DEA Telemedicine Rule 2027: TRT and Weight Loss Clinics

The COVID-era DEA flexibility that lets you prescribe controlled substances over video without an in-person visit expires at the end of the day on December 31, 2026. The fourth temporary extension is effective “January 1, 2026 through December 31, 2026,” and the regulation itself says the authorization “expires at the end of December 31, 2026” (21 CFR 1307.41). Testosterone is Schedule III and phentermine is Schedule IV, so both are inside it.

The replacement is a DEA “special registration” for telemedicine, proposed in January 2025. As of October 2026, the final rule has not been published. It has been at the White House Office of Information and Regulatory Affairs (OIRA) since August 25, 2026, and the Unified Agenda projects final action in November 2026. Nobody outside government has seen the text under review, so nobody outside government knows how the proposal changed.

Law-firm alerts on this rule are written for hospitals and telehealth platforms. This guide is written for the solo NP or physician running a cash-pay TRT or weight loss clinic: which registration you would need, what it costs, what happens on January 1 if the rule slips, and what to do in October, November, and December. Current as of October 2026.

What expires on December 31, 2026?

Under 21 CFR 1307.41(b), from May 12, 2023 through December 31, 2026, a DEA-registered practitioner may prescribe Schedule II-V controlled substances via telemedicine “to a patient without having conducted an in-person medical evaluation.” The conditions in 1307.41(c) still apply during that window:

• The prescription is for a legitimate medical purpose in the usual course of professional practice.
• It is issued after a communication using an interactive telecommunications system as defined in 42 CFR 410.78(a)(3). DEA’s preamble describes audio-only encounters only for opioid use disorder treatment with Schedule III-V narcotics. Plan on video for testosterone and phentermine.
• You are acting under a DEA registration or exemption.
• It is consistent with all other requirements of 21 CFR part 1306.

DEA says it extended the flexibility again to allow “additional time to finalize and implement effective regulations that balance access to care with … safeguards against diversion.” The proposal drew over 6,475 comments, and the preamble calls an abrupt end “the ‘telemedicine cliff.’”

The timeline so far

The pattern matters. The third extension came out in November 2024 and the fourth on the last day of 2025. DEA has extended four times and usually late.

Will the DEA special registration final rule publish in time?

Nobody can say. As of October 2026, a Federal Register search for DEA telemedicine documents since the fourth extension returns nothing new. The rule is at OIRA, and the Unified Agenda target is November, but a target is not a commitment.

Even a November publication does not guarantee a smooth January 1. The proposed regulatory text leaves the effective date as a placeholder for the final rule to fill, and DEA would need time to process applications, so a gap between January 1 and the first approved registrations is possible. The two realistic scenarios are:

1. DEA publishes the final rule in November with an effective date and an application window. You would apply, and a gap is possible while applications are processed.
2. DEA issues a fifth extension, as it has four times before, probably late.

Plan for a third scenario, where neither happens, because that is the one that interrupts your prescribing.

Which special registration would a TRT or weight loss clinic need?

The January 2025 proposal creates three registrations. For a TRT or weight loss clinic, the first one is the only one that matters.

In plain language: a “clinician special registrant” is simply a physician or NP/PA holding one of these registrations. A practice prescribing testosterone (III) or phentermine (IV) would need the base-tier Telemedicine Prescribing Registration. You would not qualify for the Advanced tier under the proposal, and you would not need it, because you do not prescribe Schedule II.

Four other details from the proposal, all as proposed and all subject to change in the final rule:

• A DEA registration is a prerequisite. An applicant “would be required to already have one or more DEA registrations under 21 U.S.C. 823(g).”
• A DEA-issued State Telemedicine Registration is required for every state where you prescribe by telemedicine. It is “a DEA-issued registration and not a registration issued by the individual states.” The proposed fee is $50 per state, on the same three-year cycle.
• Prescriptions must carry the registration numbers. Under proposed 21 CFR 1306.47, they must include your Special Registration number and your State Telemedicine Registration numbers, in addition to the usual elements.
• The platform definition has a carve-out to watch. A “covered online telemedicine platform” excludes a “local in-person medical practice,” meaning a practice that is not a hospital, clinic, or insurance provider, whose offices are all within 100 miles of each other, and where less than 50 percent of the practice’s controlled prescriptions are issued via telemedicine in a given month. A clinic that writes most of its controlled prescriptions over video would lose that exclusion and would then be judged on the rest of the platform definition, which looks at things like promoting controlled-substance prescribing and financial ties to prescription volume. A mostly in-person clinic with a telehealth arm keeps the exclusion. Check whether this survived in the final rule.

