10.1 Controlled Substance Ordering, CSOS & DEA Form 222
Key Takeaways
- Under the single-sheet DEA Form 222 rules (mandated since October 2021), the purchaser completes the 20-line form, creates a legible copy (paper or electronic) to retain, and transmits the original single-sheet form to the supplier.
- Suppliers must report Form 222 transactions to the DEA Automation of Reports and Consolidated Orders System (ARCOS) or submit an electronic copy to the DEA Diversion Control Division by the close of the month in which the order was filled.
- Suppliers have a strict statutory window of 60 calendar days from the date of execution by the purchaser to fulfill partial shipments of Schedule I and II controlled substances.
- Power of Attorney (POA) to execute DEA Form 222 or CSOS orders may be granted to any competent individual—including non-pharmacists—and must be signed by the registrant/authorized corporate officer, the designated agent, and two adult witnesses.
- New Jersey mandates that all controlled dangerous substance (CDS) records—including executed Form 222 copies, CSOS audit logs, and Schedule II invoices—must be retained for at least five (5) years, with Schedule II records stored completely separate from all other pharmacy records.
Controlled Substance Ordering, CSOS & DEA Form 222
The procurement and distribution of Schedule I and Schedule II controlled dangerous substances (CDS) are subject to the most rigorous tracking and supply-chain verification mechanisms in American pharmaceutical jurisprudence. Established under Title II of the Comprehensive Drug Abuse Prevention and Control Act of 1970 and codified in federal regulations at 21 CFR Part 1305, these protocols guarantee an unbroken, closed chain of custody from primary chemical manufacturers to wholesale distributors, commercial reverse distributors, and dispensing pharmacy practice sites. In New Jersey, federal ordering mandates are reinforced and expanded through the New Jersey Controlled Dangerous Substances Act (N.J.S.A. 24:21-1 et seq.) and the operational regulations of the New Jersey Division of Consumer Affairs Office of Drug Control (ODC) (N.J.A.C. 13:45H). Candidates preparing for the Multistate Pharmacy Jurisprudence Examination (NJ MPJE) must master the operational handling of the single-sheet DEA Form 222, electronic order validation via the Controlled Substance Ordering System (CSOS), the delegation and revocation of Power of Attorney (POA), partial fulfillment boundaries, and New Jersey's stringent recordkeeping retention and segregation mandates.
The Single-Sheet DEA Form 222 Architecture
Historically, the Drug Enforcement Administration (DEA) utilized a carbon-layered triplicate paper form (Copy 1 Brown to supplier, Copy 2 Green to DEA, Copy 3 Blue retained by purchaser). The DEA executed a complete regulatory transition to a modernized single-sheet DEA Form 222 format. As of October 30, 2021, the former triplicate forms became fully obsolete and invalid. Single-sheet forms feature advanced anti-counterfeiting security paper, standardized digital micro-printing, and a 20-order line capacity (a significant increase from the 10 lines permitted on the legacy triplicate form).
Step-by-Step Execution Protocol for Single-Sheet Orders
- Execution by the Purchaser:
- The purchaser (the registered pharmacy or practitioner) enters the required requisition data on the single-sheet Form 222.
- Each line item must clearly state: the commercial package size, the number of commercial packages ordered, and the drug name, dosage form, and strength.
- Entering the National Drug Code (NDC) is optional for the purchaser; however, entering the NDC becomes mandatory for the supplier upon fulfillment.
- The form must be signed and dated by an authorized individual: either the individual registrant, a general partner of a partnership, an authorized corporate officer, or a properly designated agent holding an active Power of Attorney (POA).
- Mandatory Retention of Purchaser Copy Prior to Transmission:
- Critical Workflow Mandate: Before transmitting the original single-sheet form to the supplier, the purchaser MUST create a legible copy of the completed Form 222 for its own permanent pharmacy records (21 CFR § 1305.13(a)).
