A single 340B diversion finding during a HRSA audit can put a covered entity’s entire program at risk, and pharmacists working the counter — whether in-house at a covered entity or through a contract pharmacy arrangement — are the last line of defense against the errors that trigger those findings. Understanding the mechanics matters even if you never touch the 340B database directly.
What 340B actually is, briefly
The 340B Drug Pricing Program requires manufacturers to sell outpatient drugs at reduced prices to eligible “covered entities” — safety-net hospitals, federally qualified health centers, Ryan White clinics, and certain other providers serving low-income and uninsured populations. The program is administered by HRSA, not a state board, but it intersects heavily with state pharmacy practice and licensing, and compliance failures can trigger both federal repayment obligations and state-level scrutiny.
The eligible patient definition is where most violations start
340B pricing can only be applied to drugs dispensed to the covered entity’s own eligible patients — not to just anyone who walks in the door. HRSA’s general patient definition requires that the individual has an established relationship with the covered entity such that the entity maintains their health records, the drug was ordered as a result of services from a covered entity provider, and the individual receives services consistent with the entity’s grant funding or scope.
Getting this wrong — known as “diversion” — is the single most common finding in HRSA audits. Common diversion scenarios include dispensing 340B-priced drugs to a patient seen only by a non-covered-entity provider, or filling for a patient whose covered-entity relationship has lapsed.
Duplicate discounts: the other major risk
Manufacturers aren’t required to give both a 340B discount and a Medicaid rebate on the same unit of a drug — this is the “duplicate discount” prohibition. Covered entities must carve in or carve out Medicaid utilization consistently and track it accurately, typically through state Medicaid exclusion files or the Medicaid Exclusion File (MEF) list. Pharmacists dispensing 340B drugs to Medicaid patients need to know which carve-in/carve-out election applies at their site, because getting it backwards creates exactly the duplicate discount HRSA audits are designed to catch.
Contract pharmacy arrangements add another layer
Many covered entities without an in-house pharmacy — or wanting broader patient access — contract with retail or specialty pharmacies to dispense 340B drugs on their behalf. These arrangements require:
- A written contract pharmacy agreement meeting HRSA guidelines
- Independent, documented eligibility determination for every 340B claim
- Regular self-audits (commonly quarterly) comparing contract pharmacy dispensing against covered entity prescribing records
- Clear separation of 340B and non-340B inventory, whether through physical or virtual (software-based) inventory management
Pharmacists working at contract pharmacy sites need to understand that eligibility determination isn’t optional paperwork — it’s the compliance backbone of the entire arrangement, and a growing number of states now require additional contract pharmacy registration or reporting beyond HRSA’s own requirements.
State-level intersections pharmacists should watch
While 340B is federal, several state-level issues affect how it plays out day to day:
- Some states have enacted their own 340B contract pharmacy protection laws, restricting how PBMs and manufacturers can limit contract pharmacy reimbursement or access — a fast-moving area of litigation and legislation.
- State board inspections at pharmacies handling 340B inventory increasingly review inventory separation and recordkeeping alongside standard pharmacy inspection checklist items.
- If your covered entity also engages in wholesale distribution of 340B drugs between sites, that activity can trigger separate wholesale drug distributor licensing obligations.
Preparing for a HRSA audit
HRSA conducts both announced covered entity audits and manufacturer-initiated audits. Preparation that holds up well includes: maintaining auditable documentation of eligible patient determinations for a sample of claims, keeping contract pharmacy self-audit reports on file (typically the prior 2-3 years), and being able to reconstruct the carve-in/carve-out election history for Medicaid claims. Findings that aren’t corrected within HRSA’s specified timeline can result in removal from the 340B program — a consequence covered entities take seriously enough to run continuous internal audits rather than waiting for HRSA to show up.
340B program rules, contract pharmacy guidance, and state-level protections change frequently and vary by covered entity type. Confirm current requirements with HRSA’s Office of Pharmacy Affairs and your covered entity’s compliance office.
Track compliance alongside licensing with RxByState
RxByState tracks pharmacy compliance requirements — including state rules that intersect with federal programs like 340B — across all 50 states, so your team isn’t managing this in a spreadsheet separate from everything else. Start a free 14-day trial →
Related: pharmacy board discipline triggers, multi-state pharmacy license guide.