Telehealth Prescribing of Controlled Substances: The 2026 Rules

Prescribing a controlled substance via telehealth requires two things at once: a DEA-registered provider and, under the Ryan Haight Act, generally a prior in-person medical evaluation — unless a telemedicine exception applies. The DEA and HHS have temporarily waived the in-person requirement for certain prescriptions through December 31, 2026. State controlled-substance laws apply on top of all of that. For any clinic touching TRT, peptides, or other scheduled drugs, these rules are the business, not a footnote.

This guide is written for operators, not attorneys, and it is not legal advice. It separates the layers — federal registration, the in-person-exam rule, the current flexibilities, drug scheduling, and state law — so you can see exactly where your category sits. Beneath all of it is the licensure layer covered in the state licensing requirements; controlled-substance authority is stacked on top of that.

---

What Does It Take to Prescribe a Controlled Substance via Telehealth?

At minimum: a provider licensed in the patient's state, an active DEA registration, and satisfaction of the Ryan Haight Act's in-person-exam requirement or a valid exception. A controlled-substance prescription that is missing any of these is not lawful, no matter how routine the medication feels to the patient or the clinic.

These requirements are cumulative. A provider can be fully licensed to practice medicine in a state and still not be permitted to prescribe a scheduled drug there without DEA registration and, where the state requires it, a separate state controlled-substance registration. Because the pieces are independent, a clinic can pass one check and fail another — which is why controlled-substance categories demand a dedicated compliance workflow rather than being folded into the general prescribing flow.

---

What Is the Ryan Haight Act and Why Does It Matter?

The Ryan Haight Online Pharmacy Consumer Protection Act amended the Controlled Substances Act to require, in most cases, at least one prior in-person medical evaluation before a practitioner may prescribe a controlled substance by means of the internet. The rule lives in 21 U.S.C. 829(e) and it is the default federal bar for online controlled-substance prescribing.

The Act was a response to rogue internet pharmacies dispensing controlled drugs with no genuine medical relationship. It defines a set of telemedicine exceptions — for example, when the patient is treated in a DEA-registered hospital or clinic, or is in the physical presence of another registered practitioner — but those exceptions are narrow and do not fit a typical direct-to-consumer telehealth flow. Absent a broader waiver, the in-person requirement is what makes fully remote controlled-substance prescribing legally difficult. We break down the mechanics in how the Ryan Haight Act applies in 2026.

---

Do the DEA Telemedicine Flexibilities Still Apply in 2026?

Yes. The DEA, together with HHS, extended the COVID-era telemedicine flexibilities that permit registered practitioners to prescribe certain controlled substances via telemedicine without a prior in-person evaluation. The current extension runs through December 31, 2026. These flexibilities are what make remote prescribing of scheduled drugs practical today, but they are explicitly temporary.

The important operator framing is that this is a bridge, not a settled rule. The flexibilities have been extended multiple times while the DEA works toward a permanent framework (including proposals for a special registration for telemedicine). A clinic that assumes today's flexibility is permanent is exposed to a policy change it cannot control. We track the current state of play in the DEA telemedicine flexibilities extension. Two disciplines protect you: keep documentation that would satisfy the in-person requirement if it snapped back, and design your catalog so the clinic is not solely dependent on a single controlled category.

---

How Does Drug Scheduling Change the Rules?

The drug's schedule determines how heavily it is regulated. Schedules run from I (no accepted medical use) to V (lowest potential for abuse), per the DEA controlled substance schedules. Anything scheduled triggers the controlled-substance rules; the schedule then affects refill limits, transmission requirements, and state overlays.

For the categories operators actually launch, scheduling maps cleanly:

Category	Typical drug	Controlled?	Practical implication
TRT / men's hormone	Testosterone	Yes — Schedule III	DEA registration + Ryan Haight rules apply in full
Weight management	Compounded GLP-1 (e.g., semaglutide)	No (not scheduled)	Not a controlled-substance issue; FDA compounding rules dominate
Many peptides	Selected peptide therapies	Usually no	Generally outside DEA scheduling; confirm each molecule
Sexual health	PT-141, sildenafil, tadalafil	No	Non-controlled; standard Rx rules
Hair loss	Finasteride, minoxidil	No	Non-controlled; standard Rx rules

The lesson from the table is that TRT is the category most operators underestimate: because testosterone is Schedule III, a TRT clinic is fully inside the DEA framework even though patients think of it as wellness. We cover that specific case in prescribing compounded testosterone via telehealth.

