Overview
This study guide covers the essential federal pharmacy laws, DEA regulations, patient privacy rules, and FDA classifications tested on the PTCB exam. Mastery of these topics requires understanding not just definitions, but the relationships between laws, forms, schedules, and regulatory agencies. Pay close attention to specific numbers (schedules, refill limits, timeframes) as these are frequently tested.
---
DEA & Controlled Substances
The Controlled Substances Act (CSA) – Schedule Overview
The CSA classifies controlled substances into five schedules based on abuse potential, accepted medical use, and potential for dependence.
| Schedule | Abuse Potential | Medical Use | Examples |
|----------|----------------|-------------|---------|
| Schedule I | Highest | None (in U.S.) | Heroin, LSD, marijuana (federal) |
| Schedule II | High | Yes | Oxycodone, fentanyl, Adderall, cocaine |
| Schedule III | Moderate | Yes | Tylenol with codeine, ketamine, anabolic steroids |
| Schedule IV | Lower | Yes | Benzodiazepines, zolpidem, tramadol |
| Schedule V | Lowest | Yes | Cough syrups with codeine, pregabalin |
Refill Rules by Schedule
• Schedule II: Zero refills — no exceptions under federal law
• Schedule III & IV: Up to 5 refills within 6 months of the date written
• Schedule V: Up to 5 refills within 6 months (same as III/IV; state laws may vary)
• Schedule II Emergency Oral Rx: Enough to cover emergency period only (generally a 72-hour supply); written Rx must follow within 7 days
> Watch Out For: The exam may try to trick you by asking about refills for Schedule II in special circumstances (hospice, long-term care). While some states have exceptions, the federal answer is always zero refills for Schedule II.
DEA Forms – Know These Cold
| DEA Form | Purpose |
|----------|---------|
| DEA Form 222 | Order Schedule I & II controlled substances (or electronic equivalent: CSOS) |
| DEA Form 106 | Report theft or significant loss of controlled substances |
| DEA Form 41 | Document destruction or disposal of controlled substances |
DEA Registration Number Format
• Format: Two letters + seven digits (e.g., AB1234563)
- First letter: Type of registrant (e.g., A or B = hospital/pharmacy/practitioner, M = mid-level practitioner)
- Second letter: First letter of the registrant's last name (or business name)
• Validation trick: A valid DEA number can be verified mathematically — a commonly tested concept in detecting forgeries
Record-Keeping & Inventory Requirements
• Minimum record retention: 2 years (federal; states may require longer)
• Biennial inventory: Complete inventory of all controlled substances required at least every 2 years
• Schedule II inventory: Must be an exact (actual) count — no estimating
• Schedules III–V inventory: Estimated count is acceptable (exact if container holds more than 1,000 dosage units and has been opened)
Key Terms – DEA & Controlled Substances
• Controlled Substances Act (CSA): Federal law establishing the scheduling system for controlled substances
• CSOS (Controlled Substance Ordering System): Electronic equivalent of DEA Form 222
• Biennial Inventory: Mandatory complete count of all controlled substances every two years
• Emergency Oral Prescription (Schedule II): Verbal Rx permitted in emergencies; written Rx must follow within 7 days
> Watch Out For: DEA Form 106 vs. Form 41 — 106 is for theft/loss (something unexpected happened); 41 is for planned destruction/disposal. These are commonly confused on exams.
