2.4 Inventories, Recordkeeping & Theft/Loss

2.4 Inventories, Recordkeeping & Theft/Loss

Quick Answer: When a pharmacy begins handling controlled substances, it must take an initial inventory, then a new inventory at least every two years (biennially). Open CII containers require exact counts; open CIII–V containers of 1,000 dosage units or fewer may be estimated. Keep required CS records at least two years and readily retrievable. Report theft or significant loss promptly to DEA (classically within one business day) on Form 106. Illinois PIC duties, facility rules, and ILPMP expectations can add stricter layers—when they do, follow them.

Scheduling and prescription rules mean little if the pharmacy cannot account for the bottles on the shelf. This section is the accountability engine of the closed system.

Initial Inventory

On the date a registrant first engages in controlled-substance activity (or on the date the pharmacy opens CS stock under a new registration), an initial inventory of all controlled substances on hand must be taken. If there are zero controlled substances on hand, that fact is still recorded as the initial inventory.

Inventory contents typically include for each CS:

• Drug name
• Dosage form and strength
• Number of units or volume
• Number of commercial containers (as applicable)
• Whether the count is exact or estimated (per schedule rules below)
• Date and whether taken at opening or close of business

The inventory is a snapshot signed into the record system—not a perpetual software screen that “usually is right.”

Biennial Inventory

After the initial inventory, federal law requires a new inventory at least every two years. More frequent inventories are allowed and often wise for high-risk CII. The biennial inventory must be completed no later than two years from the previous inventory date.

Exact count vs estimate

Exam trap: Estimating an open oxycodone CII bottle is never acceptable under the federal open-container CII exact-count rule, even if the bottle is nearly full and “obvious.”

Timing of day

Indicate whether the inventory was taken at the beginning or close of business. That detail matters when reconciling receipts and sales on the inventory date.

The Federal Recordkeeping System: The Closed Loop

Federal law requires registrants to keep complete and accurate records of each controlled substance received, sold, delivered, or otherwise disposed of. For a community pharmacy, the core file set includes:

1. Executed Form 222 / CSOS order records for CI/CII acquisition
2. Invoices and packing documents for CIII–V receipts (and commercial docs supporting CII receipts alongside 222/CSOS)
3. Prescriptions (hard copy or compliant electronic) and dispensing/refill records
4. Inventories (initial, biennial, and any special inventories)
5. Disposal/destruction documentation (including Form 41 pathway records)
6. Theft/loss reports (Form 106 and related notices)
7. Power of attorney documents for ordering authority

Retention period

Federally, required CS records must be kept at least two years from the date of the record. Illinois practice, payer contracts, or corporate policy may require longer retention—if the exam contrasts periods, prefer the period that keeps you compliant with both, which means at least as long as the stricter rule.

Readily retrievable

Records must be kept available for inspection. “Readily retrievable” generally means CIII–V records can be separated from other records by asterisk, red line, electronic query, or similar system without an archaeological dig. CII records are often maintained separately. A pharmacist who cannot produce last year’s CII 222s during an inspection is already in trouble.

Central recordkeeping

Some records may be maintained at a central location if DEA is properly notified and the pharmacy can still produce them on the required timeline. Exam takeaway: central storage is a regulated privilege, not an excuse for “corporate has it somewhere.”

Acquisitions and Dispositions: Reconciling the Math

A simple accountability equation drives investigations:

Beginning inventory + receipts − dispensing/disposals/transfers = ending inventory

If perpetual inventory software says 40 hydromorphone tablets should be present and the count shows 28, you have a variance. Variances demand:

• Recheck math and data entry
• Review recent prescriptions and returns
• Review receiving logs and CSOS/222 completions
• Review waste/destruction and reverse-distributor paperwork
• Assess theft potential and security-camera footage
• Determine whether the loss is significant

Do not “adjust perpetual to match physical” without investigation. Silent adjustments are how diversion hides for months.

Theft and Significant Loss Response

Discovery triggers duty

The clock starts when the registrant discovers the theft or significant loss—not when the monthly accounting meeting happens to notice a trend. Train staff to escalate immediately.

