Navigating the New Frontier: Controlled Substance Prescribing via Telehealth in 2025-2026

2026-06-12

The regulatory landscape for controlled substance prescribing via telehealth is undergoing a monumental transformation, with significant changes from the DEA and persistent state-level variations. This deep dive unpacks the latest federal mandates, the enduring implications of the Ryan Haight Act, and the critical state-specific nuances that healthcare providers must master to ensure compliance and mitigate risk in a rapidly evolving environment.

The intersection of telehealth and controlled substance prescribing represents one of healthcare's most complex and scrutinized regulatory domains. As we transition into 2025 and 2026, the temporary flexibilities of the Public Health Emergency (PHE) have largely receded, replaced by a patchwork of new federal mandates and ever-present state-specific requirements. For telehealth platforms, multi-state practices, medspas, and even traditional brick-and-mortar providers expanding their digital footprint, understanding and meticulously adhering to these evolving rules is not just a best practice—it's a non-negotiable imperative for continued operation and risk mitigation. TrueEval is committed to equipping you with the definitive insights needed to navigate this intricate regulatory environment.

> For more on this topic, see our analysis: [The Controlled Substance Conundrum: Navigating Telehealth Prescribing in the Post-PHE Era (2025-2026)](/blog/controlled-substance-telehealth-prescribing-2025-2026).

The Shifting Sands of DEA Regulation: Beyond the DATA-Waiver

The Drug Enforcement Administration (DEA) has recently enacted a pivotal final rule, significantly reshaping the landscape for controlled substance prescribing. This rule, stemming from the SUPPORT Act of 2018 and the Restoring Hope for Mental Health and Well-Being Act of 2022, carries two monumental implications:

1. Elimination of the DATA-Waiver Program: For years, practitioners needed a special DATA-waiver (often referred to as an 'X-waiver') to prescribe buprenorphine for opioid use disorder (OUD). This administrative barrier has been removed. While intended to expand access to Medication-Assisted Treatment (MAT), this change does not diminish the need for clinical competency or compliance with other prescribing standards. Providers must still understand the nuances of MAT, patient selection, and ongoing monitoring.

2. Universal One-Time Training Requirement for Controlled Substance Prescribers: Crucially, the DEA has implemented a **new, mandatory one-time training requirement for *all* practitioners who prescribe controlled substances**. This applies to virtually every physician, nurse practitioner, and physician assistant holding a DEA registration. The training must cover best practices for treating and managing patients with pain or OUD, or other substance use disorders. It requires eight hours of training and applies to registration renewal or initial registration after June 27, 2023. While specific implementation details continue to evolve, the message is clear: the DEA is raising the bar for foundational knowledge across the entire prescribing community.

Action Item: All controlled substance prescribers within your organization must verify their compliance with this new training mandate. Non-compliance could lead to severe penalties, including DEA registration revocation and disciplinary action from state licensing boards.

The Ryan Haight Act and Its Enduring Telehealth Conundrum

Beyond the recent DEA rule, the foundational federal law governing controlled substances prescribed via the internet remains the Ryan Haight Online Pharmacy Consumer Protection Act of 2008. This Act generally requires an in-person medical evaluation before a controlled substance can be prescribed via the internet. During the COVID-19 PHE, the DEA issued waivers that temporarily suspended this in-person requirement, allowing for much broader telehealth prescribing of controlled substances, even Schedule IIs.

However, the PHE waivers expired on May 11, 2023. While the DEA subsequently extended some flexibilities until November 11, 2023, and then again, the long-term framework remains a subject of intense debate and pending rulemaking. As of late 2024, the situation is as follows:

Initial Proposed Rules (February/May 2023): The DEA initially proposed two rules that would have significantly curtailed telehealth prescribing of controlled substances without an initial in-person exam, with limited exceptions. These proposals met substantial industry pushback.
Temporary Extensions: Recognizing the impact on patient access, the DEA extended the PHE flexibilities, allowing practitioners who established a legitimate practitioner-patient relationship via telehealth *before* November 11, 2023, to continue prescribing controlled substances via telehealth *without an in-person exam* for a full year, until November 11, 2024. For relationships established *after* November 11, 2023, the original Ryan Haight Act requirements generally apply, meaning an in-person visit is needed for *initial* controlled substance prescriptions.
Future Uncertainty: The DEA is still deliberating a permanent framework. The ultimate rule is expected to strike a balance between expanding access and preventing diversion. Healthcare organizations must closely monitor the DEA's actions, as any final rule will dictate the scope of permissible controlled substance telehealth prescribing well into 2025 and beyond. The most likely outcome involves a hybrid approach, potentially with specific exceptions for certain conditions or substances, or a limited initial telehealth prescription followed by an in-person visit.

Action Item: Assume the general Ryan Haight Act requirements (in-person visit for initial controlled substance prescription) apply unless specific, clear, and *permanent* DEA exceptions are promulgated. Do not rely on temporary extensions for future planning. Document the date patient relationships were established if relying on any past PHE flexibility.

State-Specific Variances: The Labyrinth of Requirements

Even with federal DEA rules, the actual practice of prescribing controlled substances via telehealth is heavily influenced by state medical board and pharmacy board regulations. These state laws often impose additional, stricter, or simply different requirements than federal mandates. Ignoring state variations is a primary cause of non-compliance and enforcement action.

