11.1 Theft and Loss of Controlled Substances: DEA Form 106 & Alabama Board Reporting Requirements
Key Takeaways
- Under 21 C.F.R. § 1301.76(b), a registrant must notify the DEA Diversion Field Office in writing within one (1) business day of discovering a theft or significant loss of any controlled substance.
- Under the DEA 2023 Final Rule, registrants must submit the formal DEA Form 106 electronically through the DEA secure web portal within forty-five (45) calendar days of discovery; paper submissions are no longer accepted.
- Factors determining whether a loss is 'significant' include the quantity relative to the type of business, the specific drug's abuse liability, repeating loss patterns, and local diversion trends.
- Breakage and spillage do not constitute a loss under DEA Form 106; broken or spilled controlled substances that cannot be recovered must be documented on DEA Form 41 with two licensed healthcare professional witness signatures.
- Alabama pharmacies must immediately notify the Alabama State Board of Pharmacy (ALBOP), transmit copies of DEA Form 106 and the local police incident report to cshaw@albop.com, and report any licensed employee diversion to the State Drug Inspector.
11.1 Theft and Loss of Controlled Substances: DEA Form 106 & Alabama Board Reporting Requirements
[!NOTE] Dual Regulatory Framework & Strict Accountability: The diversion of controlled substances represents one of the most severe public health and regulatory threats in pharmacy practice. In Alabama, controlled substance accountability is governed concurrently by federal Drug Enforcement Administration (DEA) regulations promulgated under Title 21 of the Code of Federal Regulations (21 C.F.R. Part 1301) and the Alabama Uniform Controlled Substances Act (Code of Alabama 1975, Title 20, Chapter 2), alongside administrative rules enforced by the Alabama State Board of Pharmacy (ALBOP) codified in Ala. Admin. Code r. 680-X-3. When a pharmacy experiences a burglary, robbery, employee pilferage, unexplained inventory discrepancy, or transit shortage, strict statutory timetables dictate immediate multi-agency notifications.
A licensed pharmacy is held to an absolute standard of custodial integrity for all controlled substance stock in Schedules II through V. A failure to recognize, investigate, or report a loss within mandatory legal deadlines subjects both the pharmacy permit holder and the designated supervising pharmacist to severe administrative sanctions, civil monetary penalties, and potential criminal prosecution.
Federal Notification & Filing Rules: 21 C.F.R. § 1301.76(b)
Federal regulation 21 C.F.R. § 1301.76(b) mandates a rigid two-step reporting protocol whenever a DEA registrant discovers a theft or significant loss of controlled substances.
+-----------------------------------------------------------------------------------------+
| Federal Controlled Substance Theft/Loss Reporting Timeline |
+-----------------------------------------------------------------------------------------+
| DISCOVERY OF THEFT OR SIGNIFICANT LOSS |
| │ |
| ├─► STEP 1: Within ONE (1) Business Day of Discovery |
| │ • Send initial written notification to the local DEA Diversion Field Office |
| │ • Transmit via secure electronic portal, official email, or written facsimile |
| │ • State theft/loss circumstance, contact details, and preliminary facts |
| │ |
| └─► STEP 2: Within FORTY-FIVE (45) Calendar Days of Discovery |
| • Complete internal audit and reconciliation investigation |
| • Electronically submit formal DEA Form 106 via DEA Secure Web Portal |
| • Note: Paper DEA Form 106 submissions are permanently obsolete and rejected |
| • If investigation reveals NO theft/loss occurred: notify DEA in writing to close |
+-----------------------------------------------------------------------------------------+
Step 1: Initial Written Notification Within One Business Day
Under 21 C.F.R. § 1301.76(b), the registrant must notify the DEA Field Division Office in its area, in writing, of the theft or significant loss of any controlled substance within one (1) business day of discovery of such theft or loss.
- Definition of Business Day: Business days exclude Saturdays, Sundays, and official federal legal holidays. If an armed robbery or break-in occurs on a Friday evening and is discovered immediately, the one-business-day written notice must reach the local DEA Diversion Field Office no later than Monday close of business.
- Written Format: The initial notification cannot be made solely by telephone. While a courtesy phone call to local DEA diversion investigators is standard professional courtesy, the law strictly requires written notification (sent via secure online interface, documented facsimile, or official agency email).
- Preliminary Nature: The initial notification does not require an exact pill-by-pill count if the physical audit is still underway; its statutory purpose is to alert federal authorities immediately that a diversion breach has occurred.
Step 2: Electronic DEA Form 106 Filing Within 45 Calendar Days
Historically, DEA regulations instructed registrants to submit a formal DEA Form 106 upon completion of their investigation, without specifying a uniform calendar deadline. To eliminate open-ended investigations and standardize data intake, the DEA published a landmark Final Rule (effective April 2023) modernizing 21 C.F.R. § 1301.76(b):
- 45-Day Electronic Deadline: The registrant must submit a completed DEA Form 106 electronically through the DEA secure web portal within forty-five (45) calendar days of discovery of the theft or significant loss.
