7.2 Kentucky Security Prescription Blanks & EPCS Mandate
Key Takeaways
- Under 902 KAR 55:105, all written (hard-copy) controlled substance prescriptions (Schedules II–V) dispensed in Kentucky must be executed on an official Kentucky Security Prescription Blank bearing specialized anti-fraud technical features.
- Mandatory security blank specifications include an opaque 'Rx' symbol in the upper right corner (minimum 0.75" x 0.75"), a horizontal watermark on the back stating 'Kentucky Security Prescription' in 12-point Helvetica bold across 5 lines, a latent 'VOID' pantograph pattern, quantity check-off boxes, and pre-printed prescriber details.
- Kentucky regulations strictly prohibit pre-printing controlled substance drug names or commercial advertisements on security blanks and mandate that only ONE controlled substance prescription may appear on a single blank.
- Under KRS 218A.180 (effective Jan 1, 2021), electronic prescribing for controlled substances (EPCS) is mandatory across Schedules II–V, subject to eight narrow statutory exceptions including veterinary orders, technological failures, out-of-state dispensing, and approved board waivers.
- Dispensing pharmacists are granted statutory safe harbor and are NOT legally required to verify or inquire whether an EPCS exception or waiver applies when receiving a hard-copy, oral, or faxed controlled substance prescription.
7.2 Kentucky Security Prescription Blanks & EPCS Mandate
Prescription fraud, alteration, and diversion represent significant threats to public health and the regulatory integrity of the pharmaceutical supply chain. To combat counterfeit and altered prescription orders, the Commonwealth of Kentucky established rigid statutory and administrative standards governing the physical format of written controlled substance prescriptions (902 KAR 55:105) and subsequently mandated electronic transmission for all controlled substance prescriptions (KRS 218A.180 / KRS 218A.182).
A practicing pharmacist in Kentucky must master both the physical security features required on written paper blanks and the legal framework governing electronic controlled substance prescribing.
1. Kentucky Security Prescription Blanks (902 KAR 55:105)
Under 902 KAR 55:105, every written (hard-copy) prescription for a controlled substance in Schedule II, III, IV, or V issued by a practitioner licensed in Kentucky or dispensed by a Kentucky pharmacy must be written or printed on an official Kentucky Security Prescription Blank.
Mandatory Technical Security Specifications
Kentucky security blanks must be produced by approved, certified security paper printers and must incorporate six mandatory physical and optical features:
┌─────────────────────────────────────────────────────────────────────────────┐
│ MANDATORY TECHNICAL SPECIFICATIONS (902 KAR 55:105) │
├─────────────────────────────────────────────────────────────────────────────┤
│ 1. Opaque 'Rx' Symbol in Upper Right Corner: │
│ • Must be printed in the upper right-hand corner of the blank. │
│ • Minimum dimensions: exactly 0.75 inches by 0.75 inches (3/4" x 3/4"). │
│ • Symbol must be opaque so that it does not show through the paper │
│ under normal light but reveals security features when held to light. │
│ │
│ 2. Horizontal Watermark on Reverse Side: │
│ • The back of the blank must bear a watermark stating: │
│ 'Kentucky Security Prescription' │
│ • Font: exactly 12-point Helvetica bold type. │
│ • Layout: printed horizontally in five (5) distinct lines across blank. │
│ • Watermark must be visible only when viewed at a 45-degree angle or │
│ under transmitted light. │
│ │
│ 3. Latent 'VOID' Pantograph Pattern: │
│ • A hidden anti-copy pattern embedded across the background of the paper.│
│ • When the blank is photocopied or scanned, the word 'VOID' or 'ILLEGAL' │
│ appears prominently across the face of the reproduced copy. │
│ │
│ 4. Quantity Check-Off Boxes: │
