6.3 Controlled Substance Theft, Loss & Disposal

6.3 Controlled Substance Theft, Loss & Disposal

Controlled substance security, accountability, and proper disposal represent fundamental pillars of pharmacy jurisprudence. When controlled substances are stolen, lost, spilled, expired, or surrendered by patients, strict federal and Kentucky state procedures dictate how these events must be investigated, documented, and reported across regulatory agencies.

1. Significant Theft or Loss: The One-Business-Day Notification Mandate

Under federal regulations (21 CFR § 1301.76(b)) and Kentucky law, a DEA registrant must take immediate mandatory action upon discovering a theft or significant loss of controlled substances:

┌─────────────────────────────────────────────────────────────────────────────┐
│            ONE-BUSINESS-DAY THEFT / LOSS REPORTING PROTOCOL                 │
├─────────────────────────────────────────────────────────────────────────────┤
│ STEP 1: Immediate Notification (Within 1 Business Day of Discovery)         │
│ • Notify the local DEA Field Division in writing or via the DEA Diversion   │
│   online portal within ONE (1) BUSINESS DAY of discovery.                   │
│ • Initial notification is a concise alert stating that a significant loss   │
│   or theft has occurred and that an internal investigation is underway.     │
│                                                                             │
│ STEP 2: Multi-Agency State Notification in Kentucky                         │
│ • Immediately notify the Kentucky Board of Pharmacy (KBOP).                 │
│ • Immediately notify the Cabinet for Health and Family Services (CHFS) —    │
│   Drug Enforcement Branch / Office of Inspector General (OIG).              │
│ • Notify the local law enforcement agency (Police / Sheriff).               │
│                                                                             │
│ STEP 3: Complete & Submit Electronic DEA Form 106                           │
│ • Once the internal investigation is finalized, complete and submit the     │
│   official DEA Form 106 online via the DEA secure portal.                   │
│ • If the investigation takes longer than 2 months, submit an interim status │
│   update in writing to the DEA Field Division.                              │
└─────────────────────────────────────────────────────────────────────────────┘

What Constitutes "Discovery"?

Discovery occurs the moment the pharmacy staff or management becomes aware of missing controlled substances that cannot be reconciled through normal operational accounting or inventory variance. The 1-business-day clock runs from this moment of discovery, NOT from the completion of the subsequent investigation.

2. Determining "Significant Loss" & Breakage vs. Loss

Federal regulations do not define "significant loss" by an arbitrary dollar threshold or pill count. Instead, DEA guidance instructs registrants to evaluate six core criteria to determine whether a loss is significant:

┌─────────────────────────────────────────────────────────────────────────────┐
│                 DEA CRITERIA FOR DETERMINING 'SIGNIFICANT LOSS'             │
├─────────────────────────────────────────────────────────────────────────────┤
│ 1. The actual quantity of controlled substances lost in relation to the     │
│    type of pharmacy business.                                               │
│ 2. The specific controlled substances lost (e.g., 50 tablets of OxyContin   │
│    vs. 50 tablets of Phenobarbital).                                        │
│ 3. Whether the loss can be attributed to specific individuals or unique     │
│    activities (e.g., employee pilferage).                                   │
│ 4. Whether the loss fits a pattern of recurring small losses over time.     │
│ 5. Whether the missing drugs are candidates for diversion / street value.   │
│ 6. Local diversion trends and indicators of illicit trafficking.            │
└─────────────────────────────────────────────────────────────────────────────┘

Breakage, Spillage, and Recoverable vs. Non-Recoverable Loss

A vital high-yield distinction on the MPJE is how to handle damaged or broken controlled substances:

3. In-Transit Losses & Supply Chain Responsibility

When controlled substances are lost or stolen while in transit between a wholesaler/distributor and a purchaser (pharmacy), legal reporting responsibility depends strictly on physical custody and signature confirmation:

┌─────────────────────────────────────────────────────────────────────────────┐
│                     IN-TRANSIT LOSS RESPONSIBILITY RULES                    │
├─────────────────────────────────────────────────────────────────────────────┤
│ 1. Loss Occurs Before Purchaser Signs (Wholesaler Responsibility):          │
│    • If a shipment arrives with broken seals, damaged boxes, or missing     │
│      totes, the pharmacy MUST refuse the shipment or note the discrepancy   │
│      on the delivery manifest prior to signing.                             │
│    • The SUPPLIER / DISTRIBUTOR is legally responsible and must report the   │
│      loss to the DEA on DEA Form 106.                                       │
│                                                                             │
│ 2. Loss Discovered After Purchaser Signs (Pharmacy Responsibility):         │
│    • If the pharmacy signs for the delivery and accepts custody, and        │
│      subsequently discovers missing controlled substances inside an intact  │
│      tote/box, the PHARMACY is legally responsible.                         │
│    • The pharmacy must report the theft/loss to the DEA on DEA Form 106     │
│      and notify KBOP, CHFS, and local law enforcement.                      │
│                                                                             │
│ 3. Central Fill Pharmacy In-Transit Losses:                                 │
│    • If a central fill pharmacy ships to a retail pharmacy via private      │
│      carrier (FedEx/UPS), the central fill pharmacy reports in-transit      │
│      losses until delivery is accepted by the retail pharmacy.              │
└─────────────────────────────────────────────────────────────────────────────┘

Comprehensive Theft / Loss Reporting Checklist for Kentucky Registrants

4. Controlled Substance Destruction & Reverse Distributors

Pharmacies frequently accumulate outdated, expired, damaged, or unwanted controlled substance inventory that cannot be returned to the primary manufacturer. These substances must be destroyed in compliance with DEA regulations (21 CFR Part 1317).

DEA Form 41: Registrants Inventory of Drugs Surrendered

DEA Form 41 is the official federal form used to document the destruction and disposal of controlled substances. It records the drug name, dosage form, strength, package size, number of units, and method of destruction.

The Reverse Distributor Transfer Protocol

Retail pharmacies are generally prohibited from disposing of controlled substances down the sewer or on-site without special DEA authorization. Instead, pharmacies utilize a DEA-registered Reverse Distributor:

┌─────────────────────────────────────────────────────────────────────────────┐
│                 REVERSE DISTRIBUTOR DISPOSAL WORKFLOW                       │
├─────────────────────────────────────────────────────────────────────────────┤
│ 1. Schedule II Controlled Substances:                                       │
│    • The Reverse Distributor must issue a DEA Form 222 (or electronic CSOS  │
│      order) to the pharmacy.                                                │
│    • In this transaction, the Reverse Distributor is the PURCHASER, and     │
│      the Pharmacy is the SUPPLIER.                                          │
│                                                                             │
│ 2. Schedule III, IV, and V Controlled Substances:                           │
│    • Transferred pursuant to an itemized invoice / commercial record        │
│      containing: drug name, dosage form, strength, quantity, date of        │
│      transfer, and names/addresses/DEA numbers of both parties.             │
│                                                                             │
│ 3. Destruction & Form 41 Execution:                                         │
│    • The Reverse Distributor is legally responsible for destroying the      │
│      controlled substances to a 'non-retrievable' state.                    │
│    • The Reverse Distributor (NOT the pharmacy) executes and submits        │
│      DEA Form 41 to the DEA.                                                │
│    • The pharmacy maintains the Form 222 copy and invoices for 5 years.     │
└─────────────────────────────────────────────────────────────────────────────┘

5. Secure and Responsible Drug Disposal Act of 2010 (Collector Programs)

The Secure and Responsible Drug Disposal Act of 2010 (codified in 21 CFR Part 1317) authorized the DEA to promulgate regulations allowing ultimate users (patients and their families) to lawfully transfer unwanted controlled substances to authorized entities for safe disposal.

Becoming an "Authorized Collector"

• A retail pharmacy, hospital/clinic with an on-site pharmacy, or narcotic treatment program may voluntarily modify its DEA registration to become an Authorized Collector.
• No additional fee is required to modify the registration.

