DEA Registration for Telehealth Practitioners: Everything You Need to Know

Any practitioner who prescribes, administers or dispenses controlled substances — including testosterone, a Schedule III drug — needs an individual DEA registration, and the long-standing rule is one registration for each state where your patients receive those prescriptions. Registration runs on a three-year cycle, sits on top of an active state license (plus a state controlled substance registration in some states), and operates alongside the Ryan Haight Act’s in-person evaluation requirement, whose telemedicine exceptions are still evolving as of this writing. Confirm the current fee and the current telemedicine rule on the DEA Diversion Control Division site before you prescribe.

Who needs a DEA registration in a telehealth hormone practice

Every clinician who signs a controlled substance prescription needs a personal registration. In a hormone clinic that usually means every prescriber, because the core formulary includes scheduled drugs:

• Testosterone in every form — cypionate, enanthate, topical, oral — is a Schedule III controlled substance under federal law, as are other anabolic steroids such as nandrolone and oxandrolone.
• Phentermine, used in some weight-management programs, is Schedule IV.
• Not federally scheduled: estradiol, progesterone, thyroid medication, anastrozole and GLP-1 medications. State schedules can be stricter than the federal list — some states schedule hCG, for example — so check each state’s list.

Three rules catch new clinic owners:

• A practitioner registration is individual. You cannot issue prescriptions under a medical director’s, a collaborating physician’s or the clinic’s number.
• RNs, chiropractors and non-clinician owners cannot hold a prescriber registration; the clinic depends on its registered prescribers.
• If the offer includes testosterone for men or women, no prescriber should see a patient until that prescriber’s registration is active for that patient’s state.

One registration per state, plus state CSR or CDS registrations

A DEA registration is tied to a registered address in a specific state and is only valid on top of that state’s authority to prescribe. DEA’s long-standing position is that a practitioner needs a registration in each state where controlled substances are prescribed — for telehealth, where the patient is located. Temporary telemedicine flexibilities have at times relaxed parts of this; do not assume they apply to you without confirming the current rule.

The stack you maintain for each state:

Not every state has a separate CSR or CDS registration, but a number do, and the fee, form and renewal date are separate from both your license and your DEA registration. The order matters: state license first, state CSR where required, then DEA. The registered address should be a real practice location — DEA expects a physical address, not a PO box — and an address change has to be filed with DEA, not just updated in your EHR.

Cost, application steps and the renewal cycle

1. Confirm state authority. An active, unrestricted license and, where required, the state CSR or CDS registration.
2. Complete the one-time training attestation. Since June 2023, new and renewing registrants attest to eight hours of training on substance use disorders under the MATE Act; several pathways satisfy it.
3. Apply online. New practitioner applications use DEA Form 224 on the Diversion Control Division site. Select the schedules you will actually prescribe and that your state authority allows — at minimum Schedule III for testosterone.
4. Pay the fee. The fee is set by regulation, covers a three-year registration and is not refundable. It has been $888 per practitioner registration under the fee schedule in effect since 2020; fees change by rulemaking, so confirm the current fee on the DEA Diversion site rather than relying on any article, including this one.
5. Allow processing time. Plan on four to eight weeks, and do not schedule patients against a pending application.
6. Renew on time. Renewal uses Form 224a every three years. Put the date on a compliance calendar 60 days out; prescribing on an expired registration is not permitted.

Budget per state, not per clinic. A prescriber registered in five states at that fee level carries roughly $4,400 in DEA fees every three years, before state CSR fees. That number belongs in your expansion math: add a state when expected patient volume justifies the license, the registrations and the PDMP workload.

The Ryan Haight Act and the telemedicine flexibilities

The Ryan Haight Online Pharmacy Consumer Protection Act of 2008 generally requires at least one in-person medical evaluation by the prescribing practitioner before a controlled substance is prescribed by means of the internet. It applies to testosterone like any other scheduled drug. The statute contains narrow telemedicine exceptions — for example, a patient physically located in a DEA-registered hospital or clinic, or in the presence of another DEA-registered practitioner — and it directed DEA to create a special registration for telemedicine.

What has happened since:

• Beginning with the 2020 public health emergency, DEA and HHS allowed controlled substance prescribing by telemedicine without a prior in-person evaluation, subject to conditions.
• After the emergency ended in 2023, those flexibilities were extended more than once by temporary rule, each time with an expiration date.
• In January 2025, DEA published a proposed special-registration framework for telemedicine prescribing, with added conditions such as PDMP checks. A proposed rule is not a final rule.

