Federal and Maryland Overlap: FDA, DEA, HIPAA, and Recall and Return Handling
Who regulates what
FDA approves drugs, sets labeling, and runs recalls. DEA registers and regulates controlled substances. HIPAA sets the federal floor for protected health information. The Maryland Board licenses people and places and enforces practice standards. A single act can violate more than one layer.
Recalls and returns
- Recall classes: Class I (serious harm or death), Class II (temporary or reversible harm), Class III (unlikely harm).
- On notice, quarantine affected stock, stop dispensing, identify patients who received the lot, notify them when the recall requires it, document outreach, and return product per the recall instructions.
- Medication that has left the pharmacy's control is not returned to stock. Undispersed stock may go back to the wholesaler under credit and return rules.
- Controlled substance destruction follows DEA rules (reverse distributor or Form 41 with witnesses), plus Maryland disposal restrictions.
HIPAA and Maryland confidentiality
HIPAA permits disclosures for treatment, payment, and operations and requires the minimum necessary. Maryland's Confidentiality of Medical Records Act can be stricter, particularly for sensitive information and certain minors' services. When both apply, follow the stricter rule and verify authorization before releasing records.
Worked example
A manufacturer recalls a lot of metoprolol for subpotency (Class II). The pharmacy quarantines remaining stock, pulls the dispensing history for that lot, calls affected patients, documents the calls, and returns product per the recall instructions. It does not redispense returned bottles.
Traps
Assuming a recall notice automatically means refunds without documentation; returning dispensed-and-retrieved medication to stock; assuming HIPAA preempts stricter Maryland confidentiality rules.