On-Site Collection Receptacle Specifications

Authorized collectors who install collection drop boxes must comply with rigid physical security standards:

1. Location: Inside the registered location, placed in the immediate proximity of a designated area that is regularly monitored by pharmacy employees (e.g., directly visible in front of the pharmacy counter). Drop boxes cannot be placed in unmonitored hallways or outdoor public entryways.
2. Physical Security: The outer container must be securely fastened to a permanent building structure (bolted to floor or wall) and kept securely locked. It must have a small outer opening (baffled drop slot) that allows medications to be deposited but prevents removal of contents.
3. Inner Liner Requirements:
   • Must be removable, tamper-evident, tear-resistant, waterproof, and opaque (contents cannot be seen from outside).
   • Must bear a permanent unique identification number on each liner.
4. Dual Custody Mandate: Installation, removal, sealing, and transfer of the inner liner must be performed by two authorized employees of the collector.
5. Zero Pharmacy Staff Handling: Pharmacy employees shall never touch, count, inspect, sort, or inventory deposited medications. Once an item is dropped into the slot, it belongs exclusively to the disposal stream and cannot be retrieved.
6. Storage & Shipping: Sealed inner liners must be stored in a securely locked safe or vault until transferred to a reverse distributor via an itemized transfer record tracking the unique liner ID.

┌─────────────────────────────────────────────────────────────────────────────┐
│            COLLECTION RECEPTACLES: OPERATIONAL MUST-KNOW RULES              │
├─────────────────────────────────────────────────────────────────────────────┤
│ ✔ Permissible: Ultimate-user Schedule II–V controlled substances and legend │
│   prescription drugs deposited by patients/families.                        │
│                                                                             │
│ ✘ Strictly Prohibited in Drop Boxes:                                        │
│   • Pharmacy's own expired or damaged inventory (NEVER co-mingle!).         │
│   • Illicit Schedule I substances (heroin, LSD, illicit fentanyl).          │
│   • Sharps, medical needles, syringes, lancets (biohazard risk).            │
│   • Aerosol cans, compressed gas cylinders, hazardous industrial chemicals. │
└─────────────────────────────────────────────────────────────────────────────┘

Mail-Back Programs & Take-Back Events

• Mail-Back Programs: Authorized collectors may provide specialized mail-back packages to patients. Packages must be pre-addressed, postage-paid, non-descript, serialized, tamper-evident, and mailed directly to an authorized destruction location.
• Take-Back Events: Community pharmacies cannot hold independent drug take-back events. Take-back collection events can only be conducted by law enforcement agencies, though pharmacies may partner with law enforcement to host an event on pharmacy premises.

6. Patient At-Home Medication Disposal (FDA Guidelines)

When patients cannot access an authorized collection receptacle or mail-back program, pharmacists must provide guidance based on official FDA disposal protocols:

1. The FDA Flush List (Immediate Disposal via Toilet/Sink)

Certain medications carry such extreme potential for fatal pediatric toxicity or accidental overdose that the FDA recommends immediate flushing down the toilet if an authorized collection receptacle is not immediately available. These include:

• Fentanyl Transdermal Patches (e.g., Duragesic) — Used patches retain $\ge 50%$ of their drug content and must be folded sticky sides together and flushed immediately upon removal.
• Buprenorphine (Belbuca, Suboxone, Butrans sublingual/buccal films/patches).
• Oxycodone (OxyContin, Percocet, Roxicodone).
• Hydrocodone (Norco, Vicodin, Hysingla ER).
• Hydromorphone (Dilaudid), Morphine, Methadone, Oxymorphone, Tapentadol.

2. Household Trash Disposal Protocol (For All Other Medications)

For medications not on the FDA flush list, patients should follow this 4-step sequence:

1. Mix whole medications (do NOT crush tablets or open capsules) with an undesirable, unpalatable substance (used coffee grounds, cat litter, dirt).
2. Place the mixture in a sealed plastic bag or sealable container to prevent leakage.
3. Discard the sealed container into household trash.
4. Scratch out, black out, or remove all personal identifying information (patient name, prescription number) from the empty prescription bottle before recycling or throwing it away.