12.1 Controlled Substance Loss, Theft & Disposal

Key Takeaways

  • Under 21 CFR § 1301.76(b), registrants must notify the DEA Field Division in writing within one (1) business day of discovering theft or significant loss of controlled substances, and immediately notify the Tennessee Board of Pharmacy.
  • While initial written notice must be transmitted within 1 business day, the registrant conducts an internal investigation and submits the electronic DEA Form 106, forwarding a copy to the Tennessee Board of Pharmacy.
  • Determining whether a shortage constitutes a 'significant loss' requires analyzing quantity lost relative to business volume, specific substances (e.g., Schedule II hydromorphone vs. Schedule V cough syrup), recurring loss patterns, and diversion markers.
  • In-transit losses are the legal reporting responsibility of the distributor/supplier until the purchasing pharmacy signs the shipping manifest or assumes custody; once signed for, custody and Form 106 reporting shift to the pharmacy.
  • Under 21 CFR Part 1317 (Secure and Responsible Drug Disposal Act), registrant controlled inventory is destroyed by transfer to a DEA-registered reverse distributor via DEA Form 222 (C-II) or invoices (C-III–V), while patient drop-off receptacles require locked, tamper-evident inner liners with dual-custody tracking and zero pharmacy staff contact.
Last updated: September 2026

12.1 Controlled Substance Loss, Theft & Disposal

The custody, accounting, and disposal of controlled substances are governed by strict federal standards under the federal Controlled Substances Act (CSA) and Title 21 of the Code of Federal Regulations (21 CFR), coupled with parallel state requirements enforced by the Tennessee Board of Pharmacy under Tennessee Code Annotated (TCA) Title 53, Chapter 11, and Tennessee Administrative Code (TAC) Chapter 1140. Pharmacy practice sites must maintain continuous closed-system accounting for all controlled inventory from initial acquisition through dispensing or destruction. When inventory discrepancies, burglaries, employee pilferage, or stock expirations occur, precise statutory protocols dictate mandatory reporting, formal documentation, and non-retrievable destruction.


1. Mandatory Federal & State Loss Reporting Protocols

When a registrant experiences a theft or significant loss of controlled substances, federal and state statutes mandate strict, immediate, multi-agency notification. The table below outlines the core reporting timelines, governing citations, and procedural requirements:

Agency / EntityReporting TimelineRegulatory AuthorityRequired Form / Method
DEA Field DivisionWithin one (1) business day of discovery21 CFR § 1301.76(b)Initial written notification via formal letter/email to the Special Agent in Charge (SAC); followed by electronic DEA Form 106.
Tennessee Board of PharmacyImmediately upon discoveryTCA § 53-11-301 et seq.; Board PolicyImmediate telephone or written notification to the Board Executive Director; copy of completed DEA Form 106 forwarded to the Board.
Local Law EnforcementImmediately upon discovery21 CFR § 1301.76(b) (implied); Local OrdinancesPolice incident report filed with municipal police department or county sheriff's office.
Tennessee Bureau of Investigation (TBI)If criminal diversion suspectedTCA Title 53; TBI Drug Diversion Task ForceFormal investigative referral, often coordinated with local police.
┌─────────────────────────────────────────────────────────────────────────────┐
│            CONTROLLED SUBSTANCE THEFT / SIGNIFICANT LOSS WORKFLOW           │
├─────────────────────────────────────────────────────────────────────────────┤
│ 1. DISCOVERY OF THEFT OR SIGNIFICANT LOSS                                    │
│    └─> Pharmacist discovers burglary, armed robbery, or unexplained shortage│
│                                                                             │
│ 2. IMMEDIATE MANDATORY NOTIFICATIONS (DAY 1)                                │
│    ├─> Notify local DEA Field Division in writing within 1 BUSINESS DAY     │
│    ├─> Notify Tennessee Board of Pharmacy IMMEDIATELY                       │
│    └─> Contact local law enforcement and file formal police incident report │
│                                                                             │
│ 3. INTERNAL INVESTIGATION & ROOT CAUSE AUDIT                                │
│    ├─> Perform complete physical inventory count of affected schedules     │
│    ├─> Review video surveillance, electronic dispensing logs, and CSOS data │
│    └─> Reconcile theoretical perpetual balance vs. actual on-hand stock     │
│                                                                             │
│ 4. FORMAL SUBMISSION OF ELECTRONIC DEA FORM 106                             │
│    ├─> Access DEA Secure Portal; input NDC, quantities, package types       │
│    ├─> Specify type of theft (e.g., night break-in, employee pilferage)     │
│    ├─> Submit completed electronic Form 106 to DEA                          │
│    ├─> Transmit identical copy to the Tennessee Board of Pharmacy           │
│    └─> Retain copy in pharmacy records for a minimum of TWO (2) YEARS       │
└─────────────────────────────────────────────────────────────────────────────┘

