“When I became an EMS chief, we were kind of old school — the clipboard, everybody signing on paper. Then we had to collect all those errors.”
— Rich Scott, Retired Fire Chief, Bonita Springs Fire & Rescue
That’s Rich Scott, retired fire chief out of Bonita Springs, Florida. Thirty years in the fire service. He’s seen every version of controlled substance management — from paper binders in apparatus cabs to the first-generation digital systems that promised to fix everything but still left gaps.
The PPAEMA final rule took effect on March 9, 2026. It didn’t rewrite everything — but it clarified the parts that were vague enough to let agencies operate in gray areas. Those gray areas are gone now. And if your agency hasn’t adjusted, you’re not preparing for a future requirement. You’re already out of compliance.
You Don’t Need 10 Registrations. But You Do Need 10 Notifications.
This was the single most confused topic on our recent webinar — and Rich had to clear it up directly:
“Your agency has one DEA license that you order through your medical director. And then each one of the locations where narcotics will be — whether it be an apparatus or a satellite station — will be listed. One license per agency, and then all the locations will be added in under that.”
— Rich Scott, Retired Fire Chief, Bonita Springs Fire & Rescue
One registration per state. That’s the good news.
The part agencies miss: every stationhouse where you routinely store controlled substances must be reported to the DEA as a designated location — with 30 days advance notice. If your agency runs 10 stations and only your headquarters is on file, those other 9 stations are storing narcotics at unreported locations right now.
Monday morning action: Pull your current DEA registration. List every location where narcotics are physically stored. If there’s a mismatch, start the designated location notification process this week.
Carry on the Call. Lock It Up After. No Exceptions.
During an emergency response — medics can carry controlled substances on their person. Go bag, pouch, belt. No restrictions. The DEA didn’t want to create rules that interfere with patient care.
After the response — the moment the call is over, narcotics go back into secure storage. Locked safe, locked cabinet, locked vehicle compartment. Not “when I get back to the station.” Not “after I grab lunch.” After the call.
We talk to agencies across the country, and the pattern we see most often is narcotics sitting in an unsecured jump bag in the crew quarters between runs. Under the current rule, that’s a compliance gap — and it’s the kind of thing an inspector documents.
Monday morning action: Walk your stations. Look at where narcotics actually sit between runs — not where they’re supposed to be, but where they actually are.
If You Can’t Say Who Opened the Safe at 2:15 PM Tuesday, You Have a Problem
The DEA expects individualized access controls. Not a shared key. Not a combination that every medic on B-shift knows. Individual, traceable access that ties every door opening to a specific person.
“If something comes up missing and you see it, you think — yeah, somebody probably just forgot to log that. But what that creates is opportunity. If someone is interested in diversion, they know that people don’t pay attention.”
— Rich Scott, Retired Fire Chief, Bonita Springs Fire & Rescue
The agencies that have had major diversion incidents almost always had the same root cause: a culture of “false positives” where gaps were so common that nobody investigated anymore. Good access controls don’t just keep unauthorized people out. They create an audit trail that makes it obvious when something is wrong.
Monday morning action: Can you pull up a report right now showing every person who accessed every narcotics storage point yesterday, with timestamps? If the answer is no, your access controls aren’t meeting the standard.
Every Vehicle Needs a Secure Storage Option
The carry-vs-storage rule creates a practical reality: every vehicle that regularly carries controlled substances needs a place to lock them up between calls. The agencies that are ahead treat vehicle storage and station storage as one unified system — same credentials, same reporting, same visibility.
Where This All Leads
Security under PPAEMA comes down to three things: the DEA knows everywhere you store narcotics, narcotics are secured whenever they’re not in active use on a call, and you can prove who touched them and when. Most agencies have some of this. Few have all of it. And the difference is the difference between a clean inspection and a finding.
Find out where your agency stands
We've created a free compliance assessment tool for you to review your program and ensure your compliance status.
Part 1 of 3 — Up next: If the DEA Walked In Tomorrow, Could You Account for Every Vial?