11.1 Ordering Schedule II Substances: DEA Form 222 & CSOS

11.1 Ordering Schedule II Substances: DEA Form 222 & CSOS

The procurement and commercial distribution of Schedule I and Schedule II controlled substances are governed by the most stringent security and accounting protocols in pharmacy jurisprudence. Under the federal Controlled Substances Act (CSA) and Title 21 of the Code of Federal Regulations (21 CFR Part 1305), the Drug Enforcement Administration (DEA) maintains a closed distribution system ensuring that every transfer of a Schedule I or II substance is authenticated, documented, and traceable from manufacturer to dispenser. In Utah, the Division of Professional Licensing (DOPL) enforces these federal mandates in conjunction with the Utah Controlled Substances Act (Utah Code Ann. Title 58, Chapter 37) and administrative rules (Utah Admin. Code R156-17b and R156-37).

Candidates preparing for the Utah MPJE must master the operational mechanics of executing paper DEA Form 222 orders, the transition to the single-sheet form, the delegation of Power of Attorney (POA), and the electronic Controlled Substance Ordering System (CSOS).

---

Evolution of DEA Form 222: Single-Sheet Execution

Historically, the DEA utilized a carbon-layered, three-part order form known as the triplicate DEA Form 222 (Copy 1 Brown retained by supplier, Copy 2 Green forwarded to DEA, Copy 3 Blue retained by purchaser). The DEA officially sunsetted the triplicate form on October 30, 2021, transitioning entirely to a single-sheet DEA Form 222.

Single-Sheet Design and Layout

• Order Capacity: The single-sheet Form 222 features 20 order lines per form (a significant increase from the 10-line limit of the obsolete triplicate form).
• Pre-Printed Identifiers: Each form is issued by the DEA pre-printed with the purchaser's name, registered address, DEA registration number, authorized schedules, and a unique 9-digit alphanumeric order form tracking number.
• Security Paper: The single-sheet form contains overt and covert security features, including thermochromatic ink, high-resolution microprinting, and a watermark that displays "DEA" when viewed under light.

Step-by-Step Single-Sheet Ordering Workflow

Under 21 CFR § 1305.12 and § 1305.13, execution of the single-sheet Form 222 follows a precise statutory workflow:

1. Order Initiation by Purchaser: The purchaser completes the form with indelible ink, typewriter, or computer printer. The purchaser must specify the supplier's name and address, the date ordered, and for each line item: the National Drug Code (NDC) or drug name, dosage form, strength, package size, and number of commercial packages desired.
2. Purchaser Copy Creation: Before sending the form to the supplier, the purchaser must make an exact copy of the completed single-sheet Form 222 for their own records. This copy may be an electronic copy (such as a scanned PDF) or a physical photocopy.
3. Submission of Original Form: The purchaser transmits the original single-sheet Form 222 (not the copy) to the authorized supplier (wholesaler or distributor).
4. Supplier Order Fulfillment: Upon receipt, the supplier enters the actual number of commercial containers shipped and the date of shipment on the original Form 222. If the supplier cannot fill the complete order immediately, the supplier may ship a partial quantity; the remaining balance must be shipped within 60 calendar days from the date the purchaser executed the form. After 60 days, the unfilled balance is void.
5. Supplier Record Retention: The supplier retains the original single-sheet Form 222 in their registered files for a minimum of 2 years under federal law (Utah controlled substance licensees keep required records for 5 years under R156-37-602(3)).
6. Supplier DEA Reporting: The supplier reports the acquisition and distribution of Schedule II substances to the DEA Automation of Reports and Consolidated Orders System (ARCOS). Suppliers not required to report to ARCOS must submit a copy of the completed Form 222 to the DEA via email or mail by the close of the month during which the order was filled.
7. Purchaser Delivery Verification: When the shipment arrives at the pharmacy, the purchaser must unpack and verify the physical stock against the shipping invoice and the retained copy of Form 222. The purchaser must record on their retained copy the exact number of containers received and the date received for each line item.

---

Power of Attorney (POA) Delegations (21 CFR § 1305.05)

Under federal law (21 CFR § 1305.05), a DEA Form 222 or CSOS order may only be signed by:

1. The individual registrant (if registered as an individual/sole proprietorship);
2. A partner of the registrant (if registered as a partnership);
3. An officer of the registrant (if registered as a corporation or institutional entity); or
4. An individual granted a valid Power of Attorney (POA).

