Federal and Kentucky State Controlled Substance Law Study Guide
Fundamentals of the Controlled Substance Act of 1970
The Controlled Substance Act (CSA) of 1970 regulates the manufacturing, distribution, and dispensing of controlled substances through a system that establishes the scope of what the act regulates and who is subject to its requirements.
The Act consists of three primary titles:
Title I: Establishes rehabilitation programs for drug abusers.
Title II: Focuses on the registration and distribution of controlled substances, creating a "closed system."
Title III: Addresses the importation and exportation of controlled substances.
Federal authority to enact the CSA is derived from the Interstate Commerce Clause of the U.S. Constitution. In Section 801 of the Act, Congress clarified that interstate transactions involving controlled substances have a substantial and direct effect on interstate commerce (as seen in U.S. v. Sullivan). Sections 801(5) and (6) further provide that intrastate manufacturing and distribution cannot be distinguished from interstate counterparts.
State regulation is permitted under the police powers of the state if the laws do not conflict with federal law. Conflict is defined by the preemption doctrine and the supremacy clause as narrowing or contradicting federal mandates. A state law that makes a federal Schedule IV substance a Schedule II is valid (as it is more restrictive), but a state law attempting to make a federal Schedule II a Schedule IV would be invalidated for conflicting with federal requirements.
In Lehman v. State Board of Medical Affairs, New Jersey ruled that the state could prohibit physicians from using amphetamines for obesity, even though the federal government was silent on that specific restriction. This was deemed reasonably related to controlling drug traffic.
The Closed System: Definitions and Registration
The closed system accounts for controlled substances from the beginning of production to the end-user.
Key procedural definitions include:
Manufacturing: The initial production of the substance.
Distribution: The movement of the drug from the manufacturer to the wholesaler, or the wholesaler to the pharmacy.
Dispensing: The delivery of a controlled substance to an end-user (patient) via a lawful order from a practitioner.
Administration: The act of getting a drug from an inpatient pharmacy into the arm or IV bag of a patient.
Registration requirements for the DEA (Department of Justice) apply to every entity engaging in these activities.
Registrants include manufacturers, wholesale distributors, prescribers, hospitals, and pharmacies.
Individual pharmacists are not required to be individually registered with the DEA; they operate under the pharmacy's institutional license.
Federal Classification of Controlled Substances (Schedules I-V)
Schedule I (C-I):
High potential for abuse.
No currently accepted medical use in the United States.
Lacks accepted safety information, even under medical supervision.
Examples: Heroin, Peyote, and THC (Marijuana).
Note on Marijuana: It remains federally Schedule I despite state legalizations. State medical or recreational use is a violation of federal law, though an Obama-era executive order suggested non-prosecution in states where it is legal. Legitimate dispensaries often cannot use FDIC-insured banks because the activity is federally illegal.
The Farm Bill allows hemp production if the THC byproduct is no more than (or similar relative ratios).
Schedule II (C-II):
High potential for abuse.
Currently accepted medical use.
Abuse may lead to severe physical or psychological dependence.
Examples: Opium, Morphine, Codeine, Fentanyl, and Methadone.
Schedule III (C-III):
Potential for abuse less than Schedule I or II.
Accepted medical use.
Abuse leads to moderate or low physical dependence or high psychological dependence.
Narcotic thresholds for Schedule III:
Not more than of codeine per or not more than per dosage unit.
Not more than of dihydrocodeine per or per dosage unit.
Not more than of ethylmorphine per or per dosage unit.
Not more than of opium per or , or not more than per dosage unit.
Not more than of morphine per or .
Schedule IV (C-IV):
Low potential for abuse relative to Schedule III.
Accepted medical use.
Abuse leads to limited physical or psychological dependence relative to Schedule III.
Examples: Phenobarbital, Diazepam, Alprazolam.
Schedule V (C-V):
Low potential for abuse relative to Schedule IV.
Abuse leads to limited physical or psychological dependence relative to Schedule IV.
Narcotic thresholds for Schedule V:
Not more than of codeine per or .
Not more than of dihydrocodeine, ethylmorphine, or opium per or .
Not more than of diphenoxylate and not less than of atropine per dosage unit.
Not more than of difenoxin and not less than of atropine per dosage unit.
Administrative Scheduling and Manufacturer Labeling
The Attorney General has the authority to schedule, unschedule, or move drugs between schedules. He must request a scientific and medical evaluation and recommendation from the Secretary of Health and Human Services (HHS).
