Criterion 4: Applicable law

Drug law and professional obligations depend on the substance, activity, and jurisdiction. This chapter explains how to distinguish those authorities and apply them to a proposed practice.

Learning Objectives

By the end of this module, the trainee will be able to:

• Distinguish the three tiers of authority that govern practice, federal law, state and local law, and agency or program policy, and explain how they can conflict and which controls in a given situation.
• State the current federal status of the classic psychedelics under the Controlled Substances Act, and explain what Schedule I does and does not permit.
• Describe the two operational state frameworks, Oregon and Colorado, at the level of what each licenses and how they differ, and situate other emerging state models against them.
• Explain the difference between decriminalization, legalization, a regulated-access program, and a religious exemption, and place a given jurisdiction correctly among them.
• Identify the professional-ethics obligations that operate independently of drug law, including confidentiality, informed consent, boundaries, and mandated reporting.
• Embed compliance into program design rather than treating it as an afterthought, and name the operational elements this requires.
• Reason through a legal or ethical dilemma in which a client request, a program policy, and the law point in different directions, and document the reasoning.
• Recognize the limits of a facilitator's competence in legal matters and know when to consult a licensed attorney.

Key Terms

Controlled Substances Act (CSA). The 1970 federal statute (21 U.S.C. 801 et seq.) that classifies drugs into five schedules and governs their manufacture, possession, and distribution nationwide. It is the controlling federal framework for psychedelics.

Schedule I. The most restrictive CSA schedule, defined by three findings: high potential for abuse, no currently accepted medical use in treatment in the United States, and a lack of accepted safety for use under medical supervision (21 U.S.C. 812). The classic psychedelics are Schedule I. Schedule I substances cannot be prescribed and are generally limited to federally approved research.

Decriminalization. A change that reduces or removes criminal penalties for an act, most often personal possession, while the substance remains illegal. It is not the same as legalization and it creates no regulated supply or licensed practice.

Legalization. A change that makes a previously illegal act lawful under the law of a given jurisdiction. Legalization at the state level does not remove federal illegality.

Regulated-access program. A state framework that licenses supervised access to a substance under defined conditions, for example Oregon's psilocybin services and Colorado's natural medicine services. Access is lawful under state law only within the program's rules and remains federally prohibited.

Religious exemption. A legal carve-out, most often under the federal Religious Freedom Restoration Act (RFRA), permitting sacramental use of an otherwise-controlled substance by a specific religious organization, established case by case (for example, the UDV and ayahuasca).

Agency or program policy. The internal rules of the organization a facilitator works within, governing confidentiality, documentation, consent, boundaries, and crisis response. These bind the facilitator independently of, and often more strictly than, the law.

Informed consent. The ethical and legal process of ensuring a client understands the nature, risks, benefits, and alternatives of what is offered, and agrees voluntarily. In psychedelic work it carries specific challenges addressed in the ethics literature (Lee, Rosenbaum, & Buchman, 2024).

Scope of practice. The set of activities a practitioner is trained, competent, and authorized to perform. In this criterion it includes recognizing the limits of one's legal competence and referring legal questions to a licensed attorney.

Core Teaching

Why this criterion exists

Screening determines who is appropriate, coexisting-conditions review routes what a facilitator cannot manage, and eligibility integrates both into an admission decision. Criterion 4 sets the outer boundary inside which all of that happens. A facilitator can screen impeccably and still expose a client, themselves, and the field to serious harm by operating outside the law or outside the ethical obligations of the role. This criterion is the one where the consequences of error are legal and structural rather than pharmacological, and where the facilitator's competence includes knowing the edge of their own legal knowledge.

The subject matter divides into two parts that behave differently. Drug law, the statutory question of what is permitted where, is unstable and jurisdiction-specific, and it is changing month to month. Professional ethics, the obligations of confidentiality, consent, boundaries, and reporting, is comparatively stable and travels across jurisdictions. A competent facilitator treats the first as something to re-verify constantly and the second as a durable standard to internalize. The module is built around that distinction.