---

What State-Level Rules Stack on Top?

State controlled-substance law applies in addition to the federal rules, and it can be stricter. Many states require a separate state controlled-substance registration, mandate a check of the state's Prescription Drug Monitoring Program (PDMP) before prescribing, set their own telehealth-visit standards, or limit quantities and refills. Federal permission is a floor, not a ceiling.

Because you must satisfy the destination state's rules for every patient, a controlled-substance category multiplies your compliance surface by the number of states you serve. Practical guardrails:

• Confirm state registration. Check whether each destination state requires its own controlled-substance registration in addition to the DEA one.
• Wire in PDMP checks. Where required, make the PDMP query a gated step in the clinical workflow, not an afterthought.
• Respect quantity and refill caps. Some states limit initial fills or require periodic re-evaluation for continued therapy.
• Keep the exam record. Maintain documentation of the medical evaluation that supports each controlled-substance prescription.

---

Can Operators Sidestep This Layer Entirely?

Yes — by launching with non-controlled compounded medications. A large share of compounded therapies (many hormones other than testosterone, most peptides, topicals, sexual-health and hair-loss drugs) are not controlled substances, so prescribing them via telehealth does not trigger DEA registration or the Ryan Haight in-person requirement for that prescription. Non-controlled 503A compounding is the lower-risk default, and it is why many operators start there.

This is not about avoiding TRT forever — it is about sequencing. A clinic can build its storefront, provider workflow, and pharmacy routing on non-controlled products, prove the operation, and add a controlled category later with the dedicated registration and documentation it requires. Structuring the business so a controlled category is an addition rather than a foundation keeps you off the critical path of a temporary federal flexibility. That optionality — add or drop a category without rebuilding the stack — is exactly what an overlay model is designed to preserve.

---

Key Takeaways

• Controlled-substance prescribing needs both a state license and an active DEA registration — one does not imply the other.
• The Ryan Haight Act generally requires a prior in-person exam before prescribing a controlled substance online, with narrow exceptions.
• The DEA/HHS telemedicine flexibilities waive that in-person exam for certain drugs through December 31, 2026, but they are temporary.
• Testosterone is Schedule III, so TRT clinics are fully inside the controlled-substance framework.
• State registrations, PDMP checks, and quantity limits stack on top of the federal rules.
• Non-controlled 503A compounding avoids this layer, making it the common lower-risk launch path.

---

Frequently Asked Questions

Is testosterone a controlled substance for telehealth purposes?

Yes. Testosterone and other anabolic steroids are Schedule III controlled substances under the federal Controlled Substances Act. A telehealth TRT clinic is therefore fully subject to DEA registration, the Ryan Haight Act, and the current telemedicine flexibilities — it is not a general-wellness product in regulatory terms.

Do the DEA telemedicine flexibilities still apply in 2026?

Yes, for now. The DEA and HHS extended the flexibilities that allow prescribing certain controlled substances without a prior in-person exam through December 31, 2026. They are temporary and conditional, so a permanent rule or further extension could change things — build a workflow that can adapt.

Can I avoid controlled-substance rules by only offering non-controlled products?

Largely, yes. Many compounded medications — a range of hormones, peptides, and topicals — are not controlled substances, and prescribing them via telehealth does not trigger the Ryan Haight Act or DEA registration for that prescription. This is why operators often launch with a non-controlled catalog.

Do state laws add requirements beyond the federal rules?

Frequently. Some states require a separate controlled-substance registration, impose their own visit standards, mandate PDMP checks, or cap quantities. State law can be stricter than federal but not more permissive, so you must satisfy both.

---

neolife is the fulfillment rail that sits on top of the compounding pharmacy you already use, and a licensed provider approves every order — so whether you launch with non-controlled 503A products or add a scheduled category later, the approval and documentation trail stays intact and the pharmacy relationship stays yours. If you want to add or drop categories without rebuilding your stack, talk to us. This post is educational and not legal or medical advice; consult qualified counsel and confirm current DEA and state requirements before prescribing controlled substances.