Skip to content

Controlled Substances Compliance for DPC

Quick Summary: Prescribing controlled substances requires careful compliance with DEA regulations and state laws. DPC doesn't change these requirements—you're still bound by the same rules as any prescriber.

[!CAUTION] Controlled substance regulations vary significantly by state and change frequently. This guide covers general federal requirements. Always verify your state-specific rules through your state medical board and Board of Pharmacy before prescribing.

DEA Registration Basics

Getting Your DEA Number

Requirements: - Valid medical license in state of practice - Complete DEA Form 224 (new registration) - Fee: $888 for 3-year registration - Process: 4-6 weeks typically

Registration address: - Must match your practice location - If multiple locations, may need multiple DEAs (check requirements) - Home address acceptable if practicing from home (some states restrict)

Schedule II-V authorization: - Standard registration covers all schedules - Mid-level practitioners may have restrictions

DEA Renewal

  • Every 3 years
  • Apply 45 days before expiration
  • Online renewal available
  • $888 renewal fee

Multiple Locations

When you need separate DEA numbers: - Different states require separate registrations - Same state, different addresses: Check DEA guidance - Telehealth across state lines: Complex—get legal advice

Prescribing Requirements

Federal Requirements (All Schedules)

Every controlled substance prescription must have: - Patient full name and address - Drug name, strength, dosage form - Quantity prescribed - Directions for use - Number of refills (if applicable) - Date of issue - Prescriber name, address, DEA number - Prescriber signature

Schedule-Specific Rules

Schedule II (opioids, stimulants, etc.): - Written prescription required (or EPCS) - No refills allowed - 90-day maximum in most states - Some states require separate prescriptions for each fill

Schedule III-IV: - Up to 5 refills allowed - Valid for 6 months from issue date - Phone prescriptions allowed (document carefully)

Schedule V: - Least restrictive - Some available OTC in certain states - Still requires DEA for prescribing

EPCS (Electronic Prescribing for Controlled Substances)

Federal requirement: Medicare Part D requires EPCS as of 2022

State requirements: Many states now mandate EPCS

EMR requirements: - Must be DEA-certified for EPCS - Two-factor authentication required - Identity proofing required - Most modern EMRs support EPCS

Bootstrap note: If your EMR doesn't support EPCS, written prescriptions are still valid in most situations, but check your state.

State PDMP Requirements

What is the PDMP?

Prescription Drug Monitoring Program—state database tracking controlled substance prescriptions.

Most states require: - Check PDMP before prescribing controlled substances - Frequency varies (some every prescription, some periodic) - Registration required

PDMP Best Practices

  1. Check before every opioid prescription (regardless of requirement)
  2. Document that you checked
  3. Look for red flags:
  4. Multiple prescribers
  5. Multiple pharmacies
  6. Escalating doses

  7. Early refills

  8. Address concerns directly with patient

Interstate PDMP

Many states participate in interstate data sharing (PMP InterConnect). Check if your state shares data with neighboring states.

Documentation Requirements

Chart Documentation (Every Controlled Prescription)

Document: - Indication/diagnosis - Treatment alternatives considered - Risk/benefit discussion - PDMP review (date and findings) - Treatment goals - Follow-up plan

Opioid-Specific Documentation

For chronic opioid therapy: - Pain assessment (location, severity, function) - Functional goals - Risk assessment (ORT, SOAPP, etc.) - Informed consent/agreement - Periodic reassessment

Treatment Agreements

Consider for chronic controlled substances: - Written agreements optional but recommended - Clear expectations (one prescriber, one pharmacy) - Drug testing policy - Refill procedures - Consequences of agreement violation

Storage and Security

If You Dispense Controlled Substances

Physical security: - DEA-registered location required - Substantially constructed locked cabinet or safe - Limited access (you and authorized staff only) - Separate from non-controlled medications

Record keeping: - Separate controlled substance log - Inventory every 2 years (minimum) - Document all dispensing - Reconcile regularly - Keep records 2 years minimum

If You Keep Office Samples

Same security requirements apply to samples as dispensed medications.

