Telepsychiatry Staffing and DEA Rules: What Employers of Prescribers Must Know

The baseline federal rule comes from the Ryan Haight Act, passed in 2008: a practitioner may generally prescribe a controlled substance to a patient remotely only after at least one in-person medical evaluation of that patient, subject to statutory exceptions.

For a telepsychiatry service that prescribes stimulants, benzodiazepines or other controlled medications, this is the rule your intake model has to satisfy.

One detail matters enormously for staffing: the requirement attaches to the practitioner-patient relationship, not to the practice.

Once a practitioner has conducted one in-person evaluation of a patient, the Ryan Haight remote-prescribing requirements no longer apply to that relationship, and the practitioner may keep prescribing remotely for a legitimate medical purpose.

Two operating models follow.

A hybrid intake — one in-person visit, then remote follow-ups — creates relationships to which the Ryan Haight remote-prescribing requirements no longer apply, a status that does not depend on the temporary flexibilities.

A purely remote intake is the opposite: it works only while a flexibility authorizes it (the statute's narrow exceptions aside), which is why the deadline in the next section belongs on your staffing plan, not just your compliance calendar.

Since the COVID-19 public health emergency, DEA and HHS have repeatedly suspended the in-person requirement by temporary rule.

The current authorization is the DEA-HHS Fourth Temporary Extension (90 FR 61301, published December 31, 2025), which extends the COVID-era telemedicine flexibilities for prescribing controlled medications through December 31, 2026.

In regulation form, 21 CFR 1307.41 authorizes a DEA-registered practitioner to prescribe Schedule II-V controlled substances via telemedicine without an in-person evaluation through that date, if the prescription is for a legitimate medical purpose, uses an interactive telecommunications system and meets the rule's other conditions.

The scope is narrower than “prescribing by video” in one respect.

The flexibilities cover audio-video encounters for Schedule II-V medications; audio-only encounters are covered only for FDA-approved Schedule III-V narcotic medications for opioid use disorder.

If your clinicians run intakes by phone, the rule that covers the visit depends on the drug and the diagnosis.

Where the three regimes stand:

The deadline currently has no successor.

As of a Federal Register search on October 7, 2026, DEA had published no fifth extension and no final special-registration rule — the Fourth Temporary Extension was the latest telemedicine rule.

The proposed replacement, the “Special Registrations for Telemedicine and Limited State Telemedicine Registrations” rule, remains only a proposal.

It would let special registrants prescribe without any in-person evaluation, subject to added recordkeeping and reporting, and it would also require registration of certain direct-to-consumer telemedicine platforms that function as intermediaries in the practitioner-patient relationship.

None of it is law, so do not plan hiring around it.

If the flexibilities lapse without a final rule, the pre-pandemic in-person requirement returns — DEA calls it the “telemedicine cliff”.

Until a newer Federal Register rule says otherwise, plan on the flexibilities ending December 31, 2026, and re-check DEA's Federal Register page close to the deadline.

Opioid use disorder treatment runs on its own rule, and it is a final rule rather than a temporary one.

DEA's buprenorphine telemedicine rule (21 CFR 1306.51) took effect December 31, 2025, after two delays (first to March 21, 2025, then to December 31, 2025).

Under it, a practitioner may prescribe FDA-approved Schedule III-V opioid use disorder medication — buprenorphine among them — by telemedicine, including audio-only, for up to six calendar months from the date of the first prescription without an in-person evaluation.

The rule's conditions are operational, and they belong in your workflow design.

Before prescribing, the practitioner must review the prescription drug monitoring program (PDMP) data of the state where the patient is located, covering the last 12 months, and record the date and time of the review in the record.

If the PDMP is unavailable, the rule allows only a seven-day supply at a time, with a new PDMP attempt before each further seven-day supply.

At the pharmacy end, the pharmacist must verify the patient's identity with government-issued photo ID (or other identification) before filling — a step your patient onboarding should flag, or fills stall.

After six months, the telemedicine path ends unless the patient has had an in-person evaluation or another route the statute provides applies.

One overlap note for 2026: while the temporary flexibilities run, a practitioner may prescribe under them even where the buprenorphine rule would also apply, because the temporary rule imposes fewer requirements.

