TRT Telehealth Rules in 2026: Staying Compliant
The short answer
Testosterone is a Schedule III controlled substance, so TRT telehealth lives under the Ryan Haight Act's in-person evaluation requirement as modified by the DEA's post-pandemic rulemaking. The compliant pattern in 2026 is the hybrid model: an in-person initial evaluation establishing the relationship, telehealth follow-ups after, with DEA registration and state rules layered on top.
Key takeaways
- The in-person initial exam is the anchor requirement; pure-telehealth TRT models carry the regulatory risk.
- Federal rules are the floor: state prescribing and telehealth laws add their own requirements per state served.
- Documentation is the defense: the exam, labs, clinical rationale, and follow-up cadence, all on the record.
- Rules have shifted repeatedly since the pandemic; compliance needs an owner who tracks changes, not a one-time setup.
The regulatory landscape in 2026
During 2020-2024, the COVID public health emergency allowed providers to prescribe controlled substances (including testosterone) via telehealth without an in-person evaluation. This flexibility fueled the growth of online TRT clinics that operated entirely virtually, no physical clinic, no in-person visits, just video consultations and shipped medications. That flexibility is over.
The DEA's final rule, effective in late 2025, reinstated the Ryan Haight Act's in-person requirement with modifications. Providers must now conduct at least one in-person medical evaluation before prescribing or continuing to prescribe controlled substances via telehealth. This applies to new patients and to existing patients who were initiated during the COVID flexibility period without an in-person visit. The rule includes a transition period for existing patients, but new TRT initiations require an in-person evaluation from day one.
Ryan Haight Act basics
The Ryan Haight Online Pharmacy Consumer Protection Act (2008) prohibits prescribing controlled substances without at least one in-person evaluation. An "in-person evaluation" means a face-to-face examination conducted by the prescribing practitioner or by a practitioner acting under the prescriber's supervision, in the physical presence of the client. A video call does not satisfy this requirement regardless of video quality or examination thoroughness.
Exceptions are narrow: practitioners registered with the DEA as a "special registration for telemedicine" (a category the DEA has been slow to implement), practitioners treating patients during a public health emergency declaration, and practitioners providing care to patients in a DEA-registered hospital or clinic via telemedicine (the patient is at a DEA-registered site, even if the provider is remote). For most TRT clinics, none of these exceptions apply to typical outpatient care.
The hybrid model: in-person first, telehealth after
How it works
The compliant model for TRT clinics in 2026 is hybrid: the initial consultation, physical examination, and lab review are conducted in-person at a DEA-registered clinic location. Once the provider has established a relationship and initiated the TRT protocol, subsequent follow-up visits (dosage adjustments, lab reviews, refill authorizations) can be conducted via telehealth. This satisfies the Ryan Haight Act's in-person requirement while preserving the convenience of telehealth for ongoing care.
Visit frequency
A typical hybrid TRT schedule: Initial visit (in-person): comprehensive health history, physical exam, lab draw, TRT protocol discussion. 30 to 60 minutes. 6-week follow-up (telehealth): review first labs on therapy, assess symptom response, adjust dose if needed. 15 to 20 minutes. 3-month follow-up (telehealth): comprehensive lab review, assess ongoing response, refill authorization. 20 to 30 minutes. 6-month follow-up (in-person): repeat physical exam, comprehensive labs, protocol review. 30 to 45 minutes. Annual comprehensive (in-person): full physical, annual labs, protocol optimization. 45 to 60 minutes. This schedule results in 2 in-person visits per year and 2 to 4 telehealth visits per year, balancing compliance with convenience.
State-by-state considerations
Federal law (Ryan Haight Act) sets the floor, but individual states may impose additional telehealth prescribing restrictions. Key variations: some states require the prescribing provider to be licensed in the state where the patient is located at the time of the telehealth visit, some states have specific controlled substance prescribing limits that apply to telehealth (maximum days' supply, mandatory PDMP checks), and some states require an initial in-person visit within a shorter timeframe than federal law requires (for example, within 30 days of the first telehealth visit rather than before the first prescription).
Before offering telehealth services across state lines, consult with a healthcare attorney in each state where you intend to serve clients. The cost of multi-state telehealth compliance review ($5,000 to $15,000) is a fraction of the cost of a DEA enforcement action or state medical board investigation.
DEA registration requirements
Every location where controlled substances are stored, dispensed, or administered requires a separate DEA registration. If your TRT clinic has a physical location where testosterone is administered (in-office injections), that location needs DEA registration. If you ship testosterone to clients (common in telehealth models), the dispensing pharmacy must be DEA-registered and compliant with state pharmacy laws.
The DEA registration process takes 4 to 8 weeks. Fees are $888 for a 3-year registration (Schedule III). The application requires a state medical license in the state where the registered location operates. For multi-location clinics, each location requires its own registration. Factor this cost and timeline into clinic expansion planning.
Compliance is the business model
The TRT clinics that will thrive in 2026 and beyond are the ones that built their operations around compliance from day one. The fully virtual, no-in-person-visit model was a COVID-era exception, not a permanent business model. The hybrid model (in-person initiation, telehealth maintenance) delivers 80% of the convenience at 100% compliance. Build for the rules that exist, not the ones you wish existed.
The cadence, charting, and program billing run on Gracero for TRT clinics; the launch sequence is in the how to start a TRT clinic guide.
Frequently asked questions
Can a TRT clinic operate fully virtual in 2026?
The prevailing rule structure makes pure-virtual prescribing of testosterone hard to defend: the Ryan Haight framework expects an in-person evaluation before controlled-substance prescribing, with limited exceptions. The durable model is hybrid: in-person first visit, telehealth thereafter. Regulations have moved several times in recent years, so verify the current DEA rule and your state's position with counsel before committing to a model.
What does the hybrid model look like operationally?
An in-person initial: history, physical exam, baseline labs, informed consent, and the prescribing decision, then telehealth follow-ups on a protocol cadence with periodic labs and scheduled in-person touchpoints as state rules or clinical judgment require. The calendar system needs to enforce the cadence per client, because a missed required visit is a compliance gap, not just a no-show.
What changes when serving clients across state lines?
Each client's state governs: the provider generally needs licensure there, state telehealth and controlled-substance rules apply, and some states add their own in-person or registration requirements. Serving three states means running three rule sets. Expansion is a counsel conversation per state, and the client record should carry which rule set each client falls under.
What documentation protects a TRT clinic in an audit?
A complete chain per client: the in-person evaluation record, baseline and monitoring labs, the clinical rationale for therapy, signed consents, every follow-up note, and prescription records tying to the DEA registration. Structured charting that timestamps and versions all of it turns an audit from an excavation into a report; loose PDFs and texts do the opposite.
Search marketing and AI visibility specialist. Covers clinic software, technical SEO, AI Overview optimization, and performance marketing for healthcare and aesthetic businesses.