Out-of-state telehealth prescribing lets providers treat patients across state lines, but prescribing controlled substances to a patient in another state involves three separate layers of rules: licensure in the state where the patient is located, DEA registration and federal telemedicine rules, and state controlled substance and prescription monitoring (PDMP) requirements. Meeting one layer does not satisfy the others.
Quick answer (October 2026): Through December 31, 2026, DEA-registered practitioners can prescribe Schedule II–V controlled substances via telemedicine without a prior in-person evaluation under the fourth temporary extension issued by the DEA and HHS. The DEA’s permanent Special Registration for Telemedicine rule was sent for White House review on August 25, 2026, but has not yet been published. Providers and telehealth organizations should prepare now for January 1, 2027.
Last updated: October 20, 2026. Federal telemedicine prescribing rules are changing. Confirm the current status with the DEA before relying on any prescribing pathway.
Key Takeaways
- Out-of-state prescribing requires licensure, DEA registration, state controlled substance authority, and PDMP compliance, and each is separate.
- Telemedicine prescribing without an in-person evaluation is permitted through December 31, 2026 under the fourth temporary extension.
- The permanent Special Registration rule is under White House review and may change requirements starting in 2027.
- Buprenorphine and VA telemedicine final rules took effect December 31, 2025.
- Credentialing and payer enrollment do not grant authority to practice or prescribe.
Key Dates for Telehealth Controlled Substance Prescribing
| Date | What happened |
|---|---|
| 2008 | The Ryan Haight Act establishes the in-person evaluation requirement for prescribing controlled substances over the internet. |
| January 17, 2025 | DEA publishes the Special Registration for Telemedicine proposed rule, along with final rules for buprenorphine via telemedicine and VA continuity of care. |
| December 31, 2025 | The buprenorphine and VA final rules take effect. DEA and HHS publish the fourth temporary extension of telemedicine flexibilities. |
| January 1 – December 31, 2026 Current period | Temporary telemedicine prescribing flexibilities are in effect. |
| August 25, 2026 | The Special Registration final rule is submitted to the Office of Information and Regulatory Affairs (OIRA) for review. |
| January 1, 2027 Deadline | The temporary flexibilities expire unless DEA publishes a permanent rule or issues another extension. |
Out-of-State Telehealth Prescribing Requirements
Out-of-state telehealth prescribing allows providers to evaluate and treat patients who are physically located in a different state. Providers must comply with the laws governing their own practice and the laws of the state where the patient is located at the time of the encounter.
Requirements differ by provider type, specialty, the medication prescribed, and the patient’s state. Before offering services across state lines, organizations should verify licensing, prescribing authority, DEA and state controlled substance registration, and documentation requirements for each state.
How State Laws Affect Virtual Care Across State Lines
In general, a provider must hold a license or another authorization recognized by the state where the patient is located. Some states offer telehealth-specific registrations, while others require a full license. Interstate compacts such as the Interstate Medical Licensure Compact (IMLC) for physicians, the Nurse Licensure Compact (NLC), and PSYPACT for psychologists can speed up multi-state licensure.
Compacts address licensure only. They do not grant DEA registration, state controlled substance authority, or PDMP access in another state. Providers should also confirm the patient’s physical location at each encounter and follow the patient’s state rules for informed consent, medical records, and follow-up care.
Key Compliance Requirements for Telehealth Providers
Before launching a multi-state telehealth service, providers should assess each of the following:
| Requirement | What to verify | Where to check |
|---|---|---|
| Professional licensure | The provider is authorized to practice in the patient’s state | State licensing board or interstate compact |
| Prescribing authority | Permission to prescribe the medication under the patient’s state law | State medical, nursing, or pharmacy board |
| DEA registration | Federal registration requirements now and after December 31, 2026 | DEA Diversion Control Division |
| State controlled substance registration | Whether the patient’s state requires a separate state-level registration | State board or controlled substance agency |
| Patient verification | Patient identity and physical location at each encounter | Intake and visit workflow |
| Clinical documentation | Evaluations, treatment decisions, prescriptions, and required PDMP checks | EHR and documentation policies |
Out-of-State Telehealth Compliance Matrix
| Requirement | Issued by | What it covers | Transfers across states? |
|---|---|---|---|
| State license or compact privilege | State licensing board | Authority to practice where the patient is located | No Compacts speed up licensure but do not replace it. |
| DEA registration | Drug Enforcement Administration | Federal authority to prescribe controlled substances by schedule | No Each registration is tied to a specific state. |
| State controlled substance registration | State board or agency (in states that require one) | State authority to prescribe controlled substances | No |
| PDMP access and checks | State PDMP | Review of the patient’s controlled substance history | No Requirements vary by state and medication. |
| Credentialing and payer enrollment | Healthcare organization and payers | Qualification verification and reimbursement | Not applicable Does not authorize practice or prescribing. |
DEA Registration for Out-of-State Telehealth Providers
The DEA regulates the handling and prescribing of controlled substances under federal law. DEA registrations are issued for a specific state, so a registration in one state does not automatically authorize a provider to prescribe controlled substances to patients nationwide.
