E-Prescribing Setup for Optometry Practices: A Step-by-Step Guide

Quick answer. To enable e-prescribing in an optometry practice, you need an active NPI, a DEA registration if you prescribe controlled substances, an EHR connected to the Surescripts network, completed identity proofing and two-factor authentication for EPCS, provider enrollment through your EHR vendor, and a successful test transmission to a pharmacy before going live. Most practices complete the full setup in two to four days.

Why E-Prescribing Matters for Optometry Practices

Electronic prescribing has shifted from a nice-to-have feature to a clinical and operational necessity for optometrists. More than 90 percent of community pharmacies in the United States are now connected to the Surescripts network, meaning a transmitted prescription reaches the pharmacy in seconds rather than minutes, with far fewer transcription errors. For practices that prescribe topical antibiotics, antivirals, glaucoma medications, or controlled substances such as cyclopentolate and atropine, an e-prescribing workflow eliminates phone tag with pharmacies, reduces callbacks, and creates a clear audit trail inside the patient record.

Beyond convenience, several states now mandate electronic prescribing for all or most outpatient prescriptions. New York, Michigan, and Minnesota have broad e-prescribing laws, and the Centers for Medicare and Medicaid Services (CMS) has tied electronic prescribing compliance to certain Medicare Part D quality measures. Setting up e-prescribing correctly from the start avoids compliance gaps and prepares your practice for future regulatory changes.

This guide walks through every stage of e-prescribing setup for optometry practices, from verifying your credentials to sending your first live prescription, with special attention to the additional steps required for Electronic Prescribing of Controlled Substances (EPCS).

Prerequisites: NPI, DEA Registration, and State License

Before you log in to any EHR, confirm that the foundational credentials every e-prescribing system checks are current and accurate.

National Provider Identifier (NPI)

Your Type 1 (individual) NPI is the unique identifier the Surescripts network uses to route prescriptions and confirm prescriber identity. Verify yours through the National Plan and Provider Enumeration System (NPPES) and ensure the taxonomy code reflects your current practice type. If your address, specialty, or contact information has changed, update NPPES before enrollment. Some EHR vendors will reject a provider enrollment if the NPI address does not match the practice address on file.

DEA Registration for Controlled Substances

If you prescribe any schedule II through V controlled substances, including topical cycloplegics used in pediatric exams and certain glaucoma agents, you need an active DEA registration number. The DEA Diversion Control Division (deadiversion.usdoj.gov) issues and renews these registrations online. Your DEA number must list the same practice address you will use in your EHR account. Prescribing controlled substances from an address not listed on your DEA certificate is a federal violation, so if you practice at multiple locations, you may need multiple DEA numbers.

State Optometry License and Prescribing Authority

State boards vary in the drug schedules optometrists are authorized to prescribe. Some states grant full therapeutic prescribing authority including oral medications; others limit ODs to topical agents. Before configuring your EPCS account, confirm with your state board exactly which schedules you can prescribe. Configuring your EHR for a schedule you are not authorized to prescribe will create compliance exposure even if the technical setup is correct.

Choosing an EHR with Certified E-Prescribing

Not all EHR systems offer the same depth of e-prescribing functionality. When evaluating your options, look for these specific capabilities.

Surescripts Certification

The Surescripts network is the primary e-prescribing infrastructure in the United States, connecting prescribers to more than 75,000 pharmacies. Your EHR must be a certified Surescripts participant to send prescriptions electronically. Ask any vendor to confirm their Surescripts certification level and whether it covers both new prescriptions and renewal requests.

EPCS Certification

Electronic Prescribing of Controlled Substances requires a separate DEA-compliant certification layer on top of standard e-prescribing. Under DEA regulations at 21 CFR Part 1311, EPCS systems must meet specific identity proofing, logical access control, and audit log requirements. Verify that your EHR vendor has completed DEA-compliant EPCS certification through an approved third-party auditor.

