8.1 Ordering Schedule II Substances: CSOS & DEA Form 222 Execution

8.1 Ordering Schedule II Substances: CSOS & DEA Form 222 Execution

The procurement of Schedule II controlled substances (and Schedule I substances used in research or analytical laboratories) is strictly regulated under the federal Controlled Substances Act (CSA) and Drug Enforcement Administration (DEA) regulations (21 CFR Part 1305). Because Schedule II drugs carry the highest potential for abuse and dependence among legally marketable pharmaceuticals, their transfer from a manufacturer or distributor to a pharmacy requires a formal, traceable ordering mechanism. Registrants must utilize either the paper DEA Form 222 or the electronic Controlled Substance Ordering System (CSOS).

---

Paper Ordering: DEA Form 222 Execution

Historically, DEA Form 222 was issued as a triplicated paper document (Copy 1 to supplier, Copy 2 to DEA, Copy 3 retained by purchaser). Effective October 2019, with mandatory compliance by October 2021, the DEA transitioned exclusively to a single-sheet DEA Form 222.

Single-Sheet Form Execution Workflow

1. Form Order & Handling: Blank single-sheet Form 222s are pre-printed with the registrant's name, address, DEA registration number, authorized schedules, and unique serial number. Forms are issued in books of 7 or 20 sheets.
2. Filling Out the Order: The purchaser (or authorized Power of Attorney) must complete the form using a typewriter, pen, or indelible pencil. Each form contains 20 order lines (increased from 10 lines on the old triplet form). Only one item may be entered on each line. An item represents a commercial container of a specific drug strength, dosage form, and package size.
3. Required Information: The purchaser must specify the number of packages, package size, drug name, dosage form, and strength. The National Drug Code (NDC) is optional for the purchaser but mandatory for the supplier to record upon fulfillment.
4. Signing and Execution: The form must be signed and dated by the DEA registrant or an authorized Power of Attorney (POA). The signature indicates legal authorization to procure controlled substances.
5. Purchaser Copy Creation: Before sending the original single-sheet form to the supplier, the purchaser must make a copy (paper photocopy or electronic copy) for their permanent pharmacy records.
6. Supplier Processing: The supplier receives the original single-sheet Form 222, records the number of commercial containers shipped and the date of shipment, and reports the transaction to the DEA Automated Reports and Consolidated Orders System (ARCOS) by the end of the month in which the order was filled.
7. Receipt Verification: Upon receiving the shipment, the purchaser must record on their retained copy of Form 222 the number of commercial containers received and the exact date received for each line item.

---

Power of Attorney (POA) Authorization

The DEA registrant—the individual who signed the most recent DEA registration application or renewal—is the primary authorized signatory for Form 222 and CSOS orders. However, to maintain daily operational efficiency, the registrant may delegate this authority to one or more individuals via a written Power of Attorney (POA) under 21 CFR § 1305.05.

Key POA Rules for the MPJE:

• Who can be designated: A POA can be granted to pharmacists or non-pharmacists (e.g., pharmacy technicians, inventory managers, office administrators).
• Execution Requirements: The POA document must be signed by the registrant, the person being granted attorney-in-fact authority, and two witness signatures.
• Location & Retention: Executed POA forms are not submitted to the DEA; they must be filed on-site alongside executed Form 222 records and be readily available for DEA inspection.
• Revocation: The registrant may revoke a POA at any time by executing a formal written Notice of Revocation signed by the registrant and two witnesses.

---

Electronic Ordering: Controlled Substance Ordering System (CSOS)

The Controlled Substance Ordering System (CSOS) provides an electronic alternative to paper Form 222, allowing pharmacies to order Schedule II, III, IV, and V controlled substances electronically.

Digital Certificates & PKI Architecture

CSOS relies on Public Key Infrastructure (PKI) technology. To use CSOS, an authorized individual (registrant or designated POA) must apply to the DEA CSOS Certification Authority for a digital certificate. The digital certificate serves as the electronic signature and digital credential.

CSOS Operational Advantages & Rules

• No Line-Item Limit: Unlike paper Form 222 (capped at 20 lines), a CSOS order has no item limit per electronic transmission.
• Schedule Scope: CSOS permits ordering Schedule I through V substances on the same electronic platform, whereas Form 222 is limited to Schedule I and II.
• Supplier Reporting: The supplier must report electronic CSOS Schedule II transactions to the DEA within 2 business days of filling the order.
• Electronic Verification: When the shipment arrives, the purchaser must electronically link the receipt record (containing packages received and date received) to the original electronic CSOS order record.

---

Handling Unaccepted, Defective, or Cancelled Orders

If a paper Form 222 or electronic CSOS order contains errors, is incomplete, or cannot be filled by the supplier, specific regulatory protocols apply:

Paper Form 222 Defects

• A paper Form 222 containing erasures, alterations, unreadable writing, or incomplete fields is considered defective.
• A supplier cannot alter or correct a defective Form 222. The supplier must return the original single-sheet Form 222 to the purchaser accompanied by a written explanation of why the order was unaccepted.
• The purchaser must file the returned original Form 222 and the supplier's statement with their retained copy records. Defective forms cannot be re-used; a new Form 222 must be executed.
• Partial Shipments: If a supplier cannot fill the complete order, they may make a partial shipment. The remaining balance must be filled and shipped within 60 days from the date the purchaser executed the form. After 60 days, the form expires, and unfilled items are canceled.

CSOS Electronic Defects

• If an electronic order is defective or cannot be filled, the supplier provides an electronic notification of non-acceptance stating the reason.
• The purchaser must electronically link the notification of non-acceptance to the original electronic order record.

---

Records Retention and Storage Rules

Under federal CSA regulations (21 CFR § 1305.17 and § 1304.04):

• All paper DEA Form 222 records (retained copies, originals returned by suppliers, POA documents) and CSOS electronic order records must be kept for at least 2 years from the date of execution.
• Storage Requirement: Paper Form 222 records for Schedule II substances must be stored separately from all other records of the pharmacy.
• Electronic CSOS records must be readily retrievable and stored in a secure, backed-up database accessible for audit.