Mexico's controlled-substance reclassification: what it means for therapists

If you practise in Mexico, or your clients fill prescriptions there, two medicines that turn up regularly in a psychotherapy chart entered a tighter control category on 14 July 2026: tramadol and anfebutamona (bupropion). None of this changes what you do in session — it changes what the prescriber and the pharmacy do — which is why it can change what a client reports to you and what you have to record.

The sentence that keeps this piece in its lane goes first. Article 28 Bis of Mexico’s Ley General de Salud is a closed list: “Los profesionales que podrán prescribir medicamentos son: 1. Médicos; 2. Médicos Homeópatas; 3. Cirujanos Dentistas; 4. Médicos Veterinarios […], y 5. Licenciados en Enfermería […]” — physicians, homeopaths, dental surgeons, veterinarians and licensed nurses. Psychology is not on it, even though article 79 does recognise psychology as a titled health profession. What follows is documentation and coordination, not medical or legal advice, and it describes Mexican law only — verify what governs you where you practise.

What changed, and when

Two dates, and they get confused constantly. The decree amending the Ley General de Salud was published in the Diario Oficial de la Federación on 15 January 2026 and took effect “al día siguiente de su publicación” — the day after publication. But its second transitory article deferred one part: the inclusion in the article 245 classifications of ten substances, among them anfebutamona (bupropión) and tramadol, “entrará en vigor a los ciento ochenta días naturales siguientes a la publicación” — 180 calendar days from publication, not from the decree’s entry into force. That is 14 July 2026, the date COFEPRIS confirmed in a communication of 3 July.

In the consolidated text of the law, both substances now sit in fracción III of article 245, each carrying the note “Párrafo adicionado DOF 15-01-2026”. Tramadol did move: the decree of 19 June 2017 republished fracción IV in full with tramadol in it; the 2026 decree republished that fracción without it and added it to III, with no intervening reform to that fracción. Bupropion came from nowhere: it was not in article 245 at all before this decree.

What a “fracción” is, and what it is not

This is not a DEA schedule, and the tiers do not map onto US schedules one-to-one. The law classifies psychotropic substances “en relación con las medidas de control y vigilancia que deberán adoptar las autoridades sanitarias” — by reference to the control measures health authorities must adopt. Fracción III covers “las que tienen valor terapéutico, pero constituyen un problema para la salud pública”: those that have therapeutic value but constitute a public-health problem. Fracción IV covers those with “amplios usos terapéuticos” and a lesser public-health problem.

The axis is aggregate regulatory control, not individual risk. Fracción III opens by conceding therapeutic value. A fracción is a regulatory tier, not a clinical verdict about any patient. COFEPRIS justified the measure by tramadol’s dependence potential at population level; what that means for one patient is the prescriber’s answer, not yours.

The error in circulation: “it can be refilled three times”

Some clients may bring this version to session. The rule for fracción III is article 251:

“Las substancias psicotrópicas incluidas en la fracción III del artículo 245 de esta Ley […] requerirán para su venta o suministro al público, receta médica que contenga el número de la cédula profesional del médico que la expida, la que deberá surtirse por una sola vez y retenerse en la farmacia que la surta, de acuerdo a las disposiciones de la Secretaría de Salud.”

Filled once, and retained by the pharmacy. The “up to three times” figure in circulation belongs to a different regime: article 252, which governs fracción IV, where the prescription “podrá surtirse hasta por tres veces, con una vigencia de seis meses” and is not retained on the first two fills. Those are the rules that governed tramadol until 13 July; they never applied to bupropion.

The second error runs the other way: “now you need a special prescription pad.” Also wrong. COFEPRIS said so: “La dispensación requerirá receta médica simple (no especial) emitida por cualquier médico con cédula profesional” — an ordinary prescription bearing the prescriber’s professional licence number. The barcoded recetario especial is the narcotics regime, which article 241 reserves to its own chapter; fracción III does not trigger it.

One tension we would rather report than resolve. Article 251 orders one fill and retention, and refers the detail to the Secretaría de Salud; COFEPRIS, in the same communication, tells pharmacies to stamp prescriptions with the date and quantity dispensed and to register every transaction in the control books. Retention plus registration is article 226, fracción II — the one that squares with 251; the repeated stamping that comes with three fills is fracción III. Oficio circular COFEPRIS-CFS-3-2026, of 17 April 2026, the most detailed official guidance we located beyond the communication, leaves the assignment open between the two, taking articles 250 to 252 into account. Either way it belongs to the prescriber and the pharmacist, not to you.

Why these two names reach your caseload

In the Consejo de Salubridad General’s Compendio Nacional de Insumos para la Salud, tramadol entries sit under analgesia and palliative care, indicated for moderate to severe pain. Bupropion appears there as “ANFEBUTAMONA O BUPROPIÓN” under psychiatry, with a single indication: depression; smoking cessation does not appear. Translated to your calendar: it shows up in chronic-pain treatment, and with clients whose medication another professional already manages.

