Reporting Theft or Significant Loss
The obligation runs from discovery, not from the loss. Written notice goes to the local field division within one business day, and a complete report follows within forty-five days, with the registrant deciding first whether the loss is significant.
The rule in short
A registrant must notify the field division office in writing of the theft or significant loss of any controlled substance within one business day of discovering it, and must file a complete and accurate report through the agency's secure network application within forty-five days of discovery. Whether a loss is significant is a judgment the registrant makes first, guided by stated factors including quantity, substance, attribution to individuals and any pattern of losses.
The reporting duty for a missing controlled substance is short, strict and easy to miss because it starts at the wrong-seeming moment. It runs from the day the registrant discovers the theft or loss, not the day the substance went missing. A quantity that walked out months ago produces a deadline that begins the morning someone notices.
Two deadlines, two documents
The registrant must notify the field division office in the area, in writing, of the theft or significant loss of any controlled substance within one business day of discovery. That notice is short by design; its function is to put the agency on notice quickly.
The registrant must then file a complete and accurate report through the agency's secure network application within forty-five days after discovery. The full report is where the detail goes: what was lost, how much, the circumstances, what investigation was carried out and what the registrant concluded.
These are cumulative rather than alternative. Filing the full report early does not remove the notice obligation, and giving notice does not remove the reporting obligation. A registrant that does one and not the other has complied with half the rule.
Deciding whether a loss is significant
Theft is reportable without qualification. Loss is reportable when it is significant, and the registrant makes that assessment first. The regulation lists factors to consider rather than a threshold, which places the judgment squarely on the registrant and makes the reasoning worth recording.
The factors are the actual quantity lost in relation to the type of business; the specific controlled substances lost; whether the loss can be associated with access by specific individuals or attributed to unique activities involving the substances; any pattern of losses over a period, whether they appear random, and the results of efforts to resolve them; whether the substances are likely candidates for diversion; and local trends and other indicators of diversion potential.
Two of these do most of the work in practice. A pattern converts a series of individually trivial discrepancies into a significant loss, and attribution to a particular individual or shift converts a small quantity into a serious one. A registrant that treats each shortage in isolation will systematically under-report.
The absence of a numerical threshold is deliberate. A single dosage unit missing from a practitioner's office may be significant where it can be traced to one person's shift, while the same quantity unaccounted for in a high-volume wholesale operation may be within ordinary counting variance. The rule asks the registrant to apply the factors to its own operation rather than to look for a percentage that would excuse the report.
| Event | Reportable as theft or loss | Handled instead as |
|---|---|---|
| Break-in or robbery | Yes, without a significance assessment | Also reported to local law enforcement |
| Employee diversion discovered at audit | Yes; attribution to an individual makes it significant | Also a personnel and possibly a licensing matter |
| Repeated small unexplained shortages | Yes, once a pattern is apparent | Reported as a pattern rather than as separate losses |
| Bottle dropped and broken, all fragments accounted for | No | Recorded as a disposal, with the destruction documented |
| Shipment short on arrival | Yes, by whoever engaged the carrier | Also raised with the supplier and reconciled to the order form |
Where breakage ends and loss begins
Not every quantity that leaves the shelf without being dispensed is a loss. Breakage and spillage where the substance is accounted for and destroyed is a disposal event, documented through the disposal route rather than the loss report.
The line is whether there is any doubt about what happened to the substance. A bottle that shatters on the dispensing counter in front of two witnesses, with the contents cleaned up and the destruction recorded, has been disposed of. A bottle found broken in an empty stockroom, with no account of when or how, is a loss whose significance must be assessed.
Registrant disposal has its own procedural requirements, and a registrant that documents destruction properly removes an entire category of unexplained variance from its reconciliation. Substances awaiting destruction remain on hand and must appear in the biennial inventory until they are actually destroyed or transferred.
The significance assessment is discretionary, which means it will be reviewed with the benefit of hindsight. A registrant that concludes a loss was not significant should record the quantity, the substance, the factors weighed and the conclusion at the time. Where a later loss makes a pattern apparent, that contemporaneous note is the difference between a registrant that assessed and got it wrong and one that never looked.
Losses in transit and between registrants
Where a loss occurs while substances are with a carrier, the reporting obligation follows the registrant that engaged the carrier. Central fill pharmacies that contract with private, common or contract carriers to transport filled prescriptions to a retail pharmacy report in-transit losses of those shipments. Retail pharmacies that contract with a carrier to collect from a central fill pharmacy report losses on the collection leg.
The rules also impose a selection duty. A registrant using a carrier must comply with the requirement to exercise care in selecting private, common or contract carriers, which means that repeated losses with the same carrier raise a question about the registrant's choice as well as about the shipment.