Required federal response pattern

1. Protect the scene of an obvious break-in; preserve evidence
2. Notify DEA in writing within one business day of discovery of theft or significant loss (classic exam timing)
3. Notify local law enforcement as appropriate
4. Conduct a good-faith investigation to quantify missing drugs by NDC/strength
5. Submit DEA Form 106 with the theft/loss details
6. Implement corrective controls (access changes, camera review process, dual counts, termination of access credentials)
7. Maintain copies of all notices and the Form 106 in the record system for the retention period

Significant loss judgment factors

Significance is qualitative and quantitative. Consider schedule, quantity, drug attractiveness for abuse, whether losses are recurring, and whether the amount is explainable by ordinary counting error. Repeated “small” CII shortages can be significant in aggregate. When unsure, investigate and document rather than hoping the next shipment hides the hole.

In-transit loss vs on-site loss

If a CII tote never arrives, determine whether custody had transferred to the pharmacy. Responsibility for reporting can depend on where in the supply chain the loss occurred. Exam stems often give enough facts to decide whether the pharmacy had already received and signed for the drugs.

Destruction and Reverse Distribution Records

Expired, damaged, or unwanted pharmacy stock controlled substances should move through lawful channels (often a DEA-registered reverse distributor) with complete chain-of-custody documentation. Form 41 relates to destruction accountability. Patient-returned medications, if collected, must follow authorized collector rules—do not commingle street returns into pharmacy stock or informal employee disposal.

Illinois Practice Overlay

Federal inventory and two-year retention are the national floor. For Illinois MPJE performance:

• Expect IDFPR and the PIC to care about security, operational controls, and whether the pharmacy’s real controls match its paperwork (see PIC and facilities chapters)
• Diversion, unresolved variances, and late reporting can become professional conduct issues under 225 ILCS 85, not only DEA paperwork issues
• Dispensing records interact with ILPMP reporting completeness for Schedules II–V (with limited exclusions such as testosterone per ILPMP guidance)—inventory compliance does not excuse PMP nonreporting, and vice versa
• Illinois recordkeeping or operational expectations that are stricter than the federal two-year/biennial floor control the compliant answer
• 720 ILCS 570 alignment means Illinois still expects a closed, accountable CS system even when a vignette starts with federal form numbers

Inspection-Day Readiness Checklist

A well-run Illinois pharmacy should be able to produce quickly:

• Most recent biennial (or more frequent) CS inventory with CII exact counts
• Executed 222/CSOS records for recent CII receipts
• CIII–V invoices
• Hard-copy or electronic CS prescriptions for the requested period
• POA documents for purchasers
• Any Form 106 filings and related police/DEA notices
• Destruction/reverse-distributor files
• Perpetual inventory exception reports and resolution notes for high-risk CIIs

If any of those are missing, the closed system is only closed on paper.

Worked Example: Peoria Pharmacy

A pharmacy’s last inventory was dated July 15, 2024. The next federal biennial deadline is no later than July 15, 2026. On June 1, 2026, staff count CII opioids exactly and estimate open bottles of zolpidem that contain fewer than 1,000 tablets, but exactly count an open bottle of a CIII product that still holds 1,200 tablets. Two weeks later, perpetual inventory shows 10 fentanyl patches missing after a staffing change. The PIC investigates the same day, confirms a significant loss, notifies DEA within one business day, files Form 106, resets safe access credentials, and documents corrective action. That sequence is what exam writers want—not a quiet perpetual adjustment three months later.

Common Traps

• Treating biennial inventory as optional if perpetual software exists
• Estimating open CII bottles
• Estimating open CIII–V bottles over 1,000 units
• Keeping records for “about a year” because corporate backups “probably exist”
• Filing Form 41 for a burglary or Form 106 for routine reverse distribution
• Waiting for absolute certainty before making the one-business-day DEA notice when theft is already clear
• Answering with the federal floor when an Illinois vignette states a stricter retention, PIC, or reporting duty

Inventory, records, and theft reporting convert abstract CSA theory into auditable daily practice. Master the biennial cycle, exact-count rules, two-year retention, and Form 106 timing, then keep Illinois’s stricter-when-applicable mindset for every operations item that follows in this guide.