When a client brings it into session

Someone reports that the pharmacy would not fill their prescription, that it was kept, that their physician asked them to come back sooner than planned, or that they have gone days without something they had been taking. That is a clinical event you observe and record — not a problem you solve. And the pharmacy keeping the prescription is no longer a sign that something went wrong: it is what article 251 requires. Five steps:

Explore the clinical impact, which is genuinely yours: sleep, mood, functioning.
Record it as reported data, with the date and the source, not as your own finding.
Check consent before contacting anyone.
Route it to the prescriber. “What do I do about my medication?” has exactly one correct recipient, and it is not you.
Document the referral and the reply — including the absence of one.

What must not happen is the conversation turning into medication advice: no doses, no stopping or spacing out, no substitutes, no opinion on whether the medicine suits them. There is no good way to finish the sentence “you could suggest that…”. The answer is document and route.

One branch is genuinely urgent. If the interruption appears alongside risk indicators, that calls for immediate clinical risk assessment under your own protocol and training — not a script lifted from an article — and accelerated contact with the prescriber. How that reasoning gets recorded is in documenting a suicide risk assessment.

What goes in the note

Mexico’s clinical-record standard, NOM-004-SSA3-2012, binds private practices and requires a progress note at every outpatient contact (6.2), each carrying date, time, full name and signature of whoever wrote it (5.10). Its wording shifts numeral by numeral: the clinical history (6.1) says “el personal médico y otros profesionales del área de la salud”; the progress note and its 6.2.6 — “como mínimo la dosis, vía de administración y periodicidad” — say “el médico”, and describe what the person who prescribed records about their own order. You prescribed nothing; you record what the client reports, attributed and dated. Which numerals actually bind a therapist is the subject of Mexico’s clinical-record standard for psychologists.

The difference fits in one line. “Client discontinued tramadol; advised to continue until reassessment” credits you with an order you cannot issue. This fictional version records what is actually yours to do:

“Reports that on 20 August the pharmacy did not fill her prescription and told her it is now retained. Reports not having taken the medication since that date; describes irritability and fragmented sleep. Advised that this question belongs to her treating physician; with her written authorization of today’s date, a consultation note is being sent. No changes indicated by this therapist.”

Three moves: attribution, routing, and explicit non-action. That precision is easier when your session record already caught the date and the verbatim phrase. And medication usually enters the chart earlier: numeral 6.1.1 asks about previous treatments and psychoactive substance use from the intake interview onward.

Before you call the prescriber

Coordination is a duty, not a favour: Standard 3.09 of the APA Ethics Code asks psychologists to cooperate with other professionals “when indicated and professionally appropriate”. But 4.05 allows disclosure with the appropriate consent of the client or of another legally authorized person, and without consent — including to obtain professional consultations — only where law mandates or permits it; 4.04 limits it to information “germane to the purpose for which the communication is made”. A consultation note says what the prescriber needs to know and stops.

The Mexican legal layer is the federal data-protection law in force since March 2025: it classifies “estado de salud presente o futuro” as sensitive data (article 2) and requires “expreso y por escrito” consent to process it (article 8). Talking to the psychiatrist is, in that law’s vocabulary, a transfer to a third party: article 35 requires the privacy notice to carry a clause stating whether the data subject accepts the transfer of their data, and requires the notice to be communicated to the recipient. If yours has no such clause, its minimum contents are in the privacy notice for a therapy practice.

There is an exception, and it is not one to lean on: article 36 permits transfers without consent where necessary for medical prevention or diagnosis, health-care provision, medical treatment or the management of health services. But article 9, fraction VI, conditions the equivalent case on the person being unable to consent, and NOM-004 numeral 5.5.1 authorises releasing record data to third parties only on the written request of the patient, guardian, legal representative, or a physician duly authorised by them. The defensible practice is a written, dated, specific authorization naming the prescriber and the purpose — announced before you need it. Standard 4.02 asks for that conversation at the outset, which is where your informed consent lives.

Four things not to do

Calling the prescriber without the client’s authorization because “it is for their own good.” Good intentions do not substitute for consent.
Recording the medication as though you had ordered it. A line without “reports” turns a client’s account into your indication.
Writing “client is abusing tramadol” as if it were a diagnosis. Record the reported and observed behaviour; that judgment has requirements your session did not meet.
Treating a reclassification as a clinical alarm. Telling a client their medicine “is dangerous now” harms them and has no support in the text that moved it.

All four share material with the rest of the clinical documentation mistakes: confusing reported with observed, and opining outside the boundaries of competence Standard 2.01 draws.

What you do control

A regulatory change that does not reach you directly still ends up in your chart: reported data with a date, a referral with its authorization, and a reply that came or did not. That chain is easy to lose between sessions. gesell.ai keeps that structure per client — intake, clinical history, treatment plan and session notes — and drafts each note from your session record, separating what the client reported from what you observed and from your assessment. You review and sign: the final note is yours, and with it the dated line saying you routed what was never yours to resolve.