Where a shortage is discovered on receipt against an order form, the registrant records the actual quantity received on the executed form and reports the discrepancy. That entry is what allows the supplier's record and the recipient's record to be reconciled later, and it is the point at which most in-transit losses are actually detected.
What happens after the report goes in
A filed report is not the end of the matter. It becomes part of the registrant's compliance history, and it is one of the first documents examined when an inspection occurs. The agency may follow up on a report, request the underlying records, or treat a series of reports as a reason to look more closely at the registrant's controls.
The right posture is to treat the report as the beginning of a corrective process rather than as its conclusion. A report that describes what was lost, what the investigation found, what changed as a result, and how the registrant will detect the same failure sooner next time is a document that supports the registrant. One that recites a quantity and nothing else invites the question of whether anything was done.
Where the loss suggests internal diversion, employee screening and the employee reporting obligation come back into focus, and where the loss is large or repeated, the registrant should expect the questions to be asked formally through an inspection and, if it escalates, a show cause proceeding. Losses attributable to dispensing errors rather than theft point in a different direction, toward the controls described under partial fills and refill recording, where an unrecorded partial quantity can look identical to a missing one.
Points to carry away
- Written notification to the local field division office is due within one business day of discovering a theft or significant loss.
- A complete and accurate report must follow through the agency's secure network application within forty-five days of discovery.
- The significance assessment is made by the registrant using stated factors, and a decision not to report should be documented.
- In-transit losses of filled prescriptions between central fill and retail pharmacies fall on the pharmacy that engaged the carrier.
- Breakage and spillage that leaves no doubt about disposition are handled as disposal records rather than as losses.
Questions readers ask
Does a shortage discovered at an inventory have to be reported immediately?
The clock runs from discovery, so a shortage identified during a count is discovered on the day the count reveals it. What often happens instead is that the registrant spends several days investigating before deciding whether a loss occurred at all. That is reasonable in principle, but it is not a suspension of the deadline. The practical approach is to notify within the window on the basis of what is known, and to supply detail in the full report once the investigation is complete, rather than to delay both steps.
Who reports a loss that happens in transit?
It depends on who engaged the carrier. Where a central fill pharmacy contracts with a carrier to transport filled prescriptions to a retail pharmacy, the central fill pharmacy reports the in-transit loss. Where the retail pharmacy contracts with the carrier to collect from the central fill pharmacy, the retail pharmacy reports. The registrant that selected the carrier also carries the obligation to have exercised care in selecting it, so a pattern of losses with the same carrier becomes a question about the selection as well as about the individual shipment.
Is a report an admission of a security failure?
No, and treating it as one produces the worse outcome. The regulations require the report and say nothing about fault. What draws scrutiny is a registrant that did not report, reported late, or reported so vaguely that the circumstances cannot be understood. A filed report that describes the loss, the investigation and the corrective steps taken is a record of a functioning compliance system. The absence of a report where a loss plainly occurred is the fact that supports an enforcement action.
Sources
- 21 CFR § 1301.76 — Other security controls for practitionersSets the one business day notice, the forty-five day report and the significance factors.
- 21 CFR § 1301.74 — Other security controls for non-practitionersThe parallel obligation for distributors, including care in selecting carriers.
- DEA Diversion Control Division — Theft and Loss ReportingThe agency's reporting portal and its instructions for completing the report.
- 21 CFR § 1304.04 — Maintenance of records and inventoriesRequires the loss report to be retained with the registrant's other records.
- 21 CFR § 1317.05 — Registrant disposalThe route for substances that are destroyed or transferred rather than lost.
- 21 U.S.C. § 827 — Records and reports of registrantsThe statutory basis for the reports the regulations require.
Metro Law Advisors is a publication, not a law firm. This article states general rules and cites its sources; it is not advice about any particular case, and the law differs by state and changes over time.
More in Pharmacy & Controlled Substances
Registering to Handle Controlled Substances
Federal law requires a separate registration for each principal place of business where controlled substances are manufactured, distributed or dispensed, and a separate registration for each independent group of activities. A practitioner registration depends on state authority to dispense: when the state license ends, the federal authority it rests on ends with it. Registrations expire on assigned cycles and must be modified when the address or the schedules handled change.
The Drug Schedules and What Each One Restricts
Congress set five schedules and gave the Attorney General authority to add, remove or move substances after a scientific and medical evaluation. Each placement rests on findings about abuse potential, accepted medical use and the dependence a substance produces. The schedule then determines the ordering, prescribing, refill, storage and recordkeeping rules that apply, and a change in schedule changes all of them at once.
Refills, Transfers and Partial Fills by Schedule
Schedule II prescriptions may not be refilled and their partial fills run on tight deadlines measured from the prescription or the first fill. Schedules III and IV permit up to five refills within six months of issue, and refill information may be transferred between pharmacies once unless they share a real-time database. Every partial fill and refill generates a record entry, and the total dispensed can never exceed the quantity prescribed.