10.2 Inventory Audits, Theft Reporting & Disposal Protocols

Inventory Audits, Theft Reporting & Disposal Protocols

Maintaining rigorous accountability over controlled dangerous substances (CDS) requires continuous physical inventory control, immediate escalation of suspected diversion or unexplained losses, and environmentally sound, non-retrievable destruction methodologies. Under Title 21 of the Code of Federal Regulations (21 CFR §§ 1304.11, 1301.76, and Part 1317) and New Jersey administrative law (N.J.A.C. 13:45H-5.4 and N.J.A.C. 13:39-7.6), pharmacy permit holders bear strict liability for the custodial integrity of their controlled substance stocks. Candidates preparing for the New Jersey MPJE must master the exact physical counting thresholds for initial and biennial inventories, the strict multi-agency reporting triggers for significant losses, the procedural mechanics of reverse distribution, patient take-back receptacle operations, and New Jersey's comprehensive 5-year recordkeeping mandate.

---

Controlled Substance Inventory Protocols

An inventory represents an exhaustive, complete physical accounting of all controlled dangerous substances in the possession or control of the DEA-registered pharmacy practice site on a specific calendar date. This includes commercial shelf stock, medications stored in automated dispensing cabinets (ADCs), bulk active pharmaceutical ingredients (APIs) used in compounding, returned patient stock awaiting destruction, and expired or damaged stock quarantined in the safe.

Initial Inventory Mandate

Before a newly permitted pharmacy practice site opens its doors for business, or upon the commencement of business under a new ownership permit, the registrant must conduct an initial inventory (21 CFR § 1304.11(b)):

• Even if there are zero controlled substances on the physical premises on day one, the permit holder must execute a written record stating that an initial inventory was conducted and that zero controlled substances are on hand.
• The initial inventory serves as the legal accounting baseline against which all subsequent acquisitions, dispensings, and disposals are balanced.

Biennial Inventory Schedule

Under both federal law (21 CFR § 1304.11(c)) and New Jersey regulations (N.J.A.C. 13:45H-5.4), every pharmacy practice site must conduct an inventory of all controlled dangerous substances at least every two (2) years (biennially):

• Flexible Date Selection: The pharmacy may select any date within two years of the previous inventory date. While federal rules historically tied biennial inventories to the registrant's original registration date, pharmacies commonly align biennial inventories with general corporate fiscal audits, provided the interval does not exceed 24 calendar months.
• Opening or Close of Business Requirement: The inventory count must be performed either at the opening of business (before dispensing commences) OR at the close of business (after all dispensing concludes) on the designated inventory date. Conducting an inventory during active dispensing operations is strictly unlawful, as concurrent distribution skews stock tallies.
• Mandatory Documentation Details: The physical inventory document must be maintained in written, typed, or printed format and must record:
  1. The pharmacy name, physical address, and DEA registration number;
  2. The date the inventory was conducted;
  3. The time of day the inventory was taken (explicitly indicating "opening of business" or "close of business");
  4. The drug name, dosage form, strength, and commercial container size;
  5. The number of commercial containers and the total physical unit count; and
  6. The legible name and signature of the licensed pharmacist(s) who conducted the physical count.

Exact vs. Estimated Physical Count Rules

A critical testing point on the MPJE is the statutory dividing line between required exact physical counts versus permissible estimated counts (21 CFR § 1304.11(e)):

                    CDS INVENTORY PHYSICAL COUNTING MATRIX
                                      │
            ┌─────────────────────────┴─────────────────────────┐
            ▼                                                   ▼
   Schedule I & II Drugs                               Schedules III, IV & V Drugs
  • Opened OR Unopened                                • Unopened: Labeled package count
  • ANY container size                                • Opened: Check bottle capacity:
  • EXACT COUNT MANDATORY                               - Holds ≤ 1,000 units: ESTIMATE allowed
                                                        - Holds > 1,000 units: EXACT COUNT MANDATORY

Newly Scheduled Controlled Substances

When the DEA Administrator or the New Jersey Attorney General issues a final order classifying a previously non-controlled substance into any controlled schedule, or rescheduling a drug to a higher schedule (e.g., tramadol or hydrocodone combination products), every pharmacy stocking that medication must conduct a complete physical inventory of that specific substance on the effective date of the scheduling order (21 CFR § 1304.11(e)). Thereafter, the newly scheduled drug is incorporated into regular biennial inventory audits.

