DEA Telemedicine Prescribing Regulations

The Drug Enforcement Administration's rules governing telemedicine prescribing sit at one of the most consequential intersections in American healthcare: patient access on one side, controlled substance diversion risk on the other. These regulations determine which medications a prescriber can legally order after a video visit, under what conditions, and what happens when those conditions aren't met. Understanding where the lines fall matters enormously — both for patients managing chronic conditions remotely and for clinicians navigating a regulatory framework that shifted dramatically during the COVID-19 public health emergency and has been in flux ever since.

Definition and scope

The DEA's authority to regulate telemedicine prescribing flows from the Controlled Substances Act (CSA), specifically from 21 U.S.C. § 829, which sets the conditions under which controlled substances may be prescribed. The Ryan Haight Online Pharmacy Consumer Protection Act of 2008 added a specific requirement: before a practitioner can prescribe a controlled substance via the internet — including via telehealth — they must conduct at least one in-person medical evaluation of the patient.

That requirement wasn't arbitrary. The Ryan Haight Act was a direct legislative response to "rogue internet pharmacies" that were dispensing opioids and other controlled substances with nothing more than an online questionnaire. Congress drew a hard line.

The scope covers Schedule II through Schedule V controlled substances under the CSA, which range from oxycodone and Adderall (Schedule II) to certain cough suppressants (Schedule V). Any telehealth prescriber who writes one of these medications without satisfying the in-person requirement — or qualifying for a recognized exception — is in violation of federal law, regardless of what state telehealth prescribing rules may permit.

How it works

The baseline rule is simple even if the exceptions are not: a valid prescription for a controlled substance via telemedicine requires that the patient have been seen in person at least once by a DEA-registered practitioner. After that visit is documented, subsequent prescriptions can, under certain circumstances, be issued remotely.

The COVID-19 public health emergency (PHE), declared in March 2020, triggered a statutory exception under 21 U.S.C. § 802(54)(D) that allowed DEA-registered practitioners to prescribe controlled substances via telemedicine without that in-person visit. This exception applied for the duration of the PHE and created a significant expansion in prescribing access — particularly for buprenorphine (a Schedule III medication used in opioid use disorder treatment) and stimulants used for ADHD.

When the PHE ended in May 2023, the DEA proposed new permanent rules to govern telemedicine prescribing of controlled substances. The agency published two notices of proposed rulemaking in March 2023 in the Federal Register, drawing over 38,000 public comments — an extraordinary volume that signaled how deeply this issue affects patients and providers. The DEA subsequently extended the PHE-era flexibilities through temporary rules while the permanent framework continued to be developed.

The emerging framework distinguishes between:

1. Telemedicine prescribing without a prior in-person visit — permitted only under specific registry or platform conditions being defined in the proposed rules
2. Telemedicine prescribing following at least one qualifying in-person visit — more broadly permitted, with documentation requirements
3. Buprenorphine prescribing for opioid use disorder — treated somewhat separately, given the harm-reduction stakes involved
4. Emergency telemedicine prescribing — a narrow carve-out allowing a 30-day supply in genuine emergencies, as defined in DEA regulations

The telehealth policy and regulation landscape adds another layer: state medical boards may impose requirements that are more restrictive than DEA minimums, but not less.

Common scenarios

A few situations where these rules produce real clinical friction:

ADHD management. A patient diagnosed with ADHD who has been seeing a psychiatrist in person for three years moves across the country. If that psychiatrist is licensed in the new state, subsequent stimulant (Schedule II) prescriptions via video may still be valid — because the in-person evaluation requirement was satisfied. If the patient seeks a new prescriber who is only available via telehealth and has never met the patient in person, that prescriber cannot legally issue the first stimulant prescription under the Ryan Haight Act without qualifying under an exception.

Buprenorphine for OUD. Given the mental health telehealth stakes involved in addiction treatment, buprenorphine has been a focal point. The Mainstreaming Addiction Treatment Act of 2023 eliminated the DEA's separate X-waiver requirement, but the underlying Ryan Haight prescribing requirement still applies — meaning the debate over in-person visit requirements directly affects access to this life-saving medication.

Post-surgical pain management. A surgeon prescribing a short course of opioids after an in-person procedure is generally on firm ground for follow-up via telehealth, since the in-person evaluation clearly occurred in the clinical record.

Decision boundaries

The critical distinctions that determine whether a controlled substance telehealth prescription is legally defensible:

• Prior in-person evaluation: Was there at least one documented in-person evaluation by a DEA-registered practitioner? If yes, subsequent telemedicine prescribing is generally on stronger footing. If no, the Ryan Haight prohibition applies unless an active exception covers the situation.
• Schedule of the substance: Schedule II medications (opioids, stimulants) face the most scrutiny. Schedule III–V substances may have more flexibility under applicable exceptions.
• Active emergency status: DEA's emergency prescribing carve-out permits a single 30-day supply but requires specific documentation and prohibits refills under that same exception.
• Registry compliance (forthcoming): The DEA's proposed telemedicine prescribing registry — intended to allow prescribing without a prior in-person visit under supervised conditions — has not yet been finalized as of the most recently published Federal Register notices.

Practitioners operating in telehealth for rural communities or other access-limited settings often face the sharpest version of this tension: the patients who most need remote prescribing access are the ones for whom traveling to an in-person visit creates the highest barrier. That structural irony sits at the center of the ongoing regulatory debate — and is precisely why the DEA's eventual permanent rulemaking will be watched closely across the entire telehealth history and evolution of this policy area.