---
Key Federal Legislation
Timeline of Major Federal Laws
```
1938 → FDCA (safety required)
1951 → Durham-Humphrey (Rx vs. OTC distinction)
1962 → Kefauver-Harris (safety + efficacy required)
1970 → Poison Prevention Packaging Act (child-resistant caps)
1970 → Controlled Substances Act (DEA schedules)
1984 → Hatch-Waxman Act (generic drug ANDAs)
1990 → OBRA '90 (DUR + counseling for Medicaid)
1996 → HIPAA (patient privacy)
2007 → FDAAA (REMS program established)
```
Law-by-Law Breakdown
#### Federal Food, Drug, and Cosmetic Act (FDCA) – 1938
• Passed in response to the sulfanilamide disaster of 1937 (107 deaths)
• Required drugs to be proven safe before marketing
• Foundation of modern FDA authority
#### Durham-Humphrey Amendment – 1951
• Amendment to the FDCA
• Established the legal distinction between prescription (Rx) and over-the-counter (OTC) drugs
• Defined which drugs require a prescription and prohibit refills without a new Rx
#### Kefauver-Harris Amendment – 1962
• Passed in response to the thalidomide tragedy (birth defects in Europe)
• Required proof of both safety AND efficacy before FDA approval
• Established Good Manufacturing Practices (GMP)
#### Hatch-Waxman Act – 1984
• Full name: Drug Price Competition and Patent Term Restoration Act
• Created the Abbreviated New Drug Application (ANDA) pathway for generic drugs
• Generic manufacturers must prove bioequivalence (not repeat full clinical trials)
• Balanced generic drug access with brand-name patent protections
#### OBRA '90 – Omnibus Budget Reconciliation Act of 1990
• Applies to Medicaid patients (states may extend requirements to all patients)
• Requires pharmacists to:
- Offer patient counseling
- Perform Prospective Drug Utilization Review (DUR) — checking for interactions, duplications, and contraindications before dispensing
• Created the drug use review standard of care
#### Poison Prevention Packaging Act (PPPA) – 1970
• Requires child-resistant packaging for most Rx and OTC drugs
• Exceptions (non-child-resistant packaging allowed):
- Patient or prescriber requests non-CR packaging (must be documented)
- Certain drugs by regulation (e.g., sublingual nitroglycerin, oral contraceptives in manufacturer's dispensing pack)
#### Food and Drug Administration Amendments Act (FDAAA) – 2007
• Established the Risk Evaluation and Mitigation Strategy (REMS) program
• REMS may include: Medication Guides, patient enrollment programs, Elements to Assure Safe Use (ETASU)
• Example REMS drugs: isotretinoin (iPLEDGE), clozapine, thalidomide
Key Terms – Federal Legislation
• ANDA (Abbreviated New Drug Application): Streamlined FDA application for generic drug approval
• Bioequivalence: Demonstrated similarity in rate and extent of absorption between generic and brand-name drugs
• Prospective DUR: Review of a prescription for safety issues before dispensing
• REMS: FDA-required strategy to manage known or potential serious risks of certain medications
• GMP (Good Manufacturing Practices): FDA standards for drug manufacturing quality
> Watch Out For: OBRA '90 only mandates counseling for Medicaid patients under federal law. However, many states extend this requirement to all patients. Know the federal baseline — the exam tests both.
> Watch Out For: The FDCA (1938) required safety only; the Kefauver-Harris Amendment (1962) added the efficacy requirement. These are frequently tested as separate concepts.
---
HIPAA & Patient Privacy
Core Concepts
HIPAA — Health Insurance Portability and Accountability Act, enacted 1996
#### Protected Health Information (PHI)
• Any health information that can be used to identify an individual patient
• Includes: name, address, DOB, SSN, diagnosis, prescription information, billing records
• Applies to information in any format — written, electronic, or verbal
#### The Three Permitted Disclosures (TPO)
PHI may be shared without written patient authorization for:
1. Treatment — sharing with other treating providers
2. Payment — billing insurance companies
3. Healthcare Operations — quality improvement, staff training, audits
#### Minimum Necessary Standard
• Use, disclose, or request only the minimum amount of PHI necessary to accomplish the intended purpose
• Does not apply to disclosures for treatment purposes between providers
#### When Patient Authorization IS Required
• Marketing purposes
• Sale of PHI
• Most research uses
• Disclosure to employers or family members (unless patient grants permission)
HIPAA Violations & Penalties
• Civil penalties: Range from $100 to $50,000+ per violation
• Criminal penalties: Knowing violations can result in fines and imprisonment
• Breach Notification Rule: Covered entities must notify affected individuals, HHS, and sometimes media of breaches
Key Terms – HIPAA
• PHI (Protected Health Information): Individually identifiable health information
• Covered Entity: Health plans, healthcare clearinghouses, healthcare providers (including pharmacies)
• Business Associate: Third parties that handle PHI on behalf of a covered entity (e.g., billing company)
• TPO: Treatment, Payment, and Healthcare Operations — the three permitted PHI disclosures
• Minimum Necessary Standard: Core HIPAA principle limiting PHI disclosure to what is needed
> Watch Out For: Sharing PHI with another treating physician does NOT require patient authorization — this falls under Treatment in TPO. The exam may present this as a violation when it is not.
---
FDA & Drug Classifications
FDA Pregnancy Categories (Old System — Still Tested)
| Category | Meaning |
|----------|---------|
| A | Adequate studies show no fetal risk |
| B | Animal studies show no risk; no adequate human studies |
| C | Animal studies show adverse effects; no adequate human studies |
| D | Evidence of human fetal risk, but benefits may outweigh risks |
| X | Fetal abnormalities demonstrated; risks clearly outweigh benefits — CONTRAINDICATED |
> Watch Out For: Category D means there IS fetal risk but the drug may still be used if benefits outweigh risks (e.g., some seizure medications). Category X means it is never acceptable to use in pregnancy.