The One-Business-Day Initial Written Notice Rule

Under 21 CFR § 1301.76(b), a registrant must notify the DEA Field Division serving their geographic territory in writing within one (1) business day of discovery of any theft or significant loss of controlled substances.

Key Legal Distinction — Initial Notice vs. Form 106 Submission: The initial notification required within one business day does not have to be the completed DEA Form 106. In many theft scenarios (such as an extensive burglary or complicated internal embezzlement scheme), the registrant cannot calculate the exact quantities, package counts, and National Drug Codes (NDCs) within 24 hours. The law mandates that the registrant transmit an initial written notice (via letter, email, or web portal to the Special Agent in Charge) within one business day stating that a theft or significant loss has occurred. The registrant then conducts a thorough internal investigation, completes a physical audit, and submits the finalized electronic DEA Form 106 once the investigation is concluded.

Tennessee State Board Notification

In Tennessee, the Board of Pharmacy requires immediate notification whenever a theft or significant loss occurs. The Pharmacist-in-Charge (PIC) must notify the Board office immediately and, upon finalizing the electronic DEA Form 106, provide an identical copy of the Form 106 and the police incident report to the Tennessee Board of Pharmacy. Copies of all theft/loss notifications and completed Form 106 filings must be retained on-site at the pharmacy practice site for at least two (2) years under federal law and Board Rule 1140-03.


2. Defining and Evaluating "Significant Loss"

The federal Controlled Substances Act does not establish a rigid numerical threshold (e.g., a specific percentage or fixed tablet count) to define a "significant loss." Because operational contexts vary dramatically between high-volume mail-order facilities and rural independent community pharmacies, the DEA establishes an objective multi-factor evaluation framework under 21 CFR § 1301.76(b):

┌─────────────────────────────────────────────────────────────────────────────┐
│                     "SIGNIFICANT LOSS" EVALUATION MATRIX                    │
├──────────────────────────┬──────────────────────────────────────────────────┤
│ Regulatory Factor        │ Practical Application & Audit Questions          │
├──────────────────────────┼──────────────────────────────────────────────────┤
│ 1. Schedule & Drug Type  │ Is the drug a high-potency Schedule II opioid     │
│                          │ (fentanyl, oxycodone, hydromorphone) or amphetamine│
│                          │ vs. a Schedule V antitussive or cough syrup?     │
│                          │ *Any unexplained loss of Schedule II is significant*│
├──────────────────────────┼──────────────────────────────────────────────────┤
│ 2. Quantity Relative to  │ Does the shortage represent a substantial ratio  │
│    Dispensing Volume     │ of weekly/monthly dispensing, or an infinitesimal│
│                          │ fraction of high-volume automated distribution?  │
├──────────────────────────┼──────────────────────────────────────────────────┤
│ 3. Pattern & Frequency   │ Is this an isolated first-time discrepancy, or   │
│    over Operating Time   │ does it reveal a persistent, recurring shortage  │
│                          │ recurring across weekly or monthly inventories?  │
├──────────────────────────┼──────────────────────────────────────────────────┤
│ 4. Diversion Indicators  │ Are the missing substances uniquely prone to     │
│    & Street Value        │ illicit street resale, diversion, or abuse in    │
│                          │ the local geographic community?                  │
├──────────────────────────┼──────────────────────────────────────────────────┤
│ 5. Explanation Quality   │ Can the shortage be traced to an identifiable,   │
│                          │ verifiable dispensing/inventory entry error, or  │
│                          │ does it remain completely unexplained?           │
└──────────────────────────┴──────────────────────────────────────────────────┘

Breakage, Spillage & Wastage vs. Theft/Loss

A critical distinction tested on the MPJE is whether damaged or spilled medication constitutes a "loss" requiring DEA Form 106:

  • Breakage and Spillage (Recoverable vs. Non-Recoverable): Breakage, damage, or spillage of controlled substances does not constitute a "theft or significant loss." If an ampule of morphine breaks on a cleanroom floor or an entire stock bottle of hydrocodone/acetaminophen drops and shatters into pieces contaminated by dirt:
    • Recoverable Residue: If the damaged product can be swept up or recovered, it must be disposed of through a DEA-registered reverse distributor or lawful registrant destruction documented on DEA Form 41.
    • Non-Recoverable Wastage: If a liquid controlled substance spills down the sink or seeps into a carpet such that no drug can be recovered, the registrant must not file a DEA Form 106. Instead, the incident must be thoroughly documented in the pharmacy's controlled substance logbook, signed and dated by the Pharmacist-in-Charge and at least one licensed healthcare professional witness. DEA Form 41 may also be utilized to document the destruction/loss of non-recoverable substances.
    • Prohibition on Sewer Disposal: Pouring controlled substances into municipal sewer systems or toilets is strictly prohibited by environmental protection standards and Board waste rules.

3. In-Transit Losses: Custody & Reporting Boundaries

Controlled substances moving through the pharmaceutical supply chain present unique jurisdictional questions regarding who bears the legal responsibility to report missing stock:

┌─────────────────────────────────────────────────────────────────────────────┐
│                     IN-TRANSIT LOSS CUSTODY BOUNDARIES                      │
├─────────────────────────────────────────────────────────────────────────────┤
│               [PHARMACEUTICAL WHOLESALER / DISTRIBUTOR]                     │
│                                    │                                        │
│             (Shipment via Common Carrier / Private Fleet)                   │
│                                    │                                        │
│   ═════════════════════════════════╪════════════════════════════════════   │
│   THE LEGAL CUSTODY DIVIDING LINE: │ SIGNING THE SHIPPING MANIFEST          │
│   ═════════════════════════════════╪════════════════════════════════════   │
│                                    ▼                                        │
│                 [PURCHASING COMMUNITY / HOSPITAL PHARMACY]                  │
└─────────────────────────────────────────────────────────────────────────────┘

Determining Reporting Responsibility (21 CFR § 1301.74(c))

  1. Supplier Responsibility (Before Signature / Acceptance): If a shipment of controlled substances is stolen, damaged, or lost in transit before the purchasing pharmacy's authorized staff inspects and signs the delivery receipt or bill of lading, the supplier (distributor/wholesaler) is legally responsible for reporting the in-transit loss to the DEA via electronic Form 106.
  2. Purchaser Responsibility (After Signature / Acceptance): If the purchasing pharmacy signs for and accepts custody of the delivery totes from the driver, and subsequently discovers that a sealed container inside is missing or short upon opening the tote, the purchasing pharmacy bears the legal burden to conduct the investigation and report the loss on DEA Form 106.
  3. Central Fill Pharmacy Shipments: When a central fill pharmacy prepares controlled substance prescriptions and ships them to an originating retail pharmacy:
    • If the central fill pharmacy utilizes its own private delivery vehicles, the central fill pharmacy reports any in-transit loss.
    • If a contract common carrier (e.g., FedEx, UPS) is utilized, the contractual terms of shipment dictate, but typically the entity that contracts with the carrier and holds legal title during carriage bears reporting duties.

4. Registrant Inventory Disposal & Reverse Distribution

Registrants frequently possess controlled substances that are expired, adulterated, discontinued, or damaged. Under the Secure and Responsible Drug Disposal Act of 2010 and 21 CFR Part 1317, registrants are strictly prohibited from simply disposing of controlled substances in municipal trash receptacles. All disposal methods must render the controlled substance non-retrievable.

The "Non-Retrievable" Standard (21 CFR § 1300.05): A controlled substance is rendered non-retrievable when its physical or chemical condition is permanently altered through irreversible means, rendering the substance completely unavailable and unusable for all practical purposes. Incineration and chemical digestion are approved non-retrievable methodologies. Diluting in kitty litter or coffee grounds and discarding in a trash dumpster does not meet the legal standard of non-retrievable.

