DOJ Intensifies Enforcement Against Telehealth Companies for Controlled Substance Violations
Overview of Regulatory Landscape
The Department of Justice (DOJ), in collaboration with the Drug Enforcement Administration (DEA) and other federal agencies, has significantly escalated its enforcement efforts against telehealth companies, their executives, and affiliated practitioners for alleged illegal prescribing and distribution of controlled substances. These actions underscore a critical regulatory focus on ensuring that telehealth services, particularly those involving controlled substances, adhere strictly to federal law, including the Ryan Haight Online Pharmacy Consumer Protection Act of 2008 and DEA regulations.
The Ryan Haight Act generally requires that a practitioner conduct at least one in-person medical evaluation of a patient before prescribing controlled substances via the internet. While temporary waivers were issued during the COVID-19 Public Health Emergency (PHE), allowing for controlled substances to be prescribed via telehealth without an initial in-person exam, these waivers have been subject to ongoing review and modification. The DEA has proposed new rules to establish a permanent framework for telemedicine prescribing of controlled substances, aiming to balance patient access with preventing diversion and abuse.
Recent Enforcement Trends and Key Cases
The DOJ's enforcement actions have targeted a range of alleged violations, including:
- Prescribing controlled substances without a legitimate medical purpose: This often involves situations where prescribers issue prescriptions based on minimal patient interaction, without a proper medical evaluation, or in quantities/combinations inconsistent with medical standards.
- Operating as illegal 'pill mills': Companies or individuals facilitating the high-volume, indiscriminate prescribing of controlled substances, often prioritizing profit over patient care.
- Fraudulent billing: Submitting false or misleading claims to federal healthcare programs (like Medicare and Medicaid) for medically unnecessary prescriptions or services.
- Conspiracy to distribute controlled substances: Charges brought against multiple individuals involved in schemes to illegally distribute controlled substances.
Recent years have seen several high-profile cases. For instance, in July 2023, the DOJ announced coordinated enforcement actions against multiple defendants across several states, including telehealth providers, for alleged healthcare fraud schemes involving over $1.4 billion in false billings and the illegal distribution of controlled substances. These cases often involve allegations of prescribing Adderall, opioids, and other highly addictive medications without proper medical evaluation.
One recurring theme in these prosecutions is the alleged exploitation of the temporary telehealth flexibilities granted during the COVID-19 PHE. While these flexibilities were intended to ensure patient access to care, some companies are accused of using them to bypass traditional safeguards, leading to the unlawful distribution of controlled substances. The DOJ and DEA have made it clear that while telehealth offers benefits, it does not diminish the fundamental responsibility of prescribers to act within the bounds of legitimate medical practice.
Regulatory Framework and Compliance Expectations
The Ryan Haight Act
The Ryan Haight Online Pharmacy Consumer Protection Act of 2008 (21 U.S.C. § 829(e)) is the cornerstone federal law governing the internet prescribing of controlled substances. It generally prohibits prescribing controlled substances via the internet unless the practitioner has conducted an in-person medical evaluation or meets one of several specified exceptions. The COVID-19 PHE waivers temporarily broadened these exceptions, but their future remains a subject of intense regulatory debate and proposed rulemaking by the DEA.
DEA Proposed Rules for Telemedicine Prescribing
In February 2023, the DEA issued proposed rules outlining a permanent framework for prescribing controlled substances via telemedicine after the PHE. These initial proposals generally required an in-person medical evaluation or referral from a practitioner who had conducted one, before a telehealth provider could prescribe Schedule II-V controlled substances. Following significant public comment, the DEA issued a second proposed rule in October 2023, extending the full set of COVID-19 flexibilities until at least December 31, 2024, while they continue to evaluate the long-term framework. This extension provides a temporary reprieve but does not diminish the need for robust compliance with existing laws and the spirit of the Ryan Haight Act.
State Laws and Medical Board Regulations
Beyond federal law, telehealth companies must also comply with state-specific laws and medical board regulations concerning telehealth and controlled substance prescribing. Many states have their own requirements for establishing a valid patient-practitioner relationship via telehealth, which may include specific technology requirements, informed consent, and limitations on prescribing controlled substances. These state laws often mirror or supplement federal requirements, and violations can lead to state medical board disciplinary actions, license suspension, or even criminal charges.
Implications for Healthcare Businesses
The DOJ's aggressive stance signals a zero-tolerance policy for telehealth operations that are perceived to prioritize profit over patient safety and regulatory compliance. Healthcare businesses, particularly those operating in the telehealth space, must:
- Review Prescribing Protocols: Scrutinize all protocols for prescribing controlled substances, ensuring they align with the Ryan Haight Act, current DEA guidance (including any temporary flexibilities), and state laws. This includes verifying the legitimacy of the medical need, conducting thorough patient evaluations, and maintaining comprehensive medical records.
- Establish Legitimate Patient-Practitioner Relationships: Ensure that a bona fide patient-practitioner relationship is established before prescribing controlled substances. This typically involves an in-person exam or meeting the criteria for a specific telemedicine exception.
- Implement Robust Compliance Programs: Develop and enforce strong compliance programs that include regular audits, staff training on federal and state regulations, and clear policies for identifying and preventing diversion and abuse.
- Verify Practitioner Credentials and Licensing: Ensure all prescribers are properly licensed in the states where patients are located and have appropriate DEA registrations.
- Monitor for Red Flags: Train staff to identify red flags associated with drug-seeking behavior, such as requests for specific drugs, cash payments, or multiple prescribers.
Conclusion
The Department of Justice's sustained focus on prosecuting telehealth companies for controlled substance violations underscores the critical importance of rigorous compliance. While telehealth offers valuable benefits for patient access, it does not provide a shield against regulatory scrutiny. Healthcare businesses must prioritize patient safety and strict adherence to federal and state laws to avoid severe legal and financial repercussions.
Sources:
- Department of Justice, Office of Public Affairs: "Justice Department Announces Coordinated Law Enforcement Action to Combat Health Care Fraud and Illegal Opioid Distribution" - https://www.justice.gov/opa/pr/justice-department-announces-coordinated-law-enforcement-action-combat-health-care-fraud-and
- Drug Enforcement Administration (DEA): "DEA Extends Telemedicine Flexibilities for Prescribing Controlled Medications" - https://www.dea.gov/press-releases/2023/10/10/dea-extends-telemedicine-flexibilities-prescribing-controlled-medications
- Drug Enforcement Administration (DEA): "Telemedicine: Prescribing of Controlled Substances When the Practitioner and the Patient Have Not Had a Prior In-Person Medical Evaluation" (Proposed Rule, February 2023) - https://www.federalregister.gov/documents/2023/03/01/2023-04281/telemedicine-prescribing-of-controlled-substances-when-the-practitioner-and-the-patient-have-not-had
- 21 U.S. Code § 829(e): "Prescriptions" (Ryan Haight Online Pharmacy Consumer Protection Act) - https://www.law.cornell.edu/uscode/text/21/829