Florida hormone & TRT clinic compliance — what the DEA, AHCA, and the Board of Medicine expect on file in 2026.

Why a TRT clinic is regulatorily heavier than a Botox med spa

A Florida med spa that only handles botulinum toxin and fillers operates inside the medical-practice layer — Board of Medicine Rule 64B8-9.009, § 458.331(1)(t) standard of care, § 458.348 supervision, § 400.9905 AHCA. The drugs are prescription-only legend drugs but not on any DEA schedule. (See our Good Faith Exam explainer for the common misconception that Botox is Schedule III — it is not.)

A TRT clinic adds a second layer entirely. Testosterone is a DEA Schedule III controlled substance under 21 USC § 802 and listed at 21 CFR 1308.13. Florida's controlled-substance schedule at § 893.03(1)(b)2 follows the federal scheduling. The implications are not cosmetic:

• Each prescribing practitioner — not the clinic — needs an individual DEA registration under 21 CFR 1301.11, issued to a specific practice location. A supervising MD's DEA number does not cover an ARNP unless the ARNP holds their own.
• Inventory and recordkeeping under 21 CFR 1304: an initial inventory at the moment a practitioner first handles a controlled substance, a biennial inventory (every two years on a calendar date the registrant selects, not anniversary-driven), receiving records, dispensing records, theft and loss reports (DEA Form 106), and a two-year federal retention floor — Florida § 893.07 may functionally extend that.
• Storage — secure storage requirements for Schedule III stock under 21 CFR 1301.75; safes or substantially constructed cabinets are the typical expectation for office-stock testosterone.
• The Good Faith Exam standard tightens. Board of Medicine Rule 64B8-9.009 plus § 458.331(1)(t) still applies, but the chart for Schedule III initiation needs additional clinical justification — symptoms, two morning testosterone draws, comorbidity screen, the documented risk-benefit conversation, and the rationale for treatment.
• Telehealth becomes a Ryan Haight question. Florida § 456.47 permits telehealth prescribing in principle, but federal Ryan Haight Act considerations apply to Schedule III initiation by telemedicine; the DEA's post-COVID telemedicine rulemaking continues to evolve. Confirm the current federal posture with your Florida healthcare attorney before relying on telehealth-only TRT initiation.

The regulatory stack with primary-source links

The full stack a Florida TRT or BHRT clinic operates inside, with the actual citations an inspector or investigator would reference:

• 21 USC § 802 — federal definition of "controlled substance" and the scheduling framework; testosterone is Schedule III.
• 21 CFR 1308.13 — DEA schedule of substances; testosterone and its esters appear at 1308.13(f). Link: ecfr.gov.
• 21 CFR 1301.11 — DEA registration requirement for practitioners. Link: ecfr.gov.
• 21 CFR 1301.75 — physical security controls for Schedule III–V storage at a practitioner location.
• 21 CFR 1304 — DEA recordkeeping requirements, including initial inventory (1304.11), biennial inventory (1304.11(c)), and the two-year federal record retention floor (1304.04). Link: ecfr.gov.
• 21 CFR 1306 — DEA prescription rules for Schedule III–V; refill limits (1306.22), authorization, and the requirements for an issuing practitioner.
• 21 CFR 503A — Section 503A pharmacy compounding; the pathway for patient-specific compounded testosterone preparations and BHRT pellets. Office-stock non-patient-specific compounding is a 503B outsourcing facility question.
• Florida § 893.03 — Florida's controlled-substance schedule; follows federal scheduling for testosterone. Link: leg.state.fl.us.
• Florida § 893.07 — Florida controlled-substance recordkeeping; sits alongside 21 CFR 1304.
• Florida § 458.347 — physician-assistant licensure and delegation.
• Florida § 458.348 — formal supervisory relationships between physicians and ARNPs / PAs. Link: flsenate.gov. See our § 458.348 explainer.
• Florida Administrative Code Rule 64B8-9.009 — Board of Medicine standards for the Good Faith Exam and office-based supervision. See our GFE explainer.
• Florida § 456.47 — telehealth framework; replaced § 456.0625 in 2019. Required for any telehealth TRT consult.
• Florida § 458.331(1)(t) — standard of care for the practice of medicine; Board of Medicine enforcement anchor.
• Florida § 400.9905 — Health Care Clinic Act; AHCA licensure for entities billing third-party payors for medical services. See our AHCA HCC explainer.
• Florida § 465.0276 — dispensing practitioner registration (relevant if the clinic dispenses testosterone in-office).
• E-FORCSE (Florida Prescription Drug Monitoring Program) — Schedule II–V prescriber reporting under Chapter 893 and § 893.055.

