Telehealth prescribing is governed by a tangled web of federal and state regulations that have been in near-constant flux since the COVID-19 pandemic. The temporary flexibilities that allowed providers to prescribe controlled substances via telehealth without an in-person visit are now being replaced by permanent rules that vary dramatically from state to state. If your telehealth platform involves prescribing, understanding the current landscape is not optional. It is essential to avoiding DEA enforcement actions and state board discipline.
Federal Framework: The Ryan Haight Act
The Ryan Haight Online Pharmacy Consumer Protection Act of 2008 is the foundational federal law governing telehealth prescribing of controlled substances. The Act generally requires that a practitioner conduct at least one in-person medical evaluation before prescribing a controlled substance. However, it includes a critical exception for practitioners who are acting in the usual course of professional practice and who have obtained a special registration from the DEA.
Key provisions of the Ryan Haight Act include:
- A valid prescription for a controlled substance requires at least one in-person evaluation, unless an exception applies
- The "practice of telemedicine" exception allows prescribing without an in-person visit in specific circumstances, including when the practitioner is at a DEA-registered hospital or clinic while the patient is at a remote location
- The DEA was directed to create a special registration process for telehealth prescribing, which has seen multiple proposed and interim rules
DEA Telehealth Prescribing Rules: 2025 Status
During the COVID-19 Public Health Emergency, the DEA exercised enforcement discretion and allowed providers to prescribe controlled substances, including Schedule II substances, via telehealth without an in-person visit. As the emergency declarations wound down, the DEA issued a series of proposed rules to establish permanent telehealth prescribing frameworks.
The DEA's rulemaking process has been marked by delays and extensions. Healthcare businesses should monitor the Federal Register closely and build operational flexibility into their prescribing workflows to accommodate rule changes with minimal disruption.
The key elements of the DEA's evolving framework include:
- Initial telehealth encounter: Providers may initiate a patient relationship via telehealth for non-controlled substances and many controlled substances, but additional requirements may apply for Schedule II prescriptions
- Follow-up requirements: Some proposals require an in-person follow-up within a specified timeframe after the initial telehealth prescription
- Quantity limitations: Proposed rules have included limits on the quantity of controlled substances that can be prescribed before an in-person visit occurs
- Telemedicine special registration: The DEA has proposed a special registration category that would provide additional flexibility for qualified telehealth practitioners
Controlled Substances via Telehealth
The prescribing of controlled substances via telehealth is subject to both federal and state law, and the more restrictive rule applies. Even if federal rules permit telehealth prescribing, individual states may impose additional requirements or outright prohibitions.
Schedule II Substances
Schedule II substances, including stimulants like Adderall, opioids, and certain anxiety medications, face the strictest telehealth prescribing rules. Many states that permit telehealth prescribing of Schedule III-V substances still require an in-person visit before prescribing Schedule II medications. Telehealth platforms focused on ADHD treatment, pain management, or psychiatry must pay particular attention to these restrictions.
Schedule III-V Substances
Lower-scheduled controlled substances, including buprenorphine for opioid use disorder (Schedule III), testosterone (Schedule III), and benzodiazepines (Schedule IV), generally have more permissive telehealth prescribing rules. However, individual state requirements still vary significantly.
State-Specific Prescribing Rules
Below is an overview of prescribing rules in selected states. This is a rapidly changing area, and you should verify current rules before making operational decisions.
States with Permissive Telehealth Prescribing
- Florida: Allows prescribing of most controlled substances via telehealth with appropriate documentation. Requires a patient-provider relationship established through a qualifying telehealth encounter.
- Arizona: Permits telehealth prescribing without an in-person visit for most controlled substances, with standard medical record documentation requirements.
- Colorado: Has codified broad telehealth prescribing authority that survived the pandemic-era flexibilities.
States with Moderate Restrictions
- Texas: Allows controlled substance prescribing via telehealth but requires an established patient-provider relationship and may require in-person visits for certain substances.
- New York: Permits telehealth prescribing but has specific rules about establishing a patient relationship and documentation requirements for controlled substances.
- California: Generally permits telehealth prescribing but has specific Business and Professions Code provisions regarding the patient-provider relationship and controlled substances.
States with Strict Requirements
- Louisiana: Requires an in-person visit before prescribing certain controlled substances, particularly Schedule II stimulants.
- Alabama: Maintains more restrictive telehealth prescribing rules, particularly for initial prescriptions of controlled substances.
- Several states continue to require an in-person evaluation before any controlled substance prescription, regardless of schedule.
Compliance Best Practices for Telehealth Prescribers
Given the complexity and ongoing changes in telehealth prescribing law, telehealth platforms should adopt the following compliance practices:
- Maintain a state-by-state prescribing matrix that documents what can be prescribed via telehealth in each state, including any in-person visit requirements
- Build prescribing guardrails into your platform that prevent providers from prescribing substances in states where telehealth prescribing is restricted
- Require thorough documentation for every telehealth encounter, including the clinical rationale for the prescription and evidence that the provider conducted a proper evaluation
- Monitor DEA rulemaking and be prepared to adjust your prescribing policies as permanent rules are finalized
- Ensure all providers hold DEA registrations in the appropriate states and maintain current state licenses where they prescribe
Telehealth prescribing law is one of the most dynamic areas of healthcare regulation. The rules that apply today may change within months. If your telehealth platform involves prescribing, investing in a compliance program that tracks these changes in real time is not a luxury. It is a necessity. Foundry PC monitors prescribing regulations across all 50 states and can help ensure your telehealth platform operates within the law.