For completeness: the Schedule II conditions in the proposal (a same-state requirement and a cap keeping special registration Schedule II prescriptions under 50 percent of the clinician’s total Schedule II prescriptions in a calendar month) apply only to the Advanced tier, and DEA said it “anticipates imposing one or both.” They do not touch TRT or phentermine.

What would the proposed rule require at each visit?

The base tier is lighter than the Advanced tier on drug scope, but it carries documentation duties that a cash-pay clinic does not have today.

Identity. Under proposed 21 CFR 1304.04(i), you would require the patient to present a state or federal government-issued photo ID through the video camera. At the first telemedicine encounter you would capture a photographic record of the ID and use it to confirm identity at later encounters. Retention is a minimum of two years.

Encounter record. Under proposed 21 CFR 1304.04(j), for every telemedicine encounter that results in a special registration prescription, you would record the date and time, the patient’s address during the encounter, and the patient’s home address, retained for a minimum of two years.

EPCS. Special registration prescriptions would have to be issued through electronic prescribing for controlled substances. Unlike the Medicare Part D mandate described below, this one would reach cash-pay prescriptions.

PDMP. Prescribing would follow identity verification and a PDMP check. The nationwide PDMP check of all 50 states would have a delayed effective date of three years. In the interim, you would check the patient’s state, your own state, and any state with a reciprocity agreement with those two.

State law stacking. Under proposed 21 CFR 1306.46, you would follow the law of the state where you are, the state where the patient is, and any state where you hold a DEA registration. Where they conflict, “the special registrant would be required to follow the more restrictive state law and regulations.”

Can I keep prescribing testosterone and phentermine over video if the rule slips?

Only if one of the lawful bases below applies. If the flexibility lapses on December 31, 2026 and the final rule is not in effect, the statute governs on January 1, 2027. That statute is the Ryan Haight Act, 21 U.S.C. 829(e).

The core rule is one sentence. A valid prescription over the Internet must be “issued for a legitimate medical purpose in the usual course of professional practice by a practitioner who has conducted at least 1 in-person medical evaluation of the patient.” The key points:

• One in-person evaluation, ever. On the statute’s face it does not expire and does not have to be repeated. A patient you have examined in person once can be managed by video afterward under the statute itself, with no flexibility and no special registration, subject to whatever your state adds.
• It must be the prescriber. An in-person evaluation means a medical evaluation “conducted with the patient in the physical presence of the practitioner,” even if portions of the evaluation are conducted by other health professionals. A colleague’s in-person visit does not count for a different prescriber.
• The covering practitioner is the other route inside the definition. A practitioner who conducts a non-in-person evaluation at the request of a practitioner who evaluated the patient, in person or through the practice of telemedicine, within the previous 24 months, and who is temporarily unavailable, can prescribe under 829(e)(2)(C).
• Statutory telemedicine categories exist. Under 21 U.S.C. 802(54), the requirement does not apply when, for example, the patient is being treated by, and physically located in, a DEA-registered hospital or clinic, or is being treated in the physical presence of a registered practitioner in the patient’s state. Category (E) is the special registration itself. DEA said in the proposal that, so far, it has used only two of the seven statutory categories; the proposed rule would implement this one.

What this means for a panel that has never been seen in person

If you have telehealth-only patients on testosterone or phentermine whom you have never examined in person, you are in the same position as a new telehealth-only patient on January 1, 2027. Without a basis above, you cannot issue a new controlled prescription to them until you conduct one in-person evaluation yourself. For a solo prescriber, that means the patient has to be in the room with you once.

One buffer exists. Under 21 CFR 1306.22(a), a Schedule III or IV prescription authorized for refills cannot be refilled more than five times or beyond six months from issue. A prescription with refills written in December can carry a patient into 2027, assuming it was validly issued while the flexibility was in effect; no source addresses post-expiration refills directly, so confirm with counsel or the dispensing pharmacy. It does not authorize a new prescription after December 31 for a never-seen patient.

Testosterone (Schedule III) vs phentermine (Schedule IV): does the schedule change anything?

For the DEA telemedicine rules, no. Testosterone is Schedule III (drug code 4000) and phentermine is Schedule IV (drug code 1640) on the DEA Diversion Control Division’s controlled substances list, and the CFR schedules are at 21 CFR 1308.13 and 21 CFR 1308.14. Both sit inside the base-tier registration (III-V) and both are covered by the current flexibility (II-V).

The differences show up elsewhere: refill limits (above), state PDMP mandates that cover both, and state weight loss rules that attach to phentermine specifically.

GLP-1s such as semaglutide and tirzepatide are not controlled substances. They are not on the DEA list, so none of this applies to them. Their rules are a separate topic: see compounded GLP-1 prescribing rules.

Which state rules override the federal floor?

The federal rule is a floor. The proposal itself says that if two states’ laws conflict, the stricter one governs. Check the medical board rules in every state you serve. Florida and New York are the two verified examples here.