The DEA registration question, in detail

The most common single error at a Florida TRT clinic is the assumption that a supervising MD's DEA registration "covers" the ARNP prescribing under that MD's protocol. It does not. DEA registration is granted to an individual practitioner at a specific location, per 21 CFR 1301.11. The key points:

• Practitioner-specific. Each prescriber — MD, DO, ARNP with controlled-substance prescriptive authority under Chapter 464, or PA under § 458.347 — needs their own DEA number for the location at which they prescribe and dispense.
• Location-specific. The DEA registration is tied to a physical address. A practitioner working at two locations needs to either list a primary location and meet the conditions for prescribing at the secondary location, or hold separate registrations — see DEA practitioner guidance.
• Application. DEA Form 224 for a practitioner. The application requests state license verification, the practitioner's controlled-substance authority under Florida law, and the prescriber's drug schedules.
• Renewal cycle. Practitioner DEA registrations renew every three years, not annually. The DEA sends a renewal notice approximately 65 days before expiration; the clinic's compliance file should track each practitioner's expiration date and the renewal lead-time.
• ARNP-specific note. An ARNP must hold (a) Florida controlled-substance prescriptive authority under § 464.012, (b) the supervisory protocol with the MD that includes Schedule III prescribing, and (c) the individual DEA registration. All three must be current and consistent. The DEA does not honor an ARNP prescription written under a supervising MD's DEA number absent the ARNP's own registration.
• Inventory date selection. The biennial inventory under 21 CFR 1304.11(c) is calendar-driven: every two years on a date the registrant selects (commonly the anniversary of the initial inventory), not anniversary of the registration itself. The inventory must be taken at the start or end of business, must be dated and signed, and must list the controlled substances on hand.

Florida DOH and AHCA do not adjudicate DEA registration — that is a federal matter. But Florida investigators will look for the DEA certificate in the clinic file during any controlled-substance touchpoint, and any chart for a testosterone prescription should show the prescriber's DEA number on the authorization. A clinic with ARNP-written testosterone prescriptions but no record of the ARNP's individual DEA is the configuration the DEA's diversion-investigator side flags fastest.

BHRT pellets: procedure, not prescription dispensation

Bioidentical hormone replacement therapy (BHRT) pellets — small subcutaneous pellets typically inserted in the hip or gluteal area to deliver testosterone or estradiol over three to six months — are a Florida-specific complexity for several reasons:

• Procedure, not just prescription. A pellet insertion is a delegated medical procedure. The chart needs both the prescription authorization for the compounded preparation (typically from a 503A compounding pharmacy) and the procedure note for the insertion itself.
• Who can perform. The insertion is typically performed by an MD or DO directly, or by an ARNP or PA under a written supervisory protocol under § 458.347 / § 458.348 that explicitly lists pellet insertion as a delegated act and sets the training, competency, and dosing parameters. A registered nurse, medical assistant, or esthetician may not independently perform the insertion.
• Source. Pellets are typically sourced from a 503A compounding pharmacy under Section 503A of the FD&C Act and 21 CFR 503A. The clinic should keep on file the pharmacy's licensure, a Business Associate Agreement (or equivalent), and the prescription tying each pellet lot to a specific patient and date. Office-stock pellets for non-patient-specific use require a 503B outsourcing facility.
• Lot tracking. The chart and the inventory log should capture the pellet lot number, the beyond-use date, the dose, the insertion site, and the practitioner. If a recall ever runs against the lot, the clinic needs to identify every patient who received that lot.
• DEA layer still applies for testosterone pellets. A testosterone pellet is still a Schedule III preparation; the receiving record (invoice from the pharmacy), the dispensing record (insertion chart entry), and the inventory reconciliation all sit under 21 CFR 1304. Estradiol pellets are not controlled and don't trigger DEA recordkeeping.

The Good Faith Exam for TRT initiation

The Good Faith Exam (GFE) standard from Board of Medicine Rule 64B8-9.009 and § 458.331(1)(t) applies to TRT initiation, with the substance of the exam weighted toward the hormone-specific risk-benefit. The defensible chart for initiation typically contains:

1. Patient identification. Full legal name, date of birth, contact information, MRN. Initials-only logs are routinely cited as below the standard of care.
2. Symptom-based presentation. Documented symptoms of androgen deficiency — fatigue, decreased libido, mood changes, decreased muscle mass — in the patient's own words, with onset and duration.
3. Two morning testosterone draws. Endocrine Society and AUA guidelines recommend confirming low testosterone on two separate morning samples before initiation. Florida does not statutorily mandate this, but a single random afternoon draw is typically not defensible as the basis for Schedule III prescribing — confirm with your endocrinology consultant.
4. Comorbidity and contraindication screen. History of prostate cancer or known prostate nodule, breast cancer in males, uncontrolled polycythemia (baseline hematocrit), severe untreated sleep apnea, severe lower urinary tract symptoms, uncontrolled heart failure, thrombophilia, and family history of androgen-sensitive cancer.
5. Targeted physical exam. Genitourinary exam where appropriate, prostate exam for males 45+ (or 40+ with risk factors), cardiovascular baseline, body composition.
6. Lab baseline. Total and free testosterone, CBC, CMP, lipid panel, PSA per the age criteria above, estradiol. SHBG, LH, FSH, and prolactin in the work-up for differentiating primary from secondary hypogonadism. Florida does not statutorily mandate a specific labs panel — confirm with your healthcare attorney and your endocrinology specialist.
7. Risk-benefit discussion. Documented conversation about expected benefit, side-effect profile (polycythemia, acne, gynecomastia, potential cardiovascular and prostate considerations), fertility implications, and the long-term nature of TRT.
8. Authorization. The prescription itself, with prescriber name, Florida license number, DEA registration number, dose, route, frequency, and refill count consistent with 21 CFR 1306.22.
9. Practitioner signature. Full name, credentials, Florida license, DEA number, signature, date.

For ARNP-prescribed testosterone, the supervisory protocol under § 458.348 is referenced on the chart, and the supervising MD's chart-review sample includes the ARNP-initiated TRT charts. The cadence of that sample (weekly, biweekly, monthly) belongs in the protocol and should be uniformly applied.

What ProofOps Medical does for your TRT clinic

ProofOps Medical is a Florida-only done-for-you compliance back-office — your fractional compliance department for the controlled-substance side of TRT. We work across 9 compliance frameworks against your existing EMR, pharmacy partner, and supervisory chain, and every record we produce is reviewed and signed off by a real person before it lands in your binder. For a hormone or TRT clinic, the eight things we maintain for you as a recurring service:

1. Maintain the scheduled-substance safety records. We keep your controlled-substance file inspection-ready: every addition (pharmacy receipt, lot, BUD), every dispensation (chart-linked patient, dose, date, practitioner), every loss or breakage, and every return. The log is structured to the 21 CFR 1304 format, reconciles to the receiving records, and is checked by a real person against your storage and DEA certificate file before each reconciliation.
2. Track the laboratory diagnostic baseline for every patient, linked to chart. We pull lab results from your EMR or lab partner, organize total/free testosterone, hematocrit, PSA, lipid, and estradiol into discrete fields, hold the two-morning-draw confirmation and follow-up trend lines together, and flag a missing baseline before a Schedule III prescription issues — so the supervising MD's chart review takes minutes, not hours.
3. Keep strict physical and digital records of recurring physician chart reviews. Per your § 458.348 supervisory protocol, we coordinate the chart sample (size and selection method per protocol) on the cadence the protocol sets, compile the supervising MD's review packet, capture the MD signature, and file the signed joint-review note in both the physical binder and the digital record — so the recurring review is provable, not just claimed.
4. Chase the 503A pharmacy BAA for compounded testosterone preparations. We maintain the pharmacy partner files: state licensure, Section 503A status, Business Associate Agreement, lot certificates of analysis, and the per-patient prescription record.
5. Lot-track every pellet, vial, and ampule from source through patient. Each unit is tied to a pharmacy invoice on receipt and to a patient chart on dispensation. If a recall runs, we can identify every affected patient in minutes.
6. Document the rationale for off-protocol doses (clinical justification on chart). When a prescription falls outside the standing protocol parameters — higher dose, off-label use, alternative ester — we surface the rationale field and pin the supervising MD's note.
7. Build the DEA biennial inventory exhibit + the AHCA inspection PDF on demand. Inspector or investigator walks in; we generate the per-controlled-substance inventory, receiving and dispensing reports, the biennial inventory record, the supervisory protocol exhibit, and the GFE samples — as a single signed PDF, on demand.
8. Watch the Schedule III GFE / re-exam intervals per protocol. We track every TRT patient's last documented exam, last lab draw, and next chart-review date against the cadence the protocol sets, and we flag the prescriber before refills issue against expired GFEs.

