5.4 Pharmacy Records, Retention Periods & Facility Operating Standards
Key Takeaways
Utah requires prescription files, including refill information, to be kept for at least five years and to be immediately retrievable in written or electronic form (R156-17b-612(4)).
Every controlled substance record required by law must be kept for five years, with Schedule II records separate from Schedule III–V records (R156-37-602).
A Utah pharmacy with a refrigerator or freezer for drugs must keep a daily temperature log on days of operation and retain each entry for at least three years (R156-17b-614a(3)).
A Utah pharmacy may not dispense unless a pharmacist or DMP is physically present and immediately available, except for a remote dispensing pharmacy supervised by telepharmacy (R156-17b-614a(6)).
Pharmacy self-audits and required notices are kept for two years, and CE documentation for four years after the renewal cycle ends.
5.4 Pharmacy Records, Retention Periods & Facility Operating Standards
Blueprint item 4.2 covers "recordkeeping ... including content, inventory, maintenance, storage, handling, and reporting," along with "non-dispensing requirements for operations of pharmacies." In Utah these requirements come mainly from R156-17b-612, -614a, -605, and -609 and R156-37-602.
Retention periods at a glance
| Record | Utah retention | Source |
|---|---|---|
| Prescription files, including refill information | 5 years, immediately retrievable | R156-17b-612(4); §§ 58-17b-609, -611 |
| Original and transferred prescriptions (legend drugs) | 5 years from the last refill | R156-17b-612(5)(b) |
| Printed copy or retrievable record of electronic prescriptions | 5 years | R156-17b-613(6) |
| Any controlled substance record required by law | 5 years | R156-37-602(3) |
| Controlled substance inventories (filed separately) | 5 years | R156-17b-605(2)(b)–(c) |
| Records of CS disposal | 5 years from disposal | R156-37-606(2) |
| Documentation of offers to counsel | 5 years, produced within 7–10 business days | R156-17b-610(4) |
| Record of each dispensing pharmacist's unique initials or ID code | 5 years | R156-17b-614a(8) |
| Automated pharmacy system event and stocking records | 5 years | R156-17b-620(5), (9) |
| Pharmacist prescribing notifications to the primary care provider | 5 years | R156-17b-627(1)(e) |
| Refrigerator and freezer temperature logs | 3 years | R156-17b-614a(3) |
| Pharmacy self-audit forms | 2 years | R156-17b-603(3)(u) |
| Copies of § 58-17b-614 notices to DOPL | 2 years | § 58-17b-614(4) |
| CE documentation | 4 years after the renewal cycle | R156-17b-309(5) |
| Patient medication profiles | 1 year after the most recent fill | R156-17b-609(1) |
| Hormonal contraception standing-order records | 7 years | DHHS statewide standing order |
| Pseudoephedrine sales log | 2 years after the latest entry | § 58-37c-208(5) |
| DEA controlled substance records (federal minimum) | 2 years | 21 CFR 1304.04 |
The general rule is five years for prescriptions and controlled substance records. The exceptions (3-year temperature logs, 2-year self-audits and notices, 4-year CE records, 1-year profiles) are common exam distractors.
Controlled substance recordkeeping (R156-37-602)
- Keep records of purchase, distribution, dispensing, prescribing, and administration according to state and federal law.
- Keep Schedule II records separate from other pharmacy records, and Schedule III–V records separate from other records.
- Prescription records may be kept electronically if the original of each prescription, including telephone prescriptions, is kept in a physical file with the required information, and an automated system provides immediate retrieval of CIII–IV refill information under federal guidelines.
- If a licensee sells or transfers records, the new owner must keep them separate from its own records.
- Report theft or significant loss to DEA immediately, with a copy to DOPL, and to local law enforcement (R156-37-602(2)).
Under R156-17b-614a(9)–(14), the pharmacy must also keep copies of DEA Form 222 (properly dated, initialed, and filed), unaccepted or defective forms, any power of attorney for signing Form 222, suppliers' invoices with the date and initials of the person who verified receipt of controlled substances, suppliers' credit memos, copies of inventories (made available to DOPL on request), and hard copies of surrender or destruction reports.
