Note: Access to the EHR features described in this article may differ for practices who have already purchased a Practice Fusion EHR subscription plan. Please contact Practice Fusion Customer Service for additional information.
The DEA requires that a practice administrator grant permission for you to e-sign controlled substances. After you’ve completed identity verification, a practice administrator other than yourself can grant you permission within the EHR.
Prior to setting up e-signing permissions for controlled substances
- First complete EPCS identity verification.
- Locate another administrator in the practice and request that they grant you access to e-sign controlled substances. Per DEA requirements, this must be an administrator other than the provider completing EPCS activation.
for granting e-signing permission
The additional admin must log into their Practice Fusion account and complete the steps below.
1. Navigate to EHR Settings.
2. Select Electronic Prescriptions for Controlled Substances (EPCS) under the e-Prescribing header.
3. Click Activate EPCS.
4. Click Allow Access to confirm.
Provider confirming EPCS permissions
Once your administrator has granted you e-singing permissions, log into your Practice Fusion account and complete the steps below.
1. Open the Controlled Substance eRx tile on your Dashboard.
2. Click Confirm activation or Launch Norton Symantec.
3. Enter your existing Practice Fusion password
and click Continue.
4. Click Grant to navigate to Norton Symantec.
5. You will be directed out of Practice Fusion to Norton Symantec. Enter the newest security code displayed within the VIP Access app on your smartphone and click Verify.
6. You are now verified to send controlled substances electronically. For additional information, please see: How do I send e-prescriptions and approve refills for controlled substances?
Why do I need a smartphone?
A smart phone is required to use the Symantec VIP Access application, which will be linked to your EPCS account. The VIP Access application is used to generate the time sensitive one-time password that is used to both confirm changes to e-signing controls and is also used to e-sign prescriptions for a controlled substance.
What do I do if I'm the only user in my practice?
It’s a DEA requirement that two individuals be involved in setting e-signing control for electronic prescriptions for controlled substances (EPCS).
According to the requirement, one individual must be the DEA registrant who has obtained the two-factor authentication credential. For Practice Fusion practices, this person is the provider registered with the DEA who has completed identify verification through Norton Symantec and linked the VIP access app on their smartphone to their Practice Fusion account.
The DEA specifies that the second individual must be someone who can be responsible for verifying that the registrant’s DEA number and state medical license number are current and in good standing. This individual is also responsible for managing e-signing controls, which means they will determine which providers at the practice have the ability to e-prescribe controlled substances.
Because the DEA specifies these responsibilities for the second individual, an account administrator other than the DEA registrant must log in and grant access to e-prescribe controlled substances. You have flexibility in choosing this account administrator.
We understand the two individual requirement for setting e-signing controls may be a challenge for sole practitioners, but it is a DEA requirement. You can review this DEA requirement in its entirety by visiting: http://www.deadiversion.usdoj.gov/21cfr/cfr/1311/subpart_c100.htm