Resources

Client Alerts, News Articles, Blog Posts, & Multimedia

Everything you need to know about BMD and the industry.

Ohio Board of Pharmacy Update: Key Regulatory Changes and Proposals You Need to Know

Client Alert

young female pharmacist working

The Ohio Board of Pharmacy (BOP) has rescinded certain OAC rules (OAC 4729:5-18-01 through 4729:5-18-06), removing regulations on office-based opioid treatment (OBOT) clinics. The rescissions took effect on June 3, 2024.

The BOP also published a new rule, OAC 4729:8-5-01, which sets explicit reporting guidelines for licensed dispensaries and became effective on June 7, 2024.

Below is a detailed overview of the new, rescinded, and proposed rules.

Ownership - OAC 4729:5-18-02 (Rescinded)
This rule mandated that OBOT clinics be solely owned and operated by physicians. Non-physician ownership is now permitted, eliminating the need for waivers previously required for such ownership. Additionally, the requirement to submit a new licensure application upon any change of ownership has been removed, offering greater flexibility in the ownership and operation of OBOT clinics.

Criminal Records Checks for Office-Based Opioid Treatment Clinics - OAC 4729:5-18-03 (Rescinded)
This rule required OBOT clinics to conduct both Ohio Bureau of Criminal Identification and Investigation (BCI&I) and Federal Bureau of Investigations (FBI) records checks for physician owners, officers, and specified personnel, including fingerprint submissions. Clinics also had to ensure that employees had no felony theft or drug abuse convictions within the past ten years, with new checks required for any personnel changes.

Security, Control, and Storage of Dangerous Drugs - OAC 4729:5-18-04 (Rescinded)
This rule mandated that controlled substances be stored in locked, substantially constructed cabinets or safes, with limited access to prescribers and certain licensed health care professionals.

Record Keeping - OAC 4729:5-18-05 (Rescinded)
This rule required OBOT clinics to maintain comprehensive records of all dangerous drugs received, administered, personally furnished, disposed of, sold, or transferred, including specifics about drug receipts, temperature control monitoring, patient and prescriber information, and drug disposal methods.

Compliance - OAC 4729:5-18-06 (Rescinded)
This rule outlined the compliance requirements that OBOT clinics were required to follow.

Dispensary Reporting into the Prescription Monitoring Program - OAC 4729:8-5-01 (New)
Effective June 7, 2024, this rule requires that licensed dispensaries report detailed medical marijuana dispensing information to the BOP within five (5) minutes of dispensing. Required data includes dispensary and patient details, the recommending physician’s Drug Enforcement Agency number, and comprehensive prescription information. If no dispensing occurs in a 24-hour period, the dispensary must submit a "zero report" within thirty-six (36) hours of the previous report. Dispensaries closed on certain days must inform the BOP of its hours to automate "zero reports" for non-business days. Additionally, dispensaries must notify the BOP if it ceases dispensing medical marijuana. All information must be formatted according to the American Society for Automation in Pharmacy standards and comply with confidentiality laws. This rule aims to ensure accurate, timely, and confidential reporting to enhance monitoring and compliance within the medical marijuana program.

There will be a hearing on July 16, 2024, for the proposed new and amended rules below. Public comments are due by the date of the hearing. Please reach out to BMD Member Daphne Kackloudis for help preparing comments on these rules.  

Disciplinary Actions (Pharmacists) - ORC 4729:1-4-01 (Amended)
This amended rule defines the word “reckless behavior” in the context of pharmacy personnel. Additionally, the rule narrows the scope of violations involving conspiracy, attempts, or aiding and abetting considered by the BOP, and exempts pharmacy personnel from disciplinary action related to an error in dispensing unless the individual engaged in reckless behavior.

Duty to Report (Pharmacists) - ORC 4729:1-4-02 (New)
This new rule establishes clear requirements for when and how pharmacists should notify the BOP about violations of Ohio laws. Under this proposed rule, pharmacists are obligated to report knowledge of violations, including practicing while impaired by substances, unprofessional conduct, and dispensing errors, to the Board within ten (10) days of discovery. The rule maintains the confidentiality of the reporting pharmacist, though they may be required to testify in disciplinary proceedings without disclosing their identity as the reporter. Additionally, pharmacists must report criminal convictions, entry into diversion programs, arrests for felonies, and any disciplinary actions taken by other states within ten (10) days of such events.

New rules (ORC 4729:2-4-02 and ORC 4729:3-4-02) also extend reporting obligations to pharmacy interns and pharmacy technicians for the same conduct.

Continuous Quality Improvement Programs in Pharmacy Services - ORC 4729:5-3-22 (New)
This new rule mandates that all pharmacies licensed as terminal distributors of dangerous drugs establish Continuous Quality Improvement (CQI) programs. This rule aims to enhance patient safety and the quality of pharmacy services by systematically addressing and preventing dispensing errors.