The FDA determines medical applicability based on safety and efficacy.
Evaluation factors include: actual or relative potential for abuse, scientific evidence of pharmacological effects, history and pattern of abuse, risk to public health, and whether the substance is an immediate precursor to a controlled substance.
Commercial containers must be labeled with identification symbols: C-I, C-II, C-III, C-IV, or C-V. Failure to include these is considered misbranding.
Prescription Requirements and Practitioner Registration
A prescription is an order for medication dispensed to an ultimate user. It does not include orders for immediate administration in a hospital.
Practitioners must be authorized to prescribe by the jurisdiction in which they practice and must be registered with the DEA. If a provider practices in three states, they must have three separate DEA numbers.
Exemptions from registration include:
Agents or employees of a registrant (e.g., pharmacists working in a pharmacy).
Common carriers (e.g., delivery services like River City Courier).
Ultimate users (patients).
Mid-level practitioners (NPs, PAs) have limited prescriptive authority dictated by state laws.
Interns and residents in a hospital may use the institutional DEA number with an assigned internal code.
Prescription details must include:
Date of issuance.
Full name and address of the patient.
Drug name, strength, and dosage form.
Quantity ordered and directions for use.
Name, address, and DEA number of the prescriber.
For animals: the species (e.g., Canine, Bovine, Porcine, Swine).
Verification of DEA Registration Numbers
The DEA number consists of two letters followed by seven digits.
First Letter: A/B (Hospital/Clinic/Pharmacy), F (Full Practitioner), M (Mid-level Practitioner), X (Buprenorphine/Opioid treatment - now largely defunct).
Second Letter: Usually the first letter of the registrant's last name at the time of registration.
The math verification for the 7th digit:
Add the 1st, 3rd, and 5th digits.
Add the 2nd, 4th, and 6th digits and multiply the sum by 2.
Add the results of the two previous steps.
The last digit of this final sum must match the 7th digit (the check digit) of the DEA number.
Professional Standards: Legitimate Medical Purpose and Corresponding Responsibility
A controlled substance prescription must be issued for a "legitimate medical purpose" by a practitioner acting in the usual course of professional practice.
Corresponding Responsibility: Pharmacists have a legal obligation to ensure a prescription is for a legitimate medical purpose. If a pharmacist knowingly (or should have known) dispenses an improper prescription, they are liable under the CSA.
U.S. v. Hayes: A federal appeals court affirmed that the corresponding liability doctrine is constitutional and that pharmacists cannot simply say they were "following the doctor's orders."
Specific Dispensing Regulations for Schedule II Substances
C-II prescriptions generally require a written or electronic order and cannot be refilled.
Emergency Oral Authorization (Federal Rule):
Limited quantity to cover the emergency period.
Must be reduced to writing immediately.
The prescriber must provide a written/signed prescription within 7 days.
Note: Kentucky does not allow emergency oral C-II authorizations.
Faxing C-II Prescriptions: Only allowed in three instances:
Compounded for direct administration by injection or infusion.
Long-term care facility (LTCF) patients.
Hospice patients.
Partial Filling of C-IIs:
If a pharmacy is out of stock, they have 72 hours from the time of "fill" to provide the remainder. If not filled in 72 hours, the prescription is void.
LTCF or terminally ill patients may have partial fills for up to 60 days.
Patient requested partial fills: Under federal/Kentucky law, a patient can request a partial fill. In Kentucky, if the patient requests a partial, they have 30 days from the date of issuance to pick up the remainder.
Multiple Serial C-II Prescriptions: A doctor can write multiple prescriptions for the same drug on the same day (e.g., for ADHD), but they must be dated with the actual date of issuance and contain "do not fill until" instructions. The total supply cannot exceed 90 days. Kentucky law stipulates the "do not fill until" date cannot exceed 60 days from the written date.
Dispensing Regulations for Schedule III, IV, and V Substances
C-III through C-V prescriptions can be written, oral, or faxed.
Refills are limited to 5 times within a 6-month period.
Transfers between pharmacies are generally allowed on a one-time basis for refill purposes. However, if pharmacies share a real-time online database, they may transfer up to the maximum number of refills.
Electronic Prescribing for Controlled Substances (EPCS) exception: Unfilled original electronic prescriptions (including C-II through C-V) may be transferred between DEA-registered pharmacies.