- Mandatory Electronic Submission: Paper submissions of DEA Form 106 are no longer accepted. All submissions must be transmitted through the DEA Diversion Control Division's electronic reporting portal.
- Investigation Showing No Loss: If, after conducting an exhaustive internal investigation and inventory audit, the registrant determines that no theft or significant loss actually occurred (e.g., an apparent shortage was traced to an unposted wholesaler invoice, misfiled dispensing basket, or computational data entry error), the registrant must submit written notification to the DEA within the 45-day window explaining why no DEA Form 106 will be filed, formally resolving and closing the initial report.
Evaluating "Significant Loss" Under Federal Law
The Controlled Substances Act does not establish a rigid numerical threshold (such as a specific pill count or dollar value) to define what makes a loss "significant." Because a single missing fentanyl patch represents a profound public safety hazard compared to an unexplained discrepancy of a few tablets of a low-schedule cough preparation, the DEA provides six objective statutory factors under 21 C.F.R. § 1301.76(b) that registrants must evaluate:
+-----------------------------------------------------------------------------------------+
| DEA Criteria for Determining "Significant Loss" |
+-----------------------------------------------------------------------------------------+
| 1. Quantity Lost: The actual quantity lost in relation to the pharmacy's operational |
| dispensing volume (e.g., 100 tablets in a 200-Rx/day vs. 5,000-Rx/day pharmacy). |
| 2. Specific Substance: The specific controlled substance involved, its abuse potential, |
| street value, and lethality (e.g., oxycodone, hydromorphone, amphetamine, fentanyl).|
| 3. Association with Individuals: Whether the shortage can be linked to access by |
| specific individuals (e.g., unique technician shifts, temporary relief staff). |
| 4. Pattern of Losses: Whether the loss is an isolated occurrence or part of an ongoing |
| trend over time (e.g., small discrepancies occurring at monthly inventory cycles). |
| 5. Diversion Desirability: Whether the missing drug is a prime candidate for diversion |
| and illicit street resale. |
| 6. Local Trends: Regional law enforcement alerts and black-market diversion spikes. |
+-----------------------------------------------------------------------------------------+
[!CRITICAL] The "When in Doubt" Rule: DEA guidance and pharmacy jurisprudence emphasize that whether a loss is "significant" is ultimately a matter of professional judgment resting upon the supervising pharmacist. However, if any ambiguity exists regarding whether a shortage crosses the threshold of significance, the registrant must resolve the doubt in favor of reporting. Failing to report a loss that federal investigators later deem significant constitutes an independent regulatory violation.
Breakage, Spillage & Non-Recoverable Incidents: DEA Form 41 vs. DEA Form 106
A perennial source of confusion on the Alabama MPJE is the legal distinction between a controlled substance loss and a controlled substance destruction resulting from breakage or spillage.
| Event Characteristic | Breakage / Spillage (DEA Form 41) | Theft or Significant Loss (DEA Form 106) |
|---|---|---|
| Physical Event | Liquid vial dropped, glass shattered, liquid absorbed into carpet or washed into sink | Unexplained inventory shortage, burglary, robbery, employee diversion, transit hijack |
| Drug Recoverability | Drug is destroyed, chemically denatured, or rendered physically non-retrievable | Drug is physically intact and unaccounted for; actively diverted into illicit channels |
| Reporting Vehicle | DEA Form 41 (Registrant Record of Controlled Substances Destroyed) | DEA Form 106 (Report of Theft or Loss of Controlled Substances) |
| Filing Mandate | Documented internally in pharmacy records; submitted to DEA if required by SAC | Initial notice in 1 business day; electronic Form 106 within 45 calendar days |
| Witness Requirement | Two (2) licensed healthcare professionals must witness and sign documentation | Not applicable (criminal/regulatory investigation report) |
Practical Application of Breakage and Spillage
Under 21 C.F.R. § 1317.05(c), damage, breakage, or spillage of a controlled substance does not constitute a theft or loss:
- Non-Recoverable Breakage: If a stock bottle of methadone oral solution or a vial of injectable midazolam shatters on the dispensing counter and seeps into the sink or floor grout, the substance is physically destroyed. It cannot be diverted. The pharmacist must document the incident in the pharmacy's perpetual inventory log and complete DEA Form 41 describing the exact quantity destroyed as non-recoverable breakage.
- Two-Witness Mandate: The destruction and DEA Form 41 must be witnessed and personally signed by two licensed healthcare professionals (e.g., two licensed pharmacists, or a pharmacist and a registered nurse).
- Recoverable Residue: If an unbroken portion remains (e.g., partial tablets recovered from a crushed bottle), the recoverable controlled substances must be quarantined and transferred to a DEA-registered reverse distributor for disposal.
In-Transit Losses: Supplier vs. Purchaser Liability
When controlled substances are lost or stolen while in commercial transit between a wholesale drug distributor and a purchasing pharmacy, federal law places reporting responsibility strictly upon the entity that holds legal custody under 21 C.F.R. § 1301.74(c) and § 1301.76(b).
