6.3 MDRT Protocols, Evidence Chain of Custody & Just Culture Response

Key Takeaways

  • The Multidisciplinary Diversion Response Team (MDRT)—comprising Pharmacy, Nursing Leadership, Human Resources, Risk Management/Legal, Security, and Employee Health—coordinates comprehensive, objective, and legally defensible diversion investigations.
  • The 6-Phase Investigation Workflow standardizes the investigative pathway from initial Intake & Triage through Covert Data Auditing, Evidence Impoundment, Structured Interviewing with For-Cause Testing, Multidisciplinary Determination, and Regulatory Reporting.
  • Strict evidence chain of custody protocols mandate tamper-evident security bags, unbroken custody transfer logs, and laboratory forensic testing (refractometry, HPLC, GC-MS) to definitively confirm drug substitution or tampering.
  • For-cause drug testing requires observed split-specimen collection utilizing an expanded healthcare synthetic opioid panel (detecting fentanyl, norfentanyl, sufentanil, hydromorphone, buprenorphine, and propofol metabolites).
  • The David Marx Just Culture framework differentiates Human Error (Console), At-Risk Behavior (Coach), and Reckless Behavior (Sanction/Discipline), while Alternative-to-Discipline (ATD) programs provide structured rehabilitation pathways with strict practice restrictions.
Last updated: August 2026

6.3 MDRT Protocols, Evidence Chain of Custody & Just Culture Response

Quick Answer: When diversion is suspected, the Multidisciplinary Diversion Response Team (MDRT)—comprising Pharmacy, Nursing Leadership, HR, Risk/Legal, Security, and Employee Health—executes a 6-Phase Investigation Workflow. Physical evidence (vials, syringes) is secured under an unbroken Chain of Custody and analyzed via forensic assays (refractometry, HPLC, GC-MS). Suspected staff undergo observed split-specimen for-cause drug testing with an expanded synthetic opioid panel. Actions follow David Marx's Just Culture framework (differentiating Human Error, At-Risk Behavior, and Reckless Behavior) while supporting recovery through Alternative-to-Discipline (ATD) programs.

Investigating suspected controlled substance diversion in a healthcare institution requires a rigorous, objective, and compassionate approach. Healthcare diversion investigations operate at the intersection of patient safety, federal criminal law, professional licensure regulations, occupational health, and labor relations. A flawed investigation can allow an actively diverting clinician to continue compromising patient care, expose the institution to crippling regulatory sanctions from the DEA and Centers for Medicare & Medicaid Services (CMS), or unfairly penalize an innocent practitioner experiencing a documentation or training breakdown. Establishing structured multidisciplinary protocols, forensic evidentiary standards, and a Just Culture response model ensures fair, legally defensible, and clinically safe outcomes.


Multidisciplinary Diversion Response Team (MDRT)

Single-department investigations (e.g., pharmacy-only or nursing-only reviews) are prone to cognitive blind spots and operational delays. Leading national standards (ASHP, TJC) require health systems to establish a standing Multidisciplinary Diversion Response Team (MDRT)—also known as the Controlled Substance Diversion Prevention Committee (CSDPC) Core Investigative Group.

┌───────────────────────────────────────────────────────────────────────────┐
│            MULTIDISCIPLINARY DIVERSION RESPONSE TEAM (MDRT) CORE          │
│                                                                           │
│  ┌─────────────────────────┐               ┌─────────────────────────┐    │
│  │   PHARMACY LEADERSHIP   │               │   NURSING LEADERSHIP    │    │
│  │ • CS Manager / Specialist│               │ • Chief Nursing Officer │    │
│  │ • Vault & ADC Telemetry │               │ • Unit Nurse Managers   │    │
│  └────────────┬────────────┘               └────────────┬────────────┘    │
│               │                                         │                 │
│               ▼                                         ▼                 │
│  ┌───────────────────────────────────────────────────────────────────┐    │
│  │                   MDRT INVESTIGATION COORDINATOR                  │    │
│  └───────────────────────────────────────────────────────────────────┘    │
│               ▲                                         ▲                 │
│               │                                         │                 │
│  ┌────────────┴────────────┐               ┌────────────┴────────────┐    │
│  │   HUMAN RESOURCES /     │               │   RISK MANAGEMENT /     │    │
│  │   EMPLOYEE HEALTH       │               │   HOSPITAL LEGAL & SEC  │    │
│  │ • For-Cause Drug Testing│               │ • DEA / Board Reporting │    │
│  │ • EAP & ATD Coordination│               │ • Chain of Custody CCTV │    │
│  └─────────────────────────┘               └─────────────────────────┘    │
└───────────────────────────────────────────────────────────────────────────┘

