The Ryan Haight Act is a federal law, enacted in the mid-2000s, that generally governs how controlled substances can be prescribed over the internet, including through telehealth. It remains one of the foundational pieces of federal law shaping telehealth prescribing today, even though later legislation and temporary rules have modified how it applies in practice.
The core requirement
At its center, the Ryan Haight Act generally requires that a practitioner conduct at least one in-person medical evaluation of a patient before prescribing a controlled substance based on a consultation conducted remotely. The law was originally designed to address online pharmacies and prescribing operations that issued controlled substance prescriptions with little or no clinical evaluation at all.
Recognized exceptions
The statute includes several defined exceptions to the in-person evaluation requirement, generally covering situations such as practitioners working within certain hospital or clinic settings, care delivered under specific federal programs, and emergencies as defined under the law. Separately, temporary flexibilities tied to public health emergency authority have, at various points, allowed broader remote prescribing without an initial in-person visit, though such flexibilities are generally time-limited and subject to change or expiration.
The Ryan Haight Act's in-person evaluation requirement is the default rule for controlled substance telehealth prescribing — the exceptions are narrower and more conditional than they are often assumed to be.
Why it still matters for telehealth practices
Because the Ryan Haight Act operates at the federal level, it applies regardless of what any individual state's telehealth or prescribing rules say, and it exists alongside DEA registration requirements and state-level controlled substance rules rather than replacing them. A telehealth practice that is otherwise compliant with a state's licensing and telehealth rules can still run into trouble if the underlying prescribing pathway does not fit within the Ryan Haight Act's in-person evaluation requirement or one of its recognized exceptions.
Given how frequently the applicable flexibilities around this law have changed in recent years, particularly following shifts in federal emergency authority, telehealth prescribers generally find it useful to confirm the current status of any exception before relying on it. Requirements vary by state and change over time — always confirm current requirements directly with the relevant state board or agency before making a compliance decision.