EPCS mandate updates by state: what changes in 2026
Electronic Prescribing of Controlled Substances (EPCS) is now mandated in nearly every US state, but the specific requirements, exemptions, and enforcement dates still vary. Here is what prescribers and practices need to confirm in 2026.
Why EPCS mandates exist
EPCS mandates are designed to curb prescription fraud and diversion by replacing paper prescriptions for controlled substances with secure, identity-verified electronic transmission. At the federal level, EPCS is governed by DEA rule 21 CFR Part 1311, which sets the identity-proofing and two-factor authentication requirements every compliant system must meet.
What varies from state to state
While the federal framework is consistent, states differ on which drug schedules are covered, whether small-volume or veterinary prescribers are exempt, how waivers are granted for technology failures, and the penalties for non-compliance. A prescriber licensed in multiple states must meet the strictest applicable rule for each patient encounter.
How to confirm you are compliant
Compliance comes down to three things: a certified EPCS platform, completed identity proofing for every prescriber, and an active second authentication factor at the moment of signing. H2H DigitalRx handles all three, with an audit log that records the prescriber, timestamp, and authentication method for every controlled-substance prescription.
Preparing for the next wave of deadlines
Several states continue to tighten enforcement and expand reporting obligations. The safest posture is to treat EPCS as the default for all controlled substances now, rather than tracking each deadline individually, so a change in your state does not interrupt prescribing.