Shoppers of disclosure language are rewriting their playbooks: funds, operators and advisers need new risk factors and valuation work after the DOJ/DEA Final Order moved certain medical cannabis into Schedule III. This matters for S‑1s, PPMs, M&A diligence and tax models , and the window to update is now.

Essential Takeaways

  • Schedule III shift: DOJ/DEA’s Final Order reclassifies FDA‑approved products and state‑licensed medical cannabis into Schedule III for covered activity, creating a split federal‑risk profile.
  • 280E impact: Section 280E’s disallowance may not apply to covered activity; this can materially improve EBITDA and valuations but depends on Treasury/IRS guidance.
  • Banking and payments: Banking risk and card‑network restrictions are reduced but not removed; operational friction and SAR obligations remain.
  • Diligence checklist: Buyers and lenders must verify license scope, medical‑purpose records, protective 280E filings, DEA registration readiness and processor agreements.
  • Valuation multiplier: Illustrative models suggest a potential 2–3x enterprise‑value lift for covered activity, but assumptions and litigation risk must be disclosed.

Why the Final Order rewrites investor disclosure overnight

The Final Order effective 22 April 2026 creates a practical bifurcation of federal risk that every disclosure package must reflect, and it does so with a sensory jolt , imagine investors suddenly smelling the possibility of real cash‑flow upside where once there was only smoke. Previously, disclosure was built around uniform federal illegality and the certainty of 280E’s bite. Now, state‑medical‑licensed activity sits in a different lane. That forces mechanical edits to boilerplate risk factors and substantive recalibration of tax models, valuation caps and covenant assumptions.

According to the Treasury press release and firm alerts, guidance from Treasury, IRS and FinCEN is expected to follow, and those future rules will determine who benefits and to what degree. So counsel and finance teams should be rewriting language now while also flagging contingent language about guidance, litigation and allocation methods.

How the eight critical risk factors should change

The foundational rewrite is simple: stop saying cannabis is unequivocally Schedule I without qualification. Disclosure must explain that while cannabis is generally Schedule I, FDA‑approved products and qualifying state‑licensed medical activity are treated as Schedule III where applicable. That pivot changes every downstream risk statement , from 280E to DEA registration , and it invites new items, like litigation risk to the Final Order itself.

Practical tip: when you update an S‑1 or PPM, insert a clear line stating whether the company holds qualifying state medical licences and describe the scope of covered activity. Investors want specifics, not hedged boilerplate.

What lenders and buyers must add to their diligence playbooks

M&A diligence now has some new, unavoidable boxes. Verify state medical licence documents, including issue and renewal dates and any OTC Therapeutic Endorsement frameworks. Sample transaction‑level medical‑purpose records to confirm the claimed covered‑activity percentage, because that allocation will feed both 280E relief calculations and bank‑compliance files.

Also examine whether the seller has filed any protective claims with the IRS or amended prior returns, and review the banking file for concentration, SAR histories and processor contracts. DEA registration readiness deserves its own checklist , security plans, record systems and eligibility questions are no longer theoretical.

Tax and valuation: how the 280E multiplier changes the math

This is where the market will feel it most. Historically, 280E disallowed ordinary business deductions for Schedule I activity, inflating effective federal tax rates and crushing net income. If Treasury and IRS follow through so that covered Schedule III activity escapes 280E, that recovered deductibility can expand EBITDA and lift valuations significantly , illustrative models show a possible 2–3x EV uplift for covered operations.

But don’t rush to headlines. The uplift depends on: Treasury/IRS guidance details, the company’s documentation and allocation methodology, state tax interactions, and any judicial challenges to the Final Order. Disclosure must present the multiplier, the assumptions behind it, and the contingencies that could unwind the benefit.

Banking, payments and DEA registration: improved but still tricky

FinCEN’s existing marijuana‑related guidance and BSA obligations remain in force, so banking relationships are easier for covered activity but not guaranteed. Major card networks haven’t updated their rules, meaning many operators will still lean on cash, ACH and third‑party processors , with the attendant operational and customer‑experience trade‑offs.

Separately, the Final Order contemplates an expedited DEA registration pathway for qualifying state licensees, but registration brings detailed federal controls and no promise of approval. Companies should disclose their DEA application status and readiness; lenders should tie covenants to licence and registration status where appropriate.

The litigation wildcard and state dependence

A new risk factor you must add: the Final Order itself is vulnerable to legal challenge. DOJ used treaty‑control authority in its approach, and plaintiffs or states could seek remand or invalidation. That uncertainty must be part of any investor communication.

Also remember the Schedule III benefit applies only to activity tied to qualifying state medical licences. In jurisdictions without an OTC Therapeutic Endorsement or equivalent, operators may find themselves outside the safe channel. State‑by‑state analysis and local legislative tracking are now essential for both funds and acquirers.

What funds, SPACs and public issuers should do next

Update offering documents and LP communications immediately: fold Schedule III recognition into your investment thesis, distinguish covered versus non‑covered portfolio companies, and amend risk factors to reflect the eight rewrites. SPACs and public companies should expect SEC reviewers to focus on bifurcated risk and the 280E multiplier; file S‑4, 10‑Ks and 8‑Ks with counsel and be explicit about contingent outcomes.

For portfolio management, consider reallocating capital toward operators with verified covered‑activity status or clear pathways to endorsement and DEA registration, and update valuation policies to capture the new tax dynamics.

It's a small change with outsized consequences , update your disclosure and models before your next deal or filing.

Source Reference Map

Story idea inspired by: [1]

Sources by paragraph: