2.3 Recordkeeping & Professional Guidelines

Recordkeeping & Professional Guidelines

Quick Answer: USP <800> requires documented SOPs, training and competency-assessment records, environmental monitoring/wipe-sampling results, spill logs, and medical surveillance records to be maintained and available for inspection. State boards of pharmacy and accreditation bodies enforce these recordkeeping requirements, drawing on USP <800> alongside professional guidance from NIOSH, OSHA, ASHP, and ONS.

Why This Matters

Every engineering control, training session, and cleaning procedure covered elsewhere in the Administrative domain converges here: if it was not documented, an inspector treats it as if it did not happen. Recordkeeping is the closing topic of the domain because it is the mechanism through which every other requirement gets verified.

What USP <800> Requires On File

These records must be retained and made available for inspection — typically by the state board of pharmacy, and by accreditation bodies such as The Joint Commission where applicable. A facility with a technically compliant engineering control setup can still be cited if it cannot produce the paperwork proving training, monitoring, and spill response actually occurred as required.

Exam Tip: A facility that has never had an HD spill is not exempt from keeping a spill log — the log exists to document whatever spills occur, and its absence (or an obviously incomplete one) is itself a red flag during inspection, since even a single undocumented incident is a compliance gap.

Professional Guidelines Referenced Alongside USP <800>

PTCB's Administrative-domain content draws primarily on USP, NIOSH, and OSHA, but candidates should also recognize the roles of two supplementary professional organizations:

ASHP and ONS guidelines are professional-society best-practice documents, not government regulations — they supplement, but do not substitute for, USP <800>'s enforceable requirements or OSHA's regulatory authority.

The Facility's Hazardous Drug List Is Also a Living Record

One recordkeeping item candidates often overlook: USP <800> requires every entity to maintain its own written list of the hazardous drugs it stores, handles, or administers (drawn from and at least as inclusive as the current NIOSH list), and to review and update that list at least every 12 months. This is not a one-time document filed at initial policy rollout — an outdated list that still reflects the 2016 NIOSH categories instead of the 2024 update is itself a recordkeeping deficiency, independent of whether staff are otherwise following correct engineering-control and PPE procedures for the drugs they actually handle.

Retention Duration: What USP <800> Does and Does Not Specify

USP <800> does not set a single, universally enforced retention period (in years) for HD program records the way some other regulations specify an exact number. Instead, facilities are expected to retain SOPs, training/competency, monitoring, spill, and medical-surveillance records long enough to demonstrate an ongoing, current program — in practice, this means following the same general pharmacy-recordkeeping retention rules set by the facility's state board of pharmacy (which vary by state) and any applicable accreditor (such as The Joint Commission), rather than looking for one federal HD-specific number. A candidate who assumes USP <800> spells out an exact retention period in years is falling for a common exam trap; the tested principle is that records must exist, be current, and be retrievable on request, not a specific year count.

Scenario

A state board of pharmacy inspector visits a compounding pharmacy and asks to review the HD program's documentation from the past 12 months. The inspector expects to find written SOPs, training and competency-assessment records for every technician who handles HDs, wipe-sampling results with any follow-up corrective action, a spill log (even if it shows zero incidents), and medical surveillance records for HD-handling staff. If the pharmacy can produce SOPs and training logs but has no wipe-sampling records on file, the inspector can cite the facility for an incomplete program even though no adverse event has ever occurred.

Key Takeaways

• USP <800> requires SOPs, training/competency records, wipe-sampling results, spill logs, and medical surveillance records to be documented and available for inspection
• Missing or incomplete records can trigger a citation even without any actual exposure incident
• State boards of pharmacy and accreditors are the enforcement bodies that check this documentation
• NIOSH and OSHA are government sources (hazard list and workplace-safety enforcement, respectively)
• ASHP and ONS are professional-society guidelines that supplement, not replace, USP <800> and OSHA requirements