Temperature control (R156-17b-614a(3))
- The pharmacy's temperature must be kept within a range compatible with proper drug storage.
- If the pharmacy uses a refrigerator or freezer to store drugs, it must keep a daily written or electronic log of its temperature on days of operation, and keep each log entry for at least three years.
- For reference, USP storage ranges are 20–25 °C for controlled room temperature, 2–8 °C for refrigeration, and −25 to −10 °C for freezing. Document excursions and follow manufacturer stability guidance before dispensing affected stock.
- Delivered prescriptions must travel in packaging that maintains appropriate temperatures, following manufacturer or USP <1079> recommendations (R156-17b-608(1)(a)).
General operating standards for Class A and B pharmacies (R156-17b-614a)
| Standard | Requirement |
|---|---|
| Physical plant | Well lighted, ventilated, clean, and sanitary. A sink with hot and cold culinary water, separate from restroom facilities, if drugs are transferred from original containers. Cleanrooms may not have sinks or floor drains. |
| Storage | Orderly storage that permits clear identification and retrieval, in an environment that maintains product integrity |
| Security | A pharmacy that dispenses controlled substances needs a security system that detects entry when closed and notifies an individual. The pharmacy must have a lock and be securely locked when closed. With a drop ceiling and no locked drug cabinet, walls must reach the hard deck or other measures must prevent entry. |
| Counseling | A counseling area that allows confidential counseling, if applicable |
| References | Current Utah pharmacy and controlled substance statutes and rules (58-1, R156-1, 58-17b, R156-17b, 58-37, R156-37, 58-37f, R156-37f), 21 CFR 1300 et seq. or equivalent, the FDA Approved Drug Products list, and other needed references, in print or electronic form |
| Staff list | A current list of licensed employees with names, license classifications, license numbers, and expiration dates, readily retrievable for DOPL |
| Pharmacist presence | No dispensing unless a pharmacist or DMP is physically present and immediately available. A remote dispensing pharmacy may instead be supervised through a telepharmacy system. |
| After-hours access | Only a licensed Utah pharmacist, DMP, or authorized personnel (pharmacy staff who take part in the pharmacy's operations) may access the pharmacy when it is closed |
| Pharmacist identification | A 5-year record of each dispensing pharmacist's unique initials or ID code |
Compounded prescription labels have extra requirements (R156-17b-614a(2)). See Section 10.1.
Scenario
An inspector finds that a pharmacy discarded its refrigerator logs after 12 months, keeps Schedule II invoices mixed with general invoices, and dispensed prescriptions for 20 minutes while the only pharmacist was away from the store. The logs violate the three-year rule, the invoices violate R156-37-602(5), and the dispensing violates R156-17b-614a(6).
A Utah pharmacy is purging old files. What is the minimum retention period for non-controlled prescription files, including refill information?
Three years, matching the temperature-log requirement
Five years, and the files must be immediately retrievable in written or electronic form
Two years, matching the federal DEA baseline
Seven years, matching the hormonal contraception standing order
A pharmacy stores vaccines in a refrigerator. Under R156-17b-614a(3), what temperature documentation is required?
A weekly log kept for one year
A log only when an excursion occurs, kept for five years
No log if the refrigerator has an alarm
A daily written or electronic temperature log on days of operation, with each entry kept at least three years
During a staffing shortage, the only pharmacist at a Class A pharmacy leaves the store for lunch. The technicians keep handing completed prescriptions to waiting patients. Which Utah rule does this violate?
Only the federal DEA security rule, and only for controlled substances
Only the PIC notification rule
R156-17b-614a(6), which prohibits dispensing unless a pharmacist or DMP is physically present and immediately available
No rule, because the prescriptions were already verified by the pharmacist
How must a Utah pharmacy store its Schedule II controlled substance records?
Separately from the pharmacy's other records, and kept for five years
Mixed with Schedule III–V records, kept for two years
At the wholesaler's office, kept for three years
Only electronically, kept for one year
Sections you finish are checked off in the contents.