Telehealth controlled substance prescribing for NPs: the 2026 rules

Telehealth-based controlled substance prescribing sits at the intersection of federal DEA rules, COVID-era flexibilities that keep getting extended, state NP scope of practice laws, and state-specific controlled substance restrictions – all of which have been in flux since 2020. For an NP practicing via telehealth, getting this wrong means prescribing outside your legal authority, which carries DEA enforcement risk, state board consequences, and potential criminal exposure.

This guide covers where things stand as of 2026, what you can and cannot prescribe via telehealth, and how to structure your practice to stay compliant.

Quick-scan summary

The Ryan Haight Act: the baseline you’re working around

The Ryan Haight Online Pharmacy Consumer Protection Act of 2008 established the default rule: a DEA-registered practitioner may prescribe controlled substances via telemedicine only after conducting at least one in-person medical evaluation of the patient. The Act was designed to prevent internet-based “pill mills” from prescribing Schedule II–V substances without ever seeing a patient.

Without any exception, the Ryan Haight Act would require every telehealth NP to have seen each patient in person before issuing any controlled substance prescription. That would make telehealth prescribing of ADHD medications, anxiety medications, sleep aids, or opioids essentially impossible for practices without a hybrid in-person/virtual model.

The Act does provide narrow statutory exceptions. “Practice of telemedicine” is defined at 21 U.S.C. 802(54), which sets out seven specific circumstances – among them treatment in a DEA-registered hospital or clinic, treatment in the physical presence of another DEA-registered practitioner, Indian Health Service and VA settings, public health emergencies declared by the HHS Secretary, and a special registration pathway Congress authorized but DEA has never implemented. These exceptions are limited and are not a practical workaround for most telehealth NPs.

The 2026 extension: what’s currently allowed

When the COVID-19 public health emergency (PHE) ended in May 2023, it raised the question of what would happen to DEA’s COVID-era telemedicine flexibilities, which had allowed practitioners to prescribe controlled substances via telehealth without any in-person visit.

Rather than let the flexibilities lapse immediately, DEA issued a series of temporary extensions. As of January 1, 2026, the Fourth Temporary Extension of COVID-19 Telemedicine Flexibilities is in effect through December 31, 2026. This means:

• DEA-registered practitioners – including NPs with their own DEA registration – may prescribe Schedule II–V controlled substances via telemedicine to patients without a prior in-person evaluation
• Audio-video telehealth is permitted for all schedules under the extension
• Audio-only telehealth is permitted for Schedule III–V narcotic medications approved for opioid use disorder (primarily buprenorphine)
• Practitioners must meet the full requirements of their state NP scope of practice laws and collaborative practice agreements where applicable

This extension applies to both existing patients and new patients. The key requirements are that the NP must be validly DEA-registered, must be licensed in the state where the patient is located, and must comply with all applicable state telehealth prescribing rules.

Important caveat: These are temporary extensions. The fourth extension runs through the end of 2026. A final Special Registration rule has been under OMB review since August 2026, but whether it is published in time, what it requires, and whether a fifth extension bridges any gap were all still open questions as of September 2026. If you are building a telehealth practice around controlled substance prescribing, build in a contingency plan for what happens when the extension expires.

DEA Special Registration: proposed but not finalized

In January 2025, the DEA published a proposed rule that would create a formal Special Registration framework – a permanent mechanism allowing practitioners to prescribe controlled substances via telemedicine without a prior in-person visit, subject to additional requirements. Three types of special registrations were proposed:

1. A telemedicine prescribing registration for individual practitioners
2. A platform registration for online platforms that facilitate prescribing
3. A registration for treatment programs

DEA sent a final version of the rule to the Office of Management and Budget’s Office of Information and Regulatory Affairs (OIRA) for review on August 25, 2026. Its text is not yet public, so nobody outside the government knows how DEA changed the January 2025 proposal after more than 6,400 public comments. If it is published close to December 31, 2026, practices may have only weeks between seeing the final requirements and the expiry of the temporary extension. Until then, the fourth temporary extension fills the gap.

Schedule differences: II vs. III–V in telehealth

The distinction between DEA Schedule II and Schedules III–V matters in telehealth, though the 2026 extension has narrowed the practical difference under federal law.

