Controlled substance management is getting more scrutiny, and the reporting requirements keep expanding. Whether it is ARCOS reporting, theft and loss procedures, or inventory reconciliation, DEA expects pharmacies to have their controlled substance house in order at all times. This month, we are covering the latest changes and giving you a practical guide to staying ahead of them.
Regulatory Update: ARCOS Reporting and Electronic Recordkeeping Changes
The Automation of Reports and Consolidated Orders System (ARCOS) is DEA's tracking system for Schedule I and II controlled substances and select Schedule III substances (like buprenorphine products). Manufacturers and distributors report transactions into ARCOS, and DEA uses this data to monitor the distribution chain and identify potential diversion.
For pharmacies, the key development is DEA's increasing use of ARCOS data to flag pharmacies whose ordering patterns deviate significantly from their peers. If your pharmacy is ordering quantities of a controlled substance that are statistically unusual for your pharmacy type, size, and geography, expect a letter - or a visit.
The practical takeaway: review your controlled substance ordering patterns quarterly. Compare your current ordering volumes to the previous quarter and the same quarter last year. If you see significant increases, be prepared to explain them with clinical documentation - new prescribers in your area, a patient population shift, or a legitimate change in your dispensing patterns. Having the explanation ready before DEA asks for it is always better than scrambling after the fact.
Theft and Loss Reporting: The Complete Guide
When controlled substances go missing from your pharmacy, DEA requires notification - and the timeline and method depend on the circumstances.
For a significant theft or loss - defined as any theft, or a loss that is significant in quantity or that is unusual - you must file a DEA 106 form. There is no specific timeline mandated by federal regulation for submitting the DEA 106, but best practice (and many state requirements) is to file within one business day of discovery. Some states require notification to the state board of pharmacy within 24 hours as well, so check your state rules.
For breakage and spillage that can be accounted for (you dropped a bottle and it spilled), you do not need to file a DEA 106, but you do need to document the loss internally. Record what was lost, the quantity, the circumstances, the date, and the witnesses present. Have the pharmacist-in-charge and one witness sign the record.
Do not wait to investigate before reporting. DEA expects you to report the discovery promptly and then conduct your investigation. Filing the DEA 106 is not an admission of fault - it is a legal obligation. Pharmacies get into far more trouble for delayed reporting than for the loss itself.
After filing the DEA 106, conduct a thorough investigation. Review security camera footage, audit dispensing records, check your perpetual inventory against physical counts, and interview staff if appropriate. Document your investigation and its findings, and implement corrective actions to prevent recurrence. Keep all of this documentation for at least five years.
HIPAA Considerations in Controlled Substance Investigations
When investigating a potential controlled substance theft or diversion, you may need to review dispensing records that contain patient information. This is permissible under HIPAA when the review is conducted for healthcare operations purposes, which includes compliance activities and internal investigations.
However, limit the scope of your review to what is necessary for the investigation. If you suspect a specific drug was diverted, review records for that drug - not every controlled substance in your inventory. If you bring in outside investigators or law enforcement, HIPAA permits disclosure for law enforcement purposes, but document the disclosure and limit the information shared to what is relevant to the investigation.
If your investigation reveals that patient records were accessed inappropriately as part of a diversion scheme, that may also constitute a HIPAA breach. Evaluate the situation under your breach assessment procedures and report as required.
Building a Controlled Substance Accountability System
The pharmacies that avoid controlled substance compliance problems share a common trait: they treat accountability as a daily practice, not an annual event. Here is how to build that system.
Implement a perpetual inventory for at least your top 20 controlled substances by volume. A perpetual inventory means recording every receipt and every dispensing event, so you have a running count that can be compared to a physical count at any time. Many pharmacy management systems support this feature - if yours does, turn it on. If it does not, a simple spreadsheet works.
Conduct random physical counts weekly. Pick two to three controlled substances at random each week, count the physical stock, and compare it to your perpetual inventory or your last physical count adjusted for receipts and dispensings. Document the count, the expected quantity, the actual quantity, and any discrepancy. Investigate discrepancies immediately.
Secure your controlled substance storage and limit access. Only pharmacists and specifically authorized staff should have access to Schedule II storage. Log who opens the safe or cabinet and when. Some pharmacies use time-delay safes, which both deter robbery and create access logs.
Review your security camera coverage. Cameras should cover controlled substance storage areas, dispensing counters, and delivery receiving areas. Retention should be at least 90 days. If DEA or law enforcement needs footage from six months ago and you only keep 30 days, you have a problem.
Use our Controlled Substance Compliance Checklist as a starting point for building your system.
Quick Hits
- Review your controlled substance ordering patterns for unusual changes
- Verify your DEA 106 reporting procedure is documented and all pharmacists know it
- Implement or audit your perpetual inventory for high-volume controlled substances
- Conduct a random physical count of 3 controlled substances this week
- Check security camera coverage and retention for all controlled substance storage areas
- Confirm breakage and spillage documentation procedures are being followed
Stay compliant. Stay ahead. - The Rxperts Team