Prescription Monitoring Programs and the Duty to Check
A monitoring program is a state database with two obligations attached. Pharmacies must report what they dispense within a stated window, and prescribers must consult the record before writing in the circumstances the state defines.
The rule in short
Prescription monitoring programs are creatures of state law, so the substances covered, the reporting deadline and the query obligation vary. The common structure is stable: dispensers transmit defined data elements after each dispensing on a short deadline, prescribers must review a patient's history before an initial prescription and at stated intervals afterwards, and access to the data is restricted by statute to named categories of user with an audited trail.
A prescription monitoring program is a state database of dispensed controlled substances, and every duty attached to it comes from state law. There is no federal query requirement and no national database. What exists instead is fifty variations on a common design, and a registrant operating across state lines is complying with several regimes at once.
The two duties the design rests on
Every program has a reporting side and a consultation side. On the reporting side, the pharmacy or other dispenser transmits defined information after each covered dispensing. On the consultation side, a prescriber, and sometimes a dispenser, must review the patient's history before acting.
The two duties fall on different people and are enforced differently. Reporting failures are typically handled as licensing violations with escalating administrative consequences, and are easy to prove because the absence of a record is the violation. Consultation failures are harder to prove but carry more weight in a disciplinary matter, because they usually surface alongside a prescribing pattern that is already under scrutiny.
Neither duty replaces anything in federal law. A completed query does not make a prescription valid, and a clean report does not discharge the corresponding responsibility that rests on the dispensing pharmacist. The database is an input into professional judgment, not a substitute for it.
The reporting window and what it captures
Reporting deadlines have compressed over time and are now measured in days rather than weeks. A common formulation requires transmission no later than the close of the next business day after the day the substance was dispensed, subject to an extension or exemption granted by the administering department.
What must be transmitted is a defined record, not a summary. Statutes typically require the dispenser's identifying number, the prescriber's identifying number, the patient's name, address and date of birth, the prescription number, the date the prescription was written and the date it was filled, the national drug code or equivalent identifier, the quantity and days supply, the number of refills authorized, and the method of payment.
Where nothing covered was dispensed in a reporting period, many programs require a zero report. A dispenser that simply sends nothing has not complied, and the gap is visible in the system's own records.
Corrections have their own procedure. A dispenser that discovers an error in a submitted record generally must file a correction rather than resubmit the original, and the program keeps both versions. That matters because the corrected record and the pharmacy's own dispensing log are separate documents, and an inspection that finds them inconsistent will ask which one was wrong and when the pharmacy noticed.
| Element | Common approach | Where states diverge |
|---|---|---|
| Substances covered | Schedules II through IV | Some include Schedule V, some add drugs of concern that are not federally scheduled |
| Reporting deadline | Close of the next business day after dispensing | Ranges from real time to weekly, with extensions available on application |
| Prescriber query trigger | Before a first prescription to a patient | Some require a query at every prescription, others only above a dosage or duration threshold |
| Recurring query interval | At least every six months while treatment continues | Intervals of three, four or twelve months appear elsewhere |
| Dispenser query duty | Permitted | Mandatory in defined circumstances in a minority of states |
When a prescriber must look
A representative mandatory consultation statute requires a practitioner authorized to prescribe, order, administer or furnish a controlled substance to consult the patient's activity report covering the preceding twelve months before prescribing a Schedule II, III or IV substance to that patient for the first time, and at least once every six months thereafter while the substance remains part of the treatment.
The obligation is on the practitioner, though most statutes permit delegation of the mechanical act of running the query to authorized staff while leaving the duty to review the result with the prescriber. Delegation of the review itself is not contemplated.
Exemptions follow a recognizable pattern. Administration to a patient in a licensed facility, a short course following a surgical procedure, treatment of a patient in hospice or with a terminal condition, and periods when the database is not reasonably accessible are the usual categories. Where an outage exemption is relied on, the statute generally requires the practitioner to document the reason and to check when the system returns.
Statutory exemptions for system unavailability excuse the query, not the assessment the query would have informed. Where a prescriber or pharmacist proceeds during an outage, the file should record that the system was unavailable, what was done instead, and what the practitioner relied on. A later review will ask both whether the exemption applied and what the practitioner did with the gap it left.
Who may see the data
Access is closed and enumerated. The typical statute permits access by prescribers and dispensers treating or serving the patient, by the patient in respect of their own record, by licensing boards investigating a licensee, and by law enforcement in defined circumstances, frequently subject to a court order or an active investigation requirement.
Every access is logged. Programs audit query patterns, and looking up a person the user is not treating is a distinct offense in most states, separate from any professional discipline that follows. Curiosity about a colleague, a family member or a public figure is the fact pattern that produces these cases.