Drug Interaction Checking and Formulary Data

A qualified e-prescribing module will include real-time drug interaction alerts, allergy cross-checks, and patient-specific formulary data from insurers so you can prescribe a covered medication on the first attempt. This reduces pharmacy callbacks and prior authorization delays significantly.

Jelo's cloud-based optometry EHR includes fully integrated e-prescribing for optometry and EPCS built directly into the exam workflow on the Surescripts network. Providers can transmit a prescription without leaving the encounter note, and the EPCS two-factor sign-off is embedded in the same screen rather than a separate portal. You can explore more on the optometry EHR software page or book a demo to see the workflow live.

E-Prescribing Setup at a Glance

Step-by-Step E-Prescribing Setup for Optometry

1. Gather and verify all provider credentials. Pull your NPI record from NPPES and confirm name, address, and taxonomy code are current. If prescribing controlled substances, locate your DEA certificate and note the expiration date. Check your state license for prescribing authority details and any schedule restrictions. Gather the same information for every provider at your practice who will prescribe electronically.
2. Select and contract with an EHR vendor. Confirm Surescripts certification and, if you need EPCS, DEA-compliant certification. Review the vendor's go-live timeline, support SLA, and whether e-prescribing is included in the base subscription or billed as an add-on. Optometry-specific vendors will typically have ophthalmic drug databases pre-loaded, which reduces manual formulary configuration. See the best optometry software comparison for a full overview of leading platforms.
3. Complete identity proofing (required for EPCS). The DEA requires that each provider who will sign controlled substance prescriptions electronically undergoes identity proofing to establish that the person enrolling is the same person holding the DEA registration. Most EHR vendors handle this through a DEA-approved identity proofing service. You will typically upload a government-issued photo ID and complete a knowledge-based authentication quiz or a supervised remote video session. Some vendors support in-person identity proofing at their offices. This step is not required for standard non-controlled e-prescribing, but it is mandatory before EPCS goes live.
4. Install and configure two-factor authentication for EPCS. Under 21 CFR Part 1311.115, signing a controlled substance prescription electronically requires two-factor authentication using at least two of three factors: something you know (a password or PIN), something you have (a hard token or application token), and something you are (a biometric like a fingerprint). The two factors must come from at least two different categories. Most optometry EHR systems support a smartphone authenticator app as the possession factor plus a password as the knowledge factor. Others support a USB hard token. Follow your vendor's specific instructions for binding the token to your prescriber account, and keep a backup code in a secure location in case your device is lost.
5. Enroll each prescribing provider. Submit enrollment through the EHR's provider setup portal. You will enter the provider's NPI, DEA number (for EPCS), state license number, practice address, and the drug schedules they are authorized to prescribe. The EHR vendor will verify these credentials against the Surescripts directory and DEA database. Network propagation typically takes 24 to 48 hours. During this window, prescriptions cannot be transmitted electronically, so plan enrollment ahead of your intended go-live date.
6. Configure the pharmacy directory. Surescripts maintains a database of pharmacies identified by their NCPDP ID. In your EHR, search for your most commonly used pharmacies by name, ZIP code, or NCPDP ID and mark them as favorites. Confirm that each pharmacy is marked as accepting electronic prescriptions and, if relevant, that they accept EPCS. Some independent pharmacies and compounding pharmacies may still require fax or phone for certain prescription types. Flag these in your system so staff know when to route to an alternative method.
7. Transmit a test prescription. Before seeing patients with your live e-prescribing account, run through a full test transaction. Most EHR vendors provide a sandbox pharmacy or a test mode that simulates the full transmission path without sending a real prescription to a real pharmacy. Walk through creating a prescription for a test patient, selecting a drug and dose, choosing a pharmacy, applying the two-factor sign-off for EPCS, and confirming the transmission status shows as delivered. If the test fails, your vendor's support team can pull transmission logs and identify whether the error is a credential mismatch, a network routing issue, or a formatting problem.
8. Train all clinical and front-desk staff. E-prescribing changes the refill request workflow significantly. Pharmacies and patients will initiate electronic refill requests directly through the Surescripts network, and those requests will appear in an EHR queue rather than as phone calls. Train your staff on how to review and approve or deny refill requests, how to handle pharmacy change requests (when a pharmacy cannot fill a specific drug and routes an alternative back to the prescriber), and how to document a prescription override when paper or phone is necessary. Front-desk staff should also know how to update a patient's preferred pharmacy in the system.
9. Review state-specific e-prescribing requirements. Check your state's requirements before going live. Some states mandate electronic prescribing for all prescriptions except in defined exemptions. Others have specific rules about EPCS for certain schedules. A few states require prescribers to register with a state prescription drug monitoring program (PDMP) and check it before prescribing certain controlled substances. Your state optometry association and state board website are the authoritative sources for these requirements.