Requirements for Executing a Valid POA

Because the Pharmacist-in-Charge (PIC) or corporate registrant cannot personally execute every Schedule II order, DEA regulations authorize the registrant to delegate signing authority through an administrative Power of Attorney:

• Eligible Appointees: The registrant may designate any individual to execute orders. The designated agent does not have to be a licensed pharmacist! A pharmacy technician, pharmacy intern, or administrative purchasing agent may legally be granted POA to order Schedule II controlled substances.
• Execution Formalities: The POA document must be executed in substantially the statutory form provided in 21 CFR § 1305.05. It must be signed by:
  • The individual who signed the most recent DEA application or renewal (Form 224/224a);
  • The person to whom the power of attorney is being granted (the attorney-in-fact); and
  • Two adult witnesses.
• Filing and Retention: The POA does not need to be submitted to the DEA or DOPL. It must be filed on-site at the registered location with executed Form 222 records and made immediately available for inspection. Utah requires a hard copy of any Form 222 power of attorney to be available to DOPL on request (R156-17b-614a(10)).
• Revocation: The registrant may revoke a POA at any time by executing a formal notice of revocation signed by the registrant and two adult witnesses.

---

Defective, Unaccepted, and Endorsed Forms

The DEA enforces a zero-tolerance policy regarding the physical and factual integrity of paper order forms:

• Fatal Defects: Under 21 CFR § 1305.15, an order form is defective if it is incomplete, illegible, or displays any signs of alteration, erasure, or correction fluid (white-out). Crossing out a line item or initialing an edit is considered a fatal defect.
• Supplier Handling: A supplier is strictly prohibited from filling an altered or defective form. The supplier cannot make corrections on the purchaser's behalf. The supplier must refuse the order and return the original single-sheet Form 222 to the purchaser with an accompanying written statement detailing the reason for non-acceptance (e.g., "Line 2 altered; cross-out detected").
• Purchaser Recordkeeping: The purchaser must retain the returned, unaccepted original Form 222 together with the supplier's written statement of reason in the pharmacy's Schedule II records. Defective forms must never be discarded or destroyed.
• Supplier Endorsement: If a supplier cannot fill any portion of an order, the supplier may endorse the entire Form 222 to a secondary supplier under 21 CFR § 1305.14. Only the original supplier may endorse the form, and the endorsement must apply to all items on the form (partial endorsement is prohibited).

---

Controlled Substance Ordering System (CSOS)

The Controlled Substance Ordering System (CSOS) provides an electronic alternative to paper Form 222 under 21 CFR Part 1305 Subpart C. CSOS streamlines procurement and enhances order validation using advanced cryptographic security.

Key Operational Characteristics of CSOS

• Schedules Covered: Unlike paper Form 222 (which is strictly limited to Schedule I and II substances), CSOS permits electronic ordering of Schedules I, II, III, IV, and V, as well as non-controlled medications.
• No Line-Item Limits: CSOS orders are not restricted to the 20-line limit of paper Form 222. An electronic CSOS transmission can contain unlimited line items.
• Public Key Infrastructure (PKI): CSOS utilizes PKI digital certificates issued exclusively by the DEA Certification Authority (DEA CA). Each digital certificate is issued to an individual subscriber (the registrant or a designated CSOS POA) and cannot be shared.
• CSOS Coordinator: The registrant designates a CSOS Coordinator within the facility who serves as the administrative liaison with the DEA CA, managing subscriber certificate applications, renewals, and revocations.
• Supplier Reporting: The supplier must verify the purchaser's digital certificate and report each completed CSOS order to the DEA ARCOS database or transmit an electronic copy to the DEA within two (2) business days of order fulfillment.
• Electronic Record Retention: All electronic CSOS orders, digital signatures, and audit trails must be maintained in an electronically retrievable format for a minimum of 2 years federally and 5 years in Utah under R156-37-602(3).

---

Common MPJE Traps & Scenario Analysis

1. The Triplicate Trap: MPJE exam questions may present a scenario describing a pharmacist separating "Copy 1, Copy 2, and Copy 3" of a DEA Form 222. Triplicate forms were sunset in October 2021. Any question asking which carbon copy goes to the DEA reflects outdated law; under the single-sheet rule, the purchaser keeps an exact copy and the supplier keeps the original.
2. Technician Ordering Authority: Candidates often assume only licensed pharmacists can sign DEA Form 222. Under 21 CFR § 1305.05, anyone may sign if designated via a valid Power of Attorney, including a lead certified pharmacy technician or inventory specialist.
3. White-Out and Cross-Outs: If a pharmacist writes "Oxycodone 20 mg" on Line 1, realizes they meant 15 mg, crosses it out and writes 15 mg above it with initials, the entire form is legally defective. The supplier cannot process it. The pharmacist must file the spoiled form and start a new one.
4. Partial Supply Timeframe: If a supplier fills 50 of 100 bottles of morphine on a Form 222, the supplier has 60 calendar days from the form's execution date to supply the remaining 50 bottles. If the 60-day window expires, the remaining 50 bottles cannot be shipped under that form.