Controlled Substances and Remote Prescribing

Remote prescribing of controlled substances is one of the most consequential and most unstable parts of telehealth. The legal framework has shifted multiple times since 2020 and continues to do so. This page describes the framework: the Ryan Haight Act, the COVID-era flexibilities, the proposed permanent rules, and the practical implications for patients on stimulants, opioids, benzodiazepines, and other scheduled drugs.

The short version

The Ryan Haight Online Pharmacy Consumer Protection Act of 2008 generally requires an in-person evaluation before a controlled substance can be prescribed via the internet, with limited exceptions.
The DEA used emergency authority during the COVID-19 public health emergency, beginning in 2020, to waive the in-person requirement.
The DEA has issued proposed rules toward a permanent framework, with multiple revisions and extensions.
The state of the federal rules continues to evolve. Verify current rules with the DEA before relying on them for clinical or business decisions.
State medical boards may impose stricter requirements than federal floor.
For patients, the practical effects are continuity issues, geographic constraints, and a tighter compliance posture from many practices.

The Ryan Haight Act, briefly

The Ryan Haight Online Pharmacy Consumer Protection Act of 2008 was a response to a wave of online pharmacies prescribing controlled substances without meaningful clinical evaluation. It is named for Ryan Haight, a teenager who died after obtaining Vicodin from an online pharmacy that had no patient relationship beyond a brief web form. The Act made it generally unlawful to prescribe controlled substances based on internet-based evaluation only, requiring at least one in-person medical evaluation before the prescription, with narrow statutory exceptions.

The Act was passed before the modern telehealth era. The seven statutory exceptions for "telemedicine" within the Act are narrow — requiring, for example, that the patient be physically present at a hospital or clinic registered with the DEA, or that the practitioner be specially registered for telemedicine. None of these exceptions covered the typical home-based telehealth visit.

The COVID-era flexibilities

In March 2020, in response to the COVID-19 public health emergency, the DEA and HHS used emergency authority to waive the in-person evaluation requirement, allowing controlled substances to be prescribed via real-time, two-way audio-video telehealth without a prior in-person visit. The waiver applied as long as the prescription was for a legitimate medical purpose, the practitioner was acting within the usual course of professional practice, and the practitioner used real-time audio-video. Schedule II–V controlled substances were all covered under the waiver.

The flexibilities transformed access. Telehealth platforms for ADHD, mental health, and pain emerged or grew quickly. Buprenorphine for opioid use disorder, in particular, became more accessible — though buprenorphine has its own evolving legal framework distinct from the Ryan Haight Act.

The proposed permanent rules

As the public health emergency ended, the DEA was tasked with creating a permanent framework. In 2023 it issued proposed rules that would have substantially narrowed the COVID-era flexibilities, requiring in-person visits for many controlled substance prescriptions and creating special "telemedicine special registration" pathways for certain situations. The proposals received substantial public comment. The DEA subsequently extended the COVID-era flexibilities multiple times while it works toward a final rule.

Drafts and updates from the DEA have included options for: continued telehealth prescribing of certain Schedule III–V substances under specific conditions, an in-person requirement after a defined period or number of remote prescriptions, a special telemedicine registration for clinicians who prescribe Schedule II in narrow circumstances, and special pathways for buprenorphine. The current state of these proposals shifts; the DEA's published rules and rule extensions are the source of truth at any given time.

This page does not state the current rule because the rule has changed faster than this page can be updated. Anyone needing to rely on the current rule should check directly with the DEA's published guidance.

What remains relevant regardless

Even under the most permissive interpretation, several things remain true:

Controlled substance prescribing requires a real evaluation. A questionnaire and a 5-minute call do not meet professional standards.
State medical boards have their own rules and may be stricter than federal floor.
State controlled substance laws and prescription drug monitoring program (PDMP) checks apply.
Pharmacies have discretion to refuse to fill prescriptions they consider questionable; some pharmacy chains have refused to fill prescriptions from specific telehealth practices.
State licensing applies — the prescriber must be licensed where the patient is physically located. See cross-state licensing.
Schedule II prescriptions are the most tightly regulated, with specific rules around quantity, refills (Schedule II prescriptions are not refillable; new prescriptions are required), and electronic prescribing.

