Most compliance references are organized by regulator, which makes a single obligation look like three separate projects. Pharmacist review of orders is a CMS condition of participation, a Joint Commission standard and a state board rule at the same time, but it is one program, one policy and one record. This page maps the requirements across all of the bodies that enforce them.
This is an educational reference for licensed pharmacists, not legal or regulatory advice. Citations shown with a dashed border still need to be confirmed against the current source, because The Joint Commission renumbered its standards in the Accreditation 360 restructure and state adoption of USP chapters varies. Please verify any reference before relying on it.
Listed in order of how much of a pharmacy leader's compliance workload each one accounts for, rather than by how often it comes up in conversation. Accreditation is discussed the most but is not the largest share of the work.
Compounding and hazardous drug handling. Chapters 795 (nonsterile), 797 (sterile) and 800 (hazardous drugs) set the practice standards for anything the pharmacy prepares.
EnforcementUSP itself does not inspect. Its chapters become enforceable because states adopt them into regulation, CMS and accreditors survey against them, and they are treated as the standard of care in litigation. Adoption varies by state, which is why the same chapter is mandatory in one state and guidance in another.
Controlled substances end to end: registration, ordering, recordkeeping, inventory, security, disposal, and loss reporting.
EnforcementFederal criminal and civil authority. Registration can be suspended or revoked, and individual practitioners are personally exposed. This is the highest consequence body on the list and the one where "we were working on it" carries the least weight.
Licensure of the pharmacy and every pharmacist and technician in it, the pharmacist in charge role and its duties, staffing ratios, and whatever the state has adopted on compounding, sterile products and remote or telepharmacy practice.
EnforcementLicence action against the facility and against named individuals. The pharmacist in charge is personally accountable in most states, which makes this the body with the most direct effect on the person reading this.
Conditions of Participation, the floor for any hospital that bills Medicare. Pharmacy is 482.25; medication error reporting, formulary, controlled substance loss reporting and pharmacist supervision all live there. Antibiotic stewardship was added in 2019.
EnforcementParticipation in Medicare. The most severe consequence available to any body on this list, and the reason accreditors matter at all, since accreditation is how most hospitals demonstrate they meet it.
Accreditation. The Medication Management chapter runs from planning through selection, storage, ordering, preparation, administration, monitoring and evaluation, plus stewardship. Medication management is consistently among the most cited survey areas.
EnforcementAccreditation status, and with it deemed status for Medicare. Findings arrive as required corrective action rather than penalty, which is why it is survivable and why it still consumes enormous preparation time.
Medication safety practice. Targeted Medication Safety Best Practices for Hospitals, the high alert medication lists, and the error alerts that drive local action.
EnforcementNo enforcement authority at all. It matters because accreditors and plaintiffs treat it as the standard of care, and because CMS interpretive guidance points at recognized standards. Ignoring an ISMP best practice is a defensible position only in writing, never by omission.
Controlled substance dispensing data: reporting into the program and querying it before prescribing or dispensing.
EnforcementEnforced through the state board, and increasingly through accreditation expectations on opioid stewardship.
Worker protection. Hazard communication for hazardous drugs, respiratory protection, bloodborne pathogens, and the general duty clause where no specific standard exists.
EnforcementCitation and monetary penalty, driven largely by employee complaint and by injury.
Pharmaceutical waste. RCRA hazardous waste determination, the healthcare specific subpart P rules, and the sewering prohibition. State authorities are frequently stricter than federal.
EnforcementCivil penalty per day per violation, and these accumulate quietly because the violation is usually a disposal practice running unchanged for years.
Drug approval, labeling, REMS, recalls, shortage reporting, and the outsourcing facility framework under 503B that most hospitals now depend on.
EnforcementDirect enforcement is aimed at manufacturers and outsourcing facilities rather than hospitals, but recall and REMS obligations land on the pharmacy.
Filter by the body that enforces the requirement, or by how often it recurs. Select any requirement to see what must be in place, what documentation demonstrates compliance, and the problems that come up most often.
15 requirements
Every medication order is reviewed by a pharmacist for appropriateness before the first dose reaches the patient, with defined and limited exceptions for emergencies and for situations where a delay would harm the patient.
The order review policy, the exception list, and the retrospective review log showing what was reviewed, when and by whom.
Surveyors compare the written exception list against the actual cabinet override list. A mismatch is the common finding, not the absence of a policy.
When the pharmacy is not open, a qualified professional reviews orders in the pharmacist's absence, access to medications is limited to designated personnel, and a pharmacist performs retrospective review when the pharmacy reopens.
The after hours policy and the retrospective pharmacist review log.
The paper trail rather than the policy. Surveyors want to see the retrospective review actually happened on specific dates.
An exact count of all controlled substances on hand, taken at least every two years, dated, and retained. Schedule II must be an exact count; other schedules may be estimated in some circumstances, subject to container size rules.