EPCS Deep Dive: What Optometrists Need to Know

Electronic Prescribing of Controlled Substances adds a meaningful layer of complexity beyond standard e-prescribing, but the compliance requirements exist for good reason. EPCS reduces the diversion of controlled substances by creating a tamper-proof digital audit trail and eliminating the paper prescription pads that have historically been a vector for fraud.

DEA 21 CFR Part 1311 Requirements

The DEA's EPCS rule, codified at 21 CFR Part 1311, governs every aspect of how controlled substances may be prescribed electronically. Key requirements for prescribers include: completing identity proofing before activation, using a two-factor authentication method that meets FIPS 140-2 standards, never sharing EPCS credentials with staff, retaining electronic prescription records for a minimum of two years, and immediately reporting a compromised credential to the DEA and the application provider.

Logical Access Controls

The DEA requires that EPCS access is locked to the individual prescriber. A staff member may not enter a prescription in the EHR and have a doctor sign it with EPCS from a shared login. Each provider must authenticate with their own credentials, and the system must log every signing event with a timestamp and a record of the authentication method used. Your EHR should generate these audit logs automatically, but it is worth confirming with your vendor that the logs are being retained and are available for DEA inspection.

Reporting Compromised Credentials

If your EPCS token is lost, stolen, or you suspect unauthorized access, you are required to notify your application provider immediately so they can revoke the credential, and you must report to the DEA if there is any evidence of a breach. Most EHR systems provide an emergency suspend function accessible without a second factor specifically for this scenario. Know where this function is in your system before you need it.

Integrating E-Prescribing into the Optometry Exam Workflow

The best e-prescribing experience is one that requires no context switching. When e-prescribing is built into the exam workflow rather than bolted on as a separate module, providers can complete a prescription in under 30 seconds without leaving the encounter note. Look for an EHR that pulls the patient's active medications, allergy list, and insurance formulary data into the prescribing screen automatically so you are not re-entering information that already exists in the chart.

Jelo's cloud-based optometry software embeds e-prescribing and EPCS directly in the exam flow. When you reach the plan section of an encounter, the prescribing panel is right there, pre-populated with the patient's allergy and medication history. For EPCS, the two-factor sign-off is an inline prompt, not a redirect to a separate application. The entire workflow, from drug selection to confirmed transmission, typically takes less than a minute.

Troubleshooting Common E-Prescribing Errors

Even after a successful setup, occasional transmission errors occur. Here are the most common issues and how to resolve them.

Prescription Rejected by Pharmacy

Pharmacies can reject an electronic prescription for several reasons: the drug is out of stock, the patient's insurance requires a prior authorization, or the NDC code transmitted does not match the pharmacy's dispensable product file. When a rejection comes back, your EHR will typically surface a reason code. For prior auth rejections, most EHR systems have a prior authorization initiation workflow built in. For NDC mismatches, try selecting the drug from the formulary lookup rather than typing it free-form.

Provider Not Found in Surescripts Directory

If a pharmacy reports that your NPI is not found in the Surescripts prescriber directory, your provider enrollment has not fully propagated yet. Contact your EHR vendor's support team with your NPI and enrollment date. They can query the Surescripts directory directly and confirm whether enrollment is still pending or whether there was an error in the submission.