Key areas where state laws diverge include:

Permissibility of Telehealth for Controlled Substances: Some states may outright prohibit the prescribing of certain Schedule II substances (e.g., stimulants, opioids) via telehealth without an initial in-person visit, regardless of federal guidance. Others may be more permissive for lower schedules or specific conditions (e.g., MAT).
Definition of a "Good Faith Exam": What constitutes a clinically appropriate, medically necessary evaluation for a telehealth prescription of a controlled substance can vary. States often require specific elements like identity verification, review of medical history, physical exam (even if remote), and assessment of prior controlled substance use.
Prescription Drug Monitoring Program (PDMP) Requirements: While federal law encourages PDMP use, state laws dictate *when* and *how often* prescribers must check PDMPs (e.g., before *every* controlled substance prescription, annually, or upon initiation of treatment). Many states now mandate PDMP checks for *all* controlled substances, regardless of schedule.
Telehealth Modality: Some states may distinguish between synchronous (live audio-visual) and asynchronous (store-and-forward) telehealth for controlled substance prescribing, typically preferring synchronous for initial evaluations.
Special Considerations for MAT: While the DATA-waiver is gone, states may still have specific regulations for buprenorphine prescribing, including patient limits, counseling requirements, or mandatory reporting.
Interstate Practice: If a practitioner is licensed in multiple states and prescribing to a patient located in a different state from the practitioner, *both* the originating site and distant site state laws must be considered. This adds immense complexity.

Examples of State Nuance:

California: Generally permits telehealth for controlled substances if a good faith examination is conducted, but often with stringent requirements for documentation and PDMP checks. California's Medical Board scrutinizes opioid and stimulant prescribing closely.
Texas: Historically more restrictive, Texas has loosened some telehealth restrictions post-PHE, but still emphasizes a strong practitioner-patient relationship and often requires an in-person visit for initial Schedule II prescriptions in certain contexts.
Florida: Florida's telehealth laws have evolved, allowing for prescribing of controlled substances (excluding Schedule I and II by controlled substance prescribers located outside the state for an in-state patient, with some exceptions), but with strict requirements regarding patient evaluation and PDMP utilization.

Action Item: For every state in which your practice operates or where your patients reside, conduct a thorough review of the medical board, pharmacy board, and relevant telehealth statutes and administrative rules. Do not assume uniformity.

Operationalizing Compliance: A Checklist for Practices

Robust compliance in controlled substance telehealth prescribing requires a multi-faceted approach. Here's a practical checklist for your organization:

1. Licensure and DEA Registration: Ensure all prescribing practitioners hold active, unencumbered licenses in the state where the patient is located *at the time of service*. Verify active DEA registrations, linked to the practitioner's primary practice location, and ensure all necessary state-level controlled substance registrations are current.
2. DEA Training Mandate: Confirm *all* controlled substance prescribers have completed the new, mandatory 8-hour DEA training. Maintain documentation of completion for auditing purposes.
3. Ryan Haight Act Compliance Strategy: Develop a clear internal policy for how your practice will comply with the Ryan Haight Act. This should include:
4. Good Faith Exam Protocols: Implement rigorous protocols for patient evaluation, even via telehealth. This must include:
5. PDMP Integration and Usage: Implement a system that requires prescribers to check the relevant state PDMP *before* prescribing any controlled substance and at regular intervals as required by state law. Document these checks meticulously in the patient's chart.
6. Electronic Prescribing for Controlled Substances (EPCS): Ensure all controlled substance prescriptions are issued electronically via an EPCS-certified system. This is federally mandated for Schedule II-V substances covered under Medicare Part D and by many states for all controlled substances.
7. Documentation Standards: Maintain detailed, contemporaneous medical records that clearly justify the medical necessity of the controlled substance, document all assessments, discussions with the patient, PDMP checks, and any treatment plan modifications. Specific documentation requirements for telehealth encounters often exceed those for in-person visits.
8. Referral and Co-management Protocols: Establish clear pathways for referring patients to in-person care, specialty care (e.g., pain management, addiction specialists), or mental health services when appropriate or required.
9. Patient Education and Monitoring: Provide clear education to patients regarding the risks and responsibilities associated with controlled substance use. Implement protocols for ongoing monitoring, including follow-up visits, urine drug screens, and pill counts, as clinically indicated and per state regulations.
10. Internal Audits and Training: Conduct regular internal audits of controlled substance prescribing practices via telehealth. Provide ongoing training to all relevant staff on federal and state regulatory updates, internal policies, and best clinical practices.

Looking Ahead: The Future of Controlled Substance Telehealth

The regulatory environment for controlled substance prescribing via telehealth will continue to evolve rapidly. The DEA's final rule regarding the Ryan Haight Act's telehealth provisions will be a landmark moment, but it will not be the end of the story. Expect continued state-level fine-tuning, potentially new technologies for remote monitoring, and increased enforcement scrutiny as regulators balance patient access against the imperative to combat diversion and misuse.

Telehealth operators must prioritize proactive compliance. This means not just reacting to new rules but anticipating trends, investing in robust compliance infrastructure, and fostering a culture of adherence. The Department of Justice's consistent focus on kickbacks and fraud, as highlighted by recent enforcement actions (e.g., the intelligence community contractor case or the Illinois chiropractor sentencing), underscores that *any* activity involving government funds or insurance reimbursement is under intense scrutiny. Practices that fail to demonstrate rigorous compliance, especially in high-risk areas like controlled substances, expose themselves to severe legal, financial, and reputational consequences.

TrueEval stands as your essential partner in navigating these complex waters. By embedding comprehensive, up-to-date compliance frameworks, healthcare businesses can not only mitigate risk but also confidently expand access to care in a responsible and sustainable manner. The future of healthcare is digital, and compliant controlled substance prescribing via telehealth is a critical component of that future.