The three tiers of authority

Practice is governed by three tiers of authority that can align or conflict: federal law, state and local law, and the policy of the agency or program a facilitator works within. Understanding how they interact is the foundation of everything else in this criterion, because a facilitator who tracks only one tier will eventually be blindsided by another.

Federal law is the widest net. Under the Controlled Substances Act, the classic serotonergic psychedelics, psilocybin, LSD, DMT, mescaline, along with MDMA and ibogaine, are Schedule I, meaning that as a matter of federal law they cannot be prescribed and are limited to federally approved research (21 U.S.C. 812). This status does not lift when a state creates a program. State and local law operates within the space federal enforcement leaves. A state can decriminalize possession, or build a licensed regulated-access program, and a city can deprioritize enforcement, but none of these changes the federal illegality that continues to sit above them. Agency or program policy is the narrowest and often the strictest tier. A program can, and routinely should, impose requirements more demanding than the law requires, and a facilitator is bound by those internal rules as a condition of the role.

The practical rule when the tiers conflict is to follow the most restrictive applicable authority for the act in question, and to recognize that acting lawfully under state law does not confer protection from federal law. This is the same posture that has governed state-legal cannabis for years, and it is the honest way to describe the position of anyone practicing in a state program. A facilitator who does not understand that they remain in federal violation, even while fully compliant with Oregon or Colorado law, does not understand their own legal exposure.

The current federal picture, as a dated snapshot

The April 18, 2026 executive order, Accelerating Medical Treatments for Serious Mental Illness, directs federal agencies to accelerate specified research and access pathways for investigational psychedelic treatments. The order does not itself authorize general possession or practice outside applicable law. Federal scheduling, FDA authorization, and state permission are separate questions and must each be established for the proposed activity.

The reason to teach this carefully rather than confidently is that the gap between a research or access order and actual legalization is exactly where people are misled. An acceleration of FDA review changes the timeline for a possible future approval. It does not make a Schedule I substance lawful to possess or administer today outside an approved setting. A facilitator who reads a headline about federal movement and infers that the ground has shifted underneath their practice has made a category error with legal consequences.

The two operational state frameworks

Two states have moved past decriminalization into licensed regulated access, and they are the concrete models a facilitator should understand in detail, both because they are where regulated practice actually occurs and because they illustrate the design choices such programs face.

Oregon was first. Measure 109, passed in 2020 and codified as ORS 475A, directed the Oregon Health Authority to license and regulate psilocybin products and psilocybin services, and the program began licensing in January 2023 with service centers opening that summer. The Oregon model has defining features worth naming: it is an adult-use access model rather than a medical one, so a client twenty-one or older needs no diagnosis or physician referral; psilocybin must be consumed on-site at a licensed service center under a licensed facilitator; and the facilitator license is a single tier that does not require a clinical degree, requiring instead a state-approved training, an examination, and a background check. A separate Oregon measure from the same election, Measure 110, decriminalized personal possession of many drugs and was substantially rolled back by the legislature in 2024, which is a useful reminder that these reforms can move backward as well as forward.

Colorado followed with Proposition 122, the Natural Medicine Health Act of 2022, codified at C.R.S. 12-170. It has two prongs that a facilitator must not conflate. The first decriminalizes personal cultivation, possession, and sharing of several natural psychedelics, psilocybin, psilocin, DMT, ibogaine, and mescaline excluding peyote, for adults twenty-one and over. The second creates a regulated-access program of preparation, administration, and integration sessions provided at a licensed healing center or a permitted healthcare facility under a licensed facilitator. Colorado differs from Oregon in several deliberate ways: it decriminalized a broader set of substances, it allows administration outside a licensed center in some permitted locations, it uses a tiered facilitator licensing structure with different paths for those with and without clinical degrees, and its program was structured to allow additional substances beyond psilocybin to be considered for the regulated program beginning June 1, 2026. Other states are developing their own models, and New Mexico enacted a Medical Psilocybin Act in 2025 through the legislature rather than a ballot initiative, but Oregon and Colorado are the two frameworks with operating licensed practice as of this writing.

Decriminalization, legalization, regulated access, and exemption

Much of the confusion in this area comes from treating four distinct legal states as if they were one. They are not, and a facilitator who blurs them will misdescribe their own legal position and mislead clients. Decriminalization reduces or removes criminal penalties for an act, usually personal possession, while the substance stays illegal and no lawful supply or licensed practice is created. Legalization makes an act lawful under a jurisdiction's own law, though at the state level it leaves federal illegality intact. A regulated-access program licenses supervised access under defined conditions and is lawful under state law only inside the program's rules. A religious exemption is a narrow, case-by-case carve-out, most often under the federal Religious Freedom Restoration Act, that permits sacramental use by a specific organization; the established examples involve ayahuasca and a small number of recognized churches, and the case law is applied individually rather than as a general permission. A city deprioritization resolution, common across dozens of jurisdictions, is weaker still: it directs local enforcement priorities and typically carries no binding legal protection, and state and federal law continue to apply.

Professional ethics: the durable half

Drug law tells a facilitator what substance activity is permitted. It does not tell them how to treat a client, and that second body of obligation is where much of the real ethical weight of this criterion sits. These duties derive from professional codes, from health-information law, and from the general standards of care in the helping professions, and they apply regardless of the legal status of the medicine involved.

Confidentiality is foundational. In the United States, clinical settings are governed by health-information law, and all settings are governed by the general professional duty to protect what a client discloses. Informed consent carries specific weight in psychedelic work, where a person is agreeing to enter a strongly altered and suggestible state, and the ethics literature has begun to map the particular challenges this raises, including the heightened vulnerability and the difficulty of consenting in advance to experiences that cannot be fully anticipated (Lee, Rosenbaum, & Buchman, 2024). Boundaries deserve specific attention because the altered state and the intimacy of the work create unusual risk. A person under a psychedelic is highly suggestible and often physically and emotionally open, which places a heavy obligation on the facilitator to avoid any exploitation, dual relationship, or boundary violation, and the field's own safety-and-ethics commentary has flagged this as a central concern (Anderson, Danforth, & Grob, 2020). Mandated reporting obligations, for suspected abuse of a child or vulnerable adult and for certain imminent-harm situations, operate here as they do throughout the helping professions and are not waived by the informality of a retreat setting.

The stability of these obligations is what makes them teachable as standards rather than as snapshots. A facilitator who internalizes confidentiality, rigorous consent, firm boundaries, and reporting duties carries a framework that holds across jurisdictions and survives changes in drug law. This is also the content that connects Criterion 4 forward to the intake and consent work of Core Function II, where these principles become concrete documents and procedures.

Embedding compliance into program design

Compliance fails most often not through open defiance but through omission, when legal and ethical requirements are treated as an afterthought rather than built into how a program operates. The corrective is to design the operational structure so that the compliant path is the default path. Concretely, this means written informed-consent procedures that are actually used, secure storage of records consistent with confidentiality obligations, documented protocols for medical emergencies and crisis response, clear allocation of staff responsibilities, defined referral pathways, and a schedule of review that keeps the program current as law changes. In a research setting the analogue is the Institutional Review Board and the approved protocol, deviation from which can invalidate a study; the discipline a program should import from that world is that the safeguards are structural and non-optional rather than left to individual discretion in the moment.