- This copy may be maintained in hard-copy paper format (photocopy) or stored as an electronic image/scan, provided it is immediately accessible and retrievable upon regulatory inspection.
- Transmission of the Original Form:
- The purchaser sends the original single-sheet DEA Form 222 (hard copy) to the licensed wholesale distributor or supplying registrant. The purchaser does not send any document to the DEA at this stage.
- Fulfillment and Documentation by the Supplier:
- The supplier verifies the purchaser's active DEA registration and state controlled substance authorization.
- Upon packaging the order, the supplier records on the original Form 222: the exact number of commercial containers shipped, the date of shipment, and the supplier's DEA registration number.
- If the supplier cannot fill the complete order, it may execute a partial shipment and supply the remaining balance within a strict statutory window.
- Supplier Reporting to the DEA:
- Under 21 CFR § 1305.13(i), suppliers must report all Schedule I and II distributions.
- Suppliers registered with the DEA Automation of Reports and Consolidated Orders System (ARCOS) report the transaction electronically through ARCOS.
- Suppliers not subject to ARCOS reporting must submit a copy of the completed single-sheet Form 222 (or an approved electronic data file) directly to the DEA Diversion Control Division by the close of the month during which the order was filled.
- Receipt and Final Reconciliation by the Purchaser:
- When the shipment physically arrives at the pharmacy practice site, a licensed pharmacist (or authorized POA designee) must inspect the delivery.
- The purchaser records on its retained copy of Form 222: the actual number of commercial bulk containers received and the exact date received for each line item (21 CFR § 1305.13(e)).
SINGLE-SHEET DEA FORM 222 WORKFLOW
│
1. Purchaser completes 20-line single-sheet Form 222
• Package size, quantity, drug name, dosage form, strength
• Signed & dated by Registrant or POA agent
│
2. MANDATORY PRE-TRANSMISSION STEP:
• Purchaser makes and retains a copy (paper or electronic scan)
│
3. Purchaser sends ORIGINAL Single-Sheet Form 222 to Supplier
│
4. Supplier fills order & records fulfillment details:
• Number of packages shipped, date shipped, supplier DEA #
• Reports transaction to ARCOS / DEA by CLOSE OF THE MONTH
• Retains original Form 222 (Federally: 2 yrs; NJ: 5 yrs)
│
5. Pharmacy receives physical shipment:
• Inspects shipment & verifies contents against packing slip
• Records on RETAINED COPY: packages received & date received
• Files retained copy separately (NJ: 5 yrs)
Controlled Substance Ordering System (CSOS)
Under 21 CFR Part 1305 Subpart B, the DEA established the Controlled Substance Ordering System (CSOS), providing a secure, electronic alternative to paper Form 222 requisitions. CSOS allows registrants to order Schedule I, II, III, IV, and V controlled dangerous substances electronically without the operational overhead of physical paper forms.
Operational Advantages of CSOS vs. Paper Form 222
- Expanded Scope of Schedules: Paper Form 222 is strictly restricted to Schedule I and Schedule II substances. CSOS permits electronic requisitioning of all controlled substances (Schedules I through V) as well as non-controlled medications on the same electronic purchase transmission.
- Uncapped Order Line Capacity: Paper Form 222 is limited to 20 lines per document. CSOS orders have no line item restrictions; an electronic order may contain hundreds of individual line items.
- Accelerated Turnaround Time: Eliminates the postal mailing delays associated with transmitting paper forms to wholesale distribution centers, enabling next-day fulfillment.