Key Members and Operational Roles

  1. Pharmacy Leadership / Controlled Substance Diversion Specialist (CSDS): Serves as the primary data and forensic technical expert. Extracts and interprets ADC transaction logs, electronic vault ledgers, purchasing records, and coordinates laboratory chemical assays of impounded medication samples.
  2. Nursing Leadership (CNO, Nursing Directors, Unit Managers): Evaluates bedside clinical workflows, nurse-patient assignment records, administration charting timelines, and clinician behavioral baselines.
  3. Human Resources (HR): Ensures compliance with institutional labor policies, collective bargaining unit (union) agreements, employment law, and coordinates employee assistance resources.
  4. Employee / Occupational Health: Manages confidential, witnessed for-cause drug screening protocols, medical evaluation of impaired employees, and referrals to recovery monitoring programs.
  5. Risk Management and Hospital Legal Counsel: Evaluates institutional liability, oversees mandatory statutory reporting to federal (DEA) and state (Licensing Boards, Department of Health) authorities, assesses patient harm and bloodborne pathogen exposure risks, and preserves attorney-client privilege when warranted.
  6. Hospital Security / Public Safety: Manages closed-circuit television (CCTV) archival and retrieval, physical badge access logs, physical evidence secure locker custody, and coordinates with municipal law enforcement or DEA Office of Diversion Control investigators.

The 6-Phase Investigation Workflow

To ensure every investigation is conducted systematically and objectively, the MDRT follows a standardized 6-Phase Investigation Workflow.

┌───────────────────────────────────────────────────────────────────────────┐
│                     THE 6-PHASE INVESTIGATION WORKFLOW                    │
│                                                                           │
│  Phase 1: Intake & Triage ────────► Review alert, peer tip, or discrepancy│
│  Phase 2: Covert Telemetry Audit ──► Analyze ADC, eMAR, badge, CCTV data  │
│  Phase 3: Evidence Impoundment ────► Secure vials/syringes, forensic assay│
│  Phase 4: Interview & Drug Testing ─► Structured interview, split-specimen │
│  Phase 5: Team Determination ──────► Apply Just Culture decision algorithm│
│  Phase 6: Regulatory Reporting ────► DEA Form 106, State Board, ATD/HR    │
└───────────────────────────────────────────────────────────────────────────┘

Phase 1: Intake and Triage

Investigations are triggered by specific events: an automated AI surveillance anomaly alert ($Z \ge +3.0$), an unresolved vault/ADC physical discrepancy, a direct confidential peer report, or an alert from clinical staff regarding unusual physical impairment. The MDRT Coordinator conducts an initial triage to assess immediate patient safety risk. If active patient tampering is suspected, the clinician's controlled substance access is temporarily suspended or reassigned pending investigation.

Phase 2: Covert Telemetry and Data Deep-Dive

Before confronting the individual, the MDRT gathers objective electronic data to map the clinician's pattern of activity across a 30- to 90-day window:

  • Full ADC transaction history (dispenses, cancellations, wastes, inventory counts, overrides).
  • EHR reconciliation (comparing ADC pull timestamps against bedside BCMA scans and documented pain scores).
  • Electronic badge reader access logs cross-referenced against scheduled shift clock-in/clock-out records.
  • High-definition CCTV footage focused on medication room entrances, ADC consoles, and waste disposal bins.

Phase 3: Physical Evidence Impoundment and Forensic Assays

When physical tampering, syringe substitution, or false wasting is suspected, physical evidence must be impounded immediately following rigid chain-of-custody protocols.