As of this writing, the permanent framework is not something a clinic should treat as settled — confirm the current rule in the Federal Register and on the DEA Diversion site, and confirm it again before each expansion. State law is a separate layer: many states have their own requirements for establishing a patient relationship before prescribing controlled substances, and some are stricter than the federal rule. How these layers interact is covered in our guide to telemedicine hormone clinic compliance.

The operator’s rule: build a clinic that survives a tightening. Record in each chart whether and when the prescriber has evaluated the patient in person. Have a workable in-person pathway — a physical location, scheduled in-person days or a partner site — for the states that matter most. And document a real evaluation every time: live visit, history, baseline labs, diagnosis and treatment rationale before the first prescription.

PDMP checks, EPCS and record-keeping

PDMP. Register with the prescription drug monitoring program in every state where you prescribe. State mandates differ on which schedules trigger a required check and how often. A defensible clinic standard is to query before the first testosterone prescription and at a fixed interval afterward, and to note the check in the chart. Many states allow a delegate to run the query for the prescriber.

EPCS. Electronic prescribing of controlled substances requires software that meets DEA’s requirements, identity proofing of each prescriber and two-factor authentication at signing. Many states now require controlled substance prescriptions to be sent electronically. Confirm that your EHR includes EPCS, what it costs per prescriber and how long identity proofing takes, because that step often delays a launch.

Refill limits. A Schedule III prescription may be refilled up to five times within six months of the date it was issued. Your follow-up cadence therefore has to produce a new evaluation and a new prescription at least every six months; state rules may be tighter.

Records. DEA regulations require controlled substance records to be kept for at least two years, and state medical record rules usually run longer — keep to the longer period. For a prescribe-only telehealth clinic the record is the chart: evaluation, labs, diagnosis, prescription history and PDMP checks. If you stock testosterone to administer or dispense, the location must be registered and you take on inventories, dispensing logs, secure storage and theft-or-loss reporting. Most telehealth clinics avoid that by having a licensed pharmacy ship to the patient. Building these checks into the daily workflow is covered in our telemedicine hormone clinic operations guide.

NP and PA considerations

DEA registers nurse practitioners and physician assistants as mid-level practitioners, and their controlled substance authority comes entirely from state law. Before applying, confirm for each state:

• Which schedules an NP or PA may prescribe, and any quantity or day-supply limits.
• Whether a collaborative, supervisory or prescriptive-authority agreement is required, and whether it must specifically list controlled substances.
• Whether the collaborating or supervising physician must hold a DEA registration in that state.
• Whether a separate state controlled substance license or furnishing number applies to mid-level prescribers.

Multi-state NPs should expect to be independent in one state and collaborative in the next. If a required collaboration agreement ends, controlled substance authority in that state may end with it the same day, so keep a backup physician relationship for every state where your authority depends on one. This varies by state — confirm with your state board and counsel.

Common DEA mistakes telehealth clinics make

• Prescribing testosterone to a patient located in a state where the prescriber lacks a license, a state CSR or the DEA registration that state requires.
• Issuing prescriptions under another clinician’s registration.
• Treating the telemedicine flexibilities as permanent and building no in-person pathway.
• Skipping PDMP checks because testosterone is not an opioid.
• Prescribing without documented labs and a diagnosis. Every controlled substance prescription must be issued for a legitimate medical purpose in the usual course of professional practice, and marketing that promises a prescription undermines that.
• Missing a renewal, or moving without updating the registered address.
• Applying two weeks before launch and announcing an opening date the paperwork cannot support.

FAQ

Do I need a separate DEA registration for every state where I prescribe testosterone by telehealth?

The long-standing rule is yes: one DEA registration for each state where your patients are located when you prescribe controlled substances, plus any state CSR or CDS registration. Temporary telemedicine flexibilities and the proposed special-registration framework may change how this works. As of this writing, confirm the current rule with DEA and healthcare counsel before relying on a single registration.

How much does a DEA registration cost and how often is it renewed?

Practitioner registrations run on a three-year cycle and the fee is set by federal regulation; it has been $888 per registration under the schedule in effect since 2020. Confirm the current fee on the DEA Diversion Control Division site, and budget separately for each state registration and any state CSR fees.

Can a nurse practitioner or PA prescribe testosterone by telemedicine?

In many states, yes, with an individual DEA registration and whatever collaborative or supervisory arrangement state law requires. Schedule limits, agreement requirements and telemedicine prescribing rules vary by state — confirm with your state board and counsel before the first prescription.