When Do Telehealth Providers Need DEA Registration in Another State?
Under the Ryan Haight Act’s telemedicine framework, practitioners generally need DEA registration in the state where the patient is located, in addition to the state where they practice, unless an exception applies.
During 2026, the temporary rule (21 CFR 1307.41) allows a DEA-registered practitioner to prescribe via telemedicine when the prescription is issued for a legitimate medical purpose, through an interactive telecommunications system, and the practitioner’s registration authorizes that class of controlled substance. The practitioner must still have authority under the patient’s state law, including any required state license and controlled substance registration.
Because the post-2026 framework is not final, many organizations are confirming DEA registration in each state where they treat patients now rather than waiting until January 2027.
- Check 1Have you confirmed and documented where the patient is located?No: verify location at the start of the visit.
- Check 2Do you hold a license or compact privilege in that state?No: obtain licensure. A compact privilege does not cover DEA or state controlled substance authority.
- Check 3Does your DEA registration authorize this drug schedule?No: do not prescribe. Review DEA registration requirements for the patient’s state.
- Check 4Does the state require its own controlled substance registration?If yes, confirm you hold it. If you don’t, obtain it before prescribing.
- Check 5Is a PDMP check required for this drug in that state?If yes, query that state’s PDMP and document the date, time, and result.
- Check 6Does a valid telemedicine pathway apply?No: schedule an in-person evaluation. Through Dec 31, 2026 the temporary rule applies; after that, a final rule, the buprenorphine or VA rule, or an exception.
Multi-State DEA Registration Rules for Doctors
Doctors treating patients in multiple states should separate two issues: registration for each physical practice location and registration associated with prescribing to patients in other states. The grid below summarizes common scenarios.
| Scenario | General DEA registration rule |
|---|---|
| Provider handles controlled substances at practice locations in two states | A separate registration is generally required for each principal place of business or professional practice, subject to exceptions. |
| Provider prescribes via telemedicine to a patient in another state during 2026 | The temporary rule relies on the practitioner’s existing DEA registration for that drug class. The patient’s state license and controlled substance rules still apply. |
| Flexibilities lapse with no replacement rule | The Ryan Haight framework generally applies again, including registration in the patient’s state and an in-person evaluation unless an exception applies. |
| Special registration rule is finalized as proposed | A special telemedicine registration plus state-level telemedicine registrations for each state where patients are located would be required. |
To manage these obligations, physicians and organizations should:
- Identify every state in which they intend to prescribe controlled substances.
- Confirm licensure and prescribing authority in each state.
- Determine whether a separate DEA registration, state controlled substance registration, or exception applies.
- Track registration numbers, schedules, and expiration dates.
- Review federal and state rule changes before expanding services.
Ryan Haight Act Telehealth Prescribing Update (2026)
The Ryan Haight Online Pharmacy Consumer Protection Act of 2008 generally requires at least one in-person medical evaluation before a controlled substance is prescribed via the internet, unless the encounter qualifies as the “practice of telemedicine” under a statutory exception. Since 2020, temporary DEA and HHS rules have suspended that in-person requirement. The current extension runs through December 31, 2026. Billing rules for virtual visits changed on a separate track; see our guide to telehealth and virtual check-in coding.
What the 2026 Temporary Rule Allows
- Prescribing Schedule II–V controlled substances via telemedicine without a prior in-person evaluation, for new and existing patients.
- Use of interactive audio-video communication. Audio-only is permitted for Schedule III–V narcotics approved for opioid use disorder treatment, such as buprenorphine.
- No new documentation, registration, or technology requirements beyond existing federal and state law.
- Effective January 1 through December 31, 2026 (Federal Register, December 31, 2025).
Telemedicine Prescribing Pathways Compared
| Pathway | Status (October 2026) | Medications | In-person evaluation required? | Key conditions |
|---|---|---|---|---|
| Temporary flexibilities | In effect Through December 31, 2026 | Schedule II–V | No | Legitimate medical purpose; audio-video (audio-only for certain OUD medications) |
| Buprenorphine final rule | In effect Since December 31, 2025 | Buprenorphine for opioid use disorder | No For a limited initial supply | Review of the patient’s state PDMP; audio-only permitted |
| VA continuity of care rule | In effect Since December 31, 2025 | Schedule II–V | Yes By another VA practitioner | VA practitioners and VA patients only |
| Special registration (proposed) | Under review Submitted to OIRA August 25, 2026 | Schedule III–V or II–V, depending on registration type | No With a special registration | Special and state-level registrations; additional Schedule II and PDMP safeguards |
| Ryan Haight default | Fallback Applies if flexibilities lapse | Schedule II–V | Yes Unless a statutory exception applies | Registration in the patient’s state |
While the temporary rule is in effect, a prescription may be issued under it even if it could also be issued under the buprenorphine or VA final rules.