│ • Pre-printed quantity ranges on the front face of the blank: │
│ [ ] 1–24 [ ] 25–49 [ ] 50–74 │
│ [ ] 75–100 [ ] 101–150 [ ] 151 and over │
│ • Prescriber must mark the box corresponding to the prescribed quantity. │
│ │
│ 5. Pre-Printed Prescriber Information & License Lines: │
│ • Prescriber full name, business address, and telephone number must be │
│ pre-printed on the blank. │
│ • Designated space for prescriber's DEA number and state license number. │
│ │
│ 6. Refill Indicators & Security Checkbox: │
│ • Designated boxes or spaces to indicate exact refill authorizations. │
└─────────────────────────────────────────────────────────────────────────────┘
2. Strict Prohibitions & Format Rules for Security Blanks
To prevent systematic diversion and commercial exploitation, Kentucky administrative regulations establish three absolute prohibitions regarding security prescription blanks:
┌─────────────────────────────────────────────────────────────────────────────┐
│ STRICT SECURITY BLANK PROHIBITIONS │
├─────────────────────────────────────────────────────────────────────────────┤
│ 1. NO Pre-Printed Controlled Substance Names: │
│ • The name, strength, dosage form, or quantity of a controlled substance │
│ CANNOT be pre-printed on the blank (e.g., pre-printed 'Oxycodone 10mg'│
│ with check boxes is STRICTLY ILLEGAL). │
│ • Each controlled substance order must be individually handwritten, │
│ computer-generated/printed, or typed at the time of patient issuance. │
│ │
│ 2. NO Commercial Advertisements: │
│ • A security prescription blank shall not contain any commercial banner, │
│ pharmacy endorsement, pharmaceutical logo, or advertisement. │
│ │
│ 3. ONLY ONE Controlled Substance Prescription Per Blank: │
│ • Only a single controlled substance prescription may be written on an │
│ individual security blank. │
│ • Writing two controlled substances (e.g., Ambien AND Norco) on the same │
│ blank is ILLEGAL. │
│ • Combining a controlled substance and a legend drug (e.g., Norco AND │
│ Amoxicillin) on the same blank is ILLEGAL. │
└─────────────────────────────────────────────────────────────────────────────┘
Handling Non-Compliant Written Controlled Substance Orders
If a patient presents a written prescription for a controlled substance that is written on a non-security paper blank (or lacks required security elements):
- The hard copy cannot be filled directly as a written prescription.
- Resolution Workflow: The pharmacist (or intern) may call the prescribing practitioner's office, verify the prescription order verbally, and reduce it to writing as an oral prescription (for Schedules III, IV, and V), documenting the conversation, date, time, and caller identity. (For Schedule II, an oral order is permitted only during a bona fide emergency pursuant to 21 CFR § 1306.11 and KRS 218A.180).
- Alternatively, the pharmacist may request that the prescriber transmit a compliant electronic prescription (EPCS).
3. Kentucky Mandatory Electronic Prescribing (EPCS) — KRS 218A.180
Effective January 1, 2021, Kentucky enacted a comprehensive mandate under KRS 218A.180 and KRS 218A.182 requiring all controlled substances in Schedules II, III, IV, and V to be prescribed and transmitted electronically (Electronic Prescribing for Controlled Substances — EPCS).
DEA Technical EPCS Requirements
To legally transmit and receive EPCS orders under federal DEA regulations (21 CFR Part 1311):
- Two-Factor Authentication (2FA): Prescribers must sign EPCS orders using two of three authentication factors: (1) something you know (password/PIN), (2) something you have (hard token/cryptographic key/phone authenticator), and (3) something you are (biometric fingerprint or iris scan).
- Certified Software: Both the prescriber's electronic health record (EHR) and the pharmacy's dispensing system must undergo third-party auditing to verify compliance with DEA EPCS security standards.
