6.2 Virginia Prescription Monitoring Program (PMP) Mandates

6.2 Virginia Prescription Monitoring Program (PMP) Mandates

The Virginia Prescription Monitoring Program (PMP) is a centralized electronic data repository established by the General Assembly under Chapter 25.2 of Title 54.1 of the Code of Virginia (§ 54.1-2519 et seq.) and administered by the Department of Health Professions (DHP) pursuant to regulations in 18 VAC 76-20. The PMP serves as a critical clinical and regulatory tool designed to support legitimate medical access to controlled substances while identifying and curbing inappropriate prescribing, multi-provider shopping, drug diversion, and fatal overdoses.

For pharmacy practitioners, compliance with the Virginia PMP encompasses two distinct legal dimensions: mandatory dispenser reporting obligations (submitting accurate dispensing data within strict statutory timelines) and clinical query authority/mandates (reviewing patient dispensing histories to resolve prospective drug therapy problems and red flags).

---

Covered Schedules and Reportable Dispersals

Under Va. Code § 54.1-2521, all dispensers licensed by the Commonwealth of Virginia (including retail community pharmacies, outpatient health-system pharmacies, dispensing physicians, and non-resident pharmacies shipping into Virginia) must report the dispensing of covered substances.

Reportable Drug Classes

1. Schedules II, III, and IV Controlled Substances: Every prescription dispensed in Schedules II through IV (e.g., oxycodone, fentanyl, amphetamine salts, buprenorphine, alprazolam, zolpidem, tramadol, phenobarbital).
2. Schedule V Controlled Substances Requiring a Prescription: Any Schedule V medication that requires a prescription under federal or state law (e.g., pregabalin [Lyrica], lacosamide [Vimpat], codeine-containing cough syrups).
3. Naloxone: Naloxone is named directly in the statutory definition of "covered substance" in Va. Code § 54.1-2519, so every dispensed naloxone formulation (injectable, autoinjector, nasal spray) is reportable. It is not a controlled substance and not a drug of concern — it is its own enumerated category.
4. Cannabis products dispensed by a Virginia pharmaceutical processor: also within the "covered substance" definition, reported with the primary cannabinoid, the product's national drug code, and the written certification's expiration date (§ 54.1-2521 B).
5. Drugs of concern — currently an empty set. Va. Code § 54.1-3456.1 authorizes the Board to designate drugs of concern by regulation, and any so designated become reportable. At present Virginia designates no drug as a drug of concern.

The gabapentin trap — know the history, answer with current law. Gabapentin was Virginia's drug of concern from 2017. That changed when the 2019 General Assembly passed HB 2557, classifying gabapentin as a Schedule V controlled substance effective July 1, 2019. Gabapentin is still fully reportable to the PMP, but it is reportable as a Schedule V controlled substance, not as a drug of concern — and it is not Schedule VI. If an option describes gabapentin as a "drug of concern" or as "non-controlled in Virginia," it is describing pre-2019 law.

Exemptions from Dispenser Reporting

Under Va. Code § 54.1-2522, PMP reporting is NOT required for:

• The administration of a covered substance directly to an inpatient in a licensed hospital, hospice facility, or nursing home;
• The dispensing of covered substances by an emergency department physician to an outpatient in an amount not to exceed a 24-hour supply;
• The dispensing of covered substances in a bona fide clinical research trial approved by an institutional review board (IRB); or
• Wholesale distributors distributing drug inventory to pharmacies, clinics, or practitioners in normal commercial trade.

---

Dispenser Reporting Timeline and Zero-Reporting

Compliance with PMP reporting timelines is strictly monitored by DHP inspectors:

• The 24-Hour / Next Business Day Rule: Under Va. Code § 54.1-2521, dispensers must transmit required prescription data to the PMP within twenty-four (24) hours of dispensing or by the end of the next business day, whichever occurs first.
• Zero-Dispensing Reports: If a licensed pharmacy does not dispense any covered substances during a scheduled reporting interval (e.g., closed on Sundays, or a specialized compounding pharmacy with no controlled substances filled on a given business day), the pharmacy must submit an electronic Zero Report indicating that zero reportable transactions occurred. Failure to submit either dispensing data or a zero report is considered an actionable reporting violation.

