Controlled Substances and Telehealth Prescribing Rules

Prescribing controlled substances through telehealth sits at the intersection of federal drug law, state medical licensing, and a pandemic-era emergency that is still, years later, being unwound. The rules governing whether a clinician can prescribe an opioid, stimulant, or benzodiazepine after a video call — without ever meeting the patient in person — shifted dramatically in 2020 and have remained unsettled since. What follows is a clear-eyed account of how those rules work, where the gray zones live, and what the practical decision points look like for clinicians and patients navigating this terrain.

Definition and scope

The Ryan Haight Online Pharmacy Consumer Protection Act of 2008 established the foundational federal constraint: a practitioner generally cannot prescribe a Schedule II–V controlled substance via the internet without conducting at least one in-person medical evaluation of the patient (DEA, Ryan Haight Act overview). That single in-person requirement is not a technicality — it was Congress's explicit response to rogue online pharmacies that had turned prescription opioids into mail-order products with no meaningful clinical gatekeeping.

The Drug Enforcement Administration (DEA) administers the Controlled Substances Act, which classifies drugs into five schedules. Schedule II substances — including oxycodone, amphetamine salts like Adderall, and fentanyl — carry the tightest restrictions. Schedule III–V substances, such as buprenorphine (Schedule III) and most benzodiazepines (Schedule IV), operate under somewhat less restrictive but still meaningful controls.

The scope question for telehealth is specific: when can a patient-practitioner relationship formed entirely via video call — with no prior in-person encounter — support a lawful controlled substance prescription? The answer, as of the DEA's regulatory posture, depends heavily on whether a public health emergency exception still applies, which substance is being prescribed, and what state law independently requires. Telehealth prescribing rules operate as a layer on top of this federal floor, not a replacement for it.

How it works

During the COVID-19 public health emergency declared in March 2020, the DEA invoked an exception buried in the Ryan Haight Act that permits controlled substance prescribing via telemedicine when the Secretary of Health and Human Services has declared a public health emergency. That exception temporarily suspended the in-person requirement nationwide.

The practical mechanics worked like this: a practitioner registered with DEA, licensed in the patient's state, and practicing within their scope could prescribe Schedule II–V substances after a real-time audio-video evaluation — no prior in-person visit required. Platforms facilitating these prescriptions were required to use DEA-registered pharmacies, and practitioners remained subject to all existing documentation and prescription monitoring requirements.

The emergency exception expired when HHS formally ended the COVID-19 public health emergency in May 2023. The DEA subsequently proposed — and then delayed — two rules that would have created a permanent telemedicine prescribing framework. As of the DEA's 2023 announcements, enforcement of the post-emergency rules was extended through at least 2024 to allow further rulemaking. Clinicians should consult current DEA guidance directly at deadiversion.usdoj.gov for the operative compliance date.

State prescription drug monitoring programs (PDMPs) remain active requirements regardless of the federal exception status. Forty-nine states operate mandatory PDMP query requirements before prescribing certain controlled substances, according to the Prescription Drug Monitoring Program Training and Technical Assistance Center (PDMP TTAC).

Common scenarios

Three situations account for the vast majority of telehealth controlled substance questions:

1. ADHD stimulant prescribing — A patient seeks an initial evaluation for adult ADHD via video. Under the emergency exception, this was straightforward. Post-exception, a Schedule II stimulant like mixed amphetamine salts requires navigation of whether the patient has a prior in-person relationship with a DEA-registered provider or qualifies under any applicable exception.

2. Buprenorphine for opioid use disorder — Congress carved out a specific exception in 2023 through the Consolidated Appropriations Act, which eliminated the DEA's separate "X-waiver" requirement for buprenorphine prescribing. Practitioners with standard DEA registration can now prescribe buprenorphine for opioid use disorder, and telehealth-initiated treatment has remained more accessible than other Schedule II pathways. Mental health telehealth context is often relevant here given the co-occurrence of substance use and psychiatric conditions.

3. Benzodiazepine continuation — A patient with an established in-person relationship moves to a telehealth-only model with a new provider. The in-person requirement attaches to the prescribing practitioner's relationship, not merely any prior clinical contact, which creates a compliance gap even when the patient has a documented history.

Decision boundaries

The line between permissible and impermissible telehealth controlled substance prescribing turns on four specific variables:

• Schedule of the substance: Schedule II carries no flexibility under the Ryan Haight Act's base rule; III–V have somewhat more room.
• Existence of an in-person evaluation: Even a single qualifying in-person visit with the prescribing practitioner satisfies the federal requirement prospectively.
• Applicable exception: The public health emergency exception, a DEA-registered telemedicine platform exception (proposed but not yet finalized), or a state-specific carve-out each function differently.
• State law independence: States may impose requirements stricter than federal minimums. Telehealth state laws and licensure vary significantly — California, for instance, has its own controlled substance prescribing rules that operate alongside federal DEA requirements.

The contrast between Schedule II and Schedule III–V substances is not merely administrative. A practitioner who prescribes a Schedule II stimulant without satisfying the Ryan Haight Act's in-person requirement faces potential DEA registration revocation and criminal liability under 21 U.S.C. § 841. A Schedule IV prescribing error in a state with a more permissive telemedicine framework may have different enforcement exposure entirely.

Telehealth policy and regulation in this area is actively evolving — the DEA has signaled intent to publish final rules that create a registry-based special registration for telemedicine prescribers, which would provide a durable pathway that doesn't depend on emergency declarations. Until that framework is finalized, the operative rules are a patchwork that rewards careful, source-level verification over any summary account, including this one.