Employers and insurers are generally excluded, as are prospective employers. A registrant asked to produce monitoring program data to a third party should treat the request as one requiring statutory authority rather than consent alone, because the statutes commonly restrict redisclosure by the recipient as well as access by the user.
Reading the report without over-reading it
A patient activity report shows dispensing, not diagnosis. It records what was collected, from where and when, and leaves the clinical meaning entirely open. Overlapping prescriptions may reflect a planned transition; a gap may reflect a hospital stay; a cash payment may reflect a coverage dispute.
What the report is good at is revealing what a single prescriber or pharmacy cannot see: multiple prescribers, multiple pharmacies, early collections and quantities that do not reconcile with the directions. Those are exactly the circumstances that trigger inquiry, and a report that shows them turns a general concern into a specific one that must be resolved before dispensing.
Because the report is a state record and the dispensing record is a federal one, the two must both be maintained and they will not always match. Reconciling them is part of the discipline described under the records that must balance, and a discrepancy between what was reported to the state and what the federal record shows is the kind of thing an inspection surfaces immediately. Where that inspection turns into an enforcement matter, the sequence is set out under inspections and show cause hearings.
Points to carry away
- Monitoring programs are established by state statute, so scope, deadlines and exemptions differ from one state to the next.
- Dispensers report each covered dispensing, often by the close of the next business day after it occurs.
- Query duties commonly attach before a first prescription to a patient and at fixed intervals while treatment continues.
- Statutory exemptions typically cover inpatient administration, short post-surgical courses, hospice and system outages.
- Access is limited by statute to defined users, and each query is logged, so misuse of the database is separately punishable.
Questions readers ask
Do monitoring programs share data across state lines?
Many do, through interstate data sharing arrangements that let a query in one state return dispensing records held by another. Participation is voluntary and negotiated, so coverage is uneven and a query is not a national search. That gap matters for a prescriber relying on the report to rule out concurrent prescribing, because a patient obtaining medication in a non-participating state will not appear. The report shows what the participating systems hold, and a clean report is evidence of absence only within that scope.
Is a pharmacist required to query as well as the prescriber?
That depends entirely on the state. Some statutes place the mandatory query duty on prescribers only; others extend it to dispensers in defined circumstances, such as when a red flag is present or when a prescription is presented from an out-of-state prescriber. Where the query is permitted rather than required, declining to run one that was available is difficult to justify afterwards if a concern existed, because the corresponding responsibility is measured against what a reasonable pharmacist would have done.
What data elements does a dispenser have to report?
Statutes converge on a similar set: identifying details for the pharmacy and the prescriber, the patient's name, address and date of birth, the prescription number, the date written and the date filled, the drug identifier, the quantity and days supply, the number of refills authorized, and whether the prescription was paid for in cash or through coverage. Some states add the identity of the person collecting the medication. Zero reports are frequently required for periods in which nothing covered was dispensed, so silence is not the same as compliance.
Sources
- California Health and Safety Code § 11165.4 — Duty to consultA mandatory consultation statute, with the first-time and six-month review structure.
- California Health and Safety Code § 11165 — CURES databaseEstablishes the state system and the dispenser reporting obligation.
- Florida Statutes § 893.055 — Monitoring programSets a next-business-day reporting deadline and the data elements dispensers report.
- 21 CFR § 1306.04 — Purpose of issue of prescriptionThe federal duty a monitoring program query supports but does not replace.
- 21 CFR § 1304.22 — Records for dispensers and other registrantsThe federal dispensing record that runs in parallel with state reporting.
- 21 U.S.C. § 827 — Records and reports of registrantsThe federal recordkeeping duty distinct from any state monitoring obligation.
Metro Law Advisors is a publication, not a law firm. This article states general rules and cites its sources; it is not advice about any particular case, and the law differs by state and changes over time.
More in Pharmacy & Controlled Substances
Registering to Handle Controlled Substances
Federal law requires a separate registration for each principal place of business where controlled substances are manufactured, distributed or dispensed, and a separate registration for each independent group of activities. A practitioner registration depends on state authority to dispense: when the state license ends, the federal authority it rests on ends with it. Registrations expire on assigned cycles and must be modified when the address or the schedules handled change.
The Drug Schedules and What Each One Restricts
Congress set five schedules and gave the Attorney General authority to add, remove or move substances after a scientific and medical evaluation. Each placement rests on findings about abuse potential, accepted medical use and the dependence a substance produces. The schedule then determines the ordering, prescribing, refill, storage and recordkeeping rules that apply, and a change in schedule changes all of them at once.
Refills, Transfers and Partial Fills by Schedule
Schedule II prescriptions may not be refilled and their partial fills run on tight deadlines measured from the prescription or the first fill. Schedules III and IV permit up to five refills within six months of issue, and refill information may be transferred between pharmacies once unless they share a real-time database. Every partial fill and refill generates a record entry, and the total dispensed can never exceed the quantity prescribed.