Build the workflow to the buprenorphine rule anyway — it is the regime that survives a lapse of the flexibilities.

One hiring consequence: the X-waiver is gone.

DEA's final rule implementing the SUPPORT Act changes and the 2022 removal of the X-waiver provisions was published June 9, 2026 and took effect July 9, 2026.

For current buprenorphine roles, the credentials to verify are the state license and DEA registration — not a waiver.

An expensive misconception in telepsychiatry staffing is that one DEA registration covers remote prescribing anywhere.

DEA's position is the opposite: unless an exception applies, practitioners must hold a DEA registration both in the state where they dispense controlled substances and in each state where a patient receiving a controlled-substance prescription is located — and DEA's regulations require that separate registration in each patient state regardless of whether the prescription is made via telemedicine.

That patient-state rule sits on top of DEA's general registration rule: a separate registration is required for each principal place of professional practice at one general physical location where controlled substances are dispensed (21 CFR 1301.12(a)).

The two compound for a growing group practice — each location that dispenses, and each state your patients sit in, is its own registration question.

The cost line is knowable.

A DEA practitioner registration for Schedules II-V (Form 224) costs $888 and runs for 3 years (21 CFR 1301.13).

Unless an exception applies, every state where your patients sit means another Form 224 registration for that prescriber, on the same three-year renewal cycle — so put the multiplier into the ramp budget when you are adding a prescriber, alongside payer enrollment and the other ramp costs.

Verification closes the loop.

At offer and at renewal, confirm the registration is active and matches the states on the clinician's actual patient list — the same discipline as verifying DEA registration among prescriber credentials generally.

How the telemedicine window and the buprenorphine rule look from the clinician's chair is in our guide to PMHNP controlled-substance telehealth.

Clearing DEA does not clear state law.

States can layer their own telehealth prescribing rules on top, and the one this site has verified at statute level is Florida: under s.

456.47(2)(c), Florida Statutes, a telehealth provider may not use telehealth to prescribe a Schedule II controlled substance unless the prescription falls within listed exceptions — the treatment of a psychiatric disorder among them.

Do not generalize Florida's list to other states; check the board that licenses your prescribers in each state where patients sit.

The license layer follows the same patient-state map.

For psychiatric nurse practitioners, the Nurse Licensure Compact gives no multistate APRN authority — it covers RN and LPN licenses only — and the separate APRN Compact comes into limited effect only once 7 states enact it; it was not in effect as of September 2026, so each state's own APRN license is the credential to verify.

For psychiatrists, the Interstate Medical Licensure Compact counted 44 member states plus DC and Guam as of September 30, 2026 — but it is an expedited pathway to separate state licenses, not a multistate license, so your verification list still ends with a license from each state.

Which compact is live for which hire, and what to verify before the first out-of-state client, is mapped in our licensure compacts guide for employers.

The wider license, payroll and registration questions for remote hires are in our guide to hiring remote clinicians in other states.

The rules above compress into a staffing sequence.

Start with the patient-state map: which states your telehealth patients will sit in, because DEA registrations, state licenses and PDMP access all follow the patient.

Then decide the intake model, because it decides which rule does the work — an in-person first visit creates relationships to which the Ryan Haight remote-prescribing requirements no longer apply — compliance that does not ride on the flexibilities — while a remote-only intake rests on a flexibility that sunsets on December 31, 2026.

• Write the registration plan into the requisition: which states, $888 per Form 224 registration, and the three-year renewal cycle.
• Build PDMP access into opioid use disorder workflows before the first visit, including the seven-day-supply fallback when a PDMP is down and the date-and-time record of every check.
• Screen candidates on a license and DEA registration for your patient states — the X-waiver no longer exists to screen for.
• Diary the Federal Register for a fifth extension or the final special-registration rule before December 31, 2026, and draft the telemedicine-cliff contingency now, while there is time to change the intake model.

The rest of the hire — sourcing, screening, offers, onboarding — is the same discipline as any clinical hire, and the behavioral health hiring hub walks it end to end.

What DEA adds is a location test at every step: know where the patient sits, and the rest of the compliance chain can be built around that answer.