The Acting Attorney General's order moving state-licensed medical marijuana and FDA-approved cannabis products from Schedule I to Schedule III of the Controlled Substances Act - effective April 22, 2026 - represents the most significant shift in federal cannabis policy in decades. For licensed medical operators, the immediate consequence is financial: the removal of Section 280E's deduction disallowance, which has forced cannabis businesses to pay federal income tax on gross profit rather than net income, producing effective tax rates that in many cases have exceeded 70%. Safe Harbor Financial (NASDAQ: SHFS), which operates a fintech compliance platform supporting cannabis banking, was quick to frame what that change means for the financial infrastructure surrounding the industry.
What 280E Actually Cost Operators - and Why Its Removal Matters Now
Section 280E has been, in practical terms, one of the most punishing financial constraints in regulated cannabis. Because cannabis remained a Schedule I substance, operators could not deduct ordinary business expenses - payroll, rent, utilities, marketing - the way any other retailer would. The result was a tax bill calculated against gross revenue less cost of goods, not against actual profit. A dispensary running thin margins, as most do given state excise taxes, local fees, and intense wholesale pricing pressure, could find itself owing more in federal taxes than it earned in net income.
That calculus changes for qualifying state-licensed medical operators under Schedule III. The deduction disallowance tied to Schedule I status no longer applies. Operators who have structured their businesses around medical licenses - or who maintain a licensed medical program alongside adult-use operations - can now expense standard business costs against federal taxable income. For a well-run medical dispensary or vertically integrated operator, that shift could materially improve cash flow. Better cash flow means more stable deposit relationships, stronger balance sheets, and improved credit profiles. Those aren't abstract metrics; they're exactly what banks evaluate when deciding whether to maintain or expand a cannabis banking relationship.
Safe Harbor CEO Terry Mendez put it plainly: "Stronger operators typically translate into more stable deposits, improved credit profiles, and more durable banking relationships." That's not a stretch. Account churn driven by operator financial distress has been a persistent challenge across cannabis banking programs. Anything that reduces business failure rates in the medical segment has a downstream effect on deposit volume and loan performance.
A Narrow Order With Specific Carve-Outs - Operators Need to Read This Carefully
Here's the catch: the order is not a broad federal legalization of cannabis. It applies to two specific categories - FDA-approved drug products containing marijuana, and marijuana subject to a qualifying state medical marijuana license. Adult-use and recreational cannabis remains Schedule I. That distinction matters enormously for multi-state operators and any licensed business running both medical and adult-use programs under the same corporate structure.
Operators holding dual licenses - medical and adult-use - cannot simply apply 280E relief across their entire operation. They will need to segregate books, allocate costs between qualifying and non-qualifying activities, and document intercompany arrangements with enough precision to withstand federal scrutiny. That is not a simple accounting exercise. It requires clean cost-center separation, potentially restructured entity arrangements, and compliance documentation that can demonstrate which revenue streams, employees, and facilities fall under the medical license structure. Any operator who conflates the two - or applies 280E relief too broadly - is creating federal tax exposure.
The order also establishes an expedited DEA registration pathway for qualifying state-licensed medical manufacturers, distributors, and dispensers, with a 60-day processing window for applications submitted within the first six months after publication. State-licensed medical operators may continue operating while applications are pending. That's a practical accommodation - but it adds another compliance layer. Operators will need to assess whether and when to apply, what documentation the DEA will require, and how that federal registration interacts with existing state licensing obligations.
What This Means for Cannabis Banking - and Why BSA Obligations Haven't Moved
Financial institutions serving cannabis-related businesses should not read this order as a relaxation of federal compliance requirements. Bank Secrecy Act obligations remain intact. FinCEN guidance on cannabis banking - including suspicious activity report and currency transaction report requirements, enhanced due diligence expectations, and the layered monitoring framework that most cannabis banking programs operate under - has not changed. Schedule III status for medical cannabis does not alter those obligations.
What does shift is the risk calculus around operator creditworthiness and deposit stability. Banks and credit unions that have been monitoring the space but declining to enter because of operator financial fragility now face a somewhat different picture - at least in the medical segment. As the federal risk profile adjusts, financial institutions that previously viewed cannabis banking as too uncertain may begin exploring participation. Every institution that enters the space needs compliance infrastructure to do so profitably and within regulatory parameters.
Safe Harbor's core value proposition sits precisely there. The company has processed more than $29 billion in cannabis-related deposits over roughly a decade, operating a fully managed compliance, monitoring, and reporting platform that allows banks and credit unions to run cannabis banking programs without building that infrastructure internally. The complexity this order introduces - particularly the medical/adult-use segregation challenge - is the kind of problem a managed services platform is well positioned to address. In practice, though, operators and their banking partners will need detailed guidance before the April 2026 effective date, and that preparation window is not as long as it might appear.
The Broader Rescheduling Proceeding and What Comes Next
The DOJ has announced an expedited administrative hearing beginning June 29, 2026, to consider the proposed rescheduling of all marijuana - including adult-use - from Schedule I to Schedule III. The hearing is expected to conclude by July 15. That compressed timeline suggests the current administration intends to move the broader rescheduling question aggressively. The outcome will determine whether adult-use operators receive comparable 280E relief and whether the federal risk profile of cannabis banking shifts more comprehensively.
A durable resolution, as Mendez noted, ultimately requires passage of the SAFER Banking Act, which would provide explicit federal authorization for financial institutions to serve cannabis businesses without fear of federal enforcement. Rescheduling alone doesn't deliver that protection. It improves the economics and reduces certain risks, but it doesn't create a clear statutory safe harbor for banks. That gap matters, and it's why the compliance infrastructure built for cannabis banking remains essential regardless of where the scheduling debate lands.
For now, medical cannabis operators have a clear action item: assess their license structure, begin separating financial records between qualifying and non-qualifying activities, and consult with tax counsel before April 2026. The 280E relief is real - but only for those who can document their qualification for it.