Under this new rule, pharmacies must implement or participate in a CQI program that documents, assesses, and responds to dispensing errors. Dispensing errors are broadly defined, encompassing variations from prescriber's orders, failure to exercise professional judgment in identifying and managing drug interactions, and errors in bulk repackaging or filling of automated devices. This program shall include written policies, internal reporting mechanisms, and documentation of all quality assurance activities for a minimum of three (3) years.

In the event of a dispensing error, pharmacies are required to promptly communicate the error to the patient or caregiver and, if the error could result in patient harm, to the prescriber. Documentation of these communications must be maintained for three (3) years.

Duty to Report (Pharmacies) - ORC 4729:5-4-02 (New)
The new rule mandates that pharmacies report any dispensing errors resulting from reckless behavior or errors that result in permanent patient harm, near-death events, or patient death, as categorized by the National Coordinating Council for Medication Error Reporting and Prevention Medication Error Index. Additionally, pharmacies are required to report the termination or resignation of any licensed or registered individual due to dispensing errors, unprofessional conduct, dishonesty, reckless behavior, or impairment by substances that render them unfit for professional duties.

Reports must be submitted by mail, through the Board’s online complaint form, or by telephone within ten (10) days of the quality assurance review or the employment action.

For assistance or questions regarding these regulatory updates, please contact BMD Healthcare Member Daphne Kackloudis at dlkackloudis@bmdllc.com or Attorney Jordan Burdick at jaburdick@bmdllc.com.


Will Federal Legislation Open Cannabis Acquisition Floodgate?

Are potential buyers quietly lobbying at federal and state levels to kick open the door to launch a new round of strategic acquisitions? Will presently pending federal legislation, the SAFE and MORE Acts, providing safe harbor for banks and re- or de-scheduling marijuana, be sufficient to mobilize into action major non-cannabis companies that previously shunned the cannabis industry due to the unknown implications of owning businesses whose activities are illegal under federal law?

The Future of the Families First Coronavirus Response Act

Over the last year we all have had to adjust to the new normal ushered in by the coronavirus pandemic. Schools and daycares closed, businesses transitioned from in-office work to work from home, bars and restaurants have closed their doors...all to slow the spread and try to prevent this pandemic from spiraling out of control. The start of the pandemic was utter pandemonium. Working parents trying to balance both caring for their now at-home children and their livelihood. Businesses trying to decide how to implement leave policies with limited information. Employees determining if they could financially afford to take time off. We were all flying by the seat of our pants trying to adjust to our new normal.

Ohio Supreme Court Clarifies Medical Statute of Limitations

The Ohio Supreme Court issued a decision in late December that clarifies and finalizes the Ohio law regarding the period of time in which patients can assert claims for medical malpractice. The Court was examining the interplay between three different statutes being the statute of limitations, the statute of repose, and the savings statute.

Ohio Hospitals and Healthcare Clinics: It’s Time to Revisit Your Billing and Collection Practices

According to a recent Cuyahoga County case, certain healthcare entities may not be protected from liability when engaging in unfair or deceptive billing acts. This decision is consistent with the growing trend across the country to encourage price transparency and eliminate unfair surprise billing practices by health care organizations. Now is the time for hospitals and other health care organizations to revisit their billing and collection policies and procedures to confirm that they are legally defensible and consistent with best practices.

HIPAA Business Associate Agreements: Why These Contracts Matter

No one loves drafting, reading or negotiating HIPAA Business Associate Agreements (BAAs). Yet many of us need to do so, and some of us do so daily. They are often boring, dense and technical, but BAAs are important from both a legal and a business perspective, and they deserve our attention. Failure to enter a BAA when one is required can constitute a HIPAA violation that results in substantial liability, as demonstrated by certain recent Department of Health & Human Services (HHS) settlements.1 A business associate who makes a disclosure that is not authorized by the applicable BAA or required by law can be subject to civil and, in some cases, criminal penalties. Further, parties are often presented with BAAs that contain onerous one-sided indemnification and other provisions that can be devasting to an organization in the event of a HIPAA breach. The significance of a BAA is often not fully understood by the parties until something goes wrong (e.g., a HIPAA security incident or breach, an Office of Civil Rights (OCR) audit or a fracture in the relationship between the parties) and, at that point, there is limited opportunity to mitigate legal and business risk. Ideally, attention should be given at the commencement of the business associate relationship, when the parties are able, to thoughtfully addressing regulatory requirements, planning and preparing for potential adverse events and appropriately allocating risk among the parties. As with most healthcare regulatory compliance initiatives, a proactive approach with respect to BAAs is preferable. This article provides a broad overview of certain BAA requirements and some practical negotiating tips for the parties involved.