Four months is a plan horizon, not a panic horizon
As of today there are just over 120 days until December 31, 2026, the day the DEA's temporary telehealth flexibilities for controlled substances expire. Those flexibilities, now on their fourth extension, are what allow Schedule II-V prescribing via telehealth without a prior in-person evaluation. The permanent replacement, the proposed Special Registration framework, has been public since early 2025 and is still not a final rule.
We covered the durable groundwork in DEA Telehealth Flexibilities: What Programs Should Build Now: registration hygiene, state rule mapping, clean records. This post is the other half, the risk plan. If your program touches a controlled substance, you should leave it with three artifacts: a scenario tree with triggers, a fallback design, and a comms calendar with dates already on it.
The scenario tree
Three ways this ends, and your plan needs a branch for each.
| Scenario | What it looks like | What to watch | Your move |
|---|---|---|---|
| Rule finalizes in time | Special Registration final rule lands this fall with a workable effective date; prescribers, and covered platforms, get a registration path | Federal Register activity, OMB review status, DEA public statements | Register early in every category that applies, adapt workflows to the rule's conditions, publish your compliance posture |
| Fifth extension | Another temporary extension, likely announced late in Q4, kicks the deadline into 2027 | Timing of prior extensions: they have tended to land very late | Keep operating, keep the contingency warm, do not disband the project |
| Lapse | December 31 passes with no rule and no extension; new telehealth prescriptions for controlled substances require a prior in-person evaluation | Silence through November, plus any signal that the rule is stuck | Activate the fallback network and the patient conversion plan you built in October and November |
Two notes on reading the table honestly. Every previous expiration has ended in an extension, which tempts operators to plan for scenario two by default. But the Special Registration proposal exists precisely because the DEA intends to land the permanent framework, and a rule finalizing with a short runway is nearly as disruptive as a lapse if you have not pre-positioned. Plan for the rule, keep the lapse plan in the drawer, and treat a fifth extension as found time, not vindication.
The platform detail deserves its own sentence: as proposed, the framework's three registration categories include one for covered online telemedicine platforms themselves, not just prescribers. If the rule finalizes as written, your platform partner's registration status becomes part of your compliance stack. Ask your vendor now, whoever they are, what their plan is. Ours: we track the rule closely and will pursue whatever registration the final text requires of platforms, and our state-aware routing already treats controlled-substance rules as per-state logic rather than a single national switch.
The exposure map
Not every program faces the same cliff. Rank your exposure by schedule and by how central the controlled prescription is to the care model.
ADHD programs: highest exposure. Stimulants are Schedule II, the tightest tier in the proposed framework, and the prescription is the product. A lapse converts your entire active panel into patients who need an in-person evaluation to continue care. If this is you, the fallback network is not optional.
Medication-assisted treatment: high exposure, extra duty. MAT programs built on buprenorphine carry a patient population where an interruption is dangerous, not merely inconvenient. Some telemedicine pathways for buprenorphine have their own regulatory history and partial carve-outs, but no MAT operator should bet continuity of care on the fine print holding. Plan as if every patient needs a bridge.
Testosterone and TRT: real but manageable exposure. Schedule III, longitudinal care, and a patient base that already does periodic labs, which means an annual in-person touch is easier to absorb into the care model. The full program design is in How to Launch an Online TRT Program in 2026.
Mental health and sleep programs: exposure at the edges. Programs whose core is SSRIs and therapy are largely fine; the exposure sits in the controlled corners, benzodiazepines, certain insomnia medications, ketamine-derived protocols. If you run a broad program like the one in Mental Health Telehealth Program Design, your job is to isolate the controlled slice of your panel and plan for it specifically, not to treat the whole program as at-risk.
Whatever the vertical, the first artifact is the same: a query that returns every active patient whose care depends on a controlled prescription, by state, by schedule, by next-refill date. If you cannot run that query today, that is your September project.
The fallback network
The lapse scenario, and several plausible versions of the final rule, end in the same requirement: some patients need a qualifying in-person evaluation to continue. You do not need to own clinics to survive that. You need a designed referral layer, which is a procurement and workflow problem you can solve in about eight weeks.
