DEA Registration Requirements for Telehealth Prescribing Across State Lines: Navigating Post-PHE Regulations

The landscape of telehealth prescribing, particularly for controlled substances, has been a dynamic area of regulatory focus, especially following the expiration of the COVID-19 Public Health Emergency (PHE). Healthcare providers and businesses utilizing telehealth must navigate complex federal and state regulations to ensure compliance, with the Drug Enforcement Administration (DEA) playing a pivotal role in governing controlled substance prescribing.

At the heart of federal regulation for controlled substance prescribing via telehealth is the Ryan Haight Online Pharmacy Consumer Protection Act of 2008 (21 U.S.C. § 829(e)). This Act generally requires that a practitioner conduct at least one in-person medical evaluation of a patient before prescribing a controlled substance. However, it also includes a critical 'telemedicine exception' which allows for prescribing without an in-person exam under specific circumstances, such as when the patient is being treated in a DEA-registered hospital or clinic, or when the practitioner is acting as a covering practitioner for another who has conducted an in-person exam. The COVID-19 PHE significantly expanded this exception, temporarily allowing practitioners to prescribe controlled substances via telehealth without a prior in-person medical evaluation.

The Impact of the COVID-19 Public Health Emergency (PHE) Expiration

During the COVID-19 PHE, which began in January 2020 and expired on May 11, 2023, the DEA implemented temporary flexibilities. These flexibilities waived the in-person examination requirement of the Ryan Haight Act, allowing practitioners to prescribe controlled substances to patients via telehealth, even if they had not conducted a prior in-person medical evaluation. This was a critical enabler for the rapid expansion of telehealth services across the nation.

Upon the expiration of the PHE, the DEA faced the challenge of transitioning back to pre-PHE regulations while acknowledging the widespread adoption and benefits of telehealth. Initially, the DEA proposed new rules that would have reinstated a modified in-person requirement, which drew significant public comment and concern from the healthcare industry and patient advocacy groups. In response to these concerns, the DEA, in coordination with the Substance Abuse and Mental Health Services Administration (SAMHSA), issued a temporary rule to extend the full set of PHE telemedicine flexibilities for controlled substances. This extension was designed to provide a smoother transition and allow the DEA more time to consider public comments and develop a permanent rule.

Current Temporary Rules and Proposed Permanent Changes

The temporary rule, published in May 2023 and subsequently extended, dictates the current operational framework. As of the latest guidance, the flexibilities that waived the in-person examination requirement for prescribing controlled substances via telehealth will remain in effect until December 31, 2024, for all practitioner-patient relationships established on or before November 11, 2023. For relationships established after November 11, 2023, the full set of PHE flexibilities will continue to apply until June 30, 2024. After these dates, the general in-person requirement of the Ryan Haight Act would typically apply, unless a permanent rule is finalized or further extensions are granted. The DEA has stated its intention to promulgate a permanent rule that incorporates some of the lessons learned from the PHE while maintaining patient safety and preventing diversion.

Key aspects of the temporary rule and the DEA's ongoing considerations include:

• Initial Prescriptions: For patients with whom a legitimate practitioner-patient relationship was established on or before November 11, 2023, practitioners may continue to prescribe controlled substances via telehealth without an in-person medical evaluation until December 31, 2024. This includes Schedule II-V controlled medications.
• New Relationships: For practitioner-patient relationships established after November 11, 2023, the flexibilities are extended until June 30, 2024. After this date, without further extension or a permanent rule, the in-person requirement would generally apply for initial controlled substance prescriptions.
• Telemedicine Exception Pathways: The DEA is exploring various pathways for the permanent rule, including potential allowances for practitioners to prescribe a limited quantity of controlled substances via telehealth without an in-person exam, or requiring an in-person exam after an initial telehealth prescription for ongoing treatment.
• State Licensure: Regardless of federal DEA rules, practitioners must be appropriately licensed in the state where the patient is located at the time of the telehealth encounter. This is a fundamental requirement for all telehealth services, including prescribing.

Source: DEA Diversion Control Division - Telemedicine

DEA Registration and Cross-State Prescribing

Beyond the in-person examination requirement, DEA registration itself is state-specific. A practitioner must have a valid DEA registration in each state where they prescribe controlled substances. This is distinct from state medical licensure, which also typically requires licensure in the state where the patient is located. Therefore, for a telehealth provider prescribing across state lines, they must:

1. Hold an active medical license in the patient's state.
2. Hold an active DEA registration in the patient's state.
3. Comply with all state-specific laws and regulations regarding telehealth and controlled substance prescribing in the patient's state.
4. Comply with the federal Ryan Haight Act and current DEA rules regarding the in-person examination requirement.

This multi-layered compliance burden underscores the complexity for telehealth providers operating in multiple states. The DEA's stance is clear: the physical location of the patient determines the applicable state laws and DEA registration requirements. The DEA's rules are designed to prevent diversion and ensure that controlled substances are prescribed for a legitimate medical purpose by a practitioner acting in the usual course of professional practice.

Enforcement and Compliance Considerations

Non-compliance with DEA regulations can lead to severe consequences, including:

• Revocation or suspension of DEA registration.
• Civil monetary penalties.
• Criminal charges for illegal distribution of controlled substances.
• State medical board disciplinary actions, including license suspension or revocation.

The DEA actively monitors prescribing practices and works in conjunction with state medical boards and law enforcement agencies to identify and prosecute violations. Providers are expected to maintain comprehensive medical records that clearly document the medical necessity for controlled substance prescriptions, the patient's evaluation, and the ongoing monitoring of treatment. The concept of 'corresponding responsibility' places a significant burden on the prescribing practitioner to ensure the prescription is issued for a legitimate medical purpose.

Conclusion

The regulatory environment for telehealth prescribing of controlled substances, particularly across state lines, remains in flux. While the temporary rules provide a window of continued flexibility, healthcare providers and businesses must stay abreast of DEA's ongoing rulemaking efforts. Proactive compliance strategies, including obtaining appropriate state licenses and DEA registrations, adhering to the Ryan Haight Act's requirements (including the telemedicine exception), and maintaining meticulous records, are essential to mitigate risks and ensure the safe and legal delivery of care.