Disposal Route 1: Transfer to a DEA-Registered Reverse Distributor

The overwhelming majority of community and institutional pharmacies destroy expired controlled inventory by transferring it to a DEA-registered reverse distributor (a specialized DEA registrant authorized to receive controlled substances for disposal):

  • Schedule II Controlled Substances: The transfer of Schedule II medications requires the execution of an official DEA Form 222 (or electronic CSOS equivalent). In this transaction, the reverse distributor acts as the purchaser/recipient and issues the DEA Form 222 to the pharmacy. The pharmacy retains Copy 3 (or the electronic CSOS record) confirming transfer of custody.
  • Schedule III–V Controlled Substances: The transfer of Schedule III, IV, and V substances requires an official commercial invoice or transfer document recording the drug name, dosage form, strength, package size, total quantity, transaction date, and the names, addresses, and DEA registration numbers of both the pharmacy and the reverse distributor.
  • Who Submits DEA Form 41? The reverse distributor, NOT the community pharmacy, is legally responsible for submitting DEA Form 41 (Registrants Inventory of Drugs Surrendered) to the DEA once the controlled substances have been rendered non-retrievable.
┌─────────────────────────────────────────────────────────────────────────────┐
│                     REVERSE DISTRIBUTION WORKFLOW                           │
├─────────────────────────────────────────────────────────────────────────────┤
│ 1. Pharmacy segregates expired / unwanted controlled substances in safe      │
│ 2. Pharmacy contacts DEA-registered Reverse Distributor                     │
│ 3. Transfer Documentation Executed:                                         │
│    ├─> Schedule II: Reverse Distributor issues DEA Form 222 to Pharmacy     │
│    └─> Schedule III–V: Pharmacy generates itemized invoice / manifest       │
│ 4. Physical custody transferred via secure freight                          │
│ 5. Reverse Distributor renders substances NON-RETRIEVABLE                   │
│ 6. Reverse Distributor executes and submits DEA Form 41 to DEA              │
│ 7. Reverse Distributor sends Certificate of Destruction to Pharmacy         │
│ 8. Pharmacy retains Form 222, invoices, & certificate on-site for 2 YEARS   │
└─────────────────────────────────────────────────────────────────────────────┘

Disposal Route 2: On-Site Registrant Destruction

If a pharmacy chooses to perform destruction of controlled substance inventory on-site on its own premises under 21 CFR § 1317.05, it must observe strict procedural mandates:

  1. The pharmacy must submit a written request to the Special Agent in Charge (SAC) in its DEA Field Division at least fourteen (14) days prior to the proposed destruction date (unless granted ongoing blanket authorization).
  2. The destruction method must permanently render the substances non-retrievable.
  3. The physical destruction must be directly witnessed and verified by two licensed healthcare professionals or law enforcement officers (e.g., two licensed pharmacists, or a pharmacist and a registered nurse).
  4. A DEA Form 41 must be completed in triplicate, detailing the exact drug inventories destroyed, signed by both witnesses, and submitted directly to the DEA Field Division.

5. Ultimate User Disposal & Public Collection Receptacles

Prior to 2010, patients had no lawful avenue to return unused controlled substances to pharmacies because pharmacies were only authorized to deliver medications to ultimate users, not receive them back. The Secure and Responsible Drug Disposal Act of 2010 (codified in 21 CFR Part 1317) authorized pharmacies to voluntarily modify their DEA registration to become Authorized Collectors.

┌─────────────────────────────────────────────────────────────────────────────┐
│                AUTHORIZED COLLECTOR RECEPTACLE MANDATES                     │
├─────────────────────────────────────────────────────────────────────────────┤
│ • LOCATION: Securely placed inside the pharmacy building in plain view of   │
│   pharmacy personnel; securely bolted to a permanent structural surface.    │
│                                                                             │
│ • ACCESS BARRIER: Outer container made of sturdy, tamper-resistant material │
│   with a locked outer lid and a small one-way drop opening.                 │
│                                                                             │
│ • INNER LINER: Removable, waterproof, tamper-evident, tear-resistant, and   │
│   completely opaque; marked with a unique, pre-printed tracking number.     │
│                                                                             │
│ • DUAL CUSTODY: Liner installation, removal, and sealing must be performed  │
│   by TWO pharmacy employees (at least one must be a licensed pharmacist).   │
│                                                                             │
│ • ABSOLUTE CONTACT PROHIBITION: Pharmacy staff are STRICTLY FORBIDDEN from  │
│   handling, inspecting, counting, or inventorying returned customer drugs.  │
│                                                                             │
│ • ACCEPTABLE ITEMS: Household prescription & OTC medications (C-II to C-V). │
│                                                                             │
│ • EXCLUDED ITEMS: Sharps, needles, EpiPens, illicit street drugs, inhalers. │
└─────────────────────────────────────────────────────────────────────────────┘

