Electronic Prescribing - Mpje

1. Which of the following best describes an electronic prescription under pharmacy law?
   Answer: A prescription transmitted electronically via a compliant system meeting state and federal requirements, including EPCS for controlled substances. An electronic prescription is one generated, signed, and transmitted electronically from prescriber to pharmacy. D correctly identifies this definition. A is incorrect because fax involves paper at some point. B is incorrect because printing creates a paper element. C is incorrect because verbal telephone transmission is an oral prescription, not an electronic one.
2. A pharmacy discovers that its EPCS system was breached and a hacker used a pharmacist's credentials to access electronic controlled substance prescription records. No prescriptions were altered or diverted. Which of the following best describes the required response?
   Answer: Notify the DEA within one business day and secure the compromised account. DEA EPCS regulations require reporting security incidents -- including unauthorized access -- to the DEA within one business day. The pharmacy must also secure the compromised account and investigate. B correctly identifies these obligations. A is incorrect because unauthorized access itself is a reportable event regardless of whether prescriptions were altered. C is incorrect because patient notification alone does not satisfy DEA reporting obligations. D is incorrect because permanent shutdown is not required; the compromised account must be secured while the investigation proceeds.
3. A state enacts an electronic prescribing mandate requiring EPCS for all controlled substances dispensed in the state. A pharmacist receives a paper Schedule III prescription from an out-of-state prescriber licensed in a neighboring state. Which of the following best applies?
   Answer: The pharmacist may fill the prescription if it complies with all applicable legal standards and is otherwise valid. State EPCS mandates typically apply to prescribers licensed in or practicing within the state. An out-of-state prescriber may not be subject to the same mandate, and the pharmacist should evaluate the prescription under all applicable legal standards. C correctly identifies this jurisdiction-specific analysis. A is incorrect because the state mandate may not apply to out-of-state prescribers. B is incorrect as an absolute statement; the analysis depends on the state mandate's scope. D is incorrect because federal law does not preempt state EPCS mandates.
4. Under DEA regulations for EPCS, how must a prescriber apply their electronic signature to a Schedule II controlled substance prescription?
   Answer: Using two-factor authentication at the time of signing. DEA EPCS regulations at 21 CFR 1311.120 require two-factor authentication to sign controlled substance prescriptions -- combining a knowledge factor with a possession or biometric factor. C correctly identifies this requirement. A is incorrect because typing a name is not a DEA-compliant electronic signature for controlled substances. B is incorrect because a scanned handwritten signature does not meet EPCS requirements. D is incorrect because delegation of signing authority is prohibited under EPCS regulations.
5. Under DEA EPCS regulations, what must a pharmacy electronically annotate when dispensing a controlled substance received through a certified EPCS system?
   Answer: Record dispense date, pharmacist's identity, and quantity in the electronic record. DEA EPCS regulations require pharmacies to annotate the electronic record with the dispense date, dispensing pharmacist's identity, and quantity dispensed. B correctly identifies this annotation obligation. A is incorrect because insurance confirmation is administrative, not an EPCS annotation requirement. C is incorrect because mailing copies to prescribers is not required. D is incorrect because patient handwritten signatures on printed copies are not required.
6. Under DEA regulations, which of the following is a required pharmacy-side EPCS logical access control for employees who process controlled substance electronic prescriptions?
   Answer: Each employee must have a unique account with role-appropriate access and activity logging. DEA EPCS regulations require individual user accounts, role-appropriate access, and audit logs of user-specific activities. D correctly identifies these requirements. A is incorrect because pharmacies have independent EPCS access control obligations. B is incorrect because shared passwords violate individual user account requirements. C is incorrect because other authorized employees may also access the system under individual accounts.
7. Under DEA EPCS regulations, what must an EPCS audit trail capture?
   Answer: All actions on prescriptions, including identity, date, and time. EPCS audit trails must capture all actions on each prescription -- creation, modification, signing, transmission, and dispensing -- with user identity and timestamps. C correctly identifies these comprehensive requirements. A is incorrect because transmission timing alone is insufficient. B is incorrect because prescriber identification alone is not a complete audit trail. D is incorrect because dispense timing alone omits the complete lifecycle required by DEA EPCS regulations.
8. A pharmacist receives an electronic prescription for a non-controlled medication. The prescriber's electronic signature was applied using a simple username and password login. Which of the following best applies?
   Answer: This is compliant; state law governs non-controlled electronic prescriptions, not DEA requirements. DEA EPCS two-factor authentication requirements apply specifically to controlled substance prescriptions. Non-controlled prescription electronic signatures are governed by state law. B correctly identifies this scope distinction. A is incorrect because DEA EPCS requirements apply only to controlled substances. C is incorrect because handwritten signatures are not required for electronic prescriptions. D is incorrect because username and password systems may satisfy state standards for non-controlled prescriptions.