Reasoning through legal and ethical dilemmas

The hardest situations in this criterion are the ones where the tiers of authority and the client's wishes do not point the same way. A client may request something that is legal but against program policy, or permitted by program policy but ethically questionable, or desired by the client but unlawful. There is a usable order of operations. First, identify which tier or obligation each option implicates, since a request can be simultaneously a legal question, a policy question, and an ethics question. Second, apply the most restrictive applicable constraint, because the floor is set by whichever authority forbids the act. Third, where the remaining question is genuinely legal rather than ethical, recognize the limit of a facilitator's competence and consult a licensed attorney rather than improvising an interpretation of a statute. Fourth, document the reasoning and the decision, both for accountability and because a written rationale disciplines the judgment. A facilitator is not expected to be a lawyer, and the competent move when a real legal question arises is to route it to one, exactly as the coexisting-conditions review routes a medical question to a physician.

Scope, humility, and the field

This criterion, like the three before it, rests on humility about the limits of one's own competence. No facilitator holds current mastery of federal, state, and local law across every jurisdiction and substance, and pretending otherwise is itself a risk. The competent posture is to know the landscape well enough to recognize when a question exceeds one's knowledge, to maintain a relationship with legal counsel the way one maintains referral relationships with a prescriber and a cardiologist, and to keep re-verifying a body of law that does not hold still. Because the field is young, each facilitator's compliance also carries weight beyond their own practice, since programs that operate within the law and the ethics of the role shape whether the broader field is treated as legitimate. That is a reason for care, though not the primary one; the primary reason is the same as in every prior criterion, which is the protection of the person in front of you.

Clinical and Decision Tools

Tool 1. The three tiers of authority

For any activity in question, read down all three tiers. The most restrictive applicable authority controls. Acting lawfully under one tier does not confer protection under another.

Tool 2. Four legal states, distinguished

Place any jurisdiction correctly among these four. Confusing them is the most common way a facilitator misdescribes their own legal position.

Tool 3. Oregon and Colorado at a glance (dated snapshot)

Oregon and Colorado: a comparison of the regulated-access frameworks.

Tool 4. Professional-ethics obligations (jurisdiction-independent)

These duties operate regardless of the legal status of the medicine. Treat them as a durable standard rather than a snapshot.

Tool 5. Dilemma decision order

Use this order when a client request, program policy, and the law do not point the same way.

1. Identify which tier or obligation each option implicates. A single request can be a legal question, a policy question, and an ethics question at once.
2. Apply the most restrictive applicable constraint. The floor is set by whichever authority forbids the act.
3. If the open question is genuinely legal, consult a licensed attorney rather than interpreting a statute yourself.
4. Document the reasoning and the decision, for accountability and to discipline the judgment.

Worked Examples: Reasoning Through Compliance

The following fictional cases illustrate the legal and ethical reasoning developed in this chapter.

Worked Example 1: A client request that state law permits but program policy forbids

Situation: A licensed Oregon service center facilitator is asked by an adult client to conduct the administration session at the client's home rather than at the service center, because the client finds the center clinical and impersonal.

Tier analysis: Federal: psilocybin is Schedule I regardless of location, so federal exposure is unchanged either way and is not the deciding factor here. State: the Oregon framework requires on-site administration at a licensed service center, so home administration is outside the program's rules and would forfeit the state-law lawful status the license provides. Program policy: necessarily at least as strict. The most restrictive applicable constraint, the state on-site requirement, controls.

Decision: Decline the home session. Explain that the on-site requirement is a condition of lawful practice under the state program, not a preference, and that conducting the session elsewhere would place both client and facilitator outside the framework's protection. Explore what about the center feels impersonal and what can be adjusted within the rules. Document the request and the reasoning.

Worked Example 2: A legal question that exceeds the facilitator's competence

Situation: A facilitator operating in a state that has only decriminalized possession, with no regulated-access program, is approached by a group wanting to start a paid retreat, reasoning that because possession is decriminalized, charging for supervised sessions must be permitted.

Tier analysis: The group is conflating decriminalization with legalization. Decriminalization reduces the penalty for personal possession; it creates no lawful commercial or licensed practice, and it leaves federal Schedule I status fully intact. Providing paid supervised sessions is a materially different legal question from personal possession, and it plausibly implicates state distribution law and federal law. This is a genuine legal question, not merely an ethics or policy question.

