Short answer, yes. A patient signing up for a telehealth account is not the same as a patient agreeing to be prescribed a controlled substance over video. Telehealth controlled substance consent needs its own conversation, its own details, and its own spot in the chart. This post breaks down what that consent actually has to cover, who has to give it, and how to document it so it holds up later.
What Makes This Consent Different From Regular Telehealth Consent
Most practices already get some kind of general consent when a patient signs up for telehealth. That form usually covers the basics: that video visits have limits, that technology can fail, and that the patient agrees to be treated this way.
That general form is not enough on its own once a controlled substance enters the picture. Patient consent for controlled substances needs to speak to the specific medication, its risks, and the fact that it is being prescribed without an in-person exam, if that is the case. A generic checkbox from onboarding does not cover any of that.
What Informed Consent for Telehealth Prescribing Should Cover
Good informed consent for telehealth prescribing is really just a clear conversation, put into words the patient can understand. It should touch on:
● What the medication is and what it is meant to treat
● The risks of the medication, including dependency risk for many controlled substances
● Other options that were considered, and why this one was chosen
● The fact that the visit happened by video, not in person, and what that means for follow up care
● A chance for the patient to ask questions before the prescription is sent
None of this needs fancy language. Plain words work better anyway, since the point is that the patient actually understands what they are agreeing to.
“Patients should have access to understandable information about their treatment options so they can make decisions that are right for them.”
— Dr. Sherrie Wallington, Health Communication Researcher, George Washington University
DEA Telehealth Consent Requirements and the Ryan Haight Act
The federal rules behind all of this trace back to the Ryan Haight Act, which set limits on prescribing controlled substances without an in-person exam first. For the complete rundown of how those rules work, our DEA telehealth prescribing rules guide covers the full picture. This post just focuses on the consent piece.
The Ryan Haight Act consent requirements do not spell out an exact script for providers to read. Instead, the expectation is that the patient understands and agrees to three things before a prescription is sent:
● That the visit is being conducted through telehealth, not in person
● That a controlled substance is being considered as part of their treatment
● That they have the chance to ask questions or decline before anything is sent to the pharmacy
Meeting these DEA telehealth consent requirements is really about substance over paperwork. A signed form with none of this actually discussed does not meet the spirit of the rule, even if it looks complete on paper.
Controlled Substance Prescribing via Telehealth Has Its Own Consent Layer
Beyond the federal rules, controlled substance prescribing via telehealth often means an extra layer of consent tied to the specific pathway a provider used to prescribe without a prior in-person exam. If your practice relies on a special registration or a public health emergency flexibility to prescribe this way, patients should know that too, even if only in a short sentence.
For a closer look at how the current federal framework treats these pathways, our post on 2026 DEA telemedicine requirements walks through what changed and what practices need to track going forward.
Don't Forget State Telehealth Consent Laws
Federal rules are only half the picture. State telehealth consent laws vary a lot, and some states ask for more than the federal minimum. A handful of states require written consent specifically, not just a verbal conversation noted in the chart. Others require the consent to mention specific things, like the patient's right to request an in-person visit instead.
Because the patient's location decides which state's rules apply, the same conversation might need slightly different documentation depending on where the patient happens to be sitting during the visit. A quick note on the patient's state at the time of the visit makes this much easier to track later.
If your practice sees patients across several states, it is worth keeping a simple reference sheet of which states need written consent versus verbal, so nobody has to look it up mid-visit.
This matters even more for practices that grew quickly across state lines. A consent process that worked fine when a practice saw patients in one state can quietly fall out of compliance the moment patients start logging in from three or four others. Checking this list once a year, or any time new states are added to a practice's coverage area, is a simple habit that prevents a much bigger headache down the road.
What Telehealth Informed Consent Documentation Should Look Like in the Chart
Once the conversation happens, it needs to show up in writing. Good telehealth informed consent documentation for a controlled substance visit usually includes a short note like this:
● The date and time consent was discussed
● A brief summary of what was covered, in the provider's own words
● Confirmation the patient had a chance to ask questions
● Confirmation the patient agreed to move forward
A signed form can sit alongside this note, but the note itself is what shows the conversation actually happened for that specific visit. Auditors and pharmacists both look for this kind of detail, and its absence is one of the fastest ways a clean visit starts to look questionable.
According to HHS guidance on telehealth and informed consent, documenting that a patient understood and agreed to virtual care is a core part of meeting general virtual care consent requirements, separate from any state specific rules layered on top.
Special Situations That Need Extra Attention
A few situations come up often enough that they deserve their own quick mention.
First time patients versus returning patients
A patient who has never been seen by the practice before usually needs a more detailed consent conversation than someone returning for a refill. For a first visit, take the time to walk through the medication and the telehealth format in full. For a returning patient, a shorter check in is fine as long as anything new, like a dose change, gets covered too.
Follow-up visits after an in-person exam
If the patient already had an in-person exam and this telehealth visit is just a follow-up, the consent conversation can be lighter, but it should still confirm the patient is comfortable continuing care this way and understands the medication being continued or adjusted.
Minors and dependent adults
When a parent, guardian, or other decision maker is involved, the note should reflect who gave consent and confirm that person understood the same points a patient would need to understand. This detail is easy to miss when a visit involves more than one person on the call.
Mistakes That Weaken Consent Documentation
A few habits show up again and again in charts that do not hold up well under review:
● Relying only on a general telehealth consent signed once at intake, with nothing specific to the controlled substance visit
● Using the exact same consent wording for every patient, word for word, with no visit specific detail
● Not noting the patient's location, which affects which state rules apply
● Treating consent as a form to sign quickly rather than a conversation to have
None of these mistakes are hard to fix. They just take a small habit change: treat the consent conversation as part of the visit, not a box to check before the visit starts.
Quick Consent Checklist
Before sending a controlled substance prescription from a telehealth visit, confirm the chart shows:
● The medication, its purpose, and its risks were explained
● The patient knew the visit was by telehealth, not in person
● The patient had a chance to ask questions
● The patient's state at the time of the visit is noted
● The patient's agreement to move forward is written in the note
Run through this list for a few weeks and it becomes automatic. It also means nobody has to scramble to remember what was said if a chart ever gets pulled for review.
FAQ
Is a general telehealth consent form enough on its own?
No. A general form covers the basics of virtual care, but it does not cover the specific medication, its risks, or the prescribing pathway used. A separate note or conversation tied to the controlled substance visit is still needed.
Does consent need to be in writing every time?
It depends on the state. Some states accept a verbal conversation as long as it is documented in the chart. Others require written consent specifically. Check the rules for the state where the patient is located at the time of the visit.
Who is responsible for making sure consent is properly documented?
The prescribing provider carries the main responsibility, but a lot of practices build a quick consent step into their intake workflow so nothing gets missed on a busy day.
What if a patient refuses to give consent?
Then the prescription should not be sent. The provider can discuss alternatives, including a non-controlled medication or a referral for an in-person visit instead.
Final Thoughts
Getting telehealth controlled substance consent right is not about extra paperwork for the sake of it. It is about making sure the patient actually understands what they are agreeing to, and making sure that conversation is written down clearly enough for anyone to follow later. Cover the medication, the risks, the format of the visit, and the patient's agreement, every single time, and the rest of your documentation gets a lot easier to defend.
If you want a second set of eyes on your current consent process, our team can walk through a sample visit with you and point out exactly where to tighten the language or the documentation. Reach out to schedule a quick consent process review before your next audit cycle.