---

Significant Theft, Loss & Diversion Reporting Protocols

Pursuant to 21 CFR § 1301.76(b) and New Jersey administrative rules (N.J.A.C. 13:45H and N.J.A.C. 13:39-7.6), the discovery of a theft or significant loss of controlled dangerous substances triggers an immediate, mandatory multi-agency reporting sequence.

The One-Business-Day Initial Notification Rule

Upon the discovery of any theft or significant loss of controlled substances, the registrant must notify the DEA Diversion Field Division in writing within one (1) business day of discovery.

• This initial notification is a short, formal written notice alerting federal authorities that an incident has occurred.
• The initial notice may be submitted via email, fax, or registered mail directly to the Special Agent in Charge of the local DEA Field Division.

Multi-Agency Concurrent Reporting in New Jersey

While federal regulations specify DEA notification, New Jersey pharmacy law enforces a strict concurrent multi-agency disclosure mandate. Within the same reporting window, the Pharmacist-in-Charge must notify:

1. The New Jersey State Board of Pharmacy (written notification);
2. The New Jersey Division of Consumer Affairs - Office of Drug Control (ODC) (written notification);
3. The Local Municipal Police Department having jurisdiction over the pharmacy practice site; and
4. The DEA Diversion Field Division (Newark Field Division or regional resident office).

Formal Reporting via DEA Form 106

Following the initial 1-business-day written notification, the registrant must conduct a thorough internal investigation and complete DEA Form 106 ("Report of Theft or Loss of Controlled Substances"). Form 106 is submitted electronically through the secure DEA Diversion Control Division online portal:

• Required Data Fields: DEA Form 106 captures the pharmacy's registration details, the date and nature of the incident (e.g., armed robbery, nighttime burglary, employee pilferage, customer theft, transit shortage), the specific NDC numbers, trade names, dosage forms, strengths, and exact quantities of every missing controlled drug, and police incident report numbers.
• Investigation Timelines: If the pharmacy requires extended time to complete its internal auditing and root-cause analysis, the registrant may submit an interim update to the DEA. If after investigation the registrant determines that no theft or significant loss actually occurred, the registrant must notify the DEA in writing to withdraw the initial notification, documenting the accounting resolution.

Evaluating "Significant Loss"

Federal law does not establish a rigid numerical threshold for what constitutes a "significant loss"; rather, it vests professional responsibility in the registrant. Under DEA guidance, registrants must evaluate the following six objective factors:

1. The actual quantity lost in relation to the pharmacy's overall dispensing volume;
2. The specific controlled substances missing (e.g., a missing 100-count bottle of fentanyl patches or oxycodone carries profound diversion significance compared to a missing bottle of phenobarbital);
3. Whether the loss can be tied to specific individuals or distinct operational patterns;
4. Whether the missing drugs are common targets of street-level diversion and abuse;
5. Any unexplained trends or repeating shortages noted during daily or weekly perpetual counts; and
6. Local diversion and illicit trafficking trends identified by law enforcement.

Breakage, Spillage & In-Transit Losses

• Breakage or Spillage: Spilled oral liquids, shattered glass ampules, or crushed tablets that are recoverable or destroyed on site do NOT constitute a theft or loss. Spillage or chemical destruction must be documented in internal pharmacy records witnessed by two licensed healthcare professionals. Unrecoverable spills (e.g., liquid drained down a sink) are recorded on internal waste logs, not DEA Form 106.
• In-Transit Losses: If a wholesale drug shipment containing controlled substances is hijacked, stolen, or lost in transit before the pharmacy signs the delivery manifest, it is the supplier's legal responsibility to submit DEA Form 106 to the DEA. The pharmacy becomes responsible for in-transit reporting only after a pharmacy employee signs for and accepts custody of the delivery container.

