also evaluate controls surrounding automated dispensing cabinets, anesthesia work areas, medication returns, waste, and transfers between departments. The operational reality matters. If a process depends on staff remembering informal steps during a high-pressure shift, it may not provide the accountability the organization believes it does.

Employee Interviews Can Test the Compliance Program

Investigators may speak with pharmacists, technicians, nurses, prescribers, buyers, managers, security personnel, and other employees with responsibilities involving controlled substances. These conversations can reveal whether procedures are understood and consistently followed.

Employees should answer truthfully and stay within their knowledge. They should not guess, speculate about motives, or attempt to explain records they have not reviewed. A well-prepared workforce knows whom to notify, how to provide requested information, and when to direct technical or legal questions to the appropriate responsible party.

Training should extend beyond a review of regulations. Staff need practical instruction on what to do when inventory does not balance, when a controlled substance is missing, when a suspicious order appears, when access controls fail, or when an inspector arrives. Accountability is established before the interview, through routine expectations and documented oversight.

Findings, Follow-Up, and Enforcement Risk

At the end of the on-site activity, investigators may discuss concerns, request additional records, or identify areas requiring follow-up. The absence of immediate feedback does not mean the matter is closed. DEA may review materials after the visit, seek additional information, conduct further investigation, or coordinate with other regulatory or law enforcement authorities when appropriate.

Potential outcomes depend on the facts. They can range from education and corrective actions to administrative proceedings, civil consequences or a criminal investigation. The distinction often turns on the seriousness of the issue, the duration of the problem, the presence of diversion, the quality of the organization’s response, and whether leadership knew or should have known about the breakdown.

After an inspection, preserve relevant records, document requests and responses, assess the cited or observed issues carefully, and implement corrective action that addresses root cause. A rushed response that fixes one visible error while leaving the underlying control failure intact can create repeat exposure.

Preparing Before DEA Arrives

The strongest preparation happens well before an investigator walks through the door. Organizations should periodically test their readiness through controlled substance audits, record reconciliations, access reviews, policy assessments, and mock inspection exercises. The goal is not to stage-manage an inspection. It is to identify whether the compliance program functions under real operating conditions.

A practical readiness process should confirm four things: records can be produced promptly, physical inventory is accurate, staff know their responsibilities, and discrepancies are investigated to resolution. It should also establish an inspection response protocol that identifies who receives investigators, who coordinates document production, who communicates with counsel or compliance leadership, and how requests are tracked.

Veritas Compliance & Analytics helps registrants evaluate these controls through enforcement-informed assessments and mock DEA inspections designed around actual operational risk. The right preparation does more than help an organization appear organized. It strengthens the controls that prevent compliance problems before they become enforcement issues.

A DEA inspection is ultimately a test of whether your organization can account for every controlled substance and every decision surrounding it. Treat that standard as a daily operational requirement, and inspection readiness becomes a result of disciplined compliance rather than a last-minute response.