7.3 Medication Reconciliation, e-Prescribing & Formulary Checks

Key Takeaways

  • Electronic Prescribing (eRx) uses the NCPDP SCRIPT standard to transmit prescription data securely between EHR systems and retail/mail-order pharmacies via networks like Surescripts.
  • EPCS (Electronic Prescribing of Controlled Substances) enforces DEA regulations requiring two-factor authentication (2FA) and identity proofing for prescribing Schedule II–V medications.
  • Real-Time Prescription Benefit (RTPB) and automated formulary checks notify prescribers of patient copays, coverage restrictions, and prior authorization requirements prior to transmission.
  • Medication reconciliation must occur at every care transition (admission, transfer, discharge) by compiling an accurate list, comparing it against newly ordered drugs, and resolving discrepancies.
  • Patient safety in prescribing relies on automated allergy checking, dose checking, and real-time drug interaction screening.
Last updated: August 2026

Medication Reconciliation, e-Prescribing & Formulary Checks

Quick Summary: Electronic Prescribing enables secure transmission of prescriptions using the NCPDP SCRIPT standard, while Electronic Prescribing of Controlled Substances (EPCS) mandates strict identity proofing and two-factor authentication. Combined with real-time formulary checks and structured medication reconciliation at care transitions, digital prescribing drastically reduces adverse drug events.

e-Prescribing (eRx) Framework & Infrastructure

Electronic Prescribing (eRx) allows healthcare providers to digitally compose, review, and transmit outpatient prescriptions directly to retail or mail-order pharmacies. Rather than relying on handwritten paper prescriptions or legacy fax machines, eRx connects prescribers, pharmacy benefit managers (PBMs), and pharmacies through a secure nationwide health information network operated by Surescripts.

The NCPDP SCRIPT Standard

e-Prescribing transactions rely on standardized messaging protocols established by the National Council for Prescription Drug Programs (NCPDP). The NCPDP SCRIPT standard governs the electronic exchange of prescription data, defining structured XML transactions that ensure prescribers and pharmacists share unambiguous medication details. Key SCRIPT transaction types include:

  • NewRx: Transmits a new prescription order from the prescriber to the pharmacy.
  • RxChangeRequest / RxChangeResponse: Allows a pharmacy to request a medication alternative (e.g., generic substitution or formulary adjustment) and receives prescriber authorization.
  • RxRenewalRequest / RxRenewalResponse: Facilitates refill authorization requests from the pharmacy to the prescriber.
  • CancelRx: Transmits a prescription cancellation from the prescriber to prevent dispensing.
  • RxFill: Sends notification from the pharmacy back to the prescriber indicating whether a prescription was picked up, partially filled, or dispensed.

Electronic Prescribing of Controlled Substances (EPCS)

Historically, federal laws strictly prohibited electronic prescribing of controlled substances (Schedule II–V medications) due to concerns regarding drug diversion, prescription fraud, and identity theft. In 2010, the Drug Enforcement Administration (DEA) established legal rules for Electronic Prescribing of Controlled Substances (EPCS), creating a rigorous technical and regulatory framework.

EPCS Regulatory Requirements

To issue electronic prescriptions for controlled substances, an EHR application and prescribing provider must satisfy three legal pillars enforced by the DEA:

  1. Identity Proofing: Prescribers must undergo formal identity verification (consistent with NIST Special Publication 800-63 standards) conducted by an accredited credential service provider (CSP). This verifies the provider's legal identity, DEA registration number, and medical license.
  2. Two-Factor Authentication (2FA): Prior to signing and transmitting an EPCS transaction, the prescriber must authenticate using two of three distinct security factors:
    • Something you know: A secure password or PIN.
    • Something you have: A physical cryptographic hardware token, smart card, or push notification generator.
    • Something you are: Biometric authentication (e.g., fingerprint scan, facial recognition).
  3. Access Control & Dual Authorization: System administrators must enforce role-based access control (RBAC). A designated individual (e.g., medical director) must confirm the provider's active DEA rights before 2FA authorization is enabled in the EHR.

