Navigating the Perilous Landscape of Telehealth Controlled Substance Prescribing: 2025-2026 Outlook

2026-07-15

The regulatory terrain for prescribing controlled substances via telehealth remains a complex, shifting challenge for healthcare providers. As federal and state waivers expire and new DEA rules emerge, understanding the critical nuances of the Ryan Haight Act, state-specific mandates, and the DEA's aggressive scheduling actions is paramount for compliance in 2025-2026.

The rapid expansion of telehealth during the public health emergency (PHE) undeniably transformed healthcare delivery, particularly in areas like mental health and chronic pain management. Yet, beneath this veneer of innovation lies a deeply complex and often perilous regulatory landscape, especially concerning the prescription of controlled substances. As we advance into 2025 and 2026, healthcare operators, from nascent telehealth startups to established multi-state practices, face a critical imperative: mastering the intricate web of federal and state requirements, including the looming post-PHE federal rules, aggressive DEA enforcement, and the constant evolution of controlled substance classifications. The stakes are higher than ever, demanding not just vigilance, but a proactive and sophisticated approach to compliance.

> For more on this topic, see our analysis: [Navigating the 'Shadow Substances': DEA's Proactive Scheduling and the Critical Imperative for Healthcare Compliance in 2025-2026](/blog/dea-shadow-substances-compliance-2025-2026).

The Federal Foundation: DEA, Ryan Haight, and the PHE's Legacy

At the heart of federal oversight for controlled substance prescribing lies the Controlled Substances Act (CSA), administered by the Drug Enforcement Administration (DEA). A cornerstone principle of the CSA, particularly relevant to remote care, is that a prescription for a controlled substance must be issued for a legitimate medical purpose by a practitioner acting in the usual course of professional practice. This seemingly straightforward dictate becomes profoundly complicated when the practitioner and patient are not in the same physical location.

The Ryan Haight Online Pharmacy Consumer Protection Act of 2008 was enacted to address the proliferation of rogue internet pharmacies. It generally requires an in-person medical evaluation of a patient before a controlled substance can be prescribed via the internet. This provision was a significant barrier to telehealth prescribing of controlled substances. However, the COVID-19 PHE brought a temporary, but transformative, shift.

During the PHE, the DEA issued waivers under 21 U.S.C. § 802(54)(D), allowing DEA-registered practitioners to prescribe controlled medications to patients via telehealth without an initial in-person medical evaluation, provided certain conditions were met. This waiver was extended multiple times, creating a period of unprecedented flexibility. For many practices, this flexibility became the norm, allowing for continuity of care for millions. However, the PHE officially ended on May 11, 2023, initiating a wind-down period for these flexibilities.

Post-PHE Landscape: The Looming In-Person Requirement and Proposed Rules

As the PHE waivers expired, the DEA recognized the need for a more permanent framework for telehealth prescribing of controlled substances. This led to a series of proposed rules, initially released in February and May 2023, outlining potential pathways for prescribing controlled substances via telehealth without an initial in-person exam. These proposals have been met with extensive public comment, reflecting the diverse needs of patients and providers.

Key elements of the DEA's current proposed framework for post-PHE controlled substance prescribing include:

Initial 30-Day Prescribing with Subsequent In-Person Exam: A practitioner would be able to prescribe a 30-day supply of a Schedule III-V non-narcotic controlled medication or a buprenorphine product for opioid use disorder (OUD) without an initial in-person medical evaluation. To continue prescribing beyond this 30-day period, an in-person medical evaluation would generally be required.
Telemedicine Exception for Mental Health: A critical proposed exception would permit the prescribing of *all* Schedule II-V controlled medications for patients receiving mental health services via telehealth without an initial in-person medical evaluation, provided the practitioner is acting in a legitimate medical purpose and has a good faith belief that a telemedicine encounter is sufficient. This exception acknowledges the unique challenges and benefits of telemental health, where an in-person visit might be particularly burdensome or counterproductive.
Referral to Another Practitioner: If a referring practitioner had previously conducted an in-person medical evaluation, and the referring and consulting practitioners are acting in the usual course of professional practice, the consulting practitioner could prescribe controlled substances via telehealth.

The DEA has received significant feedback, and the final rules are still being developed. For 2025-2026, practices cannot assume the PHE flexibilities will simply be reinstated. Instead, they must prepare for a more restrictive environment, potentially aligning closely with the most recent proposed rules or a modified version thereof. The critical takeaway is that an initial in-person exam, or a robust pathway to satisfy its intent, will likely be a foundational requirement for ongoing controlled substance prescribing, particularly for Schedule II substances outside of specific exceptions.

State-Specific Variations: A Patchwork of Requirements

Compounding the federal complexity are the myriad state-specific regulations. States retain significant authority over medical practice, including telehealth and controlled substance prescribing. A practice operating across multiple states must comply with both federal DEA regulations and the specific laws of each state where the patient is located at the time of the encounter, and where the prescribing practitioner is licensed.

Common state-level requirements and variations include:

Provider Licensing: Practitioners must be licensed in the state where the patient is located, a universal requirement that forms the bedrock of multi-state operations.
Specific Telehealth Modalities: Some states may mandate specific technologies (e.g., synchronous audio-visual) for certain types of telehealth encounters, particularly those involving controlled substances.
Prescription Drug Monitoring Programs (PDMPs): Nearly all states now have PDMPs, electronic databases that track controlled substance prescriptions. Many states mandate that prescribers and/or dispensers check the PDMP before prescribing or dispensing a controlled substance. The frequency of checking (e.g., initial prescription, every 90 days, every prescription) varies significantly. Failure to utilize PDMPs can lead to disciplinary action.
Good Faith Exam Standards: While federal rules address the in-person requirement, states define what constitutes a

Navigating the Perilous Landscape of Telehealth Controlled Substance Prescribing: 2025-2026 Outlook

The Federal Foundation: DEA, Ryan Haight, and the PHE's Legacy

Post-PHE Landscape: The Looming In-Person Requirement and Proposed Rules

State-Specific Variations: A Patchwork of Requirements

Further Reading