Under federal law as extended, there is no absolute prohibition on prescribing any of these via telehealth in 2026. The substantive restrictions now come primarily from state law.

State-level restrictions: where it gets complicated

Federal law sets the floor. State law can raise it considerably higher. Several categories of state restrictions matter for telehealth NPs:

State telehealth prescribing laws: Some states prohibit prescribing Schedule II controlled substances via telehealth regardless of federal flexibility. Others require an in-person evaluation for initial prescriptions even when federal law does not. Check your state’s telehealth practice standards and your state medical or nursing board guidance.

NP scope of practice and prescriptive authority: Even if federal law permits telehealth prescribing, your state NP practice act governs what you can prescribe. In states with restrictive NP practice, your collaborative practice agreement may limit which schedules you can prescribe, require physician co-signature, or restrict telehealth-only prescribing.

State controlled substance laws: Many states have additional requirements for prescribing opioids specifically – mandatory prescription drug monitoring program (PDMP) queries, dosage limits, duration limits, and required counseling. These apply equally to telehealth prescribing.

Prescribing across state lines: You must be licensed in the state where the patient is physically located at the time of the telehealth encounter. A multistate license under the Nurse Licensure Compact (NLC) does not solve this for NPs – the NLC covers RN and LPN/LVN licensure only, not APRN licensure or prescriptive authority. The separate APRN Compact has been enacted by five states (Delaware, North Dakota, South Dakota, Utah, Wyoming) but needs seven to become operational, so as of 2026 it is not yet in effect. In practice, telehealth NPs must hold individual APRN licensure and prescriptive authority in every state where their patients are located, and generally hold a DEA registration in each of those states – DEA’s baseline rule is registration in the state where the patient is located.

Substances most affected by telehealth rules

Stimulants (ADHD medications): Adderall, Vyvanse, Ritalin, and Concerta are Schedule II. During the COVID extension period, telehealth ADHD prescribing expanded dramatically. Under the 2026 extension, this remains permitted federally – but several states have added state-level restrictions following public concern about telehealth ADHD prescribing volume. Some states now require in-person initial evaluations for new ADHD diagnoses even where federal law does not.

Opioids: Schedule II opioids (oxycodone, hydrocodone combination products, morphine, fentanyl) can be prescribed via telehealth under the 2026 extension, but opioid prescribing is subject to intense scrutiny and has extensive state-level overlay requirements (PDMP, dosing limits, treatment agreements). Chronic opioid management via telehealth remains high-risk from a regulatory standpoint.

Benzodiazepines: Schedule IV. Permitted under the extension. State restrictions vary; some states have concurrent prescribing warnings or require documentation of alternatives attempted before initiating.

Sleep medications: Zolpidem and similar agents are Schedule IV. Permitted via telehealth.

Buprenorphine/Suboxone for OUD: Schedule III. This is the most clearly supported telehealth prescribing scenario. Buprenorphine for opioid use disorder can be prescribed via audio-only telehealth under the extension – no video required. It is also the one scenario with a permanent rule already in force: DEA’s “Expansion of Buprenorphine Treatment via Telemedicine Encounter” final rule took effect December 31, 2025. It allows an initial six-month supply of Schedule III–V OUD medication via telemedicine, including audio-only, after a PDMP check, with further prescribing requiring an in-person evaluation or another permitted telemedicine pathway. While the fourth extension is in force, you may rely on its looser terms instead; when it ends, the buprenorphine rule remains.

Documentation standards for telehealth controlled substance prescribing

Your documentation must support the clinical necessity of the prescription and demonstrate compliance with applicable rules. For every telehealth controlled substance prescription:

• Document the telehealth modality used (audio-video or audio-only)
• Record the patient’s physical location at the time of the encounter
• Document the clinical evaluation findings that support the prescription
• Record PDMP query results before issuing the prescription
• Document any patient education about risks and safe storage
• Include the diagnosis and clinical rationale
• Note any relevant state-specific requirements you completed (e.g., required counseling, dosing limitation justification)

Telehealth records are subject to the same legal scrutiny as in-person records. A DEA audit of a telehealth practice will focus on whether your documentation supports the prescriptions issued. Thorough documentation is your primary defense.