Real-Time Prescription Benefit (RTPB) & Formulary Integration

Prescribing the right medication involves balancing clinical efficacy with patient financial affordability. EHR systems integrate Real-Time Prescription Benefit (RTPB) tools and payer formulary data feeds to provide point-of-care visibility into medication coverage.

Electronic Formulary and Benefit Checks

When a provider selects a medication in the CPOE window, the EHR queries the patient's PBM in real time to evaluate:

  • Formulary Status: Identifies whether the drug is preferred (Tier 1 generic), non-preferred (Tier 2/3 brand), or excluded from the patient's health plan formulary.
  • Patient Out-of-Pocket Copay: Calculates exact copayment or coinsurance costs based on the patient's specific deductible status.
  • Coverage Restrictions: Flags requirement rules such as Step Therapy (requiring trial of lower-cost drugs first), Quantity Limits, or mandatory Prior Authorization (PA).
  • Lower-Cost Alternatives: Displays therapeutic generic equivalents that offer lower out-of-pocket costs, improving patient medication adherence.

Medication Reconciliation Workflows at Care Transitions

According to The Joint Commission (National Patient Safety Goal 03.06.01), medication miscommunication represents one of the single greatest causes of preventable hospital readmissions and adverse drug events (ADEs). Medication Reconciliation is the formal clinical process of building an accurate, up-to-date list of a patient's current medications and comparing it against newly ordered drugs at every transition of care.

Transition Points & The 5-Step Reconciliation Process

Medication reconciliation must occur at three mandatory clinical transition points: Admission (home to hospital/clinic), Transfer (e.g., ICU to general medical floor), and Discharge (hospital to home/rehab facility). The procedure follows five distinct steps:

  1. Develop Comprehensive Home List: Compile an accurate list of all current home medications (prescriptions, over-the-counter [OTC] drugs, vitamins, and herbal supplements) through patient/family interviews and Surescripts medication history queries.
  2. Develop Prescribed List: Create the clinical list of newly ordered medications for the current encounter.
  3. Compare Lists: Cross-reference home medications against newly prescribed orders to identify discrepancies.
  4. Resolve Discrepancies: Clinical providers evaluate identified discrepancies (omissions, duplicate therapies, improper dosing, unintended drug interactions) and document therapeutic decisions (continue, hold, modify, or discontinue).
  5. Communicate Finalized List: Distribute the updated reconciled list to the patient, primary care physician, and community pharmacy at discharge.

Standard eRx vs. EPCS Regulatory Comparison

Regulatory FeatureStandard e-Prescribing (Non-Controlled)EPCS (Controlled Substances - Schedule II-V)
Governing AuthorityCMS, State Boards of PharmacyDEA (Drug Enforcement Administration)
Authentication StandardStandard single-factor EHR login (Username/Password).Mandatory Two-Factor Authentication (2FA: Password + Token/Biometric).
Identity VerificationStandard healthcare facility onboarding.Formal NIST SP 800-63 identity proofing via accredited CSP.
Messaging StandardNCPDP SCRIPT standard.Encrypted NCPDP SCRIPT with embedded digital signature audit trail.
Refill RulesAllows multiple electronic refills based on state prescription laws.Schedule II drugs permit NO refills; Schedule III-IV capped at 5 refills within 6 months.
Loading diagram...
EPCS Two-Factor Authentication & Transmission Workflow
Test Your Knowledge

A physician is preparing to electronically prescribe a Schedule II controlled substance (hydrocodone/acetaminophen) via the clinic's EHR system. According to DEA EPCS regulations, what security measure is required for order authorization?

A
B
C
D
Test Your Knowledge

During an inpatient admission, a CEHRS specialist assists a nurse in performing medication reconciliation. What is the core objective of this clinical safety procedure?

A
B
C
D
Test Your Knowledge

What industry standard messaging protocol governs the electronic exchange of prescription data between EHR systems and retail pharmacies?

A
B
C
D