Laboratory Testing Modalities for Diverted / Tampered Substances

Analytical ModalityPrinciple & MethodologyPrimary ApplicationTurnaround Time & Sensitivity
Handheld Refractometry / Brix IndexMeasures the refractive index of light passing through liquid; compared against pure drug solution reference curvesRapid preliminary bedside/pharmacy screening of returned waste syringesInstantaneous (< 1 min); highly sensitive for detecting normal saline substitution in morphine/fentanyl
High-Performance Liquid Chromatography (HPLC)Chromatographic separation with UV/Vis spectrophotometric detectionQuantitative concentration verification (determines exact mg/mL remaining in tampered vial)24–48 hours; high accuracy; distinguishes active pharmaceutical ingredient from diluents
Gas Chromatography-Mass Spectrometry (GC-MS)Vapor-phase separation coupled with mass fragmentation spectral fingerprintingGold-standard definitive forensic identification of unknown liquid, powder, or substituted solvent2–5 days; legally definitive; identifies trace active metabolites, synthetic opioids, and contaminants
UV-Vis SpectrophotometryMeasures light absorption across specific ultraviolet and visible wavelengthsVerification of dye/color additives, chemical adulteration, or concentration dilution1–2 hours; moderate sensitivity; effective for initial batch screening

Phase 4: Investigative Interview and For-Cause Drug Testing

Once data and physical evidence are assembled, the MDRT conducts a structured, formal investigative interview.

Interview Protocol Guidelines

  • Two-Interviewer Rule: The interview is conducted jointly by two trained MDRT members (typically the HR Lead and Nursing Director or Pharmacy Lead). Never interview an employee alone.
  • Objective Presentation of Telemetry: Present objective, indisputable electronic records (e.g., "On November 3rd, you pulled 4 mg of hydromorphone at 14:02, but there is no corresponding eMAR administration charted, and at 14:15 you cancelled the transaction after opening the drawer").
  • Compassionate, De-escalating Posture: Avoid accusatory, hostile, or threatening language. Acknowledge the extreme occupational stress in healthcare and emphasize patient safety and employee health support.
  • Direct Request for For-Cause Drug Screening: If reasonable suspicion of impairment or diversion exists, the clinician is immediately escorted to Employee Health for mandatory for-cause testing.

For-Cause Drug Testing Protocols

┌───────────────────────────────────────────────────────────────────────────┐
│                     FOR-CAUSE DRUG SCREENING PROTOCOL                     │
│                                                                           │
│  [ Observed Split-Specimen Collection (Bottle A & Bottle B) ]             │
│                                │                                          │
│                                ▼                                          │
│  [ Temperature Verification (90°F - 100°F / 32°C - 38°C within 4 min) ]   │
│                                │                                          │
│                                ▼                                          │
│  [ Expanded Healthcare Synthetic Opioid Panel (LC-MS/MS Confirmation) ]   │
│    • Fentanyl & Norfentanyl       • Sufentanil & Alfentanil               │
│    • Hydromorphone & Oxymorphone  • Ketamine & Norketamine                │
│    • Buprenorphine & Norbuprenorph• Propofol Glucuronide                  │
└───────────────────────────────────────────────────────────────────────────┘
  • Observed Split-Specimen Collection: Specimen collection is directly observed by a trained, same-gender healthcare professional to eliminate urine substitution or adulteration. The urine sample is split into Bottle A (primary analysis) and Bottle B (retained split specimen for independent re-testing upon employee appeal).
  • Expanded Healthcare Panel: Standard 5-panel DOT drug screens (testing for THC, cocaine, basic amphetamines, PCP, and natural opiates like morphine/codeine) will NOT detect synthetic opioids like fentanyl, sufentanil, or meperidine. The hospital must mandate an Expanded Healthcare Professional Panel utilizing Liquid Chromatography-Tandem Mass Spectrometry (LC-MS/MS) targeting synthetic opioids, designer benzodiazepines, ketamine, and propofol metabolites (propofol glucuronide).

Phase 5: Multidisciplinary Determination & Just Culture Evaluation

The MDRT convenes to synthesize interview admissions, drug screen results, telemetry data, and laboratory forensic reports, applying the Just Culture algorithm to categorize the behavior.

Phase 6: Regulatory Reporting, Legal Referral & Remediation

Execute all mandatory external regulatory notifications, complete internal root-cause analyses, and implement system hardening measures.


Evidence Chain of Custody Protocols

Physical evidence (tampered syringes, diluted vials, salvage needles, altered paper ledgers) must maintain an unbroken legal chain of custody to remain admissible in administrative license revocation proceedings, civil litigation, and federal or state criminal prosecutions.

