Federal DEA Requirements for Surgical Opioid Prescribing
- Every prescriber writing Schedule II opioid prescriptions (oxycodone, hydrocodone, morphine, fentanyl) must maintain an active DEA registration (21 CFR 1301.11). The registration must list the correct practice address. If a surgeon operates at multiple locations (office, ambulatory surgery center, hospital), the DEA registration must cover each location or the prescriber must have a separate registration for each address that is not the registered location (21 CFR 1301.12).
- The SUPPORT for Patients and Communities Act (2018) amended the Controlled Substances Act to require all DEA-registered prescribers of Schedule II through IV controlled substances to complete 8 hours of training on opioid prescribing and substance use disorders as a condition of DEA registration renewal. The training must come from an approved provider (ACCME, AMA, state medical board, or SAMHSA). Failure to complete this training before renewal can result in inability to prescribe controlled substances.
- Electronic prescribing of controlled substances (EPCS) is now mandated in over 30 states and is required for Medicare Part D prescriptions under the SUPPORT Act (effective January 1, 2021). EPCS requires identity proofing, two-factor authentication, and an approved EPCS-certified EHR application. Paper prescriptions for Schedule II drugs are still accepted in some states for certain exceptions (technical failure, veterinary prescriptions), but practices should default to electronic prescribing.
- DEA audits and state medical board investigations of opioid prescribing patterns have increased since 2018. The DEA's Automation of Reports and Consolidated Orders System (ARCOS) tracks controlled substance distribution to individual prescribers. Prescribing volumes that exceed peer averages by a significant margin (the specific threshold varies by region) may trigger a review. Maintain clinical documentation that supports the medical necessity of every opioid prescription.
State Prescribing Limits and PDMP Requirements
- As of 2025, over 35 states have enacted laws limiting initial opioid prescriptions for acute pain (including post-surgical pain). Limits vary: 3-day supply in Connecticut and Maine, 5-day supply in New York and New Jersey, 7-day supply in Florida, Massachusetts, and Ohio, and 14-day supply in Pennsylvania. Some states exempt post-surgical prescriptions (check your state's specific exemptions), while others do not. Exceeding the state limit without a qualifying exemption exposes the prescriber to disciplinary action.
- All 50 states, the District of Columbia, and Guam operate Prescription Drug Monitoring Programs (PDMPs). 49 states mandate that prescribers query the PDMP before writing an opioid prescription (Missouri was the last state to establish a statewide PDMP in 2023). Failure to query the PDMP before prescribing is a common citation in medical board investigations. Document the PDMP check in the patient record, including the date of the query and the result (no concerning history, or specific findings and your clinical response).
- Many states require that the PDMP query occur within 24 hours before writing the prescription. Some states (New York, Kentucky, Tennessee) require a query before every controlled substance prescription, not just the initial one. Interstate PDMP data sharing through PMPInterConnect allows prescribers in participating states to check patient histories across state lines. Use this feature for patients who live near state borders or who report recent surgery in another state.
- State laws on post-surgical prescribing continue to evolve. The Prescription Drug Abuse Policy System (PDAPS) at pdaps.org, maintained by the Temple University Center for Public Health Law Research, provides a current, state-by-state database of opioid prescribing laws. Designate a compliance officer or practice manager to review your state's PDAPS entry quarterly and update internal protocols accordingly.
CDC Clinical Practice Guidelines and Documentation
- The CDC Clinical Practice Guideline for Prescribing Opioids (updated November 2022) provides 12 recommendations organized into 4 areas: determining whether to initiate opioids, opioid selection and dosage, duration and follow-up, and assessing risk. For post-surgical acute pain, the guideline recommends: prescribe the lowest effective dose, limit initial prescriptions to the expected duration of severe pain (typically 3 to 7 days for most outpatient procedures), and do not prescribe extended-release or long-acting opioids for acute pain.
- Morphine milligram equivalents (MME): the CDC guideline recommends caution above 50 MME per day and avoiding increases above 90 MME per day without careful reassessment. For post-surgical prescriptions, calculate the MME of the prescription: oxycodone 5 mg = 7.5 MME per tablet (4 tablets per day = 30 MME/day); hydrocodone 5 mg = 5 MME per tablet (4 tablets per day = 20 MME/day). Prescriptions exceeding 50 MME per day should include documented clinical justification in the chart.
- Documentation for each opioid prescription should include: the clinical indication (specific procedure performed and date), pain assessment (severity score, functional impact), non-opioid treatments attempted or prescribed concurrently (acetaminophen, NSAIDs, ice, elevation), the specific opioid, dose, quantity, and expected duration, PDMP query date and result, patient education on safe storage (locked cabinet), disposal (DEA-authorized take-back site or FDA-approved home disposal), and risks discussed (respiratory depression, constipation, dependence).
- Multimodal analgesia protocols reduce opioid requirements by 30% to 50% according to the American Society of Anesthesiologists (ASA). Documenting your multimodal approach (pre-operative acetaminophen and gabapentin, intraoperative local anesthetic infiltration, post-operative scheduled NSAIDs with opioid for breakthrough pain only) demonstrates compliance with best practices and protects against claims of excessive prescribing.
Practice-Level Policies and Audit Readiness
- Develop a written opioid prescribing policy for the practice. The policy should specify: which procedures typically require opioid prescriptions and the standard quantity for each, the maximum initial prescription limit (aligned with your state law), the refill policy (who authorizes refills, how many, and under what conditions), and the escalation pathway (when to refer to pain management). The American College of Surgeons (ACS) published procedure-specific opioid prescribing guidelines in 2020 that provide evidence-based quantity recommendations for over 20 common surgical procedures.
- Track prescribing data at the practice and individual surgeon level. Most EHR systems can generate reports on opioid prescriptions by prescriber, quantity, and refill frequency. Review these reports quarterly. Wide variation among surgeons performing the same procedure may indicate an opportunity for protocol standardization or targeted education.
- Controlled substance storage and inventory: maintain a log of all opioid samples (if stocked) with lot numbers, quantities received, quantities dispensed, and quantities wasted or destroyed. Two-person witness requirements apply to wasting controlled substances in many states. Secure storage (locked cabinet, limited key access) is required under DEA regulations (21 CFR 1301.71). Document all inventory counts at least annually.
- Staff training: front desk and nursing staff are the first to encounter patients requesting early refills, reporting lost prescriptions, or exhibiting red-flag behaviors. Train all clinical staff on your practice's refill policy, red-flag indicators (requesting specific drugs by name, reporting allergies to all non-opioid pain medications, frequent emergency department visits for pain), and the process for escalating concerns to the prescriber. Document training dates and content for all staff annually.