5.5 Legitimate Medical Purpose, Corresponding Responsibility & Red Flags
Key Takeaways
Under 21 CFR 1306.04, an Oregon pharmacist shares corresponding responsibility for every controlled substance prescription, and willful blindness to red flags is not a defense.
OAR 855-115-0130 requires that every prescription, controlled or not, be dispensed under a valid patient–practitioner relationship and for a legitimate medical purpose.
A prescriber's office confirming that a prescription was written establishes authenticity, not legitimacy, so unresolved red flags still justify refusal.
Oregon does not require a PDMP query before every fill, but a pharmacist may not refuse a valid prescription solely because the PDMP is unavailable (ORS 431A.870).
OHA standing orders, expedited partner therapy, compliant telemedicine and pharmacist protocols are recognized exceptions to a traditional individual relationship.
Why this matters
Area 3.1 tests "responsibilities for determining whether prescriptions ... are issued for a legitimate medical purpose." Federal law places a corresponding responsibility on the pharmacist (21 CFR 1306.04(a)). Oregon writes the same duty into its rules. Every pharmacist must ensure that prescriptions are dispensed under a valid prescription, a valid patient–practitioner relationship and for a legitimate medical purpose (OAR 855-115-0130(1)(e); OAR 855-041-1105(1)). For controlled substances, ORS 475.185(4)–(5) adds that they may be dispensed only for a medical purpose and only in good faith in the course of professional practice.
The doctrine
Under 21 CFR 1306.04(a), a controlled substance prescription is valid only if it is issued for a legitimate medical purpose by an individual practitioner acting in the usual course of professional practice. The prescriber bears primary responsibility, but a corresponding responsibility rests with the pharmacist who fills it. A pharmacist who knowingly fills a prescription that is not legitimate, or who deliberately ignores obvious signs that it is not, is treated as having distributed a controlled substance unlawfully. Willful blindness is not a defense.
A prescriber's confirmation that they "wrote it" does not settle the question when the red flags concern legitimacy rather than authenticity.
Common red flags
| Category | Examples |
|---|---|
| Drug combination | Opioid plus benzodiazepine plus muscle relaxant (often carisoprodol), or high-dose immediate-release opioids for a new patient |
| Patient pattern | Early refill requests, multiple prescribers or pharmacies on the PDMP, "lost" or "stolen" medication claims, insistence on brand or specific manufacturers |
| Geography | Long travel distances to prescriber or pharmacy with no explanation; many patients from the same distant clinic |
| Prescriber pattern | Identical drugs, strengths and quantities for many unrelated patients; prescribing far outside specialty |
| Payment | Cash for expensive controlled substances despite insurance |
| Document | Altered quantities, mismatched handwriting, wrong DEA format, photocopies |
Resolving red flags
The pharmacist's options, in order:
- Investigate. Talk with the patient, review the dispensing history, and query the Oregon PDMP. Oregon law doesn't require a PDMP query before every fill (ORS 431A.865(8)), but the PDMP is the most practical tool for resolving red flags. It also helps document professional judgment.
- Contact the prescriber to discuss the clinical rationale: diagnosis, treatment plan, prior therapy and any concerns the PDMP raises.
- Document what was found and decided. DUR documentation is required whenever a concern is identified (OAR 855-115-0140(2)).
- Refuse to dispense if the concerns cannot be resolved. A pharmacist may not refuse a valid prescription solely because PDMP information is temporarily unavailable (ORS 431A.870). That is different from refusing because unresolved red flags exist.
Note
Corresponding responsibility applies to every prescription in the Oregon rules, not only controlled substances. OAR 855-115-0130 requires a valid patient–practitioner relationship and a legitimate medical purpose for all dispensing. The DEA enforcement focus, however, is on controlled substances.
Valid patient–practitioner relationship
A prescription issued without a real clinical relationship is not valid. Examples include an online questionnaire alone, or a prescriber "rubber-stamping" orders from a website. Examples of legitimate exceptions:
- OHA standing orders, which by rule need no individual relationship (OAR 855-041-1105(7)).
- Expedited partner therapy (ORS 676.350).
- Telemedicine that meets federal and state standards, including DEA's temporary flexibilities through December 31, 2026.
- Pharmacist protocol prescribing, where the pharmacist's own assessment is the clinical encounter.
Prescriptions for self or family
Oregon's pharmacy rules don't address physicians prescribing for themselves or family members. That is a matter for the prescriber's board. A pharmacist reviews such orders like any other, for legitimacy, and is especially alert when controlled substances are involved. Pharmacists themselves may not prescribe for themselves under the Board's formulary or protocols (OAR 855-115-0335).
Documenting and escalating
- Document the review. Record the red flags, the PDMP findings, the prescriber conversation and the decision. That documentation shows professional judgment if the Board or DEA later asks.
- Escalate prescriber concerns properly. If the pattern suggests a prescriber is practicing unprofessionally, ORS 676.150 requires a report to that prescriber's board within 10 working days. Diversion suspected inside the pharmacy follows the 1-business-day theft and loss rules.
- Forged or altered prescriptions. A pharmacist who identifies a forgery may decline it and contact the prescriber. HIPAA permits limited disclosure to law enforcement about crimes committed on the premises (45 CFR 164.512(f)(5)).
Exam scenario
A new patient presents prescriptions for oxycodone 30 mg #180, alprazolam 2 mg #90 and carisoprodol 350 mg #90 from a prescriber 200 miles away, and wants to pay cash. The pharmacist queries the PDMP and finds fills at four pharmacies in the last 60 days. The pharmacist calls the clinic, and a receptionist confirms "the doctor wrote these." That confirms authenticity, not legitimacy. Unless the prescriber provides a credible clinical explanation that resolves the red flags, the pharmacist should decline to fill, document the PDMP findings and conversations, and consider whether a report is warranted. Under ORS 676.150, a report goes to the prescriber's board if there is reasonable cause to believe the prescriber engaged in unprofessional conduct.
A pharmacist sees red flags on an oxycodone prescription and calls the clinic. The receptionist confirms the physician wrote it. What best describes the pharmacist's remaining duty?
None; confirming the prescriber wrote it fully satisfies corresponding responsibility
Transfer the prescription to another pharmacy to shift responsibility
Dispense half the quantity and report the patient to police
Resolve whether the prescription serves a legitimate medical purpose, for example through the PDMP and a clinical discussion with the prescriber, and decline to fill if the concerns remain
The Oregon PDMP is down for maintenance. A patient presents a valid, routine prescription for lorazepam with no red flags. What does Oregon law provide?
The pharmacist must refuse until the PDMP is restored
The pharmacist may not refuse the prescription solely because PDMP information cannot be obtained at that time
The pharmacist may dispense only a 3-day supply
The pharmacist must obtain written prescriber approval before dispensing
Which order lacks a valid patient–practitioner relationship under Oregon's dispensing rules?
Naloxone dispensed under the OHA Public Health Officer's statewide standing order
Antibiotics prescribed for a patient's partner under expedited partner therapy
Sildenafil ordered by a website physician based only on an online questionnaire, with no clinical evaluation
Contraception prescribed by a pharmacist after a protocol assessment
Sections you finish are checked off in the contents.