9. A pharmacist receives an electronic Schedule III prescription showing evidence of post-transmission alteration -- the quantity was changed from 30 to 90 tablets and the edit is visible in the transmission metadata. Which of the following best describes the pharmacist's obligation?
   Answer: Refuse to dispense and verify alteration with prescriber before taking further action. Evidence of post-transmission alteration requires refusing dispensing, investigating with the prescriber through an independent contact, and reporting confirmed tampering to the DEA. D correctly identifies this complete response. A is incorrect because a potentially altered quantity must not be dispensed without verification. B is incorrect because noting the discrepancy without prescriber contact fails corresponding responsibility. C is incorrect because insurer notification is not the required first step.
10. A state requires all practitioners to use electronic prescribing for most non-controlled prescriptions. A dentist argues DEA registration exempts him from this requirement. Which of the following best analyzes this claim?
    Answer: The claim is incorrect; DEA registration does not exempt the dentist from state e-prescribing requirements for non-controlled substances. DEA registration grants authority to prescribe controlled substances under federal law; it has no bearing on a state's electronic prescribing mandate for non-controlled prescriptions. A correctly identifies that the dentist's claim is incorrect and the state mandate applies. B is incorrect because a partial DEA-registration-based exemption for controlled substances under this state mandate does not exist. C is incorrect because DEA registration does not override state electronic prescribing mandates; the two operate in separate legal domains -- federal controlled substance authority and state prescribing-format requirements. D is incorrect because dentists are generally subject to applicable state electronic prescribing mandates and are not categorically exempt.
11. A pharmacist receives an electronic prescription for a Schedule II controlled substance. Before filling it, which of the following must the pharmacist verify?
    Answer: That the prescription is DEA-compliant and contains all required elements. For a Schedule II electronic prescription, the pharmacist must verify EPCS compliance, all required prescription elements, and absence of red flags. B correctly identifies these requirements. A is incorrect because prescriber database lookup alone does not satisfy validity verification. C is incorrect because error-free transmission does not address clinical and legal validity. D is incorrect because insurance coverage is administrative and unrelated to prescription validity.
12. Under DSCSA, does an electronic prescription for a prescription drug product constitute a supply chain transaction requiring supply chain tracing documentation?
    Answer: No, DSCSA applies to physical transfers, not electronic prescriptions between prescriber and pharmacy. DSCSA supply chain tracing requirements -- transaction information and transaction statement under the current enhanced tracing framework -- govern physical transfer of prescription drug products between registered trading partners. An electronic prescription is a prescription order from a prescriber to a pharmacy; no physical drug product is transferred with the prescription transmission, and the prescriber is not a DSCSA trading partner. The physical product transfer that triggers DSCSA documentation obligations occurs separately when the pharmacy receives product from a distributor or manufacturer. C correctly distinguishes these frameworks. A is incorrect because DSCSA tracing requirements do not apply to prescription transmission between prescriber and pharmacy. B is incorrect even for specialty pharmacies; the physical product transfer triggers DSCSA obligations, not the prescription. D is incorrect because pharmacies are subject to DSCSA requirements for receipt of prescription drug products from trading partners.
13. Under most state pharmacy laws, which of the following electronic prescriptions may a pharmacist fill for a Schedule II controlled substance in a non-emergency situation?
    Answer: An electronic prescription transmitted through a DEA-compliant EPCS system containing all required controlled substance prescription elements and signed using two-factor authentication. Schedule II electronic prescriptions require a DEA-compliant EPCS system with all required elements and two-factor authentication. A correctly identifies these requirements. B is incorrect because email and informal messages do not satisfy DEA EPCS requirements. C is incorrect because fax is not electronic prescribing. D is incorrect because nurse-created prescriptions with verbal physician authorization are oral prescriptions for Schedule II emergency use only.
14. A state law requires prescribers to use EPCS for Schedule II controlled substances unless a specific exemption applies. A prescriber asks whether she may continue to write paper prescriptions for Schedule II drugs. Which of the following applies?
    Answer: No, unless she qualifies for a specific state exemption, as state law mandates EPCS for Schedule II prescriptions. Federal DEA permits both paper and electronic Schedule II prescriptions but does not mandate EPCS; state mandates are not preempted by federal permissiveness. The prescriber must comply with the state mandate unless qualifying for an exemption. D correctly identifies this state-federal relationship. A is incorrect because federal permissiveness does not preempt state EPCS mandates. B is incorrect because patient preference is not a universal exemption. C is incorrect because technology exemptions are defined by state law, not automatically available.