┌───────────────────────────────────────────────────────────────────────────┐
│                       EVIDENCE CHAIN OF CUSTODY LOG                       │
│                                                                           │
│  Item ID: CS-2026-0830-01       Description: 3 mL syringe labeled         │
│  Seal Number: TAMPER-98421                   Hydromorphone 2 mg/mL        │
│                                                                           │
│  Date/Time     Released By         Received By        Purpose / Location  │
│  ───────────   ─────────────────   ────────────────   ─────────────────── │
│  08/30 09:15   RN S. Miller (ICU)  J. Vance, PharmD   Impoundment / Safe  │
│  08/30 11:30   J. Vance, PharmD    Sgt. R. Diaz (Sec) Transferred to Safe │
│  08/30 14:00   Sgt. R. Diaz (Sec)  Forensic Lab Tech  HPLC Assay Dispatch │
└───────────────────────────────────────────────────────────────────────────┘

Core Rules of Chain of Custody

  1. Immediate Tamper-Evident Packaging: The impounded item is placed in a heavy-gauge, serialized tamper-evident evidence pouch. The opening is sealed with a tamper-indicating adhesive strip signed across the seam by both the impounding clinician and a witness.
  2. Continuous Physical Security: When not in active analytical testing, evidence pouches are secured in a double-locked, access-logged Evidence Safe monitored by dedicated CCTV.
  3. Unbroken Custody Logs: Every transfer of physical possession—including date, exact time, releasing individual's printed name/signature, receiving individual's printed name/signature, and specific purpose—must be logged on the master Chain of Custody Form attached to the evidence bag.

Acute Workplace Overdose Emergency Response Protocol

Healthcare diversion can culminate in an acute, life-threatening occupational overdose when a clinician self-administers high-potency synthetic opioids in a hospital bathroom, locker room, or empty medication suite.

┌───────────────────────────────────────────────────────────────────────────┐
│            ACUTE WORKPLACE OVERDOSE EMERGENCY RESPONSE PROTOCOL           │
│                                                                           │
│  1. RECOGNIZE OVERDOSE SIGNS                                              │
│     • Unresponsiveness / Coma                                             │
│     • Bradypnea (< 6-8 breaths/min) or Apnea                              │
│     • Pinpoint pupils (Miosis), Cyanosis of lips/fingertips               │
│                                                                           │
│  2. IMMEDIATE MEDICAL ACTION                                              │
│     • Call Medical Emergency Team / Code Blue (Dial Emergency Extension)  │
│     • Administer Intranasal Naloxone (4 mg) or IV/IM Naloxone (0.4-2 mg)  │
│     • Open airway; provide rescue breathing with Bag-Valve-Mask (BVM)    │
│     • Position in Lateral Recovery Position                               │
│     • Repeat Naloxone dose every 2-3 minutes if no clinical response      │
│                                                                           │
│  3. SCENE PRESERVATION & MEDICAL TRIAGE                                   │
│     • Prioritize clinical resuscitation over administrative processing    │
│     • Secure and preserve all open vials, syringes, and supplies as       │
│       forensic evidence for MDRT and law enforcement                      │
│     • Transport clinician to Emergency Department for clinical monitoring │
└───────────────────────────────────────────────────────────────────────────┘

Clinical and Administrative Workflow

  1. Immediate Resuscitation Over Administration: Medical stabilization is the absolute priority. Never delay calling a Code Blue or administering naloxone to search for administrative records or notify management.
  2. Naloxone Administration: Administer 4 mg Intranasal Naloxone (single-dose nasal spray into one nostril) or 0.4 mg to 2 mg IV/IM/SubQ Naloxone. If spontaneous respiratory effort does not return within 2 to 3 minutes, administer a second 4 mg dose.
  3. Lateral Recovery Position: Place the individual in the lateral recovery position to prevent aspiration of emesis upon opioid reversal.
  4. Scene and Evidence Preservation: Hospital security secures the physical location. All syringes, needles, medication vials, IV bags, and tourniquets present at the scene are impounded as evidence under chain of custody.
  5. Post-Resuscitation Transfer: The employee is admitted to the Emergency Department for continuous cardiopulmonary monitoring (evaluating for renarcotization, as synthetic opioid half-lives may exceed naloxone's 30–90 minute duration of action) before any disciplinary or HR proceedings commence.