Public Key Infrastructure (PKI) & Digital Certificates
CSOS relies on advanced Public Key Infrastructure (PKI) encryption. Under 21 CFR § 1305.25, every individual authorized to sign electronic controlled substance orders must obtain a unique CSOS Digital Certificate issued directly by the DEA Certification Authority (DEA CA).
| CSOS Certificate Classification | Administrative Authority | Operational Capabilities & Limitations |
|---|---|---|
| CSOS Administrative Certificate | Issued to the designated CSOS Coordinator for the DEA-registered site. | Used exclusively for administrative communications with the DEA Certification Authority (e.g., submitting new subscriber applications, reporting employee turnover, requesting certificate revocations). CANNOT be used to sign electronic drug orders. |
| CSOS Signing Certificate | Issued to individual subscribers (the Registrant or an authorized POA holder). | Contains the subscriber's certified digital signature. Authorized to electronically sign and execute Schedule I-V controlled substance orders under 21 CFR § 1305.22. |
Digital Order Validation & Supplier Responsibilities
When a supplier receives an electronic CSOS order, automated validation algorithms must execute before fulfillment:
- Certificate Verification: The supplier must verify the validity of the purchaser's digital certificate using the DEA Certification Authority's public key.
- Certificate Revocation List (CRL) Check: The supplier must check the current CRL to confirm the purchaser's certificate has not been revoked, suspended, or expired.
- Data Integrity Audit: The supplier must ensure the digital order has not been altered, manipulated, or corrupted in electronic transit.
- Reporting Window: Like paper Form 222 transactions, the supplier must report all CSOS Schedule I and II transactions to the DEA within the required statutory timeframe (submitting an electronic transmission to the DEA within two business days or via ARCOS).
Power of Attorney (POA) Delegation & Revocation
Pursuant to 21 CFR § 1305.05 and N.J.A.C. 13:45H-3, a DEA registrant does not have to personally execute every individual paper Form 222 or electronic CSOS order. The registrant may delegate this ordering authority through a formal administrative instrument known as a Power of Attorney (POA).
Execution Requirements for a Valid POA
- Who May Grant POA: The POA instrument must be executed by the individual registrant (if a sole proprietorship), by all general partners (if a partnership), or by an authorized executive corporate officer (if a corporation or hospital health system).
- Who May Be Granted POA: Critical Legal Concept: The agent granted POA does NOT need to be a licensed pharmacist. A pharmacy owner or corporate director may grant POA to a registered pharmacy technician, an inventory specialist, an unlicensed general store manager, or an assistant pharmacist. However, New Jersey practice rules dictate that the Pharmacist-in-Charge (RPIC) retains overall professional accountability for the custodial integrity of all pharmacy stock.
- Signature Requirements: To be legally binding under federal and state law, the POA document must be executed with the signatures of:
- The registrant or authorized corporate officer granting the power;
- The designated agent/attorney-in-fact receiving the authority; and
- Two (2) competent adult witnesses who observe the signing.
- Filing and Retention: The executed POA document is NOT submitted to the DEA or the New Jersey Board of Pharmacy. Instead, it must be filed and maintained on the pharmacy premises alongside the pharmacy's Form 222 records, readily available for inspection by DEA diversion investigators or State Board inspectors.
- Revocation of POA: A POA may be revoked at any time by the registrant or corporate officer by executing a formal Notice of Revocation of Power of Attorney, which must also be retained on the premises with historical order records.
POWER OF ATTORNEY (POA) MANDATES
│
┌──────────────────────────┴──────────────────────────┐
▼ ▼
Mandatory Execution Signatures Eligible Designees
1. Registrant or Corporate Officer • May be ANY designated person
2. Attorney-in-Fact (Agent receiving power) • Does NOT have to be a pharmacist
3. Witness #1 (Adult) • May be a pharmacy technician,
4. Witness #2 (Adult) inventory clerk, or manager
• Kept ON SITE with Form 222 files • Must be revoked immediately
• NEVER submitted to DEA / Board upon employee resignation/termination
Order Fulfillment Constraints, Endorsements & Irregularities
The 60-Day Partial Fulfillment Rule
When a wholesale distributor receives an executed Form 222 (paper or CSOS) but lacks sufficient commercial stock to supply the full quantity ordered, the supplier may ship the available inventory as a partial fulfillment. Under 21 CFR § 1305.13(b), the supplier has a maximum of 60 calendar days from the date of the order's execution by the purchaser to ship the remaining balance. If the remaining units are not shipped within this 60-day statutory window, the unfulfilled portion of the order is automatically void and cancelled. The supplier cannot fulfill the balance on day 61; the purchaser must execute an entirely new Form 222 or CSOS transaction.