15. A pharmacist receives an electronic prescription for a Schedule II controlled substance transmitted through a DEA-compliant EPCS system, but the prescriber's DEA registration has been revoked. Which of the following best applies?
    Answer: The pharmacist must not fill the prescription due to the prescriber's revoked DEA registration. A prescriber with a revoked DEA registration lacks authority to prescribe controlled substances. EPCS compliance verifies the transmission mechanism but cannot authorize a prescription from someone who lacks prescribing authority. D correctly identifies that EPCS compliance does not cure the prescriber's lack of authority. A is incorrect because EPCS system compliance does not grant prescribing authority. B is incorrect because prior identity verification does not validate current authority. C is incorrect because two-factor authentication validates the signer's identity, not their current legal authority to prescribe.
16. Under DEA EPCS regulations, may a pharmacist print and retain a paper copy of an electronic controlled substance prescription after processing it?
    Answer: Yes, but it must be marked as a printout and not used as a new prescription. DEA regulations permit printing a hard copy for recordkeeping. The copy must be annotated as a printout and cannot be used as a new prescription. B correctly describes these permissions. A is incorrect because printing is specifically permitted. C is incorrect because printed copies are retained at the pharmacy. D is incorrect because printing does not convert an electronic prescription or create a signature requirement.
17. A state has enacted a mandatory electronic prescribing law with specified exemptions. A pharmacist receives a paper prescription for a controlled substance from a prescriber who may or may not qualify for a state exemption. Which of the following best describes the pharmacist's obligation?
    Answer: Dispense if valid; pharmacists are not responsible for enforcing prescriber EPCS mandates but must address other concerns. State EPCS mandates are prescriber compliance obligations. Pharmacists are generally not required to verify or enforce prescriber EPCS compliance before dispensing an otherwise valid prescription. C correctly identifies this allocation of responsibility. A is incorrect because pharmacists are not assigned enforcement responsibility for prescriber EPCS mandates. B is incorrect because the pharmacist must still verify the prescription is otherwise valid. D is incorrect because contacting the state board before filling is not a standard pharmacist obligation.
18. A pharmacist receives an EPCS-transmitted Schedule II prescription generated from a standing order protocol. Under what circumstances may the pharmacist fill this prescription?
    Answer: Only if the specific prescription meets all required Schedule II prescription elements and was individually signed by a prescriber with a valid DEA registration. A Schedule II prescription from a standing order must still meet all federal requirements: individually signed by a DEA-registered prescriber, containing all required elements, issued for a legitimate medical purpose. A correctly identifies the applicable standard. B is incorrect because standing order notation does not automatically invalidate a prescription. C is incorrect because standing orders are valid only when the resulting prescription meets all legal requirements. D is incorrect because electronic prescriptions may reference clinical protocols.
19. A pharmacy's EPCS system experiences a technical failure and electronic prescriptions for controlled substances cannot be received for several hours. A patient urgently needs a Schedule II opioid. Which of the following best describes the available options?
    Answer: The prescriber may issue an emergency oral Schedule II prescription with follow-up documentation. EPCS system unavailability does not prohibit Schedule II prescribing; alternative legally authorized methods remain available. D correctly identifies these alternatives. A is incorrect because fax is not a DEA-authorized Schedule II prescription method in non-emergencies. B is incorrect because email does not satisfy DEA EPCS requirements. C is incorrect because waiting is not required when alternative legal methods exist.
20. A prescriber wants to electronically prescribe a controlled substance to a patient she has consulted only via telemedicine and has never seen in person. Under the Ryan Haight Act, which of the following generally applies?
    Answer: An in-person evaluation is generally required before prescribing controlled substances via telemedicine. The Ryan Haight Online Pharmacy Consumer Protection Act established a general requirement for at least one prior in-person evaluation before online or telemedicine controlled substance prescribing, with limited exceptions. However, DEA and HHS have extended telemedicine prescribing flexibilities through December 31, 2026, which modify the in-person evaluation requirement for certain qualifying telemedicine encounters. EPCS is a transmission mechanism only; it does not satisfy the clinical relationship requirements under the Ryan Haight Act or the applicable telemedicine flexibility framework. D correctly identifies both the general rule and the current flexibility context. A is incorrect because EPCS transmission governs how the prescription is transmitted; it does not independently satisfy or override in-person evaluation or telemedicine requirements. B is incorrect because EPCS satisfies only the transmission format requirement; the clinical relationship requirements are separate. C is incorrect because telemedicine prescribing without satisfying either the in-person evaluation requirement or an applicable flexibility provision violates the Ryan Haight Act.

Start this quiz