Virginia PMP Dispenser Submission Architecture:
├── Schedule II, III, IV Controlled Substances ──────────► Report within 24 hours / next business day
├── Schedule V Requiring a Prescription ────────────────► Report within 24 hours / next business day
├── Naloxone (all formulations) ────────────────────────► Report within 24 hours / next business day
├── Cannabis products (pharmaceutical processor) ───────► Report within 24 hours / next business day
└── Zero Report (Days without reportable dispenses) ─────► Submit electronic zero report within 24 hours

---

Mandatory Data Elements Transmitted to the PMP

Whenever a covered substance is dispensed, the pharmacy management system must format and transmit an electronic record (utilizing the standard ASAP - American Society for Automation in Pharmacy data format) containing the following mandatory statutory data elements (18 VAC 76-20-50):

Exam Tip: The inclusion of the method of payment is critical. A change from commercial insurance to cash payment for high-dose controlled substances is a primary indicator of multi-prescriber diversion tracked by PMP analytics.

---

PMP Query Mandates: Prescribers vs. Pharmacists

Virginia law establishes differing legal standards for reviewing PMP data depending on whether the clinician is the prescriber or the dispensing pharmacist.

Mandatory Prescriber Query Requirements (§ 54.1-2522.1)

Prescribers licensed in Virginia are statutorily mandated to query the Virginia PMP under specific clinical circumstances:

1. The 7-Day Opioid Initiation Mandate: A prescriber must query the PMP prior to initiating an opioid therapy course that is anticipated or expected to exceed seven (7) consecutive days.
2. Ongoing Chronic Pain Therapy: For patients maintained on long-term opioid therapy for chronic non-cancer pain, the prescriber must query the PMP at least once every ninety (90) days.
3. Exceptions to Prescriber Mandate: Prescribers are exempt from querying when prescribing opioids to a patient in an inpatient hospital, emergency department (for <= 7 days), hospice or certified palliative care program, or post-surgical acute pain treatment anticipated to last 14 days or less immediately following surgical intervention.

Pharmacist Query Authority & Clinical Role

Unlike prescribers, Virginia pharmacists are not statutorily mandated to query the PMP on every single controlled substance dispense. However, the law provides pharmacists with full statutory authorization to query the PMP for:

• Performing prospective Drug Utilization Review (DUR);
• Investigating identified red flags of diversion, doctor-shopping, or drug misuse;
• Verifying patient therapy adherence, MME calculations, and multi-pharmacy usage; and
• Fulfilling the pharmacist's corresponding responsibility under 21 CFR § 1306.04 and Va. Code § 54.1-3408.

Failure of a pharmacist to check the PMP when obvious red flags exist constitutes a breach of the standard of care and exposes the pharmacist to disciplinary action for violating their corresponding responsibility.

---

Authorized Delegates and System Security

Under Va. Code § 54.1-2523.1 and 18 VAC 76-20-60, licensed pharmacists and prescribers may designate authorized delegates to access the PMP on their behalf to pull patient clinical histories:

• Authorized Pharmacy Delegates: A pharmacist may designate registered pharmacy technicians and registered pharmacy interns as delegates to run PMP queries.
• Supervisory Responsibility: The designating pharmacist remains strictly responsible for the actions of their delegates. The pharmacist must review the PMP report; delegates cannot perform professional clinical evaluations or make dispensing decisions.
• Individual Credentialing: Every delegate must possess an individual, verified user account. Sharing usernames or passwords is a severe regulatory violation and grounds for immediate suspension of PMP access.

---

Interstate Interoperability: NABP PMP InterConnect

The Virginia PMP is integrated with the NABP PMP InterConnect network, allowing authorized Virginia clinicians to view controlled substance dispensing data across neighboring states (e.g., Maryland, North Carolina, West Virginia, Kentucky, Tennessee, and the District of Columbia). This regional visibility prevents border-crossing diversion schemes.

---

Confidentiality Protections and Penalties for Misuse

Data stored within the Virginia PMP constitutes highly protected health information. Under Va. Code § 54.1-2523 and § 54.1-2525:

• Exemption from Public Disclosure: PMP records are strictly exempt from disclosure under the Virginia Freedom of Information Act (FOIA) and cannot be subpoenaed in ordinary civil litigation between private parties.
• Penalties for Unauthorized Access: Any person who willfully accesses, attempts to access, or discloses PMP data without lawful authorization is guilty of a Class 1 misdemeanor (punishable by up to 12 months in jail and a $2,500 fine). If the unauthorized access or disclosure is done for commercial advantage or malicious financial gain, it constitutes a Class 6 felony (punishable by 1 to 5 years imprisonment).