Twenty contract pharmacies is twenty oversight obligations.
The average covered entity contracts with around twenty pharmacy locations, and some with several hundred. Each one is an arrangement you are responsible for overseeing — and since 2020, more than thirty manufacturers have restricted access to some or all of them.
At a glance
- 01Avg. locations per entity
- ~20
- 02Manufacturers restricting
- 36+
- 03Common finding
- Oversight evidence
- 04Review output
- Location-level report
Where contract pharmacy exposure accumulates
Contract pharmacy arrangements let a covered entity extend 340B dispensing to retail and specialty pharmacies it does not own. They are legitimate, widely used, and — in most audits — the area with the highest concentration of findings.
The reason is structural. Oversight responsibility stays with the covered entity, but the data, the dispensing and the patient interaction all sit with a third party. Reconciliation runs through a TPA. Agreements were often signed years ago by people who have since left. And the manufacturer restriction landscape now changes several times a year.
Our review works location by location rather than in aggregate, because aggregate reporting is exactly what hides the problem.
What a contract pharmacy review covers
01Written agreements
- What we check
- Existence, currency, required terms, signature authority, and whether the agreement describes what actually happens
- Why it matters
- Missing or outdated agreements are a straightforward and avoidable finding
02Ship-to bill-to
- What we check
- That the entity is billed and the pharmacy is shipped, with title and inventory ownership correctly structured
- Why it matters
- A structural error here undermines the legitimacy of every dispense at that location
03Reconciliation
- What we check
- Frequency, completeness, evidence of resolution, and whether discrepancies are actually closed
- Why it matters
- Reconciliation that happens but is never documented reads to an auditor as reconciliation that did not happen
04Manufacturer restrictions
- What we check
- Which restrictions apply to your entity type, drugs and locations, and what the financial impact is
- Why it matters
- Restrictions change frequently and rarely arrive with an operational impact assessment attached
05Oversight evidence
- What we check
- Self-audit records, corrective actions, and documented monitoring per location
- Why it matters
- HRSA asks how you oversee your contract pharmacies — "we use a TPA" is not an answer to that question
06Location performance
- What we check
- Capture rate, dispense volume, and whether each location is economically worth the oversight burden
- Why it matters
- Many entities carry locations that generate almost nothing and cost real oversight capacity
Know the number before the letter arrives
Manufacturer restrictions on contract pharmacy access have expanded steadily since 2020. Some restrict all contract pharmacy, some allow a single designated location, some require claims data submission through a designated platform, and eligibility conditions differ by entity type. We model the impact against your actual drug mix and location footprint.
- 01Restriction inventory mapped to your specific drugs and locations
- 02Financial impact modeled against your actual purchase history
- 03Designated-pharmacy elections reviewed where a manufacturer permits one
- 04State law protections checked for every state you operate in
- 05Data submission requirements assessed for compliance and privacy implications
Contract pharmacy — common questions
01How many contract pharmacies should we have?
As many as you can genuinely oversee and that produce meaningful patient access or capture. Entities regularly carry locations that generate almost no volume while consuming real oversight capacity. Our location-level review usually identifies several worth consolidating.
02Are manufacturer restrictions legal?
That question is being actively litigated, and outcomes have differed across circuits. More than eighteen states have also enacted contract pharmacy protection laws, several of which are themselves under challenge. We track the position for the states you operate in and re-verify before advising, rather than working from a fixed list.
03Who is responsible if a contract pharmacy makes an error?
The covered entity. Oversight responsibility cannot be delegated to the pharmacy or to the TPA, which is why documented oversight — not just contracted oversight — is what auditors look for.
04Should we submit claims data to a manufacturer platform?
It is a decision with compliance, privacy and commercial dimensions, and it varies by manufacturer and by state. We assess what is actually being requested, what your state law says, and what the practical consequence of declining would be for your entity.
Marked up with FAQPage schema for search and AI-answer eligibility.
Next step
How many of your contract pharmacies were reviewed individually this year?
Aggregate reporting is where location-level problems go to hide.