Telehealth has transformed how medical practices deliver care, and for practices offering peptide therapy and GLP-1 weight loss programs, telehealth prescribing enables geographic reach that was previously impossible without multiple office locations.
However, telehealth prescribing operates within a complex regulatory framework that varies by state, medication type, and practice model. This guide covers what providers need to know about prescribing compounded peptides and GLP-1 medications via telehealth: the federal rules, state-by-state considerations, compliance requirements, and practical strategies for building a compliant telehealth prescribing practice.
Federal Regulatory Framework
The Ryan Haight Act
The Ryan Haight Online Pharmacy Consumer Protection Act of 2008 is the primary federal law governing online prescribing of controlled substances. Key provisions:
- Requires at least one in-person evaluation before prescribing controlled substances via the internet
- Defines “practice of telemedicine” with specific exceptions to the in-person requirement
- Applies only to controlled substances (Schedules II through V)
- Enforced by the DEA
Critical distinction for peptide and GLP-1 practices: Most peptides (BPC-157, CJC-1295/Ipamorelin, Thymosin Alpha-1, GHK-Cu, TB-500) and GLP-1 medications (semaglutide, tirzepatide) are NOT controlled substances. The Ryan Haight Act does not apply to these medications.
The Ryan Haight Act becomes relevant if your program includes:
- Testosterone (Schedule III)
- Nandrolone (Schedule III)
- HCG (currently not scheduled, but verify current status)
- Any other DEA-scheduled substance
COVID-Era Telehealth Flexibilities and Their Evolution
During the COVID-19 public health emergency, the DEA issued temporary rules allowing controlled substance prescribing via telehealth without an initial in-person visit. These flexibilities have been extended multiple times.
Current status (as of early 2026):
The DEA has proposed permanent rules for telehealth prescribing of controlled substances. The proposed framework includes:
- Initial 30-day supply via telehealth without in-person evaluation
- Subsequent prescriptions may require in-person evaluation or qualifying telehealth relationship
- Special registration category for telehealth prescribers
- State-specific requirements still apply on top of federal rules
Check the DEA Diversion Control Division for the most current telehealth prescribing rules, as this area continues to evolve.
FTC and Prescribing Practices
The Federal Trade Commission has authority over deceptive practices in healthcare marketing. For telehealth prescribing practices, this means:
- Do not advertise “guaranteed prescriptions” or imply medication will be prescribed without proper evaluation
- Marketing must accurately represent the clinical evaluation process
- Patient testimonials must comply with endorsement guidelines
- Subscription models must clearly disclose terms
State-by-State Considerations
Licensure Requirements
The foundational rule for telehealth prescribing: you must be licensed in the state where the patient is physically located at the time of the consultation. This is not where the patient lives permanently or where they receive mail; it is where they are sitting during the telehealth visit.
Options for multi-state practice:
-
Individual state licenses: Apply for licensure in each state where you want to treat patients. Most common approach for practices targeting specific markets.
-
Interstate Medical Licensure Compact (IMLC): An agreement among 40+ participating states that provides an expedited pathway to licensure in multiple states. Physicians (MDs and DOs) can apply through the compact for licenses in member states. Does not eliminate the need for individual state licenses, but streamlines the application process.
-
Nurse Practitioner Compact (APRN Compact): Similar to the IMLC but for advanced practice registered nurses. Fewer participating states currently, but growing.
-
State-specific telehealth licenses: Some states offer limited telehealth-only licenses that allow out-of-state providers to treat patients in their state via telehealth without full licensure.
Patient-Provider Relationship Requirements
Each state defines what constitutes a valid patient-provider relationship for prescribing purposes. Common models:
Model 1: Synchronous video required
- Must conduct a real-time video consultation
- Audio-only may not be sufficient for initial evaluation
- Subsequent visits may allow audio-only
- Examples: Many states default to this requirement
Model 2: Synchronous audio or video accepted
- Real-time audio consultation (phone) is sufficient
- No video requirement for initial evaluation
- More accessible for patients without reliable video capability
- Examples: Several states expanded this during COVID and made it permanent
Model 3: Asynchronous (store-and-forward) accepted
- Patient submits medical history and information digitally
- Provider reviews and makes clinical determination without real-time interaction
- Most restrictive interpretation: this model is NOT accepted in many states for initial prescribing
- Some states allow it for follow-up visits or specific use cases
Model 4: Initial in-person required
- First visit must be in-person to establish the relationship
- Subsequent visits can be telehealth
- Least telehealth-friendly model
- Primarily applies to controlled substances in certain states
Prescribing Authority Variations
Beyond the patient-provider relationship, states differ on:
- Which providers can prescribe via telehealth: Some states limit NP or PA telehealth prescribing authority
- Collaborative practice agreements for telehealth: Some states require enhanced supervision for telehealth prescribing
- Compounded medication specific rules: A few states have additional requirements for prescribing compounded medications
- Telehealth-specific prescribing limits: Some states limit quantity or duration of prescriptions written via telehealth
States with Notable Telehealth Frameworks
While a complete 50-state analysis is beyond the scope of this article, several states have particularly relevant frameworks:
Texas: Allows prescribing via telehealth after establishing a patient-provider relationship. The Texas Medical Board requires a documented evaluation but does not mandate video for all encounters.
