Controlled-Substance Log Requirements in Florida
Updated 2026-06-07
Who inspects, and what they ask for
Two agencies can walk into a Florida pharmacy and ask for your controlled-substance records: the Florida Department of Health, which inspects on behalf of the Board of Pharmacy, and the DEA. Florida law gives DOH agents authority to inspect "at all reasonable hours" any place where drugs are stored, sold, or kept for sale (s. 465.017, F.S.). DOH conducts opening, annual, change-of-location, and change-of-owner inspections — plus complaint-driven visits.
Whatever brings them in, the records request looks the same: the dispensing log, the most recent biennial inventory, Schedule II order records (the single-sheet DEA Form 222 or CSOS), and disposal documentation. Florida law requires those records be kept available for inspection and copying by law enforcement — no subpoena or warrant needed for the records s. 893.07 covers.
The federal baseline
Federal rules set the floor. Under 21 CFR 1304.21, every registrant must keep "a complete and accurate record of each substance manufactured, imported, received, sold, delivered, exported, or otherwise disposed of," maintained on a current basis — meaning you record transactions as they happen, not in a quarterly catch-up session.
For dispensers, 21 CFR 1304.22(c) spells out what dispensing records include: the substance name and finished form, the dates and quantities acquired, the number of units or volume dispensed with the name and address of the person it was dispensed to, the date of dispensing, and the written or typewritten name or initials of the person who dispensed or administered it.
Retention is at least two years from the date of the record, available for inspection (21 CFR 1304.04). Schedule I and II records must be maintained separately from all other records; Schedule III–V records may be kept separately or in a readily retrievable form.
The Florida layer
Florida’s controlled-substance recordkeeping statute, s. 893.07, F.S., largely mirrors the federal scheme: a complete and accurate inventory of all stocks on hand every two years (with flexibility to use your regular physical-inventory date if it falls within six months of the biennial deadline), a current-basis record of each substance received, sold, delivered, or otherwise disposed of, and a two-year retention period with records open to inspection and copying by law enforcement.
But two-year retention is not the number Florida pharmacies should plan around. Section 465.022(12), F.S., requires records documenting prescription drug distributions to be readily available or immediately retrievable during a DOH inspection and maintained for four years. Board rule 64B16-28.140, F.A.C., puts original prescriptions on the same clock — retained at least four years from the date of last filling — and requires that a pharmacy’s data processing system be able to produce an audit trail of drug usage for the preceding four years.
The practical takeaway: run everything on the four-year clock. Keeping controlled-substance records four years instead of two costs nothing and removes an entire category of finding.
Anatomy of a complete log entry
Pulling the federal and state requirements together, a complete entry records:
- The date of the transaction
- The drug — name, strength, and dosage form (oxycodone 5 mg tablet, not just "oxycodone")
- The quantity received, dispensed, or disposed of
- Who handled it — the name or initials of the person who dispensed or administered (21 CFR 1304.22(c))
- The counterparty — patient name and address for dispensing; supplier for receipts; reverse distributor or witness for disposal
- The running balance after the transaction
About that running balance
Strictly speaking, the running balance is not required for a community pharmacy: s. 893.07(1)(b), F.S., expressly says the recordkeeping requirement "does not require the maintenance of a perpetual inventory," and the federal rule reads the same way. But without one, the only way to know whether product is missing is to take a full count and reconstruct months of transactions. With one, every entry is a checkpoint. A log with a running balance is what makes loss detection — and the biennial reconciliation — a 20-minute job instead of a weekend. For what that two-year count itself has to contain, see the companion DEA biennial inventory checklist.
Paper or electronic
Both are acceptable. The legal test is retrievability, not format. Federally, "readily retrievable" means records that can be separated out from all other records in a reasonable time, or that are visually identifiable apart from other items — asterisked or redlined, in the regulation’s own examples (21 CFR 1300.01). Florida adds the inspection-day standard: readily available or immediately retrievable during a DOH inspection (s. 465.022(12), F.S.).
If your system is electronic, it must actually produce the records on demand — Rule 64B16-28.140 allows electronic imaging in place of original prescriptions only if the system can capture, store, and reproduce the exact image, and the four-year audit-trail requirement applies to the data system itself. An electronic log nobody can export during an inspection fails the test that matters.
Disposal has its own paper trail
Expired or unusable controlled substances cannot just leave quietly. Under Rule 64B16-28.303, F.A.C., controlled substances that cannot be retained as usable must be securely stored in the prescription department until destroyed, and the destruction documented.
Most pharmacies use a reverse distributor — a DEA registrant that takes custody of the drugs for destruction — which the Florida rule permits "in conformity with federal guidelines." Federal rules (21 CFR 1317.05) give registrants the options: prompt on-site destruction, prompt delivery to a reverse distributor, return to the supplier or manufacturer, or DEA assistance.
If destruction happens at the pharmacy, the record is DEA Form 41, the Registrant Record of Controlled Substances Destroyed. Florida’s rule requires the Form 41 be witnessed and signed by the prescription department manager or consultant pharmacist of record together with a DEA agent or a Department inspector; an alternative method requires two qualified witnesses. Keep the completed Form 41 and the reverse-distributor receipts with your controlled-substance records — disposal documentation is a line item on the DOH inspection form.
Questions pharmacists actually ask
Does Florida require a perpetual inventory for Schedule II drugs?
Not in a community pharmacy. Section 893.07(1)(b), F.S., expressly states the recordkeeping requirement does not require a perpetual inventory. Certain institutional permit types are different — Modified Class II institutional pharmacies must use a perpetual inventory system for controlled substances under Rule 64B16-28.702, F.A.C. Even where it is optional, a running balance is the practical standard.
How long do I keep controlled-substance records — two years or four?
The federal floor is two years (21 CFR 1304.04) and s. 893.07(4), F.S., matches it. But s. 465.022(12), F.S., and Rule 64B16-28.140 put pharmacy records and prescriptions on a four-year clock. Keep everything four years.
What is the E-FORCSE reporting deadline?
Dispensing of controlled substances must be reported to Florida’s prescription drug monitoring program as soon as possible and no later than the close of the next business day after dispensing (s. 893.055(3)(a), F.S.).
What if controlled substances are stolen or go missing?
You have two separate duties, and a state report does not satisfy the federal one. Federally, 21 CFR 1301.76(b) requires you to notify the DEA Field Division Office for your area, in writing, of the theft or significant loss of any controlled substances within one business day of discovery, and to file a complete and accurate DEA Form 106 within 45 days of discovery. On the Florida side, the inspection standard expects theft or significant loss to be recorded and reported to the sheriff and the Board within 24 hours of discovery. Both apply. A log with running balances is what lets you detect the loss in the first place — and show the DEA and the inspector exactly what was taken and when.
Put this on autopilot
StockSafe tracks every lot and expiration, keeps your controlled-substance log automatically, and produces an audit-ready PDF in one click. The founding cohort gets 90 days free with white-glove setup.
Try the free DEA worksheet → See StockSafe →