The Special Registration for Telemedicine Rule: What Was Proposed
DEA proposed the Special Registration for Telemedicine rule in January 2025 and received more than 40,000 comments. The final rule was submitted for White House review on August 25, 2026, and had not been published as of October 20, 2026. The proposal included three registration types:
| Proposed registration | Who it is for | Schedules |
|---|---|---|
| Telemedicine Prescribing Registration | Clinicians prescribing via telemedicine | Schedule III–V |
| Advanced Telemedicine Prescribing Registration | Certain specialists, such as psychiatrists and hospice physicians | Schedule II–V |
| Telemedicine Platform Registration | Platforms that facilitate controlled substance prescribing | Schedule II–V |
The proposal also called for state-level telemedicine registrations for each state where patients are located, plus additional Schedule II safeguards and PDMP check requirements. The final rule may differ, so review the published text before changing prescribing policies.
How to Prepare for January 1, 2027
- Identify patients receiving controlled substances via telemedicine who have no in-person evaluation on record.
- Map each patient’s state to the provider’s license, DEA registration, and state controlled substance registration.
- Flag prescriptions that qualify under the buprenorphine or VA final rules.
- Plan in-person evaluations or referral pathways in case the flexibilities lapse without a replacement.
- Assign a compliance owner to monitor the Federal Register and DEA Diversion Control Division announcements.
Cross-State Prescription Monitoring Program (PDMP) Requirements
Prescription Drug Monitoring Programs are state-run databases that track controlled substance prescriptions dispensed in each state. They help prescribers identify duplicate prescriptions, potential interactions, and patterns that need clinical review.
For telehealth providers working across state lines, PDMP compliance is more complex because access rules and mandatory query requirements vary by state.
Do Telehealth Providers Need to Check the Patient’s State PDMP?
Whether a check is mandatory depends on the patient’s state law, the medication, and any federal requirement. Checking a home-state PDMP does not automatically satisfy the patient’s state requirements.
For example, the buprenorphine telemedicine final rule requires the practitioner to review PDMP data for the state where the patient is located before prescribing. This is why organizations should build medication-specific rules rather than a single universal policy.
How to Manage PDMP Access Across Multiple States
| Practice | What to do | What to document |
|---|---|---|
| Access | Register for each relevant state PDMP | Account holder, state, and renewal date |
| Interstate sharing | Check whether data-sharing is available between states | States covered by each query |
| Mandatory queries | Verify whether a check is required for the medication | Applicable state or federal rule |
| Each check | Run the query before prescribing when required | Date, time, and outcome |
| System outages | Follow the state’s procedure when a PDMP is unavailable | Reason the check could not be completed |
| Training | Train prescribers on state-specific requirements | Training dates and attendees |
Telehealth Controlled Substance Prescribing Credentialing
Credentialing verifies a provider’s qualifications, but it does not establish legal authority to practice or prescribe. A complete process coordinates credential verification, state licensing, DEA and state registrations, organizational approvals, and payer enrollment. For payer-specific steps, see our guides to CMS credentialing requirements and getting credentialed with Medicare and Medicaid.
Essential Credentials and Documents to Verify
Before a provider prescribes controlled substances through a telehealth platform, the credentialing team should review the following. For a complete list, see our medical credentialing checklist.
| Document | What to verify |
|---|---|
| Professional licenses | Current licenses or compact privileges for each relevant state |
| DEA registration | Registration details, authorized schedules, and states covered |
| State controlled substance registrations | Required registrations in each patient state |
| NPI | Correct Type 1 and Type 2 NPIs for the provider and organization |
| Education and qualifications | Training, specialty credentials, and board certification |
| Professional liability insurance | Coverage for each practice state and telehealth activities |
| Background and exclusion checks | Screening against federal lists, including OIG exclusions |
| Organizational privileges | Approvals to provide services through the organization |
| Payer enrollment records | Enrollment status, CAQH profiles, and PECOS for Medicare |
Building a Multi-State Credentialing and Compliance Workflow
Organizations with delegated credentialing agreements should confirm which steps the organization performs and which the payer performs.
- Identify target states.First, list every state where patients will be located during visits. Operations and leadership usually own this decision.
- Verify professional authorization.Next, the credentialing team confirms the provider’s license or compact privileges in each of those states.
