3.3 Electronic Prescribing of Controlled Substances (EPCS) & Transmission Rules

3.3 Electronic Prescribing of Controlled Substances (EPCS) & Transmission Rules

[!NOTE] Statutory and Regulatory Baseline: Electronic prescribing and transmission rules are governed by the New Jersey Electronic Prescribing Mandate (N.J.S.A. 45:14-89), the New Jersey Pharmacy Practice Act (N.J.S.A. 45:14-56), New Jersey Controlled Dangerous Substance rules (N.J.A.C. 13:45H-7.8 & 7.9), and federal DEA Electronic Prescriptions for Controlled Substances regulations (21 CFR Part 1311).

Modern pharmacy practice operates in a predominantly electronic ecosystem. New Jersey mandates electronic prescribing across both non-controlled legend drugs and controlled dangerous substances to eliminate illegible handwriting, reduce prescription diversion, and prevent manual pad theft.

---

The New Jersey Electronic Prescribing Mandate (N.J.S.A. 45:14-89)

Under N.J.S.A. 45:14-89, health care practitioners licensed in New Jersey who are authorized to prescribe medication must issue all prescriptions electronically:

• Comprehensive Scope: The mandate applies to all prescription drugs, including both non-controlled legend drugs and Schedule II through V controlled dangerous substances.
• Encrypted Transmission: The electronic prescription must be transmitted directly from the prescriber's certified Electronic Health Record (EHR) or e-prescribing software application to the dispensing pharmacy's computer system without intervening alteration.

The Pharmacist "Safe Harbor" Provision

One of the most essential exam points regarding the New Jersey e-prescribing mandate is the legal protection afforded to dispensing pharmacists:

[!IMPORTANT] The Pharmacist Safe Harbor Doctrine (N.J.S.A. 45:14-89(d)): A pharmacist who receives an otherwise valid written (NJPB), oral, or faxed prescription is NOT required to verify, interrogate, or confirm whether the prescribing practitioner qualifies for an exception or waiver to the electronic prescribing mandate. The pharmacist may dispense the valid medication without fear of regulatory sanction or disciplinary penalty.

The statutory burden of compliance with the electronic mandate rests squarely on the prescribing practitioner, not the dispensing pharmacist. A pharmacy is never penalized for dispensing a valid written NJPB or valid verbal prescription simply because it was not transmitted electronically.

Statutory Exceptions to the Electronic Mandate

Practitioners are legally permitted to issue written (NJPB), oral, or faxed prescriptions under specific statutory exemptions:

1. Technological or Electrical Failure: Temporary failure of computer hardware, software, telecommunications networks, or electrical power in the prescriber's office.
2. Hardship Waivers: Practitioners who have applied for and received an official waiver from the Division of Consumer Affairs based on documented economic hardship, technological limitations, or exceptional operational circumstances.
3. Out-of-State Dispensing: Prescriptions intended to be dispensed by a pharmacy located outside of New Jersey (e.g., mail-order pharmacies or pharmacies in adjacent states).
4. Long-Term Care & Hospice Care: Prescriptions for residents of nursing homes, assisted living residences, long-term care facilities (LTCFs), or patients enrolled in licensed hospice care programs.
5. Emergency Department & Inpatient Administration: Prescriptions issued in emergency rooms or urgent care centers where immediate on-site administration or direct administration by a practitioner is required.
6. Complex Compounded Formulations: Prescriptions with complex compounding formulas, multiple active ingredients, or customized dosing regimens that cannot be formatted or transmitted through current NCPDP SCRIPT electronic standards.
7. Standing Orders & Collaborative Protocols: Medication dispensed pursuant to public health standing orders (such as opioid antagonists or immunization protocols).

---

DEA EPCS Technical and Security Standards (21 CFR Part 1311)

Under federal law (21 CFR Part 1311), prescribing and dispensing Schedule II through V controlled substances electronically requires rigorous security infrastructure. Electronic systems that do not satisfy DEA EPCS standards cannot be used to transmit or receive CDS.

+---------------------------------------------------------------------------------------------------+
|                         DEA EPCS TWO-FACTOR AUTHENTICATION (2FA) FRAMEWORK                        |
+---------------------------------------------------------------------------------------------------+
|  To legally sign an electronic prescription for a Controlled Dangerous Substance (Schedules II-V),|
|  the prescriber MUST successfully authenticate using AT LEAST TWO OF THE THREE distinct factors: |
|                                                                                                   |
|  1. SOMETHING YOU KNOW (Knowledge Factor):                                                        |
|     - Secure password, complex passphrase, or personal secret PIN                                 |
|                                                                                                   |
|  2. SOMETHING YOU HAVE (Possession / Hard Token Factor):                                          |
|     - Hard token separate from the computer (cryptographic smart card, physical OTP key fob,      |
|       hardware USB authenticator, or smartphone authenticator generating time-based tokens)       |
|                                                                                                   |
|  3. SOMETHING YOU ARE (Inherent / Biometric Factor):                                              |
|     - Biometric identifier: Fingerprint scan, iris recognition, or facial biometric analysis      |
+---------------------------------------------------------------------------------------------------+
| NOTE: Two credentials from the SAME category (e.g., two passwords) DOES NOT satisfy federal 2FA.  |
+---------------------------------------------------------------------------------------------------+

Core DEA EPCS Requirements

1. Third-Party Certification / Audit:

   • Both the prescriber's e-prescribing software and the pharmacy's dispensing management software must undergo a third-party audit or obtain formal certification from a DEA-approved certification body confirming compliance with 21 CFR Part 1311.

2. Prescriber Identity Proofing:

   • Before being granted EPCS signing credentials, the practitioner must undergo rigorous identity verification (institutional credentialing or in-person/remote identity proofing by a certified credential service provider conforming to NIST SP 800-63 standards).

