A controlled substance count doesn’t match the perpetual inventory. Now what? Whether that discrepancy requires a DEA Form 106 filing — and how fast — depends on distinctions that trip up a lot of pharmacies: theft versus loss, “significant” versus ordinary, and reporting to the DEA versus reporting to the state board, which are not the same obligation.
What Form 106 covers
DEA Form 106 is the “Report of Theft or Loss of Controlled Substances,” filed by DEA registrants — including pharmacies — when controlled substances are stolen or significantly lost. It’s filed electronically through the DEA’s diversion control system and goes to the DEA field office covering the registrant’s location, with a copy typically also required for local law enforcement in theft cases.
The form asks for what’s missing (by drug and schedule), how the loss was discovered, whether it appears to be theft, employee pilferage, or unexplained loss, and what quantity is involved.
Theft vs. loss: two different triggers
Theft is any taking of controlled substances without authorization — armed robbery, burglary, or employee diversion all count. Theft is reportable regardless of quantity; even a small quantity taken through an identifiable theft event generally triggers the reporting obligation, because the DEA’s concern is the diversion event itself, not just the dollar or unit value.
Loss is different — this covers situations where controlled substances are simply unaccounted for, with no identified theft event. Loss is only reportable when it’s “significant.” The DEA doesn’t publish a fixed numeric threshold for significance; instead it directs registrants to consider factors like the schedule of the drug involved, the quantity relative to the registrant’s normal inventory, whether the pattern suggests a systemic problem, and whether local trends (like a known diversion issue in the area) make an otherwise small loss more concerning.
This is the part that causes the most confusion in practice — a small, isolated discrepancy that’s more likely attributable to normal recordkeeping variance (partial fills, breakage documented elsewhere, counting error) is generally not the same as a “significant loss” requiring Form 106, but there’s no bright-line number that makes the call automatically. Pharmacies that treat every inventory variance as automatically reportable, and pharmacies that treat no variance as reportable, are both making the same underlying mistake: skipping the significance analysis the DEA actually expects.
Timing
The DEA expects Form 106 to be filed promptly upon discovery — the agency doesn’t publish an exact day count, but “promptly” is generally understood in practice to mean within a matter of days, not weeks, once the registrant has confirmed the loss and characterized it. Waiting to file until an internal investigation is fully resolved is a common misstep; the filing documents the loss and the registrant’s understanding of it at that point, and can be supplemented if more information emerges later.
State board notification is a separate obligation
Filing Form 106 with the DEA does not automatically satisfy state board of pharmacy notification requirements — most states have their own independent theft/loss reporting obligation, sometimes with a different timeline, a different form, and different triggering thresholds than the DEA’s. Some boards require notification of any theft regardless of significance; others mirror the DEA’s significant-loss standard. Treating the DEA filing as the only required report is a frequent gap, and it’s worth checking whether your state also expects a copy of the Form 106 or a separate state-specific report. This obligation runs alongside — not instead of — the broader recordkeeping expectations covered in our controlled substance inventory requirements piece, and connects to the wider topic of DEA diversion reporting requirements more generally.
Employee-involved theft raises additional considerations
When an internal investigation points to employee diversion, there are often parallel obligations beyond Form 106 — potential board complaint referrals, employment action, and sometimes separate reporting depending on the employee’s own licensure status. These downstream steps are governed by different rules than the Form 106 filing itself and are highly fact-specific.
Confirm current requirements before relying on any threshold
The DEA’s “significant loss” standard is intentionally a facts-and-circumstances test rather than a fixed number, and state-level reporting requirements change periodically. This overview describes the general reporting framework — it isn’t a substitute for reading the current DEA guidance or your state board’s specific theft/loss reporting rules, and any actual discrepancy should be evaluated with your compliance team or pharmacy law counsel before deciding whether and how to report it.
RxByState tracks controlled substance reporting obligations and state board requirements across all 50 states. Keep your compliance calendar current →