A common misreading about Florida

Florida 456.47 is often read as a Florida telehealth ban on controlled substances. It is not. It bars only Schedule II by telehealth, with the four exceptions above. It does not bar Schedule III testosterone or Schedule IV phentermine. Under 456.47(2)(b), a telehealth provider who conducts an evaluation sufficient to diagnose and treat is also “not required to research a patient’s medical history or conduct a physical examination” before using telehealth.

Florida’s real overlay for a weight loss practice is Board of Medicine Rule 64B8-9.012, which applies to “any drug, synthetic compound, nutritional supplement, or herbal treatment used for the purpose of providing medically assisted weight loss.” The patient needs an initial BMI of 30 or above, or above 27 with at least one comorbidity, or body fat of at least 25 percent (men) or 30 percent (women). The initial evaluation, which may be delegated to a PA or APRN, covers a physical and complete history and tests related to weight loss treatment; the record needs written informed consent, a re-evaluation at least once every 3 months, and proof the patient received the Weight-Loss Consumer Bill of Rights (s. 501.0575, F.S.). The rule does not mention telehealth, so whether a video visit satisfies its “physical” evaluation is a question for the Board. Ask before assuming.

What EPCS and PDMP requirements apply no matter what?

These bind today, regardless of what DEA publishes.

Federal EPCS is permitted, not mandated. 21 CFR 1311.100 says a practitioner “may” issue electronic prescriptions for Schedules II-V if its conditions are met, including using an electronic prescription application that meets the subpart’s requirements. 21 CFR 1311.115(a) requires two-factor authentication: two of the three of something you know (a password), something you are (a biometric), and something you have (a hard token separate from the computer).

Medicare Part D has an EPCS threshold. Under 42 CFR 423.160(a)(5), prescribers must conduct at least 70 percent of their Schedule II-V Part D prescribing electronically, with exceptions for 100 or fewer Part D controlled prescriptions a year. A cash-pay clinic that writes no Part D claims is outside it. State mandates are the ones that reach cash pay:

• Florida EPCS: Fla. Stat. 456.42(3) requires electronically generated and transmitted prescriptions for practitioners who maintain an electronic health record system or prescribe as an owner, employee, or contractor of a licensed facility, with eight listed exceptions.
• New York e-prescribing: N.Y. Pub. Health Law 281 provides that “no person shall issue any prescription in this state unless such prescription is made by electronic prescription,” with exceptions that include practitioners certifying 25 or fewer prescriptions a year.

PDMP checks are state mandates today.

• Florida: Fla. Stat. 893.055(8) requires you to consult the system “before prescribing or dispensing a controlled substance for a patient age 16 or older,” with exceptions including nonopioid Schedule V and hospice patients.
• New York: N.Y. Pub. Health Law 3343-a requires consulting the registry “prior to prescribing or dispensing any controlled substance listed on schedule II, III or IV.”

If you serve patients outside Florida and New York, look up the equivalent rules in each state before the January 1 date.

The 90-day plan: October, November, December

Dates are explicit because the decision points are.

October 2026

• Inventory every active testosterone or phentermine patient and mark whether you, the prescriber, have ever evaluated them in person. A colleague’s visit does not count.
• Confirm EPCS is live and that two-factor authentication works for every prescriber.
• Confirm a PDMP check is documented for every controlled prescription, in every state you serve.
• Pull each state’s medical board telehealth and obesity rules for every state where you have patients.

November 2026

• Watch federalregister.gov for the final rule. When it publishes, read the effective date, the application process, whether the local in-person practice definition survived, and whether the photo ID and encounter record requirements survived.
• Start scheduling in-person visits for telehealth-only patients, beginning with those who would run out of refills in January.

December 2026

• By mid-December, decide among three paths: apply for the special registration, convert telehealth-only patients to in-person-established, or pause new telehealth-only controlled prescribing on January 1.
• Make sure no telehealth-only patient’s supply runs past December 31 without a plan.
• If a fifth extension publishes, record its Federal Register citation and keep the in-person schedule anyway.
• If your patients pay through memberships, check how a pause or a visit requirement interacts with your billing terms. See membership auto-renewal laws.

Update this plan the week the final rule publishes. For more on how these practices run, see wellness, longevity, and weight loss practices.

Whatever DEA publishes, the visit itself will need the same pieces: an audio-video encounter, an electronic controlled-substance prescription, labs behind the diagnosis, and a note that records all of it. PrismEHR includes eRx with EPCS (see eRx Mobile), video telehealth, labs and orders, documentation templates, built-in messaging, and a patient portal. See how it fits wellness, longevity, and weight loss practices. Related reading: membership auto-renewal laws.