Florida: Telehealth-friendly with a specific telehealth statute that allows registered telehealth providers to practice across state lines with appropriate registration.
California: Requires an appropriate prior examination (which can be via telehealth) before prescribing. The Medical Board of California provides specific telehealth guidance.
New York: Has specific telehealth prescribing rules through the Department of Health. Generally telehealth-friendly but requires establishment of patient-provider relationship.
DEA Registration Considerations
When DEA Registration Matters
For practices prescribing only non-controlled peptides and GLP-1 medications, DEA registration is not required for those specific prescriptions. However:
- If your program includes TRT (testosterone is Schedule III), you need DEA registration
- DEA registration must be in the state where you are physically located when prescribing
- Multi-state telehealth practices may need DEA registration in multiple states
DEA and Telehealth-Specific Provisions
The DEA has specific requirements for practitioners prescribing controlled substances via telehealth:
- Standard DEA registration covers in-person and telehealth prescribing from your registered address
- Special DEA registration for telehealth has been proposed but rules are not yet final
- EPCS (Electronic Prescribing for Controlled Substances) is increasingly required for telehealth prescriptions of controlled substances
For the most current DEA telehealth requirements, monitor the DEA’s telemedicine page and proposed rulemaking notices.
Compliance Framework for Telehealth Prescribing
Documentation Requirements
Every telehealth prescribing encounter should document:
- Patient identification verification: How you confirmed the patient’s identity (photo ID, prior relationship, verification service)
- Patient location: State where patient is physically located during the encounter
- Technology used: Video, audio, or platform name
- Clinical evaluation: History reviewed, symptoms assessed, clinical reasoning
- Prescribing rationale: Why the medication is appropriate for this patient
- Informed consent: Documented telehealth-specific consent
- Follow-up plan: Monitoring schedule, next appointment, how to reach provider
Informed Consent for Telehealth
Telehealth-specific consent should address:
- Nature of the telehealth encounter (not an in-person visit)
- Limitations of telehealth evaluation (cannot perform physical examination)
- Technology requirements and potential for technical difficulties
- Privacy and security measures (HIPAA-compliant platform)
- Patient’s right to refuse telehealth and request in-person care
- Emergency protocols (what to do if experiencing adverse effects)
- Recording policy (if applicable)
- State-specific required disclosures
HIPAA Compliance for Telehealth
All telehealth encounters must occur on HIPAA-compliant platforms:
- End-to-end encryption for video and audio
- Business Associate Agreement (BAA) with the platform provider
- Access controls and authentication
- Audit logging of all telehealth encounters
- Secure messaging for follow-up communications
- Compliant storage of recordings (if applicable)
Consumer platforms (FaceTime, Zoom without healthcare plan, WhatsApp) are NOT HIPAA-compliant and should not be used for clinical telehealth encounters.
Practical Implementation
Building a Compliant Telehealth Workflow
Step 1: Determine your geographic scope
- Identify which states you want to serve
- Obtain licensure in each target state
- Verify telehealth prescribing rules per state
- Determine DEA registration needs (if prescribing controlled substances)
Step 2: Establish your telehealth technology
- HIPAA-compliant video conferencing
- Scheduling system with timezone awareness
- Digital intake forms accessible from any location
- Electronic prescribing platform integrated with your workflow
Step 3: Create state-specific protocols
- Document the patient-provider relationship requirements per state
- Create state-specific consent forms where needed
- Establish prescribing limits per state rules
- Build compliance checklists for staff
Step 4: Train your team
- Provider training on telehealth-specific documentation
- Staff training on state-specific intake requirements
- Technical training on platform usage
- Compliance training on what can and cannot be said in marketing
Scheduling and Patient Management
Telehealth practices face unique scheduling considerations:
- Timezone management: Patients may be in different timezones than your providers
- Consultation duration: Initial evaluations (15 to 20 minutes) vs. follow-ups (5 to 10 minutes)
- Same-day availability: Telehealth patients often expect faster access than in-person practices
- No-show management: Telehealth no-show rates can be lower than in-person, but automated reminders are essential
Video Conferencing Best Practices
For clinical telehealth encounters:
- Ensure adequate lighting and professional background
- Test audio and video before patient joins
- Have a backup communication method (phone) if video fails
- Document any technical issues that affected the encounter
- Maintain eye contact with camera (not screen) to build rapport
- Allow adequate time for patient questions
Karpa Health’s Telehealth Infrastructure
Karpa Health includes purpose-built telehealth capabilities for practices prescribing peptides and GLP-1 medications:
Built-In Video Conferencing
- HIPAA-compliant video consultations within the platform
- No separate telehealth subscription needed
- Integrated with patient records (notes auto-attach to patient chart)
- Recording capability with appropriate consent
Calendar and Scheduling
- Provider availability management
- Patient self-scheduling for consultations
- Automated appointment reminders (SMS and email)
- Timezone-aware scheduling for multi-state practices
- Integration with existing practice calendars
State-Aware Compliance
- Patient location verification during intake
- State-specific consent form delivery
- Prescribing rule alerts based on patient state
- Documentation templates that meet state-specific requirements
Integrated Prescribing
- One-click prescribing directly from the telehealth encounter
- Pharmacy routing based on patient location (state-licensed pharmacy matching)
- EPCS capability for controlled substances (TRT programs)
- Prescription tracking from send to delivery
Common Questions About Telehealth Prescribing
”Can I prescribe based on a questionnaire alone?”
