Federal and Ohio Pharmacy Law and Regulatory Compliance
Which regulator governs what
The FDA governs drug approval, labeling content, and manufacturing; the DEA governs controlled substances; the Ohio Board of Pharmacy governs practice, facilities, and state reporting; CMS and accreditation bodies govern institutional settings. One transaction can touch all four, and the exam tests whether you assign each rule to the right regulator.
Federal overlays you will see
- DSCSA - verify trading partners, receive and retain transaction data, and handle suspect or illegitimate product.
- Poison Prevention Packaging Act - child-resistant packaging unless the patient requests otherwise or the prescriber directs; document a patient request.
- Combat Methamphetamine Epidemic Act - pseudoephedrine stays behind the counter with photo ID, a logbook, age and quantity limits, and daily and 30-day caps.
- HIPAA - minimum necessary disclosure; Ohio confidentiality rules also cover prescription records and OARRS data.
- Compounding - 503A versus 503B, with USP <795>, <797>, and <800> standards for nonsterile, sterile, and hazardous drugs.
Worked example
A customer wants three boxes of 48-count pseudoephedrine 30 mg. That totals 4,320 mg, above the daily limit, so the sale is refused even though the logbook is otherwise clean. The pharmacist offers a phenylephrine or prescription alternative, and the log entry shows the refusal reason.
Traps
- Mixing up which agency requires which report.
- Releasing prescription information to a family member without authorization.
- Ignoring DSCSA verification after a suspicious wholesale offer.
- Storing hazardous drugs without the required containment and signage.
- Selling pseudoephedrine from an open shelf.