Formulary management sits at the intersection of clinical judgment and regulatory exposure, and pharmacists who treat it as a purely operational task tend to be the ones who get flagged in an audit. Whether you’re on a P&T committee deciding what goes on a hospital formulary or filling prescriptions against a payer formulary at retail, formulary decisions carry documentation and substitution requirements that vary by setting and by state.
Formulary compliance means different things in different settings
“Formulary” covers at least three distinct compliance contexts, and conflating them is the most common mistake:
Institutional/hospital formularies, managed by a Pharmacy and Therapeutics (P&T) committee, govern what drugs a facility stocks and under what restrictions (restricted-use, prior-approval-required, automatic substitution categories). Compliance here is largely about documentation: P&T committee decisions need to be recorded, criteria-based, and periodically reviewed, and non-formulary drug requests typically require a documented exception process.
Payer/PBM formularies govern what a health plan will cover and at what tier, and interact with state pharmacy law mainly through therapeutic substitution and prior authorization rules — a pharmacist can’t unilaterally substitute a non-equivalent therapeutic alternative to satisfy a payer formulary without either a collaborative practice agreement, a statewide substitution protocol, or prescriber authorization, depending on the state.
State Medicaid preferred drug lists (PDLs), which function like a formulary for Medicaid-covered prescriptions and carry their own prior authorization and substitution rules, often with different requirements than commercial payer formularies for the same drug class.
Getting these mixed up is how compliance problems happen — treating a payer formulary substitution as if it carries the same clinical latitude as a hospital P&T-approved automatic substitution, when the two rest on completely different legal authority.
Therapeutic substitution is the compliance pressure point
Generic substitution — swapping a brand for its AB-rated generic equivalent — is broadly permitted and even required in most states without prescriber sign-off. Therapeutic substitution — swapping one drug for a different but clinically similar drug within the same class to satisfy a formulary (e.g., one statin for another) — is a different legal question entirely, and states regulate it far more narrowly. Most states require either explicit prescriber authorization for each substitution, a formal collaborative practice agreement authorizing the pharmacist to make that class of substitution, or a hospital P&T-approved automatic substitution protocol that’s been documented and disclosed appropriately, typically with a mechanism to notify the prescriber after the fact. We cover this specific rule set in depth in our post on therapeutic substitution laws by state — read it alongside this one if formulary-driven substitution is a regular part of your practice.
Biosimilar substitution adds another layer: many states treat biosimilar-for-reference-product substitution as its own regulated category, separate from both generic and therapeutic substitution, often requiring the biosimilar to carry an FDA interchangeability designation before a pharmacist can substitute without prescriber authorization. See biosimilar substitution laws by state for the specifics.
Prior authorization sits downstream of formulary decisions
A large share of prior authorization workload exists because a prescribed drug isn’t on the relevant formulary, or is on it but restricted to a specific tier or step-therapy requirement. Pharmacists increasingly play a documented role in PA workflows — flagging non-formulary prescriptions before they reach the pharmacy counter, suggesting formulary alternatives to prescribers, and in some settings, pharmacist-initiated PA submission under a collaborative agreement. Our prior authorization pharmacist role post covers the mechanics and compliance boundaries of that workflow in more detail, including how it interacts with 340B-covered entities under our 340B program pharmacist compliance guide, since formulary and 340B eligibility rules frequently intersect in outpatient hospital-affiliated pharmacies.
Documentation is what an audit actually checks
If a formulary decision or substitution is ever questioned — by a board, an accrediting body, or a payer audit — what gets scrutinized isn’t the clinical reasoning alone, it’s whether the decision was documented at the time it was made: which protocol or authorization it relied on, who approved it, and whether the prescriber was notified where required. P&T committee minutes, CPA documentation, and substitution logs should all be retained per your state’s record-retention requirements, which commonly mirror general pharmacy record retention timelines but are worth confirming independently, since some states set a longer retention period for formulary and substitution records specifically.
Formulary regulation, substitution authority, and PA requirements are updated periodically by both state boards and payers — confirm current rules with your state board of pharmacy and applicable payer contracts before relying on any substitution authority.
RxByState tracks substitution laws, collaborative practice agreement requirements, and compliance rules relevant to formulary management across all 50 states — start a free 14-day trial →