Florida Electronic Prescribing Law: Requirements, Exceptions, and Penalties

Florida’s electronic prescribing law, codified at Florida Statute 456.42, requires every licensed prescriber whose practice uses an electronic health records system to transmit prescriptions electronically — for all medicinal drugs, not just controlled substances. The mandate took effect January 1, 2020, and the transition window closed years ago. If you prescribe in Florida and your office keeps electronic records, e-prescribing is the default, and paper is the exception.

Who Has to Comply

The requirement reaches any healthcare practitioner licensed in Florida to prescribe medicinal drugs who either maintains an electronic health records (EHR) system or prescribes as an owner, employee, or contractor of a licensed facility that maintains one.¹ That takes in physicians, osteopathic physicians, dentists, advanced practice registered nurses, physician assistants, and other licensed prescribers working in a setting with EHR capability.

The EHR trigger matters. A prescriber who genuinely does not use electronic records in any form falls outside the statute. In practice, almost no modern Florida practice meets that description.

Which Prescriptions Must Go Electronically

Florida’s rule is broader than many prescribers assume. It covers every medicinal drug the patient will fill through a pharmacy — Schedule II opioids, Schedule IV benzodiazepines, routine antibiotics, blood pressure medications, all of it.¹

That is a wider net than the federal approach. The CMS Electronic Prescribing for Controlled Substances program only reaches Schedule II through V controlled substances dispensed under Medicare Part D.² Under Florida law you do not sort by drug class or payer before transmitting. Everything routes through the e-prescribing system unless one of the statutory exceptions fits.

When a Paper, Oral, or Faxed Prescription Is Still Allowed

Section 456.42 lists eight situations in which a non-electronic prescription is permitted. These are the only circumstances:¹

The practitioner dispenses the drug directly, so there is no transmission to an outside pharmacy.
The drug cannot be transmitted under the most recently implemented version of the NCPDP SCRIPT standard. Some compounded medications and certain specialty drugs fall into this category.
The practitioner holds a Department of Health waiver, lasting no more than one year, based on economic hardship, technological limitations outside the practitioner’s control, or another exceptional circumstance.
The prescriber reasonably determines that requiring electronic transmission would delay the patient’s access to the drug in a way that would adversely affect the patient’s medical condition.
The drug is prescribed under a research protocol.
The FDA requires the prescription to contain elements that cannot be included in electronic format, which can happen with certain risk evaluation and mitigation strategies (REMS).
The patient is receiving hospice care or resides in a nursing home facility.
The practitioner or patient determines it is in the patient’s best interest to compare drug prices among pharmacies. The practitioner must document this determination in the patient’s medical record.

The technology-failure scenario sits inside the fourth exception, and it is the one prescribers reach for most often. If your EHR goes down or you lose power, you may issue a non-electronic prescription when the delay would harm the patient. This is not a blanket pass for every slow system or balky login. The standard is adverse effect on the patient’s condition, and you should be ready to document why that standard was met.

Technical Standards Your System Has to Meet

For controlled substance prescriptions, your software must be certified against 21 CFR Part 1311, confirmed through either a third-party audit or a DEA-approved certifying organization.³ Most major EHR vendors already carry this certification. If you are evaluating a new platform, confirming EPCS certification belongs at the top of the checklist.

The system also has to support the current NCPDP SCRIPT standard for prescription data exchange. CMS and the Office of the National Coordinator for Health IT have adopted NCPDP SCRIPT Version 2023011, which becomes mandatory by December 31, 2027.⁴ Vendors should be migrating now.

Two-Factor Authentication

Before you can electronically sign a controlled substance prescription, the application must verify your identity using two of three authentication factors:⁵

Something you know, such as a password or challenge-question response.
Something you are, such as a fingerprint or iris scan.
Something you have, such as a separate hard token that generates a one-time code.

A hard token has to be a device separate from the computer you are signing on, and it must meet at least FIPS 140-2 Security Level 1.⁵

Identity Proofing

None of that works until you complete identity proofing. Each individual practitioner has to obtain a two-factor authentication credential from a credential service provider approved by the General Services Administration, or from a certification authority cross-certified with the Federal Bridge Certification Authority.⁶ The credential is delivered through two separate communication channels to confirm your identity. It is a one-time setup, though changing practices or systems can mean re-credentialing.

The PDMP Check Is a Separate Duty

The e-prescribing mandate works alongside, but does not replace, Florida’s Prescription Drug Monitoring Program obligation. Under Florida Statute 893.055, any prescriber or dispenser must consult the PDMP to review a patient’s controlled substance dispensing history before prescribing or dispensing a controlled substance to a patient aged 16 or older.⁷ The duty does not apply to non-opioid Schedule V drugs or to patients admitted to hospice.

If a temporary technological failure keeps you out of the PDMP, you are not fully excused. You must document why you could not check it, and you may not prescribe more than a three-day supply of the controlled substance.⁷ A first-time failure to check the PDMP draws a nondisciplinary citation; a second offense triggers full disciplinary proceedings.

Penalties for Non-Compliance

Violating the e-prescribing mandate is treated as a failure to perform a statutory obligation under Florida Statute 456.072, the general discipline statute for health professions.⁸ Your licensing board has authority to impose any combination of the following:

Administrative fines up to $10,000 per count or separate offense. For violations involving fraud or false representations, the $10,000 fine per count is mandatory.
License suspension or permanent revocation.
Practice restrictions on where you practice, what services you provide, or how many hours you work.
Reprimand or letter of concern.
Probation with board-set duration and conditions, which can include supervised practice, continuing education, or reexamination.
Remedial education.

When selecting a penalty, the board must first consider protection of the public and then the practitioner’s rehabilitation.⁸ In practice, a single inadvertent lapse is more likely to produce a reprimand or a modest fine than revocation. A pattern of deliberate non-compliance, especially around controlled substances where the paper trail makes diversion easier, draws much harder treatment.

Do Not Rely on the Pharmacist to Catch You

One point of common confusion: a pharmacist is not required to refuse a paper prescription on the grounds that it should have been sent electronically. The Florida Board of Pharmacy has clarified that pharmacists are not responsible for confirming prescriber compliance with the e-prescribing mandate; enforcement falls on the prescriber’s licensing board.⁹ A pharmacist can fill a valid paper or faxed prescription without checking whether an exception applies. If you were counting on the pharmacy to flag an improper paper prescription before it caused you trouble, that safety net does not exist.

1
Florida Senate. Florida Code 456.42 – Written Prescriptions for Medicinal Drugs
2
Centers for Medicare & Medicaid Services. CMS Electronic Prescribing for Controlled Substances Program
3
Drug Enforcement Administration. EPCS Approved Certification Processes
4
Office of the National Coordinator for Health Information Technology. E-Prescribing and RTPB Fact Sheet October 2025
5
eCFR. 21 CFR 1311.115 – Additional Requirements for Two-Factor Authentication
6
eCFR. 21 CFR 1311.105 – Requirements for Obtaining an Authentication Credential – Individual Practitioners
7
The Florida Legislature. Florida Statutes 893.055 – Prescription Drug Monitoring Program
8
Florida Senate. Florida Statutes 456.072 – Grounds for Discipline, Penalties, Enforcement
9
Florida Board of Pharmacy. Electronic Prescribing Requirements