Endorsement of Paper Form 222 (21 CFR § 1305.14)
If a primary supplier receives a paper Form 222 and cannot fulfill any part of the order, it may legally endorse the entire order to another DEA-registered wholesale supplier:
- Endorsement Mechanics: The primary supplier completes the "Endorsement" section on the reverse of the original single-sheet Form 222, identifying the secondary supplier, and transmits the original form to the second supplier.
- All-or-Nothing Rule: A supplier CANNOT partially fill an order and endorse the remainder. Endorsement is permissible only if the primary supplier fills zero line items on the form.
- CSOS Inapplicability: Electronic CSOS orders CANNOT be endorsed. If a supplier cannot fill an electronic CSOS order, the order must be officially rejected back to the purchaser, requiring the purchaser to initiate a new electronic order to an alternate distributor.
Defective, Unaccepted, and Cancelled Orders
- Defective Orders: Under 21 CFR § 1305.15, a supplier must refuse to accept a paper Form 222 if the form is incomplete, illegible, shows signs of alteration, erasure, or physical tampering, or if the purchaser's DEA registration has lapsed.
- Action by Supplier: The supplier cannot alter or correct the form. The supplier must return the original single-sheet Form 222 to the purchaser along with a written statement explaining the exact reason for refusal.
- Purchaser Retention: The purchaser must take the returned original form, attach it to the retained copy made at the time of execution, and file both in the pharmacy's permanent 5-year Schedule II file. The purchaser cannot reuse a defective form.
- Cancellation by Purchaser: A purchaser may cancel all or part of an order by providing written notification to the supplier. The supplier must draw a line through the cancelled items on the original Form 222 and print "Cancelled" in the package space.
Lost or Stolen DEA Form 222
- Loss in Postal Transit (21 CFR § 1305.16): If an executed Form 222 is lost in the mail before reaching the supplier:
- The purchaser executes a second, new single-sheet Form 222.
- The purchaser drafts and attaches a formal written statement containing: the serial number and execution date of the lost form, and a certified declaration that the controlled substances ordered on the first form were never received.
- The purchaser retains a copy of the second form and the written statement with the retained copy of the first form.
- The purchaser transmits the second original Form 222 and the statement to the supplier.
- If the supplier subsequently receives the lost first form, it must mark it "Not Accepted" and return it to the purchaser for filing.
- Theft or Loss of Blank Forms: If blank, unused single-sheet Form 222 documents are lost or stolen from a pharmacy practice site, the permit holder must immediately report the incident in writing to the DEA Special Agent in Charge of the local DEA Diversion Field Division, stating the specific serial numbers of all missing forms.
Recordkeeping, Segregation & New Jersey's 5-Year Mandate
One of the most critical legal contrasts tested on the New Jersey MPJE centers on record retention durations and physical filing segregation.
Federal vs. New Jersey Retention Ceilings
- Federal Standard (21 CFR § 1304.04): Federal law mandates that all controlled substance records (invoices, Form 222s, CSOS logs, prescriptions, inventories) be retained for a minimum of two (2) years.
- New Jersey Standard (N.J.A.C. 13:45H-5.4 & N.J.A.C. 13:39-7.6): The State of New Jersey enforces a significantly more demanding standard: ALL controlled dangerous substance records must be preserved and readily retrievable for at least FIVE (5) YEARS.