The Eight (8) Statutory Exceptions to the Kentucky EPCS Mandate
Under KRS 218A.180(2), a practitioner is not required to issue a controlled substance electronically if the prescription falls within one of the following eight specific statutory exceptions:
┌─────────────────────────────────────────────────────────────────────────────┐
│ THE 8 STATUTORY EXCEPTIONS TO EPCS IN KENTUCKY │
├─────────────────────────────────────────────────────────────────────────────┤
│ 1. Veterinarians: Prescriptions issued by licensed veterinarians (DVM). │
│ │
│ 2. Technological or Electrical Failure: Temporary power outages, internet │
│ disruptions, or electronic software crashes. │
│ │
│ 3. Out-of-State Dispensing: Prescriptions issued to be dispensed by a │
│ pharmacy located outside the Commonwealth of Kentucky. │
│ │
│ 4. Same Entity Dispenser: Prescriptions where the prescriber and dispenser │
│ are the same entity (e.g., direct clinic or hospital pharmacy dispensing)│
│ │
│ 5. Emergency Protocol / Standing Order: Prescriptions issued under standing │
│ orders, approved protocols (e.g., naloxone), or expedited partner therapy│
│ │
│ 6. Research Protocols: Prescriptions issued pursuant to an approved │
│ Institutional Review Board (IRB) research study. │
│ │
│ 7. FDA / REMS Incompatibility: Situations where the electronic system cannot│
│ transmit complex compounding formulas or mandatory FDA/REMS attachments.│
│ │
│ 8. Temporary Licensing Board Waiver: Prescriber has been granted a formal │
│ temporary waiver by their professional licensing board due to economic │
│ hardship, technological limitations, or exceptional circumstances. │
└─────────────────────────────────────────────────────────────────────────────┘
4. Pharmacist "Safe Harbor" & Verification Protections
A pivotal legal protection for dispensing pharmacists is codified in KRS 218A.180(4):
┌─────────────────────────────────────────────────────────────────────────────┐
│ PHARMACIST EPCS SAFE HARBOR RULE │
├─────────────────────────────────────────────────────────────────────────────┤
│ • A pharmacist who receives a written (hard-copy), oral, or faxed │
│ controlled substance prescription is NOT REQUIRED to verify whether the │
│ prescriber has an active waiver or qualifies for an EPCS exception. │
│ │
│ • The pharmacist may lawfully dispense a valid written prescription (on a │
│ security blank), faxed prescription, or oral prescription without │
│ inquiring into the prescriber's EPCS compliance status. │
│ │
│ • The statutory burden of EPCS compliance rests solely on the PRESCRIBER, │
│ not the dispensing pharmacist. │
└─────────────────────────────────────────────────────────────────────────────┘
EPCS vs. Written Blanks: Practical Dispensing Summary Table
| Feature | Written Hard-Copy Prescriptions | Electronic Prescriptions (EPCS) |
|---|---|---|
| Governing Regulation | 902 KAR 55:105 | KRS 218A.180 / 21 CFR Part 1311 |
| Paper Blank Requirement | Mandatory Kentucky Security Blank (green watermark, opaque Rx, void pantograph) | Not applicable (electronic bits/packets) |
| Signature Required | Manual "wet" signature in ink (no signature stamps or electronic facsimiles) | DEA two-factor authentication (password, token, biometric) |
| Prescriptions Per Order | STRICTLY ONE controlled substance per blank | System-generated individual electronic records |
| Pre-Printed Drug Names | STRICTLY PROHIBITED | Stored in electronic formulary / EHR picklist |
| Day-Supply & Refill Rules | C-II: 60-day validity, 0 refills<br/>C-III–V: 6-month validity, up to 5 refills | C-II: 60-day validity, 0 refills<br/>C-III–V: 6-month validity, up to 5 refills |
| Pharmacist Exception Verification | Not required to verify why prescriber did not use EPCS | Not applicable |
A community pharmacist in Lexington inspects a written paper prescription for Klonopin (clonazepam 1 mg, Schedule IV) #30 presented by a walk-in patient. Upon close examination, the pharmacist notes that the prescription paper has an opaque Rx symbol in the upper right corner and a latent VOID pantograph, but the medication name 'Klonopin 1 mg' is pre-printed with a check-box next to it. Which of the following statements correctly describes the legal status of this prescription under 902 KAR 55:105?
A patient presents a written prescription for Ambien (zolpidem 10 mg, Schedule IV) #30 written on an official Kentucky Security Prescription Blank by a family physician in Owensboro. The pharmacist notes that Kentucky has an electronic prescribing mandate (EPCS) under KRS 218A.180. Which of the following actions by the pharmacist is legally correct?
Which of the following sets of technical specifications correctly reflects the mandatory physical security features required on an official Kentucky Security Prescription Blank under 902 KAR 55:105?