+---------------------------------------------------------------------------------------------------------+
| In-Transit Loss Custody & Reporting Threshold |
+---------------------------------------------------------------------------------------------------------+
| SCENARIO A: Shortage Discovered PRIOR TO or AT DELIVERY (Before Signature) |
| • Wholesaler delivery arrives; shipping tote seal is broken, damaged, or missing. |
| • Purchasing pharmacist inspects the manifest, identifies missing Schedule II bottles, and REFUSES |
| to accept or sign for the missing items. |
| • LEGAL RESULT: Supplier (Wholesaler) maintains custody and MUST submit DEA Form 106. |
+---------------------------------------------------------------------------------------------------------+
| SCENARIO B: Shortage Discovered AFTER Custody Acceptance (After Signature) |
| • Purchasing pharmacist signs the delivery driver's manifest acknowledging receipt of the entire tote. |
| • One hour later, staff breaks the inner seal and discovers a bottle of oxycodone is missing. |
| • LEGAL RESULT: Custody transferred upon signature; Purchasing Pharmacy MUST submit DEA Form 106. |
+---------------------------------------------------------------------------------------------------------+
- Supplier Responsibility: The supplier is responsible for reporting all in-transit losses of controlled substances on DEA Form 106 until the purchaser takes physical custody and signs the shipping receipt or electronic manifest.
- Purchaser Responsibility: If the purchaser signs the delivery receipt without verifying the contents and subsequently discovers that controlled substances are missing from the container, custody has already transferred by operation of law. The purchasing pharmacy must then initiate the one-day written notice and submit the electronic DEA Form 106.
Alabama State Board of Pharmacy (ALBOP) Reporting Mandates
In addition to federal DEA reporting, Alabama imposes direct, immediate state-level notification obligations upon pharmacy permit holders and supervising pharmacists.
1. Immediate Notification to the Board
Under Alabama pharmacy practice rules, whenever a theft, burglary, robbery, or unexplained significant loss occurs, the supervising pharmacist must notify ALBOP immediately upon discovery. This notification allows the Board's enforcement division to coordinate with local law enforcement and the Alabama State Drug Inspector assigned to that geographical territory.
2. Submission of Form 106 and Local Police Report to ALBOP
Alabama law strictly requires dual documentation sent directly to Board headquarters:
- A copy of the completed electronic DEA Form 106; and
- A copy of the formal local police department incident report.
[!IMPORTANT] Official ALBOP Submission Channel: Both documents must be emailed directly to the Alabama State Board of Pharmacy at
cshaw@albop.com(Carolyn Shaw, ALBOP administrative compliance). The submission must reference the facility permit number, the supervising pharmacist's license number, and the local police case number.
3. Mandatory Reporting of Licensed Staff Diversion
Under Code of Alabama 1975 § 34-23-33 and Board administrative rules, if an internal theft or controlled substance diversion was committed by an individual licensed or registered by ALBOP—including a pharmacist, pharmacy intern, or registered pharmacy technician:
- The supervising pharmacist and permit holder must immediately report the individual's full legal name, professional role, and license/registration/permit number to the ALBOP State Drug Inspector.
- The pharmacy cannot resolve employee drug theft quietly through internal resignation or private termination agreements. Concealing staff diversion from the Board constitutes grounds for disciplinary revocation of the pharmacy facility permit and the supervising pharmacist's license.
An independent community pharmacy in Mobile, Alabama, experiences a forced-entry burglary on Friday night. The safe is pried open and 2,000 tablets of oxycodone 30 mg are stolen. The supervising pharmacist discovers the break-in at 8:00 AM on Monday morning upon opening the store and immediately summons local police. Under 21 C.F.R. § 1301.76(b) and current DEA rules, what are the mandatory reporting deadlines for federal notification and submission of DEA Form 106?
A pharmacy technician at a Birmingham hospital pharmacy accidentally drops a multi-dose glass stock vial of hydromorphone 10 mg/mL solution onto the compounding room floor. The glass shatters, and the entire liquid contents spill across the tile and drain beneath a fixed cleanroom table, rendering the medication unrecoverable. The technician immediately alerts the supervising pharmacist. How must this controlled substance event be documented under federal DEA and Alabama pharmacy regulations?
A retail pharmacy in Huntsville receives a morning shipment of Schedule II controlled substances from its primary wholesale drug distributor. The delivery driver presents the shipping manifest to the dispensing pharmacist, who signs the electronic receipt verifying delivery of all totes without opening the containers. One hour later, when the pharmacist cuts the plastic security zip-ties on the Schedule II container to perform a count against the invoice and DEA Form 222, a 500-count bottle of dextroamphetamine 10 mg listed on the manifest is missing. The shipping tote itself was undamaged. Under federal controlled substance regulations, who bears statutory legal responsibility for submitting DEA Form 106 to report this loss?