- What additional daily action is required by the dispensing pharmacists when an electronic log is used in lieu of a hardcopy printout?
Answer: Each pharmacist must sign a statement in a separate bound logbook or an electronic file attesting that they have reviewed the electronic dispensing data for that day and it is correct.
Regulations such as 21 CFR §1306.22(c) provide an alternative to the daily hardcopy printout. If this option is chosen, the pharmacy must have a system where each pharmacist who dispenses controlled substances on a given day signs a statement verifying that the electronic data accurately reflects their dispensing activities for that day. This serves the same purpose as signing the hardcopy printout: individual pharmacist attestation and accountability.
- To ensure the documentation is legally defensible in the event of a future claim, which method of electronic record-keeping is most appropriate?
Answer: The pharmacist makes a timestamped notation directly in the electronic record for that specific prescription fill, indicating the patient's refusal.
While an electronic signature (D) is an excellent form of documentation, it is not required in all jurisdictions. The most critical and universally acceptable method is for the pharmacist to make a specific, auditable notation in the patient's electronic record. This notation should be tied to the specific prescription, be timestamped, and be attributable to the pharmacist making the entry. This creates a clear and contemporaneous record of the event.
- What key information must the originating pharmacy's electronic system record for this transaction to be compliant?
Answer: The system must record the name, address, and DEA number of the central fill pharmacy, the date of transmission, and the identity of the transmitting pharmacist or technician.
When a prescription is transmitted to a central fill pharmacy, the originating pharmacy must create a record of this transmission. Per 21 CFR §1306.15(c), this record must include the name, address, and DEA registration number of the central fill pharmacy, the name of the transmitting pharmacist, and the date of transmission. Both pharmacies must maintain complete records of the transaction.
- What information must the pharmacy's electronic system record to create a complete and legally valid record of this refill authorization?
Answer: The system must document the date and time of the authorization, the identity of the authorizing agent, the new number of refills, and the identity of the pharmacy employee processing the authorization.
A refill authorization is a modification to an existing prescription and requires a clear audit trail. The electronic record must capture all essential details of the authorization, including when it occurred, who authorized it (e.g., name and title of the agent), the terms of the authorization (new refill quantity), and the pharmacy staff member who received and processed it. This creates a legally sound record equivalent to a verbal authorization.
- How must the record of this specific prescription be legally maintained by the pharmacy?
Answer: The faxed document must be treated as the original, legal prescription and must be filed and retained as a hardcopy.
Under 21 CFR §1306.11(g), a faxed prescription for a Schedule II narcotic for a patient in a hospice program may serve as the original, legal prescription. As such, the physical faxed document itself must be preserved as the original hardcopy record for the required retention period. It cannot be converted to an electronic-only record where the original is destroyed, unlike non-controlled or some CIII-V prescriptions where imaging may be permitted.
- During an inspection, how must the pharmacy demonstrate the system's capability for record retrieval to an inspector?
Answer: By immediately retrieving and displaying or printing a legible, exact, and unalterable image of the original prescription upon request.
If a pharmacy is using an electronic imaging system as its official record in lieu of paper copies, the core requirement is that the system can reproduce the original document accurately and immediately. The inspector must be able to see the scanned image of the prescription itself, not just a data representation of it. The pharmacy must be able to demonstrate this functionality on demand.
- To comply with DEA regulations for electronically transmitted controlled substance prescriptions, which record-keeping action is required by the pharmacy's software?
Answer: The software must digitally archive the full, unaltered data content of the prescription and maintain it for a minimum of two years.
According to 21 CFR Part 1311, pharmacies using a certified system to process electronic prescriptions for controlled substances (EPCS) must digitally archive the prescription record. This archived record must retain all the original information sent by the prescriber, unaltered, for a period of at least two years from the date of the last dispensing event. Printing is not required, and converting to a simple image is insufficient as it may lose critical metadata.
- Which set of data elements is essential for the ADC's software to electronically record during the restocking of a controlled substance like morphine sulfate?
Answer: The name of the medication, the total quantity added, the identity of the restocking technician, and the date and time.
For accountability and inventory management of controlled substances in an ADC, the electronic record for restocking must be comprehensive. It needs to capture not only what was stocked (drug and quantity) and when, but also who performed the action. This creates a clear audit trail that can be used to track medication movement and investigate any discrepancies.
- What is the closing pharmacy's legal responsibility for the electronic prescription records that are older than three years and are not being migrated to the new system?
Answer: The pharmacy must maintain the old records in their original electronic system or another accessible format for the full state-mandated retention period.