Decision: Do not proceed on the group's lay interpretation. State plainly that decriminalization of possession does not authorize a paid supervised-session business, and that this is exactly the kind of question that requires a licensed attorney familiar with the specific state's law and federal exposure. Refer the legal question out, the same way a medical question is referred to a physician. Document the referral.

Case Vignettes

Work each vignette through the three tiers and the relevant ethics obligations, reach a decision, and write one paragraph defending it. Where the decisive question is legal, say so and name the referral. Fillable response sheets are in the companion worksheet PDF.

Vignette A

A facilitator practicing lawfully in a state regulated-access program reads a news report that a federal executive order has directed agencies to accelerate psychedelic research. A colleague concludes that federal law has effectively changed and that they can now ship product across state lines to a client who cannot travel.

Guided questions: What is the difference between an acceleration order and a change in scheduling? What is the federal status of the substance after such an order? Which specific act in this scenario is the clear federal violation, regardless of the order?

Vignette B

During an integration session, a client discloses ongoing physical abuse of their young child. The program operates in a jurisdiction with informal, retreat-style structure and no formal clinical licensure.

Guided questions: Does the informal setting change the mandated-reporting obligation? Which obligation is in tension with confidentiality here, and how is that tension resolved? What does the facilitator do, and in what order?

Vignette C

A charismatic senior facilitator at a retreat has begun a romantic relationship with a client who is midway through a series of psilocybin sessions. The facilitator argues the client is a consenting adult and the relationship is separate from the work.

Guided questions: Why does the altered, suggestible state raise the ethical stakes beyond ordinary adult consent? Which professional obligation is being violated, independent of any drug law? What is the appropriate response, and who else needs to be involved?

Vignette D

A program in a decriminalized-but-not-legalized city markets itself publicly as offering legal psychedelic therapy, on the reasoning that the city has deprioritized enforcement.

Guided questions: What is the difference between a deprioritization resolution and legalization? Is the marketing claim accurate? What are the risks of this misrepresentation to clients and to the program, and how should the claim be corrected?

Vignette E

A facilitator wants to serve a client who belongs to a religious tradition that uses ayahuasca, and reasons that because some churches have RFRA exemptions for ayahuasca, this client's use is therefore legally protected.

Guided questions: How does a RFRA religious exemption actually operate, and to whom does it apply? Does an exemption granted to one organization extend to an individual outside it? What is the correct way to handle the legal uncertainty here?

Role-Play and Practice Scripts

Practice in pairs, then switch. The aim is to communicate a legal or ethical boundary clearly and without either false reassurance or defensiveness.

Correcting a client's misunderstanding of legal status

“I want to be precise with you about the legal situation, because it matters for your safety and mine. What this state allows is a specific, licensed program with specific rules, and we work inside those rules. It is not the same as this being legal everywhere, and it is still prohibited under federal law. I would rather tell you that plainly than let a misunderstanding put you at risk.”

Declining a request that falls outside the rules

“I hear why you are asking, and I am not able to do that. It falls outside what the program permits, and stepping outside those rules would remove the protection the framework gives both of us. Let me tell you what we can do within the rules, and let us solve the underlying need that way.”

Referring a genuine legal question to counsel

“That is a real legal question, and I would be doing you a disservice to answer it off the top of my head. I am not a lawyer, and the honest move here is to get an attorney who knows this area to weigh in before anyone acts. I will not guess at a statute.” Practice treating a legal question the way you would treat a medical one, as something to route to the right expert.

Naming an ethics violation to a colleague

“I need to raise something directly. A romantic relationship with a client who is in the middle of this work is a boundary violation, regardless of the client’s consent, because the state we put people in makes them especially vulnerable. This is not a gray area, and it has to stop. Here is what needs to happen next.”

