Prescription agreements: expectations, monitoring, exits

Are controlled-substance agreements required?

No federal law requires a controlled-substance agreement for stimulants, benzodiazepines, or buprenorphine, and no board mandates one in most states. It is a clinical and operational tool, not a compliance obligation. Many solo prescribers still adopt one because it does two jobs at once: it documents the informed-consent conversation, and it gives both sides a written reference when a refill request arrives off-schedule.

The DEA's Diversion Control Division sets the duties that actually bind a registrant — registration, recordkeeping, and controlled-substance inventory — and a patient agreement is not among them 1Ref 1Drug Enforcement Administration (2026).Diversion Control Division.DEA's Diversion Control Division administers practitioner registration, recordkeeping, and inventory duties — a patient agreement is not among the binding registrant obligations.. So treat the controlled-substance agreement as your own risk-management document: you decide who signs one, for which medications, and what it says. A common convention is to reserve agreements for the medications and patients where the stakes of an off-plan refill are highest, rather than papering every prescription.

What a prescription agreement usually contains

A workable prescription agreement is short, plain-language, and specific. It sets a single prescriber and a single pharmacy for the controlled medication, states the visit cadence required to continue it, and records the patient's consent to the monitoring you intend to do. It also names the events that put continued prescribing in question — lost prescriptions, early refill requests, or a database or drug-test result that does not match the plan.

Common elements, and what each one is doing:

Two of these deserve a note. The single-pharmacy term only works if you have planned coverage for scheduled prescriptions during your own absences, so a patient is not stranded when you are away. And if you hold state csrs in more than one state, the agreement should name which registration governs a given fill.

The monitoring the agreement authorizes

The monitoring clause is the operative part, because it converts a promise into a checkable routine. The two standard tools are prescription-database review and, for higher-risk regimens, drug testing. Writing the patient's consent into the agreement means you are not renegotiating permission every visit; you are executing a plan the patient already agreed to. Document each check you actually run, not just the policy that you run them.

Every state operates a prescription drug monitoring program (PDMP), and most now require a query before prescribing a controlled substance — though what triggers the mandate, and how often you must re-check, varies by state 2Ref 2PDMP Training and Technical Assistance Center (2026).Prescription Drug Monitoring Program Training and Technical Assistance Center.Every state operates a PDMP and most mandate a query before controlled-substance prescribing, with the trigger and re-check cadence varying by state.. Build the query into the agreement as a standing consent and into your visit template as a step, so a mandated set of pdmp checks is met by workflow rather than memory. Urine drug testing is a clinical decision, not a punitive one; frame it in the agreement as routine monitoring, and read an unexpected result as a reason to talk, not an automatic exit.

Agreements for buprenorphine and office-based OUD

Buprenorphine treatment agreements deserve their own paragraph because the regulatory ground shifted. The federal X-waiver was eliminated in 2023: any clinician with Schedule III prescribing authority and a current DEA registration may now treat opioid use disorder in an office setting, subject to a one-time training attestation rather than a special waiver 3Ref 3Substance Abuse and Mental Health Services Administration (2026).Buprenorphine.The X-waiver was eliminated in 2023; any clinician with Schedule III authority and current DEA registration may treat opioid use disorder in the office, subject to a one-time training attestation.. As of July 2026 that is the operative framework, so an office-based OUD agreement is a clinical tool, not a licensing gate.

Because the audience for these agreements is someone in early recovery, the register matters. A recovery-oriented agreement leans on the shared goal — stability, a single coordinated prescriber, honesty about setbacks — rather than reading as surveillance. Keep the monitoring terms (database checks, a single pharmacy, agreed testing) but write them as part of the treatment plan. The exit terms, in particular, should route a relapse toward more care, not toward discharge from the medication that treats the disorder.

Handling a broken term without abandoning the patient

The exit terms are where an agreement most often goes wrong, because a rigid one can push you toward patient abandonment. A discharge that leaves a patient on a controlled medication with no prescriber and no taper plan is an ethics problem, not a clean ending. The social work ethics code treats interruption and termination of services as events to plan for — with notice, a bridge, and a referral — not as a lever pulled the moment a rule is broken 4Ref 4National Association of Social Workers (2021).NASW Code of Ethics.The ethics code treats interruption and termination of services as events to plan for with notice, a bridge, and referral, not as abrupt discharge..

A defensible sequence when a term is broken: talk first and understand what happened; adjust the plan before ending it — tighten monitoring, shorten the interval, or move toward a supervised taper; and if you do end care, give written notice, a short bridge where clinically appropriate, and a concrete referral, documenting each step. If you prescribe under the collaborative agreement your state requires, loop your collaborating physician into a discharge decision early rather than after the fact.

Consent, records, and who you can tell

Coordinating around a controlled-substance agreement means sharing information — with a pharmacy, a covering colleague, sometimes a primary-care clinician — and behavioral-health records carry extra rules. Ordinary treatment, payment, and health-care-operations sharing is permitted under the HIPAA Privacy Rule without a separate authorization 5Ref 5HHS Office for Civil Rights (2026).Summary of the HIPAA Privacy Rule.Treatment, payment, and health-care-operations disclosures are permitted under the Privacy Rule without a separate authorization.. But if you run a federally assisted substance use disorder program, a stricter federal confidentiality rule sits on top and changes what consent you need before disclosing.

That stricter rule is 42 CFR Part 2, which governs the confidentiality and redisclosure of SUD records for programs it covers. The 2024 final rule aligned Part 2 more closely with HIPAA — allowing a single consent for treatment, payment, and operations — but Part 2 still constrains redisclosure and still applies before you share 6Ref 6Office of the Federal Register (2026).42 CFR Part 2 — Confidentiality of Substance Use Disorder Patient Records.42 CFR Part 2 governs confidentiality and redisclosure of SUD records for federally assisted programs, with 2024 alignment toward a single TPO consent.. If Part 2 covers your practice, the safest default is to route any coordination the agreement contemplates through its consent mechanics, and to note in the agreement itself that these protections apply.

Putting the agreement into your workflow

An agreement only earns its keep if it lives in your workflow rather than a signed-and-forgotten PDF. Attach it to the chart, restate its terms at renewal visits, and connect it to the systems that enforce it: your e-prescribing setup, your database-query step, and — if you see patients remotely — the separate rules that govern controlled substances by telehealth. The point is a routine you can run the same way every time, not a document you cite only in a dispute.

Review the agreement on a set cadence, the same way you review a treatment plan, and update it when the medication, the frequency, or the monitoring changes. A stale agreement that describes a regimen the patient is no longer on undercuts the reason you wrote one. Keeping it current, and re-consenting when the terms change, is what turns the document from paperwork into an actual account of the plan you and the patient are following.