What ProofOps Medical does not do

This page is a marketing page, and we are explicit about scope. ProofOps:

• Does not replace your medical director or supervising physician. The MD remains the legal supervisor under § 458.348 and is the one signing chart reviews.
• Does not replace your malpractice carrier. Our service agreement is administrative, not clinical risk.
• Does not replace your Florida healthcare attorney. Statutory and rule interpretation, contract review, and any litigation response is the attorney's lane.
• Is not a software product or SaaS you have to learn and run yourself. We are a done-for-you managed service: technology does the heavy lifting, a real person reviews and signs off, and we maintain the records on your behalf as a recurring service — you don't lift a finger.
• Does not hold your DEA registration. Each prescriber's DEA is theirs and must be applied for and renewed under their name.
• Does not dispense, compound, or prescribe. We do not handle the drug. We maintain the documentation around your handling of it.
• Does not guarantee a clean inspection outcome. We make the documentation defensible and the records retrievable; an inspector's conclusions are theirs.

How a TRT clinic compliance posture is sampled in 2026

A Florida TRT or BHRT clinic is sampled in five distinct ways, by different agencies, with different windows:

1. DEA diversion inspection. Unannounced visits are possible. The investigator wants the DEA certificate, the initial and biennial inventories, the receiving and dispensing records, the loss and theft reports, and the storage configuration. Records under 21 CFR 1304 must be readily retrievable. A two-year federal retention floor applies; Florida § 893.07 may extend.
2. AHCA Health Care Clinic survey. If you bill third-party payors, you're under § 400.9905 and AHCA samples charts during initial licensure, renewal, and complaint surveys. GFE documentation, supervisory protocol, and licensure of practitioners are reviewed. See our AHCA HCC explainer.
3. DOH / Board of Medicine complaint investigation. A patient complaint, a pharmacist concern, or a third-party referral can trigger a § 456.073 inquiry. The 20-day response window applies. The first chart requested is the named patient's; the first record looked at is the Good Faith Exam.
4. E-FORCSE (Florida PDMP) audit. Reporting compliance for Schedule II–V dispensations is checked. A clinic that dispenses testosterone in-office (vs. writing prescriptions filled at an outside pharmacy) under § 465.0276 has additional reporting obligations.
5. Civil litigation. A patient adverse event becomes a tort claim. The chart, the GFE, the supervisory protocol, and the inventory log become discovery exhibits. Records that don't reconcile — a chart entry for a dose that doesn't appear in the inventory log, or vice versa — are evidence of poor controls.

Telehealth TRT in Florida: the post-COVID picture

Florida § 456.47 generally permits telehealth prescribing by a Florida-licensed practitioner via real-time synchronous audio + video, with the documentation standard equal to in-person. For Schedule III prescribing specifically, the federal Ryan Haight Online Pharmacy Consumer Protection Act of 2008 historically required an initial in-person exam by a DEA-registered practitioner before a controlled-substance prescription could issue via telemedicine, with limited exceptions.