Self-Assessment and Reflection

Knowledge check

1. Name the three tiers of authority and state the rule for what to do when they conflict.
2. State the current federal status of the classic psychedelics and explain what Schedule I does and does not permit.
3. Distinguish decriminalization, legalization, a regulated-access program, and a religious exemption, with one consequence of confusing any two.
4. Compare the Oregon and Colorado frameworks on at least three specific features.
5. Name the four jurisdiction-independent professional-ethics obligations and explain why boundaries carry special weight in psychedelic work.
6. Explain why an executive order accelerating research does not change what a facilitator may lawfully do today.
7. Describe the correct order of operations when a client request, program policy, and the law point in different directions.

Reflection

1. Do you currently have a relationship with a licensed attorney familiar with the law where you practice? If not, that gap is a liability equivalent to lacking a medical referral. What is your plan to close it?
2. Where are you most likely to let a hopeful reading of a legal headline outrun the actual law? What habit would keep you honest?
3. Which of the four ethics obligations is hardest to hold in the informal settings you work in, and what structure would make it non-optional?

Summary

Criterion 4 sets the legal and ethical boundary inside which all screening happens. Its subject matter divides into an unstable half and a durable half. The unstable half is drug law, governed by three tiers of authority, federal, state and local, and agency policy, that can conflict, with the most restrictive applicable authority controlling and state-legal practice never lifting federal Schedule I status. As of mid-2026 the classic psychedelics remain Schedule I federally, Oregon and Colorado operate the two licensed regulated-access frameworks, and recent federal action has accelerated research without legalizing anything, all of which must be re-verified against primary sources because it changes quickly. The durable half is professional ethics, confidentiality, informed consent, boundaries, and mandated reporting, which hold across jurisdictions and survive changes in drug law, and which carry special weight because the altered state deepens client vulnerability. Compliance works when it is built into program design rather than added as an afterthought, and when a facilitator recognizes the limit of their legal competence and routes genuine legal questions to an attorney, exactly as clinical questions are routed to a physician. Held with that humility, this criterion protects the client, the facilitator, and the standing of the field, and it carries directly into the intake and consent work of Core Function II.

References

Johnson, M. W., Richards, W. A., & Griffiths, R. R. (2008). Human hallucinogen research: Guidelines for safety. Journal of Psychopharmacology, 22(6), 603–620. https://doi.org/10.1177/0269881108093587

Anderson, B. T., Danforth, A. L., & Grob, C. S. (2020). Psychedelic medicine: Safety and ethical concerns. The Lancet Psychiatry, 7(10), 829–830. https://doi.org/10.1016/S2215-0366(20)30146-2

Lee, A., Rosenbaum, D., & Buchman, D. Z. (2024). Informed consent to psychedelic-assisted psychotherapy: Ethical considerations. The Canadian Journal of Psychiatry, 69(5), 309–313. https://doi.org/10.1177/07067437231225937

Phelps, J. (2017). Developing guidelines and competencies for the training of psychedelic therapists. Journal of Humanistic Psychology, 57(5), 450–487. https://doi.org/10.1177/0022167817711304

Controlled Substances Act, 21 U.S.C. §§ 801–971; schedules at 21 U.S.C. § 812 and 21 C.F.R. § 1308.11. https://www.law.cornell.edu/cfr/text/21/1308.11

Oregon Psilocybin Services Act, Measure 109 (2020), codified at ORS Chapter 475A. https://www.oregonlegislature.gov/bills_laws/ors/ors475A.html

Colorado Natural Medicine Health Act, Proposition 122 (2022), as amended by Senate Bill 23-290 (2023); C.R.S. § 12-170-101 et seq. https://leg.colorado.gov/bills/sb23-290

New Mexico Medical Psilocybin Act, S.B. 219, 2025 N.M. Laws ch. 73. https://www.nmlegis.gov/Legislation/Legislation?Chamber=S&LegNo=219&LegType=B&year=25

Executive Office of the President. (2026, April 18). Accelerating medical treatments for serious mental illness. https://www.whitehouse.gov/presidential-actions/2026/04/accelerating-medical-treatments-for-serious-mental-illness/