Federal and state regulations

Federal and state regulations

In response to America’s national opioid abuse epidemic, electronic prescribing of controlled substances (EPCS) continues to gain momentum among federal and state lawmakers to reduce “doctor shopping” and minimize the risk of altered, stolen, or fraudulent prescriptions.

SUPPORT for Patients and Communities Act

In October 2018, the SUPPORT for Patients and Communities Act was signed into federal law by President Trump. This sweeping legislation implements a number of initiatives to address America’s opioid abuse epidemic. 

Included in the bill is an electronic prescribing requirement for all controlled substance prescriptions for a covered part D drug under a prescription drug plan (or an MA–PD plan). The deadline to comply is January 1, 2022.

State EPCS requirements

In addition to the federal mandate, many states are implementing similar laws. New York became the first state to mandate EPCS when its groundbreaking Internet System for Tracking Over-Prescribing (I-STOP) Act took effect in 2016. Since then, many additional states have passed similar legislation, and many other legislatures are considering proposed EPCS mandates.

States where EPCS has been mandated


EPCS mandated by law

* Click on highlighted states for more information

Enabling EPCS with Imprivata Confirm ID

Imprivata Confirm ID is the fast, secure signing solution for EPCS. It is the most comprehensive platform for provider identity proofing, supervised enrollment of credentials, two-factor authentication, and auditing and reporting to help healthcare organizations meet the DEA requirements for EPCS. Imprivata Confirm ID integrates with leading EHRs and e-prescribing applications, and it supports the most complete set of two-factor authentication modalities, including Hands Free Authentication, to make EPCS as fast and convenient as possible for care providers.

EPCS readiness guide

Learn more

This website and the materials herein shall not be interpreted and/or used as legal advice for your company to be used in complying with Federal and State EPCS Laws and/or the DEA requirements for EPCS. Alternatively, it provides background information to help you understand the DEA requirements and achieve EPCS success. This legal information is not the same as legal advice, where an attorney would apply the law to your specific circumstances, so we insist that you consult an attorney if you’d like advice on your interpretation of this information or its accuracy. In summary, you may not rely on the information on this website or the materials herein as legal advice, nor as a recommendation of any particular legal understanding.