The COVID-era public health emergency relaxed that requirement. Post-PHE, the DEA has run multiple proposed rulemakings on telemedicine prescribing of controlled substances, with successive extensions of flexibility. As of the date of this page (May 2026), the picture continues to evolve. The defensible Florida posture is:

• Confirm the current federal Ryan Haight posture and any active DEA telemedicine rule with your healthcare attorney before relying on telehealth-only TRT initiation.
• If telehealth initiation is used, the encounter must be synchronous audio + video (not phone-only, not text), of meaningful duration, with a Florida-licensed practitioner, and the documentation must be at the in-person standard.
• The supervisory protocol under § 458.348 should explicitly contemplate telehealth TRT consults if the ARNP will conduct them.
• The lab baseline and the physical findings supporting the diagnosis must be on file. Lab work obtained from a national lab service the patient visits in person, plus a video physical exam, is the typical pattern.
• Refills must comport with 21 CFR 1306.22 — a maximum of five refills within six months for Schedule III.

Where this sits in the rest of the Florida explainer set

TRT compliance is the heaviest single vertical inside Florida med spa and wellness compliance. The lighter neighboring pages:

• For the Good Faith Exam framework that anchors the patient encounter, see Good Faith Exam in Florida.
• For the supervisory protocol structure under § 458.348, see § 458.348 supervision.
• For Health Care Clinic licensure under § 400.9905, see AHCA HCC license.
• For the umbrella, see Florida med spa compliance guide.
• For the bloodborne pathogen and OSHA layer (relevant for any injection clinic, including TRT), see OSHA BBP checklist.
• For the 2026 legislative context, see SB 1728 — what it meant.

Frequently asked questions

Do I need DEA registration to prescribe testosterone in Florida?

Yes. Testosterone is a DEA Schedule III controlled substance under 21 USC § 802 and 21 CFR 1308.13, and Florida § 893.03 follows federal scheduling. Each prescribing practitioner — MD, DO, ARNP with controlled-substance prescriptive authority, or PA — needs an individual DEA registration under 21 CFR 1301.11 issued to the location at which they prescribe and dispense. A supervising MD's DEA number does not cover an ARNP unless the ARNP also holds an individual DEA registration; the registration is practitioner-specific, not clinic-wide. Renewal is every three years. Confirm any specific case with your Florida healthcare attorney.

What lab work is required before starting TRT in Florida?

Florida does not statutorily mandate a specific labs panel before initiating testosterone replacement therapy — there is no Chapter 458 list. The defensible standard of care, drawn from Endocrine Society, American Urological Association, and AACE clinical guidelines, typically includes baseline total + free testosterone (on two separate morning draws), CBC (for polycythemia screening), CMP (renal and hepatic baseline), PSA for males 45 and older (or 40+ with risk factors), lipid panel, and estradiol. Some clinics also include SHBG, LH, FSH, and prolactin to differentiate primary from secondary hypogonadism. Confirm with your healthcare attorney and your endocrinology or urology consultant.

Who can perform BHRT pellet insertions in Florida?

Pellet insertion is a delegated medical procedure, not a prescription dispensation. In Florida it is typically performed by an MD or DO directly, or by an ARNP or PA operating under a written supervisory protocol that explicitly includes pellet insertion as a delegated act per § 458.347 / § 458.348. A registered nurse, esthetician, or medical assistant cannot independently perform the insertion. The supervising MD's protocol should specify training and competency requirements for the delegated practitioner, the dosing range, and contraindications. The pellets themselves are typically sourced from a 503A compounding pharmacy under 21 CFR 503A — confirm the BAA and Section 503A compliance with your pharmacy partner.

What's the supervision requirement for an ARNP prescribing testosterone?

An ARNP prescribing testosterone in Florida requires both (a) a written supervisory protocol with a Florida-licensed MD or DO under § 458.348, including the joint review framework and chart-sample requirements, and (b) controlled-substance prescriptive authority granted under Chapter 464 plus an individual DEA registration under 21 CFR 1301.11. The supervisory protocol must list testosterone and any other Schedule III drug the ARNP intends to prescribe, set the dosing parameters, and define the chart-review interval. The supervising MD's DEA number does not cover the ARNP. See our § 458.348 explainer for the full framework.

How often does the supervising MD need to chart-review TRT patients?