Theft or Loss

Required: - Report to DEA within 1 business day (DEA Form 106) - Report to local police - Report to state Board of Pharmacy - Document in your records

Prescribing Pitfalls to Avoid

Red Flags DEA Watches For

  1. Excessive quantities - Far above standard dosing
  2. Unusual combinations - "Holy trinity" (opioid + benzo + muscle relaxant)
  3. Cash-only patients for controlled substances
  4. No legitimate examination before prescribing
  5. Ignoring PDMP data
  6. No treatment plan or follow-up
  7. Geographic anomalies - Patients traveling far for prescriptions

Legitimate Practice Protection

Document that you're prescribing: - For legitimate medical purpose - Within usual course of professional practice - Based on appropriate examination - With adequate follow-up

In other words: Practice good medicine and document it.

Special Situations

Buprenorphine (MAT for Opioid Use Disorder)

X-waiver eliminated (2023): - No longer need special waiver - Standard DEA allows MAT prescribing - Training still recommended - 30-patient limit removed

Documentation: Same as other controlled substances, plus addiction-specific notes.

Stimulants (ADHD Medications)

Common issues: - Adult ADHD requires careful diagnosis - Rule out substance abuse - PDMP checks recommended - Diversion risk (monitor)

Benzodiazepines

High-risk medication: - Avoid with opioids when possible - Document tapering plan for chronic use - Consider alternatives - PDMP monitoring

Compliance Checklist

Before You Prescribe Any Controlled Substance

  • Valid DEA registration at practice location
  • Registered with state PDMP
  • EMR supports EPCS (if required in your state)
  • Understand state-specific requirements
  • Treatment agreement template ready (for chronic therapy)

For Each Prescription

  • Legitimate medical purpose documented
  • PDMP checked (and documented)
  • Risk/benefit discussed with patient
  • Quantity appropriate
  • Follow-up scheduled

Ongoing Compliance

  • DEA renewal calendar reminder (every 3 years)
  • PDMP checked regularly
  • Controlled substance inventory (if dispensing)
  • CME on pain management/prescribing
  • Stay current on regulatory changes

When to Consult Specialists

Consider referring to pain management or psychiatry: - Escalating doses needed - Multiple failed treatments - Concerning behaviors - Complex comorbidities - Your discomfort with situation

Shared care is appropriate - You don't have to do everything.

If Something Goes Wrong

DEA Investigation

If DEA contacts you: 1. Be cooperative but cautious 2. Contact healthcare attorney immediately 3. Don't volunteer information beyond questions asked 4. Provide requested records 5. Document all interactions

Patient Diversion Suspected

  1. Do not accuse directly
  2. Document concerning behaviors
  3. Discuss with patient professionally
  4. Discontinue prescribing if appropriate
  5. Provide referral/resources if addiction suspected
  6. Consider reporting to medical board if egregious

Prescribing Errors

  1. Document the error
  2. Correct if possible
  3. Report to pharmacy
  4. Learn from mistake
  5. Consider consultation for complex cases

Bootstrap Approach to Compliance

You don't need expensive compliance systems to prescribe safely:

  1. Know your patients - DPC relationships reduce risk
  2. Document thoroughly - Standard EMR is sufficient
  3. Check PDMP religiously - It's free
  4. Prescribe conservatively - When in doubt, don't
  5. Refer freely - Pain management exists for a reason
  6. Stay educated - Free CME available

Cost of compliance: $888 DEA registration + your time. That's it.

Resources

  • DEA Diversion Control: deadiversion.usdoj.gov
  • State PDMP: Check your state Board of Pharmacy
  • SAMHSA: Guidelines for MAT
  • CDC: Opioid Prescribing Guidelines

[!NOTE] Compliance with controlled substance regulations is non-negotiable. Violations can result in DEA action, loss of license, and criminal prosecution. When in doubt, prescribe conservatively and document thoroughly.

DPC doesn't exempt you from controlled substance regulations. The same rules apply whether you're in a large hospital system or a solo bootstrap practice. Know the rules, follow them, and document everything.