                    CDS THEFT / SIGNIFICANT LOSS ESCALATION PATHWAY
                                          │
                             Discovery of CDS Shortage
                                          │
               ┌──────────────────────────┴──────────────────────────┐
               ▼                                                     ▼
     WITHIN 1 BUSINESS DAY:                               Concurrent State Filings:
  • Formal written notice to DEA                       • Notice to NJ Board of Pharmacy
    Diversion Field Division                           • Notice to NJ Office of Drug Control
  • Immediate local police report                      • Police Incident Report filed
                                          │
                               Comprehensive Internal Audit
                                          │
               ┌──────────────────────────┴──────────────────────────┐
               ▼                                                     ▼
    Loss Confirmed as Theft/Diversion                     Shortage Resolved / Disproven
  • Electronically file DEA Form 106                  • Written withdrawal sent to DEA
  • Send copies to NJ Board & ODC                     • Detailed explanation placed in file
  • Retain complete file for 5 YEARS                  • Retain audit papers for 5 YEARS

---

Controlled Substance Disposal & Reverse Distribution Protocols

Pharmacies cannot discard expired, adulterated, or unwanted controlled substances in municipal municipal trash, pour them down wastewater drains, or transfer them to standard biohazard waste haulers. Controlled substance disposal is strictly governed by 21 CFR Part 1317 and N.J.A.C. 13:45H-5.4.

Reverse Distributors: The Primary Disposal Pipeline

Community and institutional pharmacies dispose of outdated controlled substance inventory by transferring the stock to a DEA-registered Reverse Distributor licensed to handle chemical destruction:

1. Transfer of Schedule II Substances:
   • The reverse distributor acts as the purchaser, and the pharmacy acts as the supplier.
   • The reverse distributor must issue an official single-sheet DEA Form 222 (or electronic CSOS order) to the pharmacy for all Schedule II drugs being surrendered.
   • The pharmacy fills the order by packaging the expired C-II stock, retaining a copy of the Form 222, and shipping the original form and medications to the reverse distributor.
2. Transfer of Schedules III, IV, and V Substances:
   • Schedules III through V do not require a DEA Form 222.
   • The transfer is documented via a commercial receiving invoice reflecting the drug name, dosage form, strength, package size, total quantity, date of transfer, and the names, addresses, and DEA numbers of both the pharmacy and the reverse distributor.
3. Destruction & DEA Form 41 Submission:
   • The reverse distributor renders the controlled substances non-retrievable (destroyed to a state where the chemical substance cannot be restored or reconstituted through any practical means, typically high-temperature hazardous incineration).
   • The reverse distributor—NOT the community pharmacy—is legally responsible for completing and submitting DEA Form 41 ("Registrants Inventory of Drugs Surrendered") to the DEA Diversion Control Division.

[!CAUTION] Classic MPJE Examination Trap: A retail community pharmacy does not submit DEA Form 41 when surrendering outdated controlled substances to a reverse distributor. The retail pharmacy documents the transfer via DEA Form 222 (for C-II) or a commercial invoice (for C-III-V). It is the reverse distributor that executes and submits DEA Form 41 following non-retrievable destruction!

---

Patient Take-Back Programs & Collection Receptacles

Under the federal Secure and Responsible Drug Disposal Act of 2010 and codified rules at 21 CFR Part 1317 Subpart B, DEA registrants may voluntarily expand their registrations to become "Authorized Collectors", allowing them to collect unwanted controlled substances from end-user consumers (patients and ultimate users).

Receptacle Placement and Physical Security Standards

• Eligible Registrants: Retail community pharmacies and hospital/clinic pharmacies with an on-site retail pharmacy practice site may modify their DEA registration online to become authorized collectors.
• Physical Receptacle Construction: The collection receptacle must consist of a substantially constructed, securely locked steel outer container permanently bolted to the floor or wall.
• Direct Line of Sight: The drop-slot of the collection receptacle must be situated inside the physical pharmacy practice site, located in the immediate vicinity of where prescriptions are dispensed and in the continuous direct line of sight of pharmacy employees. It cannot be placed near exterior public exit doors or unmonitored aisles.

