Federal and Arizona Law Governing Pharmacy
The federal floor and the state overlay
Federal law sets minimum standards: the Controlled Substances Act, DEA registration and recordkeeping rules, the Food, Drug, and Cosmetic Act (including drug approval, labeling, and compounding limits), HIPAA privacy and security, and DSCSA product-tracing requirements. Arizona adds licensing, practice standards, PMP duties, and its own controlled-substance restrictions. The exam repeatedly tests the interaction: a practice lawful under federal rules may still violate Arizona law, and a state permission cannot override a federal prohibition.
Key federal touchpoints
- CSA/DEA: schedules, quotas, order forms, refill limits, reporting of loss, and registration renewal.
- FDCA Section 503A/503B: compounding boundaries, essentially a copy of a commercially available drug, and outsourcing facility requirements.
- DSCSA: transaction information, verification of trading partners, and handling of suspect or illegitimate product.
- HIPAA: minimum necessary use and disclosure, patient rights, and breach notification.
Key Arizona touchpoints
Board licensure and discipline, PMP query and reporting, counseling and labeling requirements, immunization authority, and controlled-substance prescribing limits. Where Arizona is more restrictive, follow Arizona.
Traps
Assuming HIPAA permits a disclosure that state law forbids; assuming a compounded product may be prepared when a commercially available equivalent exists outside the permitted exceptions; assuming federal registration alone satisfies state requirements. Preemption arguments are almost always wrong in the direction of "federal law lets me ignore the state."
Rule of thumb
Apply both laws and choose the more protective or more restrictive result. If an answer choice says one law "cancels" the other, eliminate it.
Worked example
A pharmacy receives a suspicious shipment of a high-cost biologic with mismatched transaction data. Under DSCSA the pharmacist must quarantine the product, investigate, and notify trading partners rather than dispensing it; state recordkeeping duties apply on top.