DEA telemedicine rules after 2026: the special registration rule for brands

The DEA telemedicine special registration rule is the one federal document that decides how much of a controlled-substance product line can run without an in-person visit. For a brand operator, most of the rule is somebody else's problem. The prescriber holds the registration, runs the prescription monitoring checks and files the reports. What lands on the brand is narrower and more commercial: whether Schedule III testosterone stays a fully virtual product, whether ADHD stimulants can be offered at all through a telehealth-only clinic, and what the sleep menu looks like once the temporary flexibilities lapse. This post takes the rule from the operator's side and says plainly what is verified, what is only proposed, and what is still unknown as of late September 2026.

Where things stand today

The starting point is the Ryan Haight Online Pharmacy Consumer Protection Act of 2008. It requires at least one in-person medical evaluation before a practitioner prescribes a controlled substance by means of the internet, with a short list of exceptions. One of those exceptions was a "special registration" for telemedicine that Congress told the DEA to create. The agency did not create it for more than a decade.

The COVID-19 public health emergency changed the practical picture. In March 2020 the DEA waived the in-person requirement for the duration of the emergency, and telehealth prescribing of controlled substances, testosterone included, became routine. When the emergency ended in 2023, the DEA and HHS issued a series of temporary rules extending those flexibilities rather than letting them expire. The current one is the fourth. Published in the Federal Register on December 31, 2025, it keeps the full set of flexibilities in place from January 1 through December 31, 2026. While that extension is in force, a DEA-registered practitioner may prescribe Schedule II through V controlled substances by telemedicine to a patient they have never met in person, provided the prescription is for a legitimate medical purpose in the usual course of practice and state law allows it.

The DEA also published a proposed rule on January 17, 2025, titled "Special Registrations for Telemedicine and Limited State Telemedicine Registrations." That is the document this post is about. As of this writing the final version has not been published. Law-firm and trade-press reports say the DEA sent a final rule to the White House Office of Information and Regulatory Affairs on August 25, 2026, and that the regulatory agenda lists final action for November 2026. The text under review is not public, so nobody outside the government knows how far the final rule departs from the proposal after the more than 6,400 public comments those same reports describe. Anything below that describes the rule's contents is describing the January 2025 proposal.

What the January 2025 proposal asked for

The proposal replaced a single in-person visit with a registration system. Three new registration types would sit alongside a practitioner's ordinary DEA registration.

• A Telemedicine Prescribing Registration, which would let a clinician practitioner prescribe Schedule III, IV and V controlled substances by telemedicine without a prior in-person evaluation.
• An Advanced Telemedicine Prescribing Registration covering Schedule II through V, limited to a short list of specialties the DEA considered to have a heightened need: psychiatrists, hospice and palliative care physicians, pediatricians, neurologists, and mid-level practitioners working in those fields.
• A Telemedicine Platform Registration for companies that facilitate telemedicine prescribing between practitioners and patients, which is the category a telehealth brand or its software vendor could fall into.

On top of the federal registration, a practitioner would need a State Telemedicine Registration for every state in which they treat patients by telemedicine, unless they already hold a DEA registration in that state. Each state registration would carry its own fee, and the whole burden sits with the professional entity and the prescribers, not with the marketing company.

The proposal also set conditions on how the registration is used. Practitioners would have to check the patient's state prescription drug monitoring program, the PDMP, before each prescription, with the check widening to a nationwide search after a phase-in period. Schedule II prescriptions issued under the special registration could be no more than half of a practitioner's total controlled-substance prescriptions in a calendar year, and a Schedule II prescription could be issued only when the practitioner and the patient were physically in the same state. Practitioners would verify the patient's identity against a government-issued photo ID, note on each prescription that it was issued by telemedicine, and keep records the DEA could inspect. Platform registrants would file annual reports on prescribing activity.

What is still unknown until the final rule publishes

Every one of those elements drew comments. The specialty list for the advanced registration, the 50 percent cap on Schedule II, the same-state requirement and the PDMP timeline were the parts the DEA itself flagged as open questions in the proposal. The final rule could keep them, loosen them or drop them. There is also no published effective date. A final rule in November would leave, at most, a few weeks before the flexibilities expire, and a rule of this size normally carries a delayed compliance date so that registrants have time to apply. Whether the DEA bridges the gap with a fifth temporary extension, a phase-in, or nothing at all is not known.

Three operator-level questions cannot be answered until the text is public: whether Schedule II by telemedicine will be available outside the listed specialties at all; whether the platform registration applies to a white-label brand, to the professional corporation that employs the prescribers, or to the software vendor that hosts the visit; and what the state registration fees add up to across a fifty-state provider bench. The glossary entry on DEA telemedicine rules is the page on this site that will be updated when the final rule publishes.

What it means for testosterone, ADHD, sleep and opioid use disorder

Testosterone and its esters are Schedule III. Under the proposal they fall inside the base Telemedicine Prescribing Registration, which any clinician practitioner could hold. That is the single most important line in the rule for a hormone brand: Schedule III testosterone stays a fully virtual product. The prescriber needs the special registration and the state registrations, has to run the PDMP check and verify identity, but no in-person visit is required, and the 50 percent cap and the same-state rule apply only to Schedule II. A hormone therapy or TRT clinic built today on a telehealth-only model does not need to change its patient journey. It needs prescribers who hold the right registrations by the compliance date.