Specific schedules

Schedule II

The most tightly controlled schedule that includes commonly prescribed drugs. Stimulants (methylphenidate, amphetamine salts, lisdexamfetamine) for ADHD; opioids (oxycodone, hydrocodone, fentanyl) for pain; certain other agents. New prescriptions are required each fill — Schedule II is not refillable. Up to a 90-day supply may be issued in some circumstances under federal law via multiple prescriptions; state law may be stricter.

Schedule III

Includes some opioid combination products, ketamine in some forms, anabolic steroids, and others. Buprenorphine for opioid use disorder is Schedule III; its prescribing has its own legal framework (the X-waiver, which was eliminated by the Mainstreaming Addiction Treatment Act, integrating buprenorphine prescribing into broader DEA registration).

Schedule IV

Many benzodiazepines (alprazolam, lorazepam, clonazepam, diazepam), some sleep medications (zolpidem, eszopiclone), tramadol, certain weight-loss medications, and others. Less tightly regulated than Schedule II, but still subject to controlled substance rules.

Schedule V

The least restrictive schedule, including some cough preparations with codeine and pregabalin. Subject to controlled substance rules but with fewer restrictions.

Buprenorphine and opioid use disorder

Buprenorphine prescribing for opioid use disorder has its own regulatory history distinct from the broader Ryan Haight context. The Drug Addiction Treatment Act of 2000 created the X-waiver framework. The Mainstreaming Addiction Treatment Act, enacted in late 2022, eliminated the X-waiver requirement. Any clinician with a standard DEA registration can now prescribe buprenorphine for opioid use disorder, though state rules and prior training requirements may still apply in some contexts. Telehealth-based buprenorphine prescribing has been one of the more durable parts of the COVID-era expansion, with rule extensions specifically prioritizing access to medication-assisted treatment.

State variation

State laws layer on top of federal rules. Some states require an in-person visit before any controlled substance prescription, regardless of federal allowance. Some states require periodic in-person visits for ongoing controlled substance care. State medical boards have issued telehealth practice rules that often address controlled substance specifically. The Federation of State Medical Boards provides resources on these. Patients should not assume that federal flexibility means their state allows the same thing.

Pharmacy discretion

Pharmacies have a "corresponding responsibility" to ensure prescriptions for controlled substances are issued for legitimate medical purposes. They can — and do — refuse to fill prescriptions they consider questionable. Some major pharmacy chains have at various points declined to fill prescriptions from specific telehealth practices, citing concerns about prescribing patterns. For patients, this can mean a prescription that was issued lawfully cannot be filled at the local pharmacy of choice. Mail-order options affiliated with the prescribing telehealth practice are sometimes available.

Practical implications for patients

Continuity is fragile. Prescriber turnover at telehealth practices, rule changes, and pharmacy filling decisions can all interrupt access.
Cross-state mobility is hardest with controlled substances. See cross-state licensing.
An in-person visit is sometimes required, even when the visit cadence is otherwise remote.
Plan ahead: do not let prescriptions run out before the next refill is in hand, especially when changes in rules or providers are happening.
Keep a list of every controlled substance you take, with dates and doses, and your prescribers — see preparing for a telehealth visit.

What to ask any service that prescribes controlled substances remotely

How does this service comply with the current DEA telehealth rules?
Will I need an in-person visit at any point?
What happens if rules change while I am a patient?
Which pharmacies will fill prescriptions from this practice?
What is the policy for travel out of state?
How is my prescriber's continuity handled?

When this is not enough

For patients who have struggled to maintain continuous controlled substance care through telehealth alone, an in-person practice in their home state is often the more durable solution. Hybrid models — in-person primary care or specialty practice with telehealth supplements — handle the regulatory landscape better than fully remote services. See ADHD remote treatment, chronic pain telehealth, and mental health telehealth.

Controlled substances and remote prescribing