National Drug Code (NDC)
• Format: 10- or 11-digit code divided into three segments
| Segment | Identifies |
|---------|-----------|
| First | Labeler / Manufacturer |
| Second | Product (drug, strength, dosage form) |
| Third | Package size and type |
• Example: 0069-4150-66 → Pfizer / Norvasc 5mg tablets / 90-count bottle
• NDC is used for billing, inventory, and identifying specific drug products
FDA Warning Levels
#### Black Box Warning (Boxed Warning)
• Most serious FDA warning level
• Printed in a black-bordered box in prescribing information
• Indicates significant risk of serious or life-threatening adverse effects
• Examples: antidepressants (suicidality), fluoroquinolones (tendon rupture), NSAIDs (cardiovascular risk)
#### FDA Drug Recall Classes
| Class | Severity |
|-------|---------|
| Class I | Use will cause serious adverse health consequences or death |
| Class II | Use may cause temporary adverse health consequences; serious consequences are unlikely |
| Class III | Use is unlikely to cause adverse health consequences |
> Watch Out For: Class I is the most serious recall. The word "will" versus "may" in the definitions is a key distinguishing feature on exams.
FDA MedWatch Program
• FDA's voluntary reporting program for adverse drug events
• Who can report: healthcare professionals and patients
• What is reported: adverse drug reactions, medication errors, product quality problems
• Purpose: Post-market drug safety surveillance
• Website: FDA.gov/safety/medwatch
Regulatory Agency Jurisdiction
| Agency | Primary Role |
|--------|-------------|
| FDA (Dept. of Health & Human Services) | Drug approval, labeling, manufacturing standards, recalls |
| DEA (Dept. of Justice) | Enforces CSA, oversees controlled substance registration and scheduling |
| State Boards of Pharmacy | License pharmacists and pharmacies; may exceed (but not fall below) federal standards |
Key Terms – FDA & Drug Classifications
• NDA (New Drug Application): Full application required for new brand-name drugs
• ANDA (Abbreviated New Drug Application): Streamlined application for generic drugs
• Black Box Warning: Highest level FDA safety warning
• MedWatch: FDA adverse event voluntary reporting system
• Class I Recall: Most serious — product will cause serious harm or death
• NDC: National Drug Code — unique identifier for every drug product
> Watch Out For: The DEA enforces the Controlled Substances Act and is part of the Department of Justice — NOT the FDA or HHS. The FDA regulates drugs but does not enforce the CSA.
---
Quick Review Checklist
Use this checklist in the final days before your exam. Check off each item as you can confidently explain it:
DEA & Controlled Substances
• [ ] I can name an example drug for each schedule (I through V)
• [ ] I know Schedule II has zero refills under federal law
• [ ] I know Schedules III/IV allow 5 refills within 6 months
• [ ] I can distinguish DEA Form 222 (ordering), 106 (theft), and 41 (destruction)
• [ ] I know records must be kept for a minimum of 2 years
• [ ] I know the biennial inventory is required every 2 years
• [ ] I know Schedule II requires an exact count on inventory
• [ ] I know emergency oral Schedule II Rx allows a 72-hour supply + written Rx within 7 days
Federal Legislation
• [ ] I can match each major law to the year it was passed and the event that prompted it
• [ ] I know the FDCA (1938) required safety; Kefauver-Harris (1962) added efficacy
• [ ] I know the Durham-Humphrey (1951) established Rx vs. OTC distinction
• [ ] I know Hatch-Waxman (1984) created the ANDA/generic drug pathway
• [ ] I know OBRA '90 requires DUR and counseling for Medicaid patients
• [ ] I know the PPPA (1970) requires child-resistant packaging with defined exceptions
• [ ] I know FDAAA (2007) established the REMS program
HIPAA & Privacy
• [ ] I can define PHI and give examples
• [ ] I know the TPO rule — treatment, payment, operations require no patient authorization
• [ ] I know the minimum necessary standard applies to all disclosures except treatment
• [ ] I know sharing with another treating provider is NOT a HIPAA violation
FDA & Drug Classifications
• [ ] I know FDA Pregnancy Category X = contraindicated (risks outweigh benefits)
• [ ] I know Category D = risk exists but drug may still be used
• [ ] I can describe the three segments of an NDC number
• [ ] I know a Black Box Warning is the most serious FDA safety label
• [ ] I know Class I recall = product will cause serious harm or death
• [ ] I know MedWatch is the FDA voluntary adverse event reporting program
• [ ] I know the DEA is under the Department of Justice, not the FDA/HHS
---
Good luck on your PTCB exam! Focus on the specific numbers, dates, form numbers, and classifications — these details are the most frequently tested aspects of pharmacy law.