The Controlled Substance Registration Net is Expanding: Two Jurisdictions in 2026

In 2026, two jurisdictions have moved to require controlled substance registration from out-of-state entities distributing into their territory. The two actions are not identical. Puerto Rico is enforceable today, New Jersey is in development with no announced timeline. But the direction is the same, and it points to a never-increasing regulatory landscape.

Puerto Rico: Live and Mandatory

In written correspondence dated April 30 and May 5, 2026, the Puerto Rico Department of Health, Division of Controlled Substances confirmed to us that virtual manufacturers selling controlled substances in Puerto Rico are now required to obtain a Controlled Substance Registration for Representative Agent. The requirement applies uniformly across Schedules II through V.

This is a reversal of prior practice. Previously, the Division did not offer a controlled substance registration pathway to entities classified as a Virtual Manufacturer. A virtual manufacturer that wanted to sell controlled substances in Puerto Rico had only one option, which was to reclassify as something other than a virtual manufacturer in their home state. That was usually a poor fit for the actual business model, so most virtual manufacturers simply stayed out of the market or operated non-compliantly.

This filing, as most in Puerto Rico do, runs through a Representative Agent. The Controlled Substance Registration for Representative Agent can only be obtained through a Representative Agent operating on the island and licensed with the Puerto Rico Department of Health. A virtual manufacturer cannot file directly. The Division has also explicitly stated that it "will be requesting documentary information from the CMO" (Contract Manufacturer Organization) that produces the product on the VM's behalf. Quality agreements, the CMO's own registrations, and the oversight structure tying the two entities together should be ready to provide.

Any virtual manufacturer currently distributing controlled substances in Puerto Rico without this registration is out of compliance as of the agency's confirmation.

New Jersey: Announced and in Development

In an email to LighthouseAI earlier this year, The New Jersey Division of Consumer Affairs Drug Control Unit has announced that it is developing an out-of-state CDS (Controlled Dangerous Substances) application that will be made available on its website though the Division has not provided a timeline. Once released, out-of-state entities distributing CDS into New Jersey will be required to apply.

The scope of "out-of-state entities distributing CDS into New Jersey" is, on its face, broad. It is not limited to virtual manufacturers the way Puerto Rico's action is. If read at face value, it captures wholesale distributors, 3PLs, manufacturers without a New Jersey footprint, and any other entity moving controlled substances into the state from outside. Whether the Division ultimately scopes the application that broadly or carves out exemptions will not be clear until the application is released.

Why the Two Moves Matter Together

Either action alone is a single-jurisdiction story. Together, they describe a direction. State and territorial controlled substance regulators are moving to require their own registration from out-of-state entities, regardless of whether those entities have a physical footprint inside the jurisdiction. The DEA registration is not enough. The home-state license is not enough. The destination jurisdiction wants its own line of sight, its own filing, and in Puerto Rico's case, its own documentation about the upstream manufacturing relationship.

This is consistent with the broader pattern we have been tracking for years: state and territorial regulators reasserting their role in controlled substance oversight rather than deferring to federal frameworks. The legal authority has always been there. What is changing is the operational willingness to use it, and the speed at which other jurisdictions follow once one moves.

LighthouseAI provides Rapid Assessments and licensing services to companies distributing controlled substances across state and territorial lines, including Representative Agent service in Puerto Rico (where we have held licensure since 2018) and monitoring of jurisdictions like New Jersey where registration requirements are under development. If you are working out your licensing footprint for CS distribution, our team can help you assess applicability and stay ahead of new requirements as they go live.

What Operators Should Do Now

Three actions are urgent.

First, inventory the jurisdictions you currently distribute controlled substances into and confirm the licensing requirements for each. The assumption that DEA plus home-state is sufficient is no longer safe. Treat every destination jurisdiction as a potential standalone licensing obligation.

Second, if you distribute into Puerto Rico, the registration is required today. Identify your Representative Agent on the island and begin the filing. Have your CMO documentation ready.

Third, if you distribute into New Jersey, monitor the Division of Consumer Affairs Drug Control Unit for the release of the out-of-state CDS application. Begin gathering the documentation you would expect such an application to require: corporate information, DEA registration, home-state CS license, facility and product information, and the responsible parties. When the application drops, the prepared operators will file in days. The unprepared will spend weeks getting paperwork in order while continuing to distribute under uncertain compliance status.

A Look at the Future

Two jurisdictions in two weeks is not yet a national pattern. But it is a leading indicator, and the underlying logic, that a state or territory wants its own visibility into who is moving controlled substances into its market, is going to be hard for other regulators to ignore. Expect more jurisdictions to either formalize existing requirements they have under-enforced or create new out-of-state CS registration pathways over the next 12 to 24 months. Expect the documentation requirements to expand, particularly around contract manufacturing relationships and quality oversight. Expect the operators who built their licensing footprint on the assumption of federal sufficiency to spend the next two years catching up.

The net is expanding. Better to file early than to file under a deficiency notice.