Recordkeeping, Documentation, and Retention
The layered retention problem
Retention questions are decided by asking which rule applies and then keeping the record for the longest period any rule requires. Connecticut requires pharmacy prescription records to be retained for three years. Federal controlled substance records must be kept two years. DSCSA transaction records must be retained six years. Where Connecticut and federal rules overlap, three years beats two; where DSCSA applies, six years beats three.
What counts as a record
Prescriptions (paper originals, electronic records, oral order documentation), refill and transfer records, DUR and counseling documentation including refusals, controlled substance invoices, DEA 222 forms and CSOS records, inventories, power-of-attorney documents, compounding logs, temperature monitoring logs, return and destruction records (including reverse distributor documentation), REMS certification and documentation, and HIPAA-required documentation such as notices, authorizations, and business associate agreements.
Retrievability
Records must be readily retrievable on request by an authorized inspector. Controlled substance records must be separately identifiable or flagged in an electronic system so that a schedule-by-schedule reconciliation is possible. Backup and off-site storage are acceptable only if the record can be produced promptly and legibly. An illegible scan is not a record.
Traps
- Applying the two-year federal controlled substance period to all pharmacy records.
- Applying the six-year DSCSA period to controlled substance invoices.
- Assuming electronic records eliminate the need for retrievability.
- Overlooking destruction documentation; gaps there look like diversion.
Rule of thumb: longest retention wins, and "we have it somewhere" is not a defense - it must be retrievable.
Worked example: a 2021 Schedule II invoice. Federal controlled substance rule: two years. Connecticut pharmacy record rule: three years. DSCSA: six years. The safe answer is six years.