Florida statute does not set a single statutory chart-review interval for ARNP-prescribed testosterone. The defensible standard, set by the written supervisory protocol under § 458.348, commonly requires the supervising MD to review a documented sample of charts at a stated frequency — weekly, biweekly, or monthly depending on patient volume — with a written joint-review note. For Schedule III prescriptions specifically, many Florida clinics tighten the interval (weekly or biweekly sampling) and document the supervising MD's signature and the rationale on the chart. The exact cadence belongs in the supervisory protocol and should be applied uniformly. Confirm with your healthcare attorney.

What records does the DEA ask for at a TRT clinic inspection?

Under 21 CFR 1304, a DEA inspection at a TRT or hormone clinic typically asks for: the current DEA registration certificate for each registered practitioner and location, the initial inventory record taken at the time of first handling controlled substances, the biennial inventory record (taken on a calendar date the registrant selects within the federal window), the receiving records (DEA Form 222 for Schedule II, invoices for Schedule III–V), the dispensing records, the records of losses or thefts (DEA Form 106), and the supporting prescriptions or chart authorizations. Federal record retention is two years per 21 CFR 1304.04; Florida § 893.07 may extend the practical retention window. The records must be readily retrievable and separated from other clinic records.

Is telehealth TRT prescribing legal in Florida?

Generally yes, under Florida § 456.47, with conditions. A Florida-licensed practitioner may establish a practitioner-patient relationship by real-time synchronous audio + video telehealth and prescribe testosterone, provided the encounter contains the substantive elements of an in-person exam, the lab work and physical findings support the diagnosis, and the documentation meets the same standard as an in-person Good Faith Exam under Board of Medicine Rule 64B8-9.009. Federal Ryan Haight Act considerations apply because testosterone is Schedule III: an initial in-person exam by some DEA-registered practitioner is the traditional requirement, though COVID-era and post-COVID flexibilities have shifted the analysis — confirm the current federal posture with your healthcare attorney before relying on telehealth-only TRT initiation.

Can a Florida med spa source testosterone from a 503A compounding pharmacy?

Yes, for patient-specific prescriptions. A 503A compounding pharmacy (Section 503A of the Federal Food, Drug, and Cosmetic Act; 21 CFR 503A) may compound testosterone and BHRT pellets for an identified individual patient pursuant to a valid prescription. Office-stock compounding for non-patient-specific dispensing requires a 503B outsourcing facility. The clinic should keep on file a Business Associate Agreement (or equivalent) with the pharmacy, the prescription record tying each pellet or vial to a specific patient and date, and the pharmacy's lot and beyond-use-date documentation. The DEA recordkeeping at 21 CFR 1304 still applies for the controlled-substance side, even when the source is a 503A pharmacy.

How ProofOps Medical helps with TRT compliance

ProofOps Medical is a Florida-only done-for-you compliance back-office for hormone, TRT, BHRT, and IV-therapy clinics — your dedicated compliance team for the controlled-substance side. We maintain your scheduled-substance safety records, your laboratory diagnostic baseline tracking, your GFE samples, your § 458.348 recurring physician chart-reviews, your 503A pharmacy documentation, and your lot-tracking — on a recurring basis, against your EMR and your pharmacy partner, with a real person reviewing and signing off every record. Inspection-ready binder, generated on demand. You don't lift a finger.

Three engagement tiers: Lighthouse 5 at $0/month for the first 30 days with a $1,195 Historical Compliance Migration & Audit, then a locked $599/month founding rate from day 31; Managed Evidence at $999/month with a $1,795 setup; and Multi-Location at $1,695/month + $599/location with a $2,495 setup. See pricing for the full breakdown.

This page is informational. It is not legal or medical advice and should not be relied upon as the basis for clinical decisions, prescribing, or compliance posture. For interpretation of any standard specific to your clinic, consult your Florida-licensed healthcare attorney, your medical director, and your endocrinology or urology specialist. Source citations: 21 USC § 802; 21 CFR 1301.11, 1301.75, 1304, 1306, 1308.13, 503A; Florida Statutes § 458.331, § 458.347, § 458.348, § 456.47, § 400.9905, § 465.0276, § 893.03, § 893.07, § 893.055; Florida Administrative Code Title 64B8; Board of Medicine and AHCA published guidance as of May 2026.