This depends on your state’s definition of a patient-provider relationship. Some states require synchronous (real-time) interaction for initial prescriptions. Others may allow asynchronous prescribing under specific conditions. The safest approach is to conduct at least one synchronous video or audio consultation before initial prescribing, then use asynchronous communication for ongoing management and refills.
”What if my patient travels to another state?”
If a patient travels and needs a refill or dose adjustment, you can typically prescribe to them in the new state only if you are licensed there and the prescription meets that state’s telehealth rules. For maintenance prescriptions that are already established, most states allow continued prescribing as long as the patient-provider relationship was properly established.
”Do I need malpractice coverage for telehealth?”
Yes. Verify that your malpractice insurance covers telehealth encounters and all states where you practice. Many insurers now specifically address telehealth in their policies. You may need endorsements or separate coverage for multi-state telehealth practice.
”Can my NP or PA prescribe via telehealth independently?”
This depends entirely on state law. In full-practice-authority states, NPs can prescribe independently via telehealth. In restricted states, collaborative practice agreements may have specific telehealth provisions. PAs always need a supervisory relationship, though the nature of that supervision varies by state. The American Association of Nurse Practitioners maintains current state-by-state scope information.
Risk Mitigation Strategies
Avoid Common Compliance Pitfalls
-
Never prescribe to a patient in a state where you are not licensed. Verify patient location at every encounter, not just the first one.
-
Document the clinical rationale for every prescription. “Patient requested medication” is not sufficient clinical documentation. Document your clinical evaluation, assessment, and reasoning.
-
Maintain proper supervision documentation. If NPs or PAs prescribe under collaborative agreements, ensure supervision requirements are met and documented per state rules.
-
Keep consent current. Telehealth consent should be renewed periodically and whenever regulations change.
-
Monitor regulatory changes. Telehealth rules are evolving rapidly. What was acceptable last year may not be compliant today. The Federation of State Medical Boards (FSMB) publishes regular updates on state telehealth policies.
Building Defensible Practice Patterns
The best protection against regulatory scrutiny is practicing good medicine:
- Thorough evaluations before prescribing
- Appropriate monitoring and follow-up
- Clear documentation of clinical reasoning
- Proper informed consent
- Timely response to patient concerns
- Willingness to decline patients who are not appropriate candidates
- Regular chart audits for compliance
Getting Started with Telehealth Prescribing
For practices ready to add telehealth prescribing for peptides and GLP-1 programs:
- Audit your current licensure and determine which states you can serve today
- Review state-specific rules for each state where you want to prescribe via telehealth
- Select a compliant platform that integrates telehealth, prescribing, and pharmacy routing (Karpa Health provides all three)
- Create your documentation templates for telehealth encounters
- Build state-specific consent forms as needed
- Train providers and staff on telehealth-specific compliance requirements
- Launch with a limited geographic scope and expand as you verify compliance in each state
Telehealth prescribing for peptides and GLP-1 medications is one of the most efficient ways to grow a cash-pay practice beyond your local market. The regulatory framework is manageable when you understand the rules and build compliant workflows from the start.
Visit our FAQ for additional questions about telehealth prescribing, or explore how Karpa Health’s integrated peptide and GLP-1 platforms support compliant telehealth practice.
For practices building telehealth programs, you may also find these resources helpful: HIPAA compliance for cash-pay programs covers privacy requirements for digital health delivery, and our direct-to-patient pharmacy fulfillment guide explains how shipping logistics work when patients are not local. Karpa integrates with pharmacy partners like Empower Pharmacy for streamlined telehealth-to-fulfillment workflows.