Operational Rules for Authorized Collectors

  • Voluntary DEA Modification: Retail pharmacies must submit an electronic registration modification request to the DEA to obtain authorized collector status; no additional DEA registration fee is required.
  • Placement Requirements: The collection receptacle must be positioned inside the registered pharmacy practice site within immediate line-of-sight of the prescription department counter. It cannot be positioned in an unmonitored entryway, hallway, or exterior drive-through area.
  • Dual-Custody Inner Liner Protocol: Inner liners must be sealed immediately upon removal from the receptacle. The installation, removal, weighing (if required by policy), and storage of sealed liners must be witnessed and documented by two authorized pharmacy employees (at least one of whom should be a licensed pharmacist). Sealed liners must be stored in the pharmacy's securely locked safe or vault until transferred to a reverse distributor.
  • Zero Staff Contact Rule: The public drop-box operates on absolute non-handling by pharmacy staff. Patients must directly place their own medications into the drop opening. Pharmacy employees are legally prohibited from touching, inspecting, sorting, counting, or inventorying patient returns. This eliminates diversion risks and occupational exposure hazards.
  • Mail-Back Packages: Authorized collectors may also distribute pre-addressed, postage-paid mail-back packages to ultimate users. These packages must be non-descript, tamper-evident, waterproof, and addressed directly to a reverse distributor equipped with non-retrievable destruction facilities.

6. Summary Comparison Matrix: Loss vs. Disposal Protocols

Operational ScenarioPrimary FormRequired TimelinesKey Entity ResponsibleWitness Requirements
Burglary / Armed RobberyDEA Form 1061 business day (initial notice); Immediate (TN Board)Purchasing/Operating PharmacyN/A (Police report filed)
Unexplained Inventory ShortageDEA Form 1061 business day (initial notice); Immediate (TN Board)Purchasing/Operating PharmacyN/A (Internal audit team)
In-Transit Shipment TheftDEA Form 1061 business day of discoverySupplier (if unsigned); Purchaser (if signed)Common carrier manifest
Expired Registrant Stock DisposalDEA Form 222 (C-II); Form 41 (filed by RD)Routine reverse distributor transferReverse Distributor files Form 41Two licensed witnesses at RD facility
Non-Recoverable Spill (Sink/Floor)Pharmacy Spill Log / Form 41Documented immediately in registerPharmacist-in-ChargeTwo licensed healthcare professionals
Patient Take-Back Box Liner ChangeCollector Log / ManifestDocumented on liner logbookAuthorized Collector PharmacyTwo employees (dual custody)
Test Your Knowledge

Upon arriving at an outpatient community pharmacy on Monday morning, the Pharmacist-in-Charge (PIC) discovers that over the weekend, the pharmacy was burglarized and 500 tablets of oxycodone 30 mg and 100 fentanyl transdermal patches were stolen. Under federal DEA regulations (21 CFR § 1301.76(b)) and Tennessee Board of Pharmacy mandates, which of the following actions must the PIC execute first regarding regulatory notification?

A
B
C
D
Test Your Knowledge

A community pharmacy practice site has accumulated expired stock of several Schedule II opioid analgesics and Schedule III non-narcotic controlled substances. The Pharmacist-in-Charge elects to utilize a DEA-registered reverse distributor for lawful destruction. Which of the following describes the legally compliant documentation and execution protocol under 21 CFR Part 1317?

A
B
C
D
Test Your Knowledge

A pharmaceutical wholesaler dispatches a delivery tote containing 200 tablets of hydromorphone 4 mg (Schedule II) via contract courier to a hospital pharmacy. The courier leaves the delivery tote in an unmonitored receiving dock before obtaining a signature from the pharmacy receiving staff. When the pharmacist subsequently inspects the shipment and reviews the manifest, the hydromorphone container is missing. Who bears legal responsibility for reporting this in-transit loss to the DEA under 21 CFR § 1301.74(c)?

A
B
C
D
Test Your Knowledge

An independent retail pharmacy in Memphis decides to assist its community by becoming an authorized collector and installing an on-site controlled substance collection receptacle for ultimate users. Under 21 CFR Part 1317 (Secure and Responsible Drug Disposal Act of 2010), which of the following operational mandates must the pharmacy strictly observe?

A
B
C
D