- Assess controlled substance requirements.Then, compliance determines which DEA registrations, state controlled substance registrations, and prescribing restrictions apply, including the rules that take effect after December 31, 2026.
- Complete credential verification.Review the provider’s qualifications, work history, and liability insurance against your organization’s credentialing policies.
- Coordinate payer enrollment.Handle payer enrollment as a separate track. Approval from a payer does not authorize a provider to practice or prescribe.
- Approve operational readiness.Before services begin, clinical leadership confirms that authorizations, documentation systems, and PDMP access are in place.
- Maintain ongoing compliance.Finally, track license and registration expirations, recredentialing, Medicare revalidation, and regulatory changes.
Common Compliance Mistakes in Out-of-State Telehealth Prescribing
| Mistake | How to avoid it |
|---|---|
| Assuming a license in one state authorizes practice in another | Verify licensure in each patient’s state |
| Treating a DEA registration as nationwide permission to prescribe | Map registrations to every state where patients are located |
| Assuming a compact privilege includes controlled substance authority | Handle DEA and state controlled substance registrations separately |
| Treating the 2026 telemedicine flexibilities as permanent | Build a plan for January 1, 2027 |
| Overlooking state controlled substance registrations | Check each state’s requirements before prescribing |
| Failing to verify the patient’s location | Confirm and document location at every encounter |
| Missing required PDMP checks | Build medication-specific PDMP rules into the workflow |
| Confusing payer enrollment with legal authority | Keep enrollment and prescribing authorization as separate checklist items |
Best Practices for Maintaining Ongoing Telehealth Compliance
- Maintain a state-by-state compliance matrix covering licensing, registration, prescribing, and PDMP obligations.
- Use renewal tracking for licenses, DEA and state registrations, and recredentialing.
- Standardize documentation for patient location, identity, evaluations, prescriptions, and PDMP checks.
- Train clinical and administrative teams and define when to escalate regulatory questions.
- Run periodic audits of provider files and prescribing workflows. An independent audit can also catch documentation gaps that affect billing.
- Monitor official updates from the DEA, HHS, state medical and pharmacy boards, and PDMPs.
- Review new-state expansion plans before launch.
Get Help With Multi-State Telehealth Credentialing
Expanding virtual care across state lines means coordinating licensing, registrations, credential verification, and payer enrollment for every provider and state. Our telehealth credentialing and enrollment services help organizations track requirements, close documentation gaps, and keep provider records current. We also offer nurse practitioner credentialing for multi-state NP teams and full-service medical credentialing. Contact us to discuss your expansion plans.
Related Resources
| Guide | What it covers |
|---|---|
| Telehealth and virtual check-in coding | Coding and billing for virtual visits after the emergency declarations |
| Remote patient monitoring documentation | Compliance and documentation requirements for RPM |
| Mental health billing guide | Billing for behavioral health services, a common telehealth specialty |
| Behavioral and mental health billing services | RCM support for behavioral health practices |
| Medical credentialing checklist | Documents needed for provider credentialing |
Frequently Asked Questions
Can providers prescribe controlled substances via telehealth without an in-person visit in 2026?
Yes. Through December 31, 2026, DEA-registered practitioners may prescribe Schedule II–V controlled substances via telemedicine without a prior in-person evaluation, provided the prescription is for a legitimate medical purpose and meets all other federal and state requirements.
What happens to telehealth controlled substance prescribing after December 31, 2026?
It depends on whether DEA publishes a permanent rule or another extension. If neither happens, the Ryan Haight Act’s in-person evaluation requirement would generally apply again, except for prescriptions under the buprenorphine or VA final rules or another statutory exception.
Do I need a separate DEA registration for every state where my telehealth patients live?
Under the Ryan Haight framework, practitioners generally need registration in the patient’s state, and the proposed special registration rule would add state-level telemedicine registrations. During 2026, the temporary rule relies on the practitioner’s existing registration, but state law requirements still apply. Confirm requirements for each state.
Does an interstate licensure compact let me prescribe controlled substances in other states?
No. Compacts such as the IMLC, NLC, and PSYPACT address professional licensure. DEA registration, state controlled substance registration, and PDMP access must be handled separately.
Do telehealth providers have to check the PDMP in the patient’s state?
Often, yes. Many states require PDMP checks before prescribing certain controlled substances, and the buprenorphine telemedicine rule requires a check of the patient’s state PDMP. Requirements vary by state and medication.
Does credentialing or payer enrollment authorize a provider to prescribe?
No. Credentialing verifies qualifications and enrollment enables reimbursement. Authority to practice and prescribe comes from state licensure, DEA registration, and any required state registrations.
This article is for general informational purposes and is not legal advice. Telemedicine prescribing rules change frequently. Consult qualified healthcare counsel and official DEA and state sources before making compliance decisions.