Statutory Record Segregation Rules
Pursuant to 21 CFR § 1304.04(f) and N.J.A.C. 13:45H-5.4, pharmacy records must be physically partitioned to prevent commingling of regulatory schedules:
| Controlled Substance Category | Statutory Segregation Rule | Storage & Retrievability Requirements |
|---|---|---|
| Schedule II Records | MANDATORY COMPLETE SEPARATION | Executed Form 222 retained copies, Schedule II receiving invoices, Schedule II prescription hard copies, and Schedule II inventory audits must be maintained in a completely separate file from all other pharmacy records. Schedule II records can NEVER be commingled with Schedule III-V or non-controlled records. |
| Schedules III, IV, and V Records | SEPARATE OR READILY RETRIEVABLE | May be maintained in a separate physical file, OR commingled with non-controlled pharmacy records provided they are "readily retrievable" (e.g., paper prescriptions stamped with a red "C" at least one inch high in the lower right corner, or electronic systems allowing instant filtering by schedule). |
[!IMPORTANT] MPJE Golden Rule: Whenever a question on the New Jersey MPJE asks about the retention duration for DEA Form 222 copies, CSOS audit logs, CDS receiving invoices, or biennial inventory records, the answer under New Jersey state law is 5 YEARS, not the federal baseline of 2 years. Remember: the more stringent state law always controls!
Practical Legal Scenario & Exam Pitfalls
Scenario: High Mountain Community Pharmacy in Passaic County orders ten 100-count bottles of oxycodone 30 mg tablets from its primary wholesaler using a single-sheet DEA Form 222 on September 1. The pharmacist-in-charge completes the form and immediately drops the original form in the mail to the wholesaler without making a copy. On September 3, the wholesaler receives the form, ships four bottles (partial fulfillment), and records on the form that the remaining six bottles will be delivered when stock arrives. On November 15 (75 days post-execution), the wholesaler ships the remaining six bottles. The pharmacy receives the shipment, signs the delivery manifest, and places the invoice in a general file folder containing all prescription invoices (non-controlled and Schedule III-V).
Legal Analysis:
- Failure to Retain Pre-Transmission Copy: The RPIC violated 21 CFR § 1305.13(a). Under single-sheet Form 222 rules, the purchaser must create and retain a legible paper or electronic copy before transmitting the original form to the supplier.
- Violation of the 60-Day Partial Fulfillment Limit: The wholesaler violated 21 CFR § 1305.13(b). Partial fulfillment is legally restricted to 60 calendar days from the date of execution. Fulfilling the remaining units on November 15 (75 days later) is illegal; the order was void as of October 31.
- Improper Record Segregation: Storing Schedule II invoices in a general file folder with non-controlled and Schedule III-V invoices violates 21 CFR § 1304.04 and N.J.A.C. 13:45H-5.4. Schedule II records must be maintained in a completely separate file.
A retail pharmacy in Middlesex County is transitioning from legacy ordering procedures to the single-sheet DEA Form 222. Under 21 CFR Part 1305, which of the following operational workflows correctly describes the purchaser's legal obligations when executing and submitting a single-sheet Form 222 order?
The supervising pharmacist of a high-volume community pharmacy in Camden wishes to delegate authority to execute DEA Form 222 orders and electronic CSOS transactions. Under 21 CFR § 1305.05 and New Jersey CDS regulations, which individual may legally be granted Power of Attorney (POA), and what formalities are required for its execution?
A wholesale drug distributor receives an executed single-sheet DEA Form 222 on April 1 from a hospital pharmacy for twenty 100-count bottles of morphine sulfate 15 mg tablets. The wholesaler has only twelve bottles in stock and ships them on April 2. Under 21 CFR § 1305.13(b), what is the statutory deadline for the wholesaler to ship the remaining eight bottles before the partial order becomes void?
During an annual regulatory compliance review of an independent pharmacy in Newark, an auditor examines the pharmacy's record retention policies and filing organization for controlled dangerous substances. Under N.J.A.C. 13:45H-5.4 and N.J.A.C. 13:39-7.6, how must Schedule II records be filed, and what is New Jersey's mandatory retention duration?