6.1 Oklahoma Electronic Prescribing Mandate (EPCS)

6.1 Oklahoma Electronic Prescribing Mandate (EPCS)

Core Legal Standard: Under Title 63 of the Oklahoma Statutes, Section 2-309 (63 O.S. § 2-309) and the landmark enactment of Senate Bill 848 (effective January 1, 2020), Oklahoma requires all prescriptions for Controlled Dangerous Substances (CDS) in Schedules II, III, IV, and V issued by licensed practitioners to be transmitted electronically. Oklahoma law contains specific, enumerated statutory exceptions and grants dispensing pharmacists an explicit Safe Harbor immunity from disciplinary or legal liability when filling non-electronic CDS prescriptions.

---

1. Legislative Background & Statutory Purpose

In response to the nationwide opioid epidemic and the recognized vulnerability of paper prescriptions to alteration, theft, and forgery, the Oklahoma Legislature enacted Senate Bill 848. Codified primarily within the Oklahoma Uniform Controlled Dangerous Substances Act (63 O.S. § 2-309), the law established one of the nation's most comprehensive electronic prescribing frameworks.

The statutory objectives of the Oklahoma EPCS mandate include:

• Eliminating Paper Prescription Forgery: Intercepting fraudulent written prescriptions, altered quantities, and stolen prescription pads.
• Streamlining PMP Integration: Ensuring rapid, automated data flow into the Oklahoma Prescription Monitoring Program (OK PMP / PMP AWARxE).
• Standardizing Prescriber Accountability: Establishing biometric and dual-factor credentialing for prescribers issuing controlled substances.
• Closing Regulatory Loopholes: Mandating electronic transmission not merely for opioids or Schedule II substances, but across all CDS schedules (Schedules II, III, IV, and V).

+-------------------------------------------------------------------------+
|                   OKLAHOMA EPCS MANDATE AT A GLANCE                     |
+-------------------------------------------------------------------------+
| Governing Statute:     | 63 O.S. § 2-309 & OAC 535:15-3-14              |
| Effective Date:        | January 1, 2020                                |
| Covered Substances:    | ALL Controlled Substances (Schedules II - V)   |
| Federal Baseline:      | 21 CFR Part 1311 (DEA EPCS Security Rule)      |
| Pharmacist Safe Harbor:| Explicitly protects dispensing pharmacists     |
+-------------------------------------------------------------------------+

---

2. Technical Standards & DEA EPCS Rule Interplay

To be legally recognized as a valid electronic prescription for a controlled substance in Oklahoma, the transmission must satisfy both state statutory rules and federal DEA regulations established under Title 21 of the Code of Federal Regulations, Part 1311 (21 CFR § 1311):

A. Electronic Health Record (EHR) Certification

The electronic prescribing application used by the prescriber and the pharmacy management system used by the dispensing pharmacy must undergo an independent third-party audit or obtain certification from an approved certifying body (such as Drummond Group or Surescripts) confirming compliance with DEA security standards.

B. Prescriber Two-Factor Authentication (2FA)

Under federal law (21 CFR § 1311.115), a prescriber must execute digital signing of a CDS electronic prescription using two of the following three authentication factors:

1. Something you know: A private password, PIN, or passphrase.
2. Something you have: A hard cryptographic token, smart card, or one-time password (OTP) keyfob generator physically held by the prescriber.
3. Something you are: Biometric verification, such as a fingerprint scan, iris scan, or facial recognition match.

C. Digital Signature & Data Integrity

Once signed with two-factor authentication, the electronic prescription is encrypted and transmitted via an electronic data intermediary. The digital signature must verify that no alteration, modification, or data corruption occurred during transmission from the prescriber's terminal to the pharmacy database.

---

3. Statutory Exceptions to the Oklahoma EPCS Mandate

Under 63 O.S. § 2-309(C), the Oklahoma Legislature recognized that mandatory electronic transmission is not universally viable in every clinical or emergency scenario. The statute explicitly authorizes the issuance and dispensing of non-electronic CDS prescriptions (written on tamper-resistant paper, transmitted via facsimile, or communicated verbally) under the following statutory exceptions:

Key Exam Distinction: Non-controlled substances (legend drugs) are not subject to Oklahoma's mandatory EPCS statutory penalties under Title 63 O.S., although electronic prescribing of all legend drugs is strongly encouraged as standard medical practice. The mandate strictly applies to Schedules II, III, IV, and V.

---

4. Prescriber Hardship Waiver Provisions

Prescribers who face technological or financial barriers may apply for an EPCS Hardship Waiver under rules established by the Oklahoma State Board of Medical Licensure and Supervision, the Oklahoma State Board of Osteopathic Examiners, the Oklahoma Board of Dentistry, or the Oklahoma Board of Veterinary Medical Examiners:

• Waiver Validity: Waivers are granted for a maximum period of one (1) year at a time.
• Grounds for Waiver: Economic hardship, lack of broadband internet availability in rural areas, low annual prescription volume, or impending retirement.
• Renewal: Prescribers must reapply annually if the hardship condition persists.

---

5. The Pharmacist 'Safe Harbor' Protection

A critical component of the Oklahoma statute tested heavily on the MPJE is the Pharmacist Safe Harbor Provision codified in 63 O.S. § 2-309(E):

+-------------------------------------------------------------------------+
|                   63 O.S. § 2-309(E): PHARMACIST SAFE HARBOR            |
+-------------------------------------------------------------------------+
| "A pharmacist who receives a written, oral, or facsimile prescription   |
| is not required to verify that the prescription falls under one of the  |
| exceptions provided in this section. Pharmacists may continue to        |
| dispense medications from otherwise valid written, oral, or facsimile   |
| prescriptions in accordance with current laws and regulations."         |
+-------------------------------------------------------------------------+

Clinical and Administrative Implications of Safe Harbor:

1. No Duty to Police Prescribers: Pharmacists are not required to contact the prescriber to verify why a CDS prescription was presented as a written paper prescription rather than an electronic prescription.
2. No Delay in Patient Care: A pharmacist presented with a written Schedule II or Schedule III-V prescription may fill it immediately, provided it satisfies all other legal and clinical validity standards (legitimate medical purpose, tamper-resistant paper, full prescriber identifiers, valid DEA registration).
3. Immunity from Disciplinary Action: The Oklahoma State Board of Pharmacy (OSBP) and the Oklahoma Bureau of Narcotics and Dangerous Drugs Control (OBNDD) cannot fine, discipline, or revoke the license of a pharmacist solely for dispensing an otherwise valid non-electronic CDS prescription.
4. Interplay with Corresponding Responsibility: Safe harbor protects the pharmacist regarding the transmission format (electronic vs. paper). It does not exempt the pharmacist from their universal Corresponding Responsibility (21 CFR § 1306.04) to ensure that the prescription is issued for a legitimate medical purpose in the usual course of professional treatment.