1 Foundations of Federal Pharmacy Compliance

How pharmacy oversight is divided

Pharmacy practice is governed by overlapping federal and state requirements. Federal agencies administer statutes enacted by Congress, while state legislatures and boards of pharmacy generally license pharmacists and pharmacies and regulate day-to-day professional practice. A pharmacist must identify which requirements apply to the specific activity, product, payer, and jurisdiction.

Federal agencies and their roles

The Food and Drug Administration (FDA) regulates drugs and biologics under the Federal Food, Drug, and Cosmetic Act (FD&C Act) and related statutes. Its responsibilities include matters such as approval, labeling, manufacturing quality, and product safety. FDA regulates products and their distribution, not pharmacist licensure or every aspect of pharmacy practice.

The Drug Enforcement Administration (DEA) administers and enforces much of the Controlled Substances Act (CSA) regulatory system. The CSA assigns controlled substances to schedules based on factors including accepted medical use and abuse potential, and its regulatory system includes registration and controls on handling and dispensing. Federal CSA requirements apply alongside state controlled-substance rules.

The Department of Health and Human Services (HHS) issues and enforces federal health-information rules. Under the Health Insurance Portability and Accountability Act (HIPAA), a pharmacy is generally a covered health care provider if it conducts certain covered transactions electronically. Covered pharmacies must protect protected health information under the HIPAA Rules; HIPAA does not automatically apply to every business that handles health information.

The Centers for Medicare & Medicaid Services (CMS) administers Medicare and Medicaid and sets requirements for participating health plans and providers. Medicare Part D requirements can affect prescription coverage, pharmacy networks, claims, and certain electronic-prescribing rules. These program requirements do not replace a pharmacy’s separate duties under federal drug laws or state practice law.

When federal and state rules interact

The Supremacy Clause makes valid federal law supreme when it conflicts with state law, but federal law does not automatically displace every state rule on the same subject. Preemption depends on the relevant statute and the nature of the conflict.

For the CSA, federal law expressly preserves state authority unless a state requirement creates a “positive conflict” such that federal and state requirements cannot consistently stand together. State rules may impose additional controls, such as stricter limits or procedures, when those requirements can coexist with federal law. However, “the stricter rule always applies” is not a complete legal test: an express federal preemption clause, an actual conflict, or the specific terms of another statute may change the result. State law also cannot authorize conduct prohibited by federal law.

Applying the rules to a prescription

A controlled-substance prescription must meet applicable federal requirements and the rules of the state where it is dispensed. If state law requires an additional safeguard that is compatible with federal requirements, the pharmacist generally must follow it. If both requirements cannot be followed, the pharmacist should consult authoritative agency guidance or qualified legal counsel rather than assume which rule controls.

A practical compliance approach

For a compliance question, use this sequence:

1. Identify the activity, such as dispensing, handling a controlled substance, protecting patient information, or billing a federal program.

2. Identify the governing federal statute, agency rules, and any program-specific requirements.

3. Check the state pharmacy and controlled-substance laws that also apply.

4. If the requirements appear to conflict, examine the statute’s preemption language and obtain authoritative guidance when needed.