3. Logical Access Controls (Two-Individual Rule):

   • Granting EPCS signing permissions within a healthcare organization requires authorization from two separate individuals: one who verifies identity and licensing credentials, and a second system administrator who executes the technical access permission.

4. Digital Signature & Audit Trail:

   • The software must digitally sign the prescription upon completion of 2FA. The electronic record must be archived for a minimum of five years in New Jersey (surpassing the federal two-year CSA minimum) and remain readily retrievable upon audit.

---

Oral / Telephone (Verbal) Prescriptions

When electronic transmission or written delivery is unfeasible, oral communications are governed by specific regulatory tiers:

Non-Controlled Legend Drugs

• Verbal orders may be communicated directly by the prescriber or the prescriber's authorized agent (e.g., nurse, medical assistant) to a licensed pharmacist (or a registered pharmacy intern/extern acting under direct pharmacist supervision).
• The order must be immediately reduced to writing by the pharmacist, recording the date, time, medication specifications, prescriber details, and receiving pharmacist's initials.

Controlled Substances: Schedules III, IV, and V

• Verbal orders for Schedule III, IV, and V CDS are legally permissible.
• Must be communicated directly by the prescribing practitioner (or authorized agent) and promptly reduced to writing by the pharmacist.
• The written record must contain all elements required for a CDS prescription, including the prescriber's DEA number.

Controlled Substances: Schedule II (Emergency Oral Prescriptions Only)

Under federal law (21 CFR § 1306.11(d)) and New Jersey law (N.J.A.C. 13:45H-7.8), oral Schedule II prescriptions are strictly PROHIBITED except in a bona fide emergency.

[!WARNING] New Jersey Emergency Oral Schedule II Rules (N.J.A.C. 13:45H-7.8):

1. Emergency Criteria: Immediate administration of the Schedule II drug is necessary for proper treatment; no appropriate alternative treatment is available; and it is not reasonably possible for the prescriber to provide a written NJPB or EPCS before dispensing.
2. Quantity Restriction: Under New Jersey law, the quantity prescribed and dispensed is strictly limited to the amount adequate to treat the patient during the emergency period, up to a MAXIMUM OF A 72-HOUR SUPPLY.
3. Immediate Reduction to Writing: The pharmacist must immediately put the order into writing with all required details, noting that it was an emergency verbal order.
4. The 7-Day Covering Prescription Rule: Within 7 days of authorizing an emergency verbal order, the prescriber must deliver or transmit a covering official prescription (NJPB or EPCS) to the dispensing pharmacy. The face of the covering prescription must be inscribed with: "Authorization for Emergency Dispensing" and note the date of the oral order.
5. Mandatory Reporting if Covering Script Fails: If the prescriber fails to deliver the covering prescription within 7 calendar days, the pharmacist MUST notify the DEA (local field office) and the New Jersey Division of Consumer Affairs (Office of Drug Control). Failure of the pharmacist to notify authorities terminates the pharmacy's legal authority to dispense emergency C-IIs.

---

Facsimile (Fax) Transmission Regulations

Facsimile transmission bridges paper and electronic methods. In New Jersey, specific rules dictate when a faxed document can serve as a legal prescription:

Non-Controlled Drugs and Schedules III–V

• A facsimile of an original NJPB transmitted directly from the prescriber's practice location to the pharmacy is legally valid.
• The faxed document must display the date and time of transmission, the telephone and fax number of the transmitting facility, the prescriber's handwritten signature, and the physical address of the practice.
• The receiving facsimile must be printed on non-fading plain paper or stored in an unalterable electronic image format.

Schedule II Controlled Substances: Informational vs. Original

As a foundational rule, a faxed Schedule II prescription serves only for informational purposes to permit the pharmacy to begin compounding or preparing the medication in advance. The pharmacist cannot dispense or deliver the Schedule II medication to the patient until the patient surrenders the original, signed, physical NJPB.

The Three Federal / New Jersey Exceptions (Fax Serves as Original C-II)

Under 21 CFR § 1306.11(e), (f), (g) and N.J.A.C. 13:45H-7.9, a facsimile prescription for a Schedule II controlled substance serves as the original legal prescription (no physical NJPB required prior to dispensing) in exactly three clinical settings:

+---------------------------------------------------------------------------------------------------+
|                         THE THREE SCHEDULE II FACSIMILE EXCEPTIONS                                |
+---------------------------------------------------------------------------------------------------+
| 1. COMPOUNDED INJECTABLE / INFUSION:                                                              |
|    A Schedule II narcotic substance to be compounded for the direct administration to a patient   |
|    by parenteral, intravenous, intramuscular, subcutaneous, or intraspinal infusion.               |
|                                                                                                   |
| 2. LONG-TERM CARE FACILITY (LTCF):                                                                |
|    Any Schedule II controlled substance prescribed for a resident of a licensed Long-Term Care    |
|    Facility (nursing home, skilled nursing facility).                                             |
|                                                                                                   |
| 3. HOSPICE CARE PROGRAM:                                                                          |
|    A Schedule II narcotic substance prescribed for a patient enrolled in a hospice care program   |
|    certified or paid for by Medicare or licensed by the State of New Jersey.                      |
|    *The prescriber MUST explicitly write 'Hospice Patient' on the face of the prescription.*      |
+---------------------------------------------------------------------------------------------------+

[!TIP] Critical Exam Distinction: Note that the Hospice and Infusion exceptions apply specifically to Schedule II narcotic substances (e.g., morphine, hydromorphone, fentanyl), whereas the Long-Term Care Facility (LTCF) exception applies to ANY Schedule II controlled substance (including non-narcotics such as methylphenidate or amphetamine salts). Always read the question stem carefully to identify patient setting and drug classification!