The indictment, arrest, and arraignment of Ruthia He, the founder, CEO, and clinical president of Done Global (Done), and David Brody, clinical president of Done and the sole shareholder of Done Health, P.C. (PC) in connection with their alleged criminal conspiracy to distribute controlled substances, commit health care fraud, and obstruct justice may bring heightened scrutiny to behavioral health telemedicine companies and other virtual health platforms. The seven-count indictment represents the Department of Justice’s (DOJ’s) first criminal drug distribution prosecutions related to telemedicine prescribing. The prosecution of the defendants is proceeding in federal court in the Northern District of California and several additional Done personnel including an executive, physician, and nurse practitioners are similarly being prosecuted.

As we reflect on the flurry of activity in the health care data privacy and security space in 2023 and look ahead to what will continue to be a busy 2024, we are seeing the early stages of federal agency movement to align the regulatory environment with modern health care delivery, cutting-edge technologies, and innovative data-sharing techniques. Some of this work has been done in the form of federal agency guidance in which health care organizations will be looking for additional updates and there are also a handful of pending U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) proposals that call for substantial changes to the HIPAA Privacy Rule.

As we previously covered, in March 2023, the Drug Enforcement Agency (DEA) announced a proposed rule on prescribing controlled substances via telehealth, aimed at addressing the “telehealth cliff” that was expected to occur once the COVID-19 Public Health Emergency (PHE) ends on May 11, 2023. The proposed rule provided some flexibility, but required a much more restrictive framework for prescribing controlled substances via telehealth compared to the flexibilities available during the PHE. During the 30-day comment period following the announcement of the proposed rule, the DEA received over 38,000 comments, which the agency says it is closely reviewing. Many commentators across the health care industry criticized the proposed rule because the in-person examination requirement would limit access to care. The DEA, working with the Department of Health and Human Services, is also considering revisions to the proposed rule. 

With just over two months before the COVID-19 Public Health Emergency (PHE) expected expiration on May 11, 2023, the Drug Enforcement Agency (DEA) has finally announced its proposed rule on prescribing controlled substances via telehealth. This post provides continued coverage of telehealth updates and dissects what this DEA's proposed rule could entail. 

The COVID-19 Public Health Emergency (PHE), which was originally declared nearly three years ago, has been renewed through April 2023. As we’ve previously covered, the PHE allowed federal and state regulators to relax certain telehealth requirements, which has led to a rapid expansion in the availability of telehealth services. The Biden Administration has committed to provide at least 60 days’ notice prior to terminating the PHE or allowing it to expire, but several news outlets are reporting that this could be the final extension. 

Many of the flexibilities upon which telehealth providers have come to rely in recent years are tied to the federal Public Health Emergency related to the COVID-19 pandemic (PHE). As we move into Fall 2022, we review the current state of the PHE flexibilities around Medicare reimbursement and prescription of controlled substances, examine pending legislation that, if passed, would bring greater certainty to patients and providers, and discuss what we know about the status of a possible PHE extension.

As we’ve previously covered, while Congress has acted to extend certain COVID-era telehealth flexibilities (mostly related to Medicare coverage) beyond the Public Health Emergency (PHE), the future of prescribing controlled substances via telehealth is uncertain.  Although the American Telemedicine Association and other industry groups continue to advocate for changes to allow telehealth providers to prescribe controlled substances in certain circumstances, without further action by Congress or the Drug Enforcement Administration (DEA), telehealth providers who prescribe controlled substances will need to conduct an in-person examination of the patient once the PHE ends.