When a pharmacy changes computer systems or closes, it remains responsible for all its prescription records for the entire retention period required by state and federal law (whichever is longer). The records not being migrated must be preserved in a way that they remain readily retrievable for their full retention period. This can be done by maintaining the old system, archiving the data in a readable format, or printing hardcopies, but they cannot be purged prematurely.
- What is the minimum data backup frequency and method required by the DEA for electronic controlled substance prescription records?
Answer: The data must be backed up daily, and this backup must be stored in a manner that is physically separate from the primary server location.
The DEA's regulations for electronic record-keeping (21 CFR §1311.200(d)) require that a backup copy of all controlled substance prescription records be made on a daily basis. This backup must be stored at a secure, off-site location or on a storage device that is kept separate from the area containing the primary computer system to protect against data loss from disaster or system failure.
- According to federal law regarding the retrievability of electronic records for controlled substances, what is the pharmacy required to do in this situation?
Answer: Immediately retrieve and display the requested information on a screen or provide a printout of the prescription image and all associated dispensing data.
According to 21 CFR §1304.04(a), all required records concerning controlled substances must be readily retrievable for inspection. For electronic systems, this means the pharmacy must be able to retrieve records immediately upon request and display them on a screen or produce a printout. A 48-hour delay is unacceptable for an on-site inspection. The pharmacy staff, not the inspector, must retrieve the records.
- Beyond securely storing the data, what is a critical legal requirement the pharmacy owner must fulfill regarding these electronic records?
Answer: The owner must notify the state Board of Pharmacy of the records' location and provide a mechanism for authorized access throughout the entire 5-year retention period.
When a pharmacy closes, it is not sufficient to simply save the records. The owner must ensure that these records remain accessible to authorized parties (e.g., patients, prescribers, law enforcement, or the Board) for the full duration of the state-mandated retention period. This involves notifying the Board of Pharmacy about the plan for record maintenance, including the location and how to access them.
- Which of the following best describes the information that the pharmacy's electronic system must capture to maintain a compliant audit trail for this correction?
Answer: The system must permanently record the original incorrect entry, the corrected information, the identity of the person making the change, and the date and time of the modification.
A fundamental requirement for any electronic prescription record-keeping system is the ability to maintain a complete and accurate audit trail. This trail must document any changes made to a record, including the original information, the new information, who made the change, and when it was made. This ensures transparency and accountability for all actions related to the prescription.
- What is the pharmacy's primary record-keeping obligation within its own system regarding this correction?
Answer: The system must maintain an auditable record of the original data, the corrected data, the identity of the person making the change, and the date of the correction.
Proper electronic record-keeping requires maintaining a complete audit trail of all data modifications. When correcting information for a PDMP submission, the pharmacy's primary system of record should not simply overwrite the old data. It must log the change, preserving the original entry, the new entry, who made the change, and when it was made. This maintains the integrity of the pharmacy's records and documents its response to the PDMP notification.
- What action must Pharmacy A's electronic system perform on the original prescription record as part of a valid transfer?
Answer: The system must void the prescription record, making any remaining refills invalid for dispensing at Pharmacy A, and document all required transfer details.
According to 21 CFR §1306.25, when a controlled substance prescription is transferred, the transferring pharmacy must invalidate the prescription in its system to prevent any further dispensing. The electronic record must be updated to show that it has been transferred, along with the required information: date of transfer, name, address, and DEA number of the receiving pharmacy, and the name of the pharmacist receiving the transfer information, in addition to the transferring pharmacist's name.
- For the purpose of detecting and investigating potential internal diversion, which feature of an electronic system's audit trail is most critical?
Answer: A timestamped log of all user activities, including viewing, creating, modifying, and printing of specific controlled substance prescription records, linked to a unique user ID.
A granular, user-specific audit trail is essential for security and diversion control. The system must be able to track not just that a record was accessed, but who accessed it, when they accessed it, and what specific actions they took (e.g., view, edit, delete, print). This level of detail allows for the reconstruction of events and holds individuals accountable for their actions within the system.
- To finalize this electronic inventory in a manner compliant with DEA regulations, what additional step is required?
Answer: The electronic record of the inventory must be finalized in a permanent, readable format and verified, dated, and signed by the person conducting the inventory.
While technology can be used to conduct the inventory, the DEA requires that the final record be in a human-readable format (e.g., a printout or a secure, unalterable document). This final record must be verified for accuracy, dated, and signed by the person or people who took the inventory. This creates a final, attested record of the inventory on a specific date. Submission to the DEA is not required.
