340B compliance refers to the obligation of covered entities to follow all statutory and regulatory requirements of the 340B Drug Pricing Program. Created in 1992 under Section 602 of the Veterans Health Care Act, the program is administered by the Office of Pharmacy Affairs (OPA) within the Health Resources and Services Administration (HRSA), located in Rockville, MD. Covered entities that fail to maintain compliance risk losing access to discounted drugs, facing audit penalties, or being removed from the program. Understanding what compliance entails is essential for every participating organization.
Understanding the 340B Drug Pricing Program
The 340B Drug Pricing Program enables covered entities to stretch scarce federal resources to reach more eligible patients and provide more comprehensive services. Section 340B of the Public Health Service Act requires pharmaceutical manufacturers participating in Medicaid to sell outpatient drugs at discounted prices to health care organizations that care for many uninsured and low-income patients. Eligible organizations, called covered entities, include HRSA-supported health centers, Ryan White clinics, Medicare/Medicaid Disproportionate Share Hospitals, children’s hospitals, and other safety-net providers.
The discount is determined by a ceiling price formula. The 340B ceiling price is the average manufacturer price (AMP) reduced by the unit rebate amount (URA). The URA is a minimum rebate percentage of 23.1% for most brand-name prescription drugs. Drug manufacturers must offer discounts on brand-name drugs if the manufacturer’s best price is lower than AMP minus 23.1% or if the price has increased faster than inflation. These savings allow hospitals to provide free care for uninsured patients, offer free vaccines, provide services in mental health clinics, and implement medication management and community health programs.
Core Compliance Requirements for Covered Entities
Covered entities must register and be enrolled with the 340B program and comply with all 340B Program requirements. Compliance is an ongoing responsibility that includes several key components: annual recertification, maintaining auditable records, participating in audits, and adhering to duplicate discount and diversion prohibitions. Each year, HRSA conducts 200 covered entity audits to verify compliance. Additionally, drug manufacturers may conduct their own audits as permitted by program rules.
Registration and Enrollment
Before purchasing 340B drugs, an eligible organization must register with HRSA’s Office of Pharmacy Affairs through the 340B OPAIS system. The organization must self-identify its covered entity type and provide required data about its facilities, patients, and pharmacy arrangements. Once enrolled, the covered entity receives a unique 340B identification number that is used when purchasing from manufacturers or wholesalers.
Annual Recertification
Covered entities must recertify annually their eligibility to participate and attest to complying with all program requirements. During recertification, the entity’s authorized representative confirms that the organization continues to meet the definition of a covered entity and that it is following program rules. Failure to complete recertification on time can result in the loss of 340B pricing until the recertification is processed.
Recordkeeping and Inventory
Covered entities must maintain auditable records and inventories of all 340B and non-340B prescription drugs. This requirement includes documentation of patient eligibility, purchase orders, invoices, dispensing records, and any contract pharmacy arrangements. Accurate records are critical for demonstrating compliance during HRSA audits and manufacturer audits. Inadequate recordkeeping is one of the most common findings in audit reports.
Audit Participation
HRSA conducts 200 covered entity audits every year. These audits review compliance with program requirements, including proper patient identification, prohibition of duplicate discounts (i.e., the same drug receiving both a 340B discount and a Medicaid rebate), and prevention of diversion (i.e., 340B drugs used for ineligible patients). Covered entities must cooperate fully with HRSA and manufacturer audits and provide requested documentation within specified timeframes.
Differences Between 340B and Other Drug Pricing Programs
The 340B program was created as an extension of the Medicaid Drug Rebate Program (MDRP) to give safety-net providers similar discounts. Under MDRP, manufacturers pay rebates to state Medicaid agencies after the drug is dispensed, which is a back-end rebate model. In contrast, 340B provides a front-end discount at the point of sale, meaning the covered entity purchases the drug at the discounted price directly from the manufacturer or wholesaler. Some drug manufacturers have attempted to convert the 340B discount to a back-end rebate model. According to the American Hospital Association, critics of that approach say it violates federal policy, jeopardizes patient access, and adds financial burden on covered entities.
The Importance of Compliance for Covered Entities
Maintaining 340B compliance is essential because the program generates significant savings that support community health. In 2022 alone, 340B hospitals provided nearly $100 billion in benefits to their communities, a 47% increase from 2019. These benefits include free or reduced-cost care, free vaccines, mental health services, medication management, and community health programs. Non-compliance can result in audit findings, repayment demands, loss of future discounts, or even termination from the program. Covered entities that invest in robust compliance programs protect both their financial stability and their ability to serve vulnerable patients.
Current Challenges and Controversies in 340B Compliance
The 340B program has been subject to ongoing debate. Critics argue that the 340B program has failed to meet its goal of improving access to care for low-income and uninsured patients and has produced unintended consequences, such as consolidation of healthcare providers and lack of transparency about how savings are used. Supporters, including HRSA and the American Hospital Association, emphasize that the program helps safety-net providers stretch resources and provide care to vulnerable populations. The Commonwealth Fund notes that policymakers are considering changes to improve oversight and transparency.
Supporters’ Perspective
Hospitals use 340B savings to provide free care for uninsured patients, offer free vaccines, provide services in mental health clinics, and implement medication management and community health programs. The AHA fact sheet highlights these benefits and argues that the program is a vital safety-net resource that should be preserved and strengthened.
Critics’ Concerns
Critics argue that the program lacks sufficient oversight and that some covered entities do not pass enough savings directly to patients. They point to expansion of contract pharmacy arrangements and growth in hospital participation as evidence of unintended consequences. In response, HRSA and other agencies have considered measures to increase transparency and accountability.
Frequently Asked Questions
What happens during an HRSA 340B audit?
HRSA auditors review a covered entity’s compliance with program requirements, including patient eligibility documentation, prohibition of duplicate discounts, and prevention of drug diversion. They request specific records such as purchase orders, invoices, and dispensing logs. Entities must respond within required timelines. Audit findings can result in corrective action plans, repayment, or in serious cases, termination from the program.
How often must a covered entity recertify?
Covered entities must recertify their eligibility and attest to compliance every year. The recertification window is typically open for several months, and entities must complete the process through the 340B OPAIS system. Late or incomplete recertification can lead to loss of 340B pricing until the recertification is accepted by HRSA.
Are contract pharmacies subject to the same compliance rules?
Yes, covered entities that use contract pharmacies must ensure those pharmacies comply with 340B requirements, including proper patient identification and prevention of duplicate discounts. The covered entity remains ultimately responsible for compliance, even when a third-party pharmacy manager handles day-to-day operations. HRSA audits may include contract pharmacy records.
What is the difference between a front-end discount and a back-end rebate?
A front-end discount, used by the 340B program, means the covered entity buys drugs at the discounted price upfront. A back-end rebate, used by the Medicaid Drug Rebate Program, means the entity pays full price initially and then receives a rebate later. Some manufacturers have tried to switch 340B to a back-end model, but critics argue this violates federal policy and creates financial risk for covered entities.
Can a covered entity lose its 340B eligibility?
Yes, a covered entity can lose eligibility if it fails to recertify, is found to be in significant non-compliance after an audit, or no longer meets the definition of a covered entity under HRSA rules. Loss of eligibility means the entity can no longer purchase drugs at 340B prices and must transition to standard wholesale pricing. Maintaining compliance is the best way to avoid this outcome.
340B compliance is not a one-time task but an ongoing responsibility that demands attention to registration, recertification, recordkeeping, and audit readiness. For covered entities, a proactive compliance program supports both regulatory adherence and the financial ability to serve vulnerable patients.