Two-Factor Authentication Failure

EPCS two-factor failures are almost always one of three things: a time-sync issue with a TOTP authenticator app (make sure your phone clock is set to automatic), an expired or revoked token, or an attempt to use the same one-time code twice. If the failure persists after checking time sync, contact your vendor's EPCS support line before attempting to reset the credential yourself, as an improper reset may require re-doing identity proofing.

Patient Pharmacy Not in Directory

If a patient's preferred pharmacy does not appear in the Surescripts directory, it may be an independent pharmacy that has not enrolled in electronic prescribing. In this case, your EHR should allow you to fall back to a printed or faxed prescription. Document the reason for the non-electronic transmission in your system so the audit trail is complete.

State Requirements and PDMP Integration

Prescription Drug Monitoring Programs are state-run databases that track dispensed controlled substance prescriptions. Many states now require prescribers to check the PDMP before prescribing schedule II through IV controlled substances. The process used to require logging into a separate state portal, but most modern optometry EHR systems now offer direct PDMP integration so the query happens automatically within the prescribing workflow.

If your EHR does not yet offer PDMP integration, check whether your state participates in the PMP InterConnect network, which allows queries to be made through a single vendor connection rather than requiring individual state logins. Either way, build a consistent PDMP check habit before each EPCS transmission to stay compliant and to protect your patients.

Ongoing Compliance and Maintenance

E-prescribing setup is not a one-time event. Several maintenance tasks recur on a regular schedule.

DEA Registration Renewal

DEA registrations expire every three years. Set a calendar reminder 60 days before expiration and renew through the DEA Diversion Control Division's online portal. If your registration lapses, your EPCS transmissions will be rejected and you may need to re-enroll with your EHR vendor.

NPI Record Updates

Update your NPPES record whenever you change practice addresses, add a practice location, or change your prescribing specialty. Mismatches between your NPPES record and your EHR account are a common source of enrollment rejections and pharmacy transmission errors.

Staff Turnover and Credential Management

When a prescriber leaves your practice, immediately revoke their EPCS credentials in your EHR and notify your vendor. Under 21 CFR Part 1311, the application provider is required to be able to revoke access within a defined timeframe, but the practice is responsible for initiating the revocation request promptly. Leaving a departed provider's EPCS account active creates serious liability exposure.

System Updates and Re-Certification

EHR vendors periodically release updates to their Surescripts or EPCS modules. Some updates require prescribers to re-acknowledge terms or re-confirm credentials. Monitor your vendor's release notes and respond to any required re-certification steps promptly to avoid service interruptions.

Costs and ROI of E-Prescribing for Optometry

The cost structure for e-prescribing varies by EHR vendor. Some charge a per-transaction fee, others charge a monthly add-on, and a few include e-prescribing in a flat monthly subscription that also covers the full EHR and practice management functionality. When evaluating cost, factor in the time savings from eliminated phone calls to pharmacies, reduced callbacks from transcription errors, and the staff hours previously spent on manual refill request processing.

Jelo includes e-prescribing and EPCS as part of its flat $200 per month subscription with no per-transaction fees. The platform includes a 30-day free trial and a typical go-live of two to four days, which is faster than most traditional EHR deployments. For practices evaluating optometry billing and coding software alongside e-prescribing, Jelo's integrated approach means a single vendor, a single subscription, and a single support contact for both workflows.

Getting Started with Jelo E-Prescribing

Jelo's e-prescribing module is built natively into the exam, not integrated as a third-party add-on. Every prescription, whether for a topical antibiotic, a glaucoma drop, or a schedule III controlled substance, is transmitted through the Surescripts network without leaving the encounter note. EPCS is included at no additional cost, and the identity proofing and two-factor setup can be completed during your onboarding call.

If you are evaluating a move from paper, fax, or a legacy EHR that does not support EPCS, the setup process with Jelo takes two to four days from contract signing to first live prescription. That includes credential verification, provider enrollment, identity proofing, two-factor configuration, and a supervised test transmission. Book a demo to walk through the full setup process and see how e-prescribing fits into Jelo's exam workflow.