ADHD is a different product. Methylphenidate and the amphetamine salts are Schedule II. Under the proposal, prescribing them by telemedicine without an in-person visit requires the advanced registration, which is limited to the named specialties. A general telehealth clinic staffed by family physicians and nurse practitioners would not qualify for that registration as proposed. Even a psychiatrist-staffed clinic would face the rule that Schedule II may be no more than half of the prescriber's controlled prescriptions and the requirement that prescriber and patient be in the same state during the visit, which makes a fifty-state stimulant clinic with a small provider bench hard to run. Non-stimulant ADHD medications such as atomoxetine, viloxazine and guanfacine are not controlled and are unaffected. An operator planning an ADHD brand should model two versions: a stimulant-capable clinic with in-person or specialty pathways, and a non-stimulant clinic that never touches the rule.

Sleep sits in the middle. Zolpidem, eszopiclone, zaleplon and the benzodiazepines are Schedule IV, and so are the orexin antagonists such as suvorexant. Under the proposal they fall under the base registration, like testosterone. Trazodone, doxepin, ramelteon and the melatonin-receptor products are not controlled. A sleep brand can keep a fully virtual model for its Schedule IV products under the proposal, subject to the same registration, identity and PDMP conditions that apply to TRT.

Opioid use disorder was handled separately. In the same January 2025 package the DEA issued a final rule allowing buprenorphine for opioid use disorder to be started by telemedicine, including audio-only, for an initial supply before any in-person evaluation. Its effective date was delayed after publication, and operators in that space should confirm its current status on the DEA's own telemedicine page rather than rely on any summary, including this one.

One more layer sits under all of this. The DEA rule is a floor, and state law can be tighter. Some states restrict which schedules may be prescribed by telehealth or require a synchronous video visit for controlled substances regardless of what the DEA allows. A prescriber has to satisfy both, and a brand has to know which states are on its map before it prices a controlled product.

Who carries each duty in the proposal

For the operator, the useful exercise is to sort the proposed duties by who carries them. Most of the list belongs to people the brand does not employ.

• The prescriber: the special registration application and fee, the state telemedicine registrations, the PDMP check before each prescription, photo ID verification, the telemedicine notation on each prescription, and recordkeeping.
• The professional corporation: credentialing prescribers against the registration types, tracking each prescriber's Schedule II share if that cap survives, and making sure electronic prescribing of controlled substances is in place so the audit trail exists.
• The platform or brand: possibly the Telemedicine Platform Registration and its annual report, plus whatever the professional corporation delegates by contract, which usually means identity verification at intake, location capture at the visit, and data retention.

EPCS deserves a sentence of its own. Federal rules for the electronic prescribing of controlled substances already require two-factor authentication, identity proofing of the prescriber and an audit log for every prescription. A telehealth clinic that already prescribes controlled substances electronically has most of the recordkeeping the proposal asks for. One that has been sending faxed or phoned prescriptions for testosterone does not.

What an operator should do before January 1, 2027

• Inventory every product by schedule. Non-controlled products are untouched. Schedule III to V products stay virtual under the proposal. Schedule II products need a specialty pathway or an in-person plan.
• Ask the professional corporation which prescribers intend to apply for the special registration, in how many states, and what that costs at whatever per-state fee the final rule sets. If the answer is "none yet", the January risk sits on the brand's revenue, not on the prescriber's license.
• Confirm EPCS is live for every prescriber who writes controlled prescriptions and that identity verification is captured at intake. Both are near-certain to appear in any final rule in some form.
• Write the contingency for active TRT patients on January 2 if the flexibilities lapse with no rule in force and no extension. The honest options are an in-person evaluation through a local partner, a pause in new controlled prescriptions while non-controlled therapy continues, and a state-by-state approach where state law leaves room.
• Watch two documents rather than the news cycle: the Federal Register for the final rule, and the DEA's telemedicine page for any extension notice.

Tessic Health runs the prescriber network and the pharmacy network for the brands it operates, so the registration work sits inside the professional entity rather than with the brand, and EPCS is already part of the e-prescribing setup. The guide on EPCS and controlled substances in a white-label clinic explains how that is structured. Under any version of the rule the operator's job is the product decision: which schedules to sell, in which states, with which patient journey.

Schedule III testosterone stays a fully virtual product under the proposal. Schedule II stimulants do not, and no amount of platform engineering changes that.

Questions operators ask

Does a brand that never employs a prescriber need its own DEA registration? Under the proposal, possibly. The Telemedicine Platform Registration is aimed at entities that facilitate prescribing between practitioners and patients, and the proposal's definition was broad enough that a white-label brand, its software vendor, or both could be caught. The final rule may narrow it. The prescribers and the professional corporation need registrations under every version.

Will existing TRT patients need an in-person visit? Under the proposal, no, because testosterone is Schedule III and the base registration covers it. If the flexibilities lapse on December 31, 2026 with no final rule in force and no extension, the Ryan Haight Act's in-person requirement returns, and a patient who has never been seen in person by the prescriber or a covering practitioner would need that visit before the next controlled prescription.

Can a gym brand or a med spa add TRT in 2027? Yes, if the professional corporation behind it has prescribers holding the special registration and the relevant state registrations, and state law where the patient sits permits telehealth prescribing of Schedule III. The brand's own status does not change the answer.

Does compounded testosterone change anything? No. Compounding does not change the schedule. The pharmacy has to be DEA-registered, the prescription has to travel by EPCS where required, and the telemedicine rule applies to the prescriber the same way it does for a branded product.

Is this the same as the 2023 proposal? No. The DEA's February 2023 proposal would have allowed only a 30-day supply of most controlled substances by telemedicine before an in-person visit. The agency withdrew that approach after a large volume of comments and replaced it with the registration model in January 2025. The 2023 text has no legal effect and should not appear in any compliance plan. Until the final rule publishes, the operator's position is the one it has been since 2023: the flexibilities are real, they are temporary, and the only product decision that cannot wait is the one about Schedule II.