Transfers, Documentation, and Record-Keeping Requirements
DEA Form 222: Used for ordering C-I and C-II substances. It can be a paper form (original, copy for purchaser, copy to DEA) or electronic via the Controlled Substance Ordering System (CSOS).
DEA Form 41: Used for the destruction or disposal of controlled substances.
DEA Form 106: Used to report theft or significant loss of controlled substances. "Theft" of any amount must be reported; "loss" is reported if significant (based on quantity vs. business volume).
Record Retention: Federal law requires records be kept for 2 years. Kentucky law requires 5 years for C-II records and 5 years for any computerized records.
Ancillary Drug Control Laws
Controlled Substance Registrant Protection Act: Mandates federal investigation for pharmacy robberies if the replacement cost is over , or if a registrant is killed/injured.
Combat Methamphetamine Epidemic Act of 2005 (Pseudoephedrine/Ephedrine):
Federal limit: per day; per 30-day rolling period.
Kentucky limit: per transaction; per 30-day rolling period.
Must be stored behind the counter; purchaser must be 18, show ID, and sign a logbook (retained for 2 years).
Kentucky-Specific Controlled Substance Regulations
In Kentucky, controlled substances are regulated by the Cabinet for Health and Family Services (CHFS).
Gabapentin is a Schedule V controlled substance in Kentucky, though it is not federally scheduled.
C-II Period of Validity: C-II prescriptions are only valid for 60 days from the date of issuance.
C-V Over-the-Counter (OTC): Codeine preparations (like Robitussin AC) can be sold OTC in Kentucky with limits. Regulation says not more than (), though the statute mentions . It must be dispensed by a pharmacist, although a clerk may ring the sale.
Inventory Rules:
Biennial inventory (every 2 years/"e" for every 2 years).
Exact count for all C-IIs.
C-III through C-V: Estimate if bottle size is less than ; exact count if bottle is equal to or greater than .
Newly scheduled drugs must be inventoried within 30 days (State) or 1 day (Federal).
Electronic Monitoring and Security: KASPER and Prescription Blanks
KASPER (Kentucky All Schedule Prescription Electronic Reporting):
Prescription data must be reported within 1 day of dispensing.
Patient Identifier (PIN): Social Security Number is required if the patient has one. If no social, use a driver's license number. If neither exists (or for children/animals), use all zeros (). Never use a parent's social for a child or an owner's social for a pet.
Prescription Blanks:
Must be Pantone Green.
Must have "Void" appear if photocopied.
Must have "Rx" in the upper right-hand corner.
Must have a quantity check-box.
Only one prescription per blank is allowed for written orders.
Prescriptive Authority of Practitioners in Kentucky
Physicians (MD/DO/DMD/DDS): Generally no extra-legal limitations on schedules.
Physician Assistants (PA):
C-II: Not authorized (except for the hydrocodone grandfather clause).
C-III: 30-day supply, no refills.
C-IV: 6 months of refills (but Benzos and Carisoprodol are limited to 30 days, no refills).
C-V: 6 months of refills.
Advanced Practice Registered Nurses (APRN/NP):
C-II: 72-hour supply maximum (stimulants for mental health may be 30 days; grandfathered hydrocodone is 30 days).
C-III: 30-day supply, no refills.
C-IV and C-V: Up to 5 refills/6 months.
Optometrists (OD):
C-II: No authority (except 72 hours of hydrocodone combination products).
72-hour supply limit for other authorized controls.
Veterinarians (DVM): No specific extra-legal limits, but cannot prescribe for humans.
Questions & Discussion
Question: If a doctor is working in a college town with students from 50 different states, does he need to be licensed in all those states?
Answer: If the doctor sees the patient in person at the office, no. However, for telehealth, the law generally defines the site of treatment as where the patient is located. If the doctor treats the student while they are home for the summer in another state via telehealth, the doctor theoretically needs to be licensed in that state, though enforcement varies.
Question: What if a patient asks for partial fill of a C-II today, but the prescription was written 35 days ago?
Answer: You can give them the partial fill, but they lose the ability to pick up the remainder because the completion of a patient-requested C-II partial fill must occur within 30 days of the date the prescription was written.
Question: Do pharmacists need their own DEA number?
Answer: No, they piggyback off the pharmacy's registration unless they have independent prescribing authority (like at the VA).
Discussion on Cheritussin flavor: It was noted that for years a cherry-labeled drug was actually orange-flavored, though some formulations have recently switched to actual cherry flavor.