The David Marx Just Culture Framework in Diversion & Compliance

Health systems must foster an environment where healthcare professionals feel safe reporting system defects, near-misses, and substance use concerns. Applying David Marx's Just Culture Framework provides a fair, predictable, and legally sound model that distinguishes system flaws from intentional misconduct.

┌───────────────────────────────────────────────────────────────────────────┐
│                     DAVID MARX JUST CULTURE ALGORITHM                     │
│                                                                           │
│   BEHAVIORAL CATEGORY               ORGANIZATIONAL RESPONSE               │
│                                                                           │
│   ┌───────────────────────┐         ┌───────────────────────────────┐     │
│   │     HUMAN ERROR       │ ──────► │ CONSOLE & SYSTEM REDESIGN     │     │
│   │ (Inadvertent slip or  │         │ • Comfort the clinician       │     │
│   │  clerical mistake)    │         │ • Fix packaging / ADC workflow│     │
│   └───────────────────────┘         └───────────────────────────────┘     │
│                                                                           │
│   ┌───────────────────────┐         ┌───────────────────────────────┐     │
│   │   AT-RISK BEHAVIOR    │ ──────► │ COACH & REMOVE SHORTCUTS      │     │
│   │ (Shortcut; risk not   │         │ • Educational coaching        │     │
│   │  recognized/justified)│         │ • Eliminate workflow friction │     │
│   └───────────────────────┘         └───────────────────────────────┘     │
│                                                                           │
│   ┌───────────────────────┐         ┌───────────────────────────────┐     │
│   │   RECKLESS BEHAVIOR   │ ──────► │ SANCTION / TERMINATE / REPORT │     │
│   │ (Conscious disregard  │         │ • Immediate CS access removal │     │
│   │  of substantial risk) │         │ • DEA & State Board reporting │     │
│   └───────────────────────┘         └───────────────────────────────┘     │
└───────────────────────────────────────────────────────────────────────────┘

The Three Behavioral Categories

1. Human Error (Inadvertent Action, Slip, Lapse, or Mistake)

  • Definition: An unintended behavior or inadvertent execution error occurring during routine care (e.g., miscounting pills due to cognitive fatigue, selecting the wrong ADC matrix bin due to look-alike packaging, or transposing digits during a waste volume entry).
  • Just Culture Response: CONSOLE the employee. Human error is an inevitable property of human systems. Investigate latent system design flaws, improve ADC user interface prompts, implement barcode scanning safeguards, and provide supportive feedback without punitive disciplinary action.

2. At-Risk Behavior (A Choice Where Risk is Not Recognized or is Mistakenly Believed to be Justified)

  • Definition: A behavioral choice where the clinician takes a procedural shortcut because they do not perceive the risk, or believe the shortcut is necessary to deliver timely patient care (e.g., routine buddy wasting without watching the sink to save 30 seconds during an ICU rush, taking pre-drawn unlabeled syringes into a room, bypassing dual-signoff steps).
  • Just Culture Response: COACH the employee. Address the underlying reasons for the shortcut, eliminate systemic workflow bottlenecks that drive unsafe workarounds, retrain the clinician on the severe risks of unverified waste, and increase situational awareness.

3. Reckless Behavior (Conscious Disregard of a Substantial and Unjustifiable Risk)

  • Definition: A conscious behavioral choice to violate essential safety rules with full awareness of the substantial and unjustifiable risk to patients, colleagues, and the institution (e.g., intentional theft of controlled substances, substituting normal saline into patient IV bags, forging physician orders, charting phantom pain administrations to pocket opioids, or reporting to work under the active influence of intoxicating substances).
  • Just Culture Response: SANCTION, TERMINATE, and REPORT. Reckless behavior cannot be tolerated in healthcare. The institution must take immediate remedial action: immediate suspension of all controlled substance access, employment termination, mandatory reporting to the DEA (DEA Form 106) and State Licensing Boards (Board of Pharmacy / Board of Nursing), and criminal law enforcement referral.

Alternative-to-Discipline (ATD) and Return-to-Work Agreements

When a healthcare professional engages in diversion driven by an underlying Substance Use Disorder (SUD)—and where intentional patient harm, tampering, or distribution did not occur—many state licensing boards and health systems offer Alternative-to-Discipline (ATD) Programs (e.g., State Peer Assistance Programs, Pharmacist Recovery Networks [PRN], Intervention Programs for Nurses [IPN]).

