The DEA requires that a practice administrator grant permission for you to e-sign controlled substances. After you’ve completed identity verification, a practice administrator other than yourself can grant you permission within the EHR.
Prior to setting up e-signing permissions for controlled substances
- First complete EPCS identity verification.
- Locate another administrator in the practice and request that they grant you access to e-sign controlled substances. Per DEA requirements, this must be an administrator other than the provider completing EPCS activation.
Administrator instructions for granting e-signing permission
The additional admin must log into their Practice Fusion account and complete the steps below.
1. Navigate to EHR Settings and select Electronic Prescriptions for Controlled Substances (EPCS) under the e-Prescribing header as shown in Graphic 1 below.
Graphic 1: EPCS settings
2. Click Activate EPCS (see Graphic 2 below) next to the provider that is eligible for EPCS.
Graphic 2: Activate EPCS
3. Click Allow Access to confirm as shown in Graphic 3 below. After you have granted this user permission to sign electronic prescriptions of controlled substances, that user must now log into their EHR account to confirm EPCS activation.
Graphic 3: Allow access
Provider confirming EPCS permissions
Once your administrator has granted you e-singing permissions, log into your Practice Fusion account and complete the steps below.
1. Open the Controlled Substance eRx tile on from your Practice Dashboard and click Launch ID.me as shown in Graphic 4 below.
Graphic 4: Confirm EPCS activation
2. Enter your existing Practice Fusion password and click Confirm password (see Graphic 5 below).
Graphic 5: Enter Practice Fusion password
3. Click Authenticate on ID.me to navigate to ID.me (see Graphic 6 below).
Graphic 6: Authenticate with ID.me
4. You will be directed out of Practice Fusion to ID.me. A push notification will be sent to your phone on the ID.me app for you to complete two-factor authentication.
5. You are now verified to send controlled substances electronically (see Graphic 7 below). For additional information, please see: How do I send e-prescriptions and approve refills for controlled substances?
Graphic 7: EPCS is active
To learn how to manage access controls for ID.me Authenticator application, click here.
Frequently Asked Questions
Why do I need a smartphone?
A smart phone is required to use the ID.me Authenticator application, which will be linked to your EPCS account. The ID.me Authenticator application is used to generate the time sensitive push notification that is used to both confirm changes to e-signing controls and is also used to e-sign prescriptions for a controlled substance.
What do I do if I'm the only user in my practice?
It’s a DEA requirement that two individuals be involved in setting e-signing control for electronic prescriptions for controlled substances (EPCS).
According to the requirement, one individual must be the DEA registrant who has obtained the two-factor authentication credential. For Practice Fusion practices, this person is the provider registered with the DEA who has completed identify verification through ID.me and linked the ID.me Authenticator app on their smartphone to their Practice Fusion account.
The DEA specifies that the second individual must be someone who can be responsible for verifying that the registrant’s DEA number and state medical license number are current and in good standing. This individual is also responsible for managing e-signing controls, which means they will determine which providers at the practice have the ability to e-prescribe controlled substances.
Because the DEA specifies these responsibilities for the second individual, an account administrator other than the DEA registrant must log in and grant access to e-prescribe controlled substances. You have flexibility in choosing this account administrator.
We understand the two individual requirement for setting e-signing controls may be a challenge for sole practitioners, but it is a DEA requirement. You can review this DEA requirement in its entirety by visiting: http://www.deadiversion.usdoj.gov/21cfr/cfr/1311/subpart_c100.htm