The signed and dated inventory record, retained for the required period and available at the registered location.
Date, signature, completeness, and whether the record is physically retrievable at the registered location rather than in a shared drive nobody can reach during inspection.
Theft or significant loss is reported to the DEA in writing, and separately to the state board where required. CMS additionally requires that abuses and losses be reported internally to the person responsible for pharmaceutical services and, as appropriate, to the chief executive.
The DEA Form 106, the state report, and the internal escalation record.
Timeliness, and whether "significant" was defined in advance or decided after the fact.
Effective controls to guard against theft and diversion, covering chain of custody from receipt to waste, surveillance capable of detecting anomalous use, and a defined investigation pathway.
The diversion prevention plan, surveillance reports, discrepancy log with resolution times, and investigation records.
Whether surveillance is capable of catching a competent diverter, and whether discrepancies close within a defined time.
Compounded sterile preparations are prepared in qualified engineering controls by trained and competency assessed personnel, with beyond use dating assigned by category, environmental monitoring on a defined schedule, and documented cleaning.
Certification reports, environmental monitoring results with action level responses, competency records per person, master formulation records, and cleaning logs.
Competency records for every person who compounds, and whether an out of action level environmental result produced a documented investigation and repeat.
Hazardous drugs are handled under containment from receipt through storage, compounding, administration and disposal, by trained personnel, under a written plan. Personnel of reproductive capability confirm in writing that they understand the risks.
The written hazardous drug plan, the drug list with assessment of risk decisions, training and acknowledgement records, and spill and exposure records.
Whether the local hazardous drug list is current against the NIOSH list, and whether any assessment of risk is written rather than assumed.
A formulary system established by the medical staff to assure quality pharmaceuticals at reasonable cost, with a defined process for addition, removal and restriction.
Committee minutes, the current formulary, and monographs supporting decisions.
That the medical staff, not pharmacy alone, owns the formulary, and that minutes show actual deliberation rather than ratification.
Drug administration errors, adverse drug reactions and incompatibilities are reported immediately to the attending physician and, where appropriate, into the hospital's quality assessment and performance improvement program.
Event reports, notification records, and the QAPI medication report.
Whether reporting reaches QAPI as analysis rather than as a raw count.
Not a regulation. ISMP publishes consensus best practices on a two year cycle and expects hospitals to assess themselves against them and act on gaps. Accreditors and plaintiffs treat them as the standard of care.
The completed gap analysis worksheet and the action plan with closure dates.
Not directly surveyed. It surfaces when an event occurs and the relevant best practice was known, unimplemented and undocumented.
A formal monthly process where an interdisciplinary team reviews medication risks and errors reported by external organisations, assesses whether the same failure could occur locally, and determines action.
Committee minutes showing each alert, the local assessment, and the disposition.
Not directly surveyed; strong evidence of a functioning safety program.
An active hospital wide antibiotic stewardship program, with leaders appointed by the governing body who are qualified through education, training or experience. A pharmacist is explicitly eligible to be named a program leader.
The governing body appointment, committee minutes, the current antibiogram, and use and resistance reporting.
Whether the appointment is documented by the governing body, which is the piece most often missing even where the program is strong.
CMS estimated roughly 0.4 FTE physician and 1.0 FTE clinical pharmacist for a hospital of about 124 beds. Useful when arguing for the position.
Leadership defines goals and metrics for pain management and opioid prescribing, allocates resources, and promotes accountability across the disciplines involved. Non pharmacologic modalities, staff education, consultation services, PDMP access and monitoring equipment must be available.
The metric set with targets, committee minutes, and the education record.
That leadership defined the metrics, which makes the metric set the committee's real product rather than a byproduct.
Pharmaceutical waste is characterised as hazardous or non hazardous, segregated accordingly, and disposed of through compliant channels. Sewering of hazardous waste pharmaceuticals is prohibited.
The waste determination, vendor manifests, training records, and the generator status determination.
Rarely surveyed by health accreditors and inspected directly by environmental authorities. Findings are usually systemic, because the practice ran unchanged for years.
The pharmacy licence, the DEA registration, and every pharmacist and technician licence are current. Most states name a pharmacist in charge with personal accountability and require notification when that person changes.
The licence register, current certificates, and change of PIC notifications.
Expiry dates and whether the posted licence matches the named PIC.
Nothing matches those filters.
Some requirements are large enough to need their own method. The annual formulary review is the first of these: The Joint Commission requires it and prescribes no way of doing it, so most departments either skip it or produce a list.
A twenty-block schedule covering the inpatient formulary in a year, with the agents expected in each class, the guidelines to check against, and the coherence questions a drug list cannot answer.
Read it Open the class review schedule
The same requirements grouped by how often they recur. Continuous obligations make up the ongoing program, while the dated ones are the requirements most often missed.