Inner Liner Protocols & The Two-Employee Rule

• Liner Specifications: The removable inner liner must be waterproof, tamper-evident, tear-resistant, and opaque so that contents cannot be viewed from the outside. Each inner liner must bear a unique permanent identification serial number.
• Installation and Removal: The installation, removal, and transfer of collection liners must be executed and witnessed by at least two (2) authorized employees of the pharmacy practice site (e.g., two pharmacists, or a pharmacist and a registered technician).
• Strict Prohibition on Inspection: Pharmacy staff are strictly prohibited from opening, viewing, sorting, counting, or inventorying the contents deposited into the collection receptacle. The inner liner must be securely sealed immediately upon removal from the outer steel box.
• Disposal of Sealed Liners: Once removed and sealed by two employees, the inner liner must either be transferred to a reverse distributor using a common carrier or destroyed on site via an approved non-retrievable method. All liner removals, serial numbers, and witness signatures must be documented on a dedicated collection log preserved for 5 years in New Jersey.

                 CONSUMER DRUG TAKE-BACK INNER LINER PROTOCOL
                                      │
     1. Receptacle Security:
        • Bolted to floor/wall inside pharmacy
        • In CONTINUOUS DIRECT LINE OF SIGHT of pharmacy staff
        • Outer box securely locked; small drop opening for public
                                      │
     2. Inner Liner Specifications:
        • Waterproof, tear-resistant, opaque, tamper-evident
        • Pre-printed unique permanent identification serial number
                                      │
     3. The Two-Employee Removal Protocol:
        • Must be performed & witnessed by TWO (2) authorized employees
        • Inner liner immediately sealed upon removal from outer box
        • NO sorting, NO counting, NO handling of deposited drugs
                                      │
     4. Chain of Custody Documentation:
        • Date removed, liner serial number, signatures of BOTH employees
        • Transferred to reverse distributor for incineration
        • All take-back records retained for FIVE (5) YEARS in NJ

---

Record Retention Mandates in New Jersey

New Jersey administrative law imposes a comprehensive five (5) year retention ceiling for all records relating to controlled dangerous substances (N.J.A.C. 13:45H-5.4 and N.J.A.C. 13:39-7.6). This 5-year requirement applies across the entire regulatory lifecycle:

• Initial and biennial CDS inventory audit documents;
• DEA Form 106 theft and loss reports, police incident records, and investigative summaries;
• Reverse distributor transfer records, shipping manifests, and Form 222 copies;
• Consumer collection receptacle liner tracking logs and dual-employee witness signatures; and
• Daily or perpetual dispensing audit logs and electronic system backups.

---

Practical Legal Scenario & Exam Pitfalls

Scenario: During a Saturday night shift at an independent pharmacy in Trenton, a burglar breaches the rear security door, opens an unlocked storage cabinet, and steals eight unopened 500-count stock bottles of hydrocodone/acetaminophen 10/325 mg (Schedule II) and three opened 100-count bottles of alprazolam 1 mg (Schedule IV). The morning pharmacist arrives on Sunday, discovers the break-in, and calls the local police department. The pharmacist does not notify the DEA or the Board of Pharmacy, planning to report the matter during the next biennial inventory audit three months later. In addition, when conducting the last biennial inventory, the pharmacy recorded an "estimated count" of 750 tablets for an opened 2,000-count commercial bottle of gabapentin (non-controlled in NJ) and an "estimated count" of 1,200 tablets for an opened 2,000-count commercial stock bottle of diazepam 5 mg (Schedule IV).

Legal Analysis:

1. Failure to Report Significant Loss: The pharmacist violated 21 CFR § 1301.76(b), N.J.A.C. 13:45H, and N.J.A.C. 13:39-7.6. A burglary involving 4,000 dosage units of Schedule II opioids and Schedule IV benzodiazepines constitutes a major theft. The registrant must provide written notification to the DEA Field Division, the NJ Board of Pharmacy, and the NJ Office of Drug Control within one (1) business day of discovery.
2. Illegal Biennial Inventory Estimation: The pharmacy violated 21 CFR § 1304.11(e) regarding the opened bottle of diazepam. While gabapentin is non-controlled, diazepam is a Schedule IV controlled substance. For Schedules III through V, if an opened commercial container has an original package size of more than 1,000 dosage units, an exact physical count is mandatory. Estimating 1,200 tablets in an opened 2,000-count container is a direct regulatory violation.