Sourcing. Three practical options, often combined: contract with an exam-network marketplace that books one-off in-person evaluations nationwide; strike direct agreements with clinic or urgent-care groups in the metros where your patient density is highest; and support the long tail with a structured "see your local provider" path that ships the patient a visit summary, the records package, and clear instructions for what the evaluation must document.
Design requirements. The visit must accomplish the evaluation your prescribers need, documented in a form that lands back in your chart, so define the visit spec, the required documentation, and the return path before signing anything. Book from inside your own scheduling flow rather than handing patients a phone number. And decide pricing up front: who pays for the visit, and whether you subsidize it for long-tenured patients rather than watch them churn. The coordination pattern, external encounter in, structured result back, is the same one we mapped in Hybrid Telehealth Workflows.
Sizing. You do not need capacity for your whole panel. You need it for the patients whose next prescription falls after December 31, sequenced by refill date. The exposure query from the last section is also your demand forecast.
The communication timeline, backward from December 31
Patients on ADHD medication, buprenorphine, or testosterone read headlines too, and the worst outcome is your patients learning about the cliff from a news push instead of from you. Work backward:
Late December: final-status message to any patient not yet converted; last in-person slots; clear instructions for January.
December 1-15: if no rule and no extension by early December, the conversion push peaks: every exposed patient has a booked evaluation or a documented plan. Prescribers align on what can responsibly be written before the deadline within normal clinical practice, no stockpiling theater.
November: first direct patient advisories go out if uncertainty persists: calm, factual, "here is what changes on January 1 if federal rules lapse, here is what we have already arranged for you." Open the fallback booking flow to the highest-exposure patients.
October: fallback contracts signed, visit spec tested end to end with a handful of real patients, support macros and FAQ pages drafted and reviewed by your medical director and counsel.
September: run the exposure query, brief your providers, start fallback procurement, and put the three decision checkpoints on the calendar.
The tone rule for every message: you are the calm party. No countdown clocks, no urgency marketing dressed as compliance news. Patients on these medications have real continuity anxiety, and the program that handles it with quiet competence earns loyalty that outlasts the rule-making.
The checkpoints
September 30: exposure query done, fallback vendors shortlisted, comms drafted. Decision: none yet, just readiness.
October 31: if the final rule has landed, pivot the project to implementation against its actual text. If not, sign fallback agreements and finish the end-to-end test. Decision: commit spend to the fallback layer.
November 30: if there is still no rule and no announced extension, treat the lapse as the operating assumption and begin patient conversion in refill-date order. Decision: activate. A fifth extension announced afterward costs you some booked visits and goodwill messages; the reverse mistake costs you your January panel.
Cheap insurance, decided on dates you chose in advance instead of in a December scramble. That is the whole plan.
FAQ
When do the DEA telehealth flexibilities expire? December 31, 2026, under the fourth temporary extension. Until then, Schedule II-V controlled substances can be prescribed via telehealth without a prior in-person evaluation, subject to state law and normal clinical standards.
What is the DEA Special Registration proposal? It is the proposed permanent framework meant to replace the temporary flexibilities, built around three registration categories: two tiers for prescribing clinicians and one for covered online telemedicine platforms themselves. It has not been finalized, which is why programs need contingency plans for the December 31 deadline.
Which telehealth programs are most affected by the DEA cliff? ADHD programs are most exposed because stimulants are Schedule II and central to care; MAT programs carry the highest clinical stakes because interruption is dangerous; testosterone programs face a manageable Schedule III exposure; and mental health programs are exposed only in their controlled-substance corners, like benzodiazepines and certain sleep medications.
What should a program do if the flexibilities lapse? Continue care through a pre-built in-person fallback: contracted exam networks or clinic partners that perform a qualifying evaluation and return documentation to the program's chart, activated for patients in refill-date order. The programs that fare well will be the ones that ran their exposure queries, signed fallback agreements, and told their patients the plan months before the deadline.