If the DEA Walked In Tomorrow, Could You Account for Every Vial?

Here’s a test. Pick any vehicle in your fleet. Without leaving your desk, can you tell me exactly which controlled substances are in that apparatus — drug names, quantities, serial numbers, expiration dates — accurate to this shift?

If you can, you’re ahead of most agencies we talk to. If you can’t, you have an inventory gap. And under the PPAEMA final rule, that gap is a compliance problem that’s been live since March 9, 2026.

What the DEA Actually Expects

You need to track how controlled substances move across your organization. Where they are. How they got there. Where they went. When they left. Every movement, every handoff — from receiving through disposal.

“Missed signatures, witnesses, expiration dates... you took something out to give on a call and then you get another call and it gets forgotten. You get used to seeing these things. If something comes up missing, you think — yeah, somebody probably just forgot to log that.”

— Rich Scott, Retired Fire Chief, Bonita Springs Fire & Rescue

That gap between what your documentation says is happening and what’s actually happening at 3 AM on a busy shift — that’s where compliance programs fail.

The 2-Year Rule: “Readily Retrievable” Means What It Sounds Like

Records must be retained for two years and readily retrievable for DEA inspection. If an inspector asks for the complete history of a specific fentanyl vial from eight months ago, “let me drive to station 4 and pull the binder” is not going to cut it.

Agencies that have automated tracking can pull this up with a few clicks — every access event, every inventory snapshot, every transfer, all in one timeline. That’s the benchmark the DEA is measuring against.

Test yourself: Pick one controlled substance administered six months ago. Try to reconstruct the full history right now. The time that takes is the time it would take an inspector.

Daily Counts and Two-Person Verification: Know Your State

Daily counts with two-person verification are not a federal DEA requirement. They are state-level requirements, and a growing number of states — Florida being one of the most established — are adopting them.

If your state requires them, two things matter: speed (if the count takes 20 minutes, it’ll get rushed) and real verification (two people actually confirming, not one doing it and the other signing later).

“I forgot to transfer the meds over this morning. Hey, can you just put my initials on there? Or can you just change the date?”

— Rich Scott, Retired Fire Chief, Bonita Springs Fire & Rescue

Everyone in EMS has seen that conversation. It’s not malicious. It’s the natural consequence of a process that doesn’t fit the operational tempo. But it means your verification is theater, not compliance.

Where Inventory Programs Fall Apart

After 17 years of working with agencies, we see the same patterns: the memory gap (events documented hours later from memory), the signature backfill (verification that wasn’t real), the offline blind spot (connectivity losses creating record gaps), and the expired drug nobody caught (vials sitting past expiration for months).

None of these are caused by bad people. They’re caused by systems that depend on human memory in environments where humans are cognitively overloaded. The fix isn’t stricter enforcement — it’s flipping the model so the system generates the data and crews verify it.

Part 2 of 3 — Next: Chain of Custody Is Where Your Program Succeeds or Fails