Core Philosophy of ATD Programs

ATD programs recognize substance use disorder as a treatable, chronic neurobiological illness. These programs provide a confidential, non-punitive framework that encourages early self-reporting, facilitates comprehensive inpatient/outpatient addiction treatment, and establishes structured, monitored pathways for eventual safe return to clinical practice.

┌───────────────────────────────────────────────────────────────────────────┐
│                RETURN-TO-WORK MONITORING AGREEMENT (ATD)                  │
│                                                                           │
│  Phase 1: Inpatient / Intensive Outpatient Addiction Treatment (3-6 mo)   │
│                                │                                          │
│                                ▼                                          │
│  Phase 2: Formal Return-to-Work Contract Execution (3 to 5 Year Term)     │
│    • Complete Controlled Substance Access Restriction (6 to 12 months)    │
│    • Direct Clinical Supervision & Assigned Workplace Peer Monitor        │
│    • Prohibition on Night Shifts, Floating, and Overtime (>40 hrs/wk)     │
│                                │                                          │
│                                ▼                                          │
│  Phase 3: Rigorous Biological Surveillance & Recovery Maintenance         │
│    • Random Observed Urine/Blood Screens (12 to 24 tests/year)            │
│    • Mandatory Weekly Peer Support & 12-Step Recovery Group Attendance    │
│    • Quarterly Worksite Supervisor Performance & Compliance Reports       │
└───────────────────────────────────────────────────────────────────────────┘

Standard Return-to-Work Contract Provisions

  1. Controlled Substance Access Restrictions: Upon returning to active employment, the clinician is subject to a mandatory 6- to 12-month complete restriction on controlled substance handling. The clinician may not hold narcotic keys, access ADC controlled substance storage drawers, administer scheduled medications, or witness waste destruction. Another licensed clinician is assigned to administer scheduled drugs for their patients.
  2. Shift and Scheduling Limitations: Clinicians are prohibited from working night shifts (where supervision is lowest), rotating shifts, unapproved overtime (capped at 40 hours per week), or floating to unassigned clinical units.
  3. Workplace Monitor and Direct Supervision: An assigned clinical peer supervisor provides direct shift supervision and submits quarterly compliance and behavioral evaluations to the State Licensing Board / ATD monitoring committee.
  4. Random Observed Biological Testing: The clinician must submit to frequent, unannounced, observed urine, blood, or hair drug testing (typically 12 to 24 random tests annually) across an expanded healthcare synthetic opioid panel.
  5. Long-Term Monitoring Commitment: ATD contracts span 3 to 5 years. Any unexcused missed test, positive test result for unprescribed controlled substances, or violation of practice restrictions results in immediate suspension of clinical practice and revocation of the ATD agreement, triggering formal disciplinary action and license revocation.
Loading diagram...
David Marx Just Culture Response Algorithm for Controlled Substance Compliance
Test Your Knowledge

A floor nurse discovers a tampered 2 mL carpujet labeled 'Morphine 10 mg/mL' inside an automated dispensing cabinet return drawer. The tamper-evident plastic seal is torn, and the fluid inside appears diluted. The MDRT coordinator places the carpujet into a serialized tamper-evident pouch and dispatches it to the analytical chemistry laboratory. Which of the following analytical modalities provides the definitive, gold-standard forensic molecular fingerprinting required to identify trace drug concentrations, synthetic adulterants, and confirm substitution for criminal proceedings?

A
B
C
D
Test Your Knowledge

During a busy trauma resuscitation, a critical care nurse asks a colleague to 'quick-swipe' the ADC console to co-sign the waste of 1 mL of fentanyl without either nurse visually observing the physical fluid being squirted into the chemical waste neutralizer. Under David Marx's Just Culture framework, how is this nurse's behavioral choice classified, and what is the appropriate organizational management response?

A
B
C
D
Test Your Knowledge

A registered nurse returning to clinical practice under an approved State Board Alternative-to-Discipline (ATD) monitoring contract enters a 3-year return-to-work agreement following treatment for an opioid use disorder. Which of the following practice restrictions is standard during the initial 6 to 12 months of active clinical re-entry?

A
B
C
D