For your DEA registration requirements, see NP DEA registration.

Practical workflow for telehealth NPs

NPs building telehealth practices around controlled substance prescribing should consider the following structural approach:

1. Verify your DEA registration is current and covers the state(s) where your patients are located (DEA registration is practice-location specific)
2. Confirm your state NP authority for each controlled substance you intend to prescribe – including whether your collaborative practice agreement, if required, covers those substances
3. Query PDMP before every controlled substance prescription – most states require this; many require it for telehealth encounters specifically
4. Maintain audio-video capability – audio-only telehealth is only explicitly permitted under the 2026 extension for buprenorphine/OUD; all other schedules should use audio-video to stay within clearly documented extension parameters
5. Track the DEA extension status – the fourth extension expires December 31, 2026; build an operational plan for what changes if it is not renewed or if a new rule takes effect
6. Document every encounter as if it will be audited – telehealth controlled substance prescribing is a DEA enforcement priority

When to get legal or regulatory help

Consult a healthcare attorney familiar with DEA regulations and NP practice if:

• You are starting a new telehealth practice and are uncertain about your prescriptive authority in the states you plan to serve
• You have received any DEA inquiry related to your telehealth prescribing volume or practices
• You are prescribing across state lines and are unsure whether your licensure covers NP prescriptive authority in compact or non-compact states
• A patient or pharmacy has disputed a telehealth prescription and regulatory review is likely

For billing and reimbursement issues related to telehealth practice, see NP billing and reimbursement basics.

References

1. Drug Enforcement Administration and Department of Health and Human Services, “Fourth Temporary Extension of COVID-19 Telemedicine Flexibilities for Prescription of Controlled Medications,” 90 Fed. Reg. 61301–61306, published December 31, 2025 (effective January 1, 2026 through December 31, 2026).
2. Ryan Haight Online Pharmacy Consumer Protection Act of 2008, Pub. L. 110-425, codified at 21 U.S.C. § 829(e). (In-person medical evaluation requirement before telemedicine controlled substance prescribing.)
3. Drug Enforcement Administration and Department of Health and Human Services, “Special Registrations for Telemedicine and Limited State Telemedicine Registrations” (Proposed Rule), 90 Fed. Reg. 6541, published January 17, 2025. (Three special-registration types; comments due March 18, 2025; not finalized as of mid-2026.)
4. Drug Enforcement Administration and Department of Health and Human Services, “Expansion of Buprenorphine Treatment via Telemedicine Encounter” (Final Rule), 90 Fed. Reg. 6504, published January 17, 2025; effective date delayed to December 31, 2025 (90 Fed. Reg. 13410), when it took effect. (Initial six-month supply of OUD medication via telemedicine, including audio-only, after PDMP review.)
5. Schedules of Controlled Substances, 21 CFR 1308.12–1308.15 (Schedules II–V), eCFR, accessed September 2026. (Schedule classifications for stimulants, opioids, benzodiazepines, ketamine, testosterone, pregabalin, and buprenorphine.)
6. National Council of State Boards of Nursing, “APRN Compact,” aprncompact.com / NCSBN.org, accessed September 2026. (Enacting states and the seven-state implementation threshold.)
7. Substance Abuse and Mental Health Services Administration, “Removal of DATA Waiver (X-Waiver) Requirement,” SAMHSA.gov, 2023. (Consolidated Appropriations Act, 2023: Section 1262, the Mainstreaming Addiction Treatment (MAT) Act, removed the X-waiver; Section 1263, the Medication Access and Training Expansion (MATE) Act, created the one-time 8-hour substance use disorder training requirement for DEA registrants.)
8. U.S. Department of Health and Human Services, “Prescribing Controlled Substances via Telehealth,” Telehealth.HHS.gov, accessed September 2026. (Plain-language summary of the telemedicine flexibilities, the buprenorphine rule, and state-law overlay.)
9. “DEA Gets Closer to Finalizing Telemedicine Special Registration,” National Association of State Controlled Substances Authorities (NASCSA), September 21, 2026. (Final special registration rule submitted to OIRA for review on August 25, 2026.)