Two vials are missing from the same cabinet. One is hydromorphone. The other is propofol. The person who finds them should do the same first three things for both: stop, recount, and write it down. After that the two paths split, and the split is where programs make mistakes in both directions: treating the controlled loss like ordinary shrink, or treating the non-controlled loss as nobody's problem.

What “CDS” means, and why the label matters

“CDS” is short for controlled dangerous substance. It is the term several state controlled substance laws use for what federal law calls a controlled substance: a drug placed in one of the five schedules under the Controlled Substances Act. Pharmacy staff in those states say “CDS discrepancy” the way staff elsewhere say “controlled substance discrepancy”. The meaning is the same, with one important catch: a state can schedule a drug that federal law does not. A drug can therefore be a CDS in your state and a non-controlled drug on the federal schedules. Gabapentin is the usual example; a number of states have scheduled it or required it to be reported to the prescription monitoring program, while it remains unscheduled federally. Check your state's schedule before deciding which path a discrepancy belongs on.

The label matters because federal recordkeeping, security and reporting duties attach to controlled substances and not to other drugs. A non-CDS discrepancy is governed by your state's pharmacy rules, your accreditor's standards and your own policy. A CDS discrepancy is governed by all of those plus the DEA regulations.

What a CDS discrepancy triggers

Four federal obligations come into play the moment a controlled substance count does not match its records.

The records must be made accurate. Every registrant must keep, on a current basis, a complete and accurate record of each controlled substance received, dispensed or otherwise disposed of (21 CFR 1304.21(a)). A discrepancy is, by definition, a point at which the record and reality disagree. Resolving it means finding the transaction that explains the difference and documenting it, not adjusting the balance until it matches. A hospital also has a parallel duty under the Medicare Conditions of Participation to keep current and accurate records of the receipt and disposition of all scheduled drugs (42 CFR 482.25(a)(3)).

The significance question must be asked. A registrant must notify the local DEA Field Division Office in writing of any theft or significant loss within one business day of discovery, and file DEA Form 106 within 45 days (21 CFR 1301.76(b)). The regulation gives no quantity threshold. It lists factors: the quantity relative to the type of business, the specific drug, whether the loss can be associated with particular people or activities, whether there is a pattern of losses over time and how efforts to resolve them turned out, whether the drug is a likely candidate for diversion, and local trends. A discrepancy you resolve with a documented cause is not a loss. One you cannot resolve has to be run through those factors, and the clock started at discovery, not at the end of your investigation.

Hospitals must report internally. Abuses and losses of controlled substances must be reported, in accordance with federal and state law, to the person responsible for pharmaceutical services and, as appropriate, to the chief executive officer (42 CFR 482.25(b)(7)). A discrepancy log that stays in the pharmacy never satisfies this.

State reporting may apply too. Boards of pharmacy and state controlled substance agencies set their own loss-reporting rules and deadlines, and some are shorter than the federal one. The reporting guide separates the federal duties from the ones that vary by state.

What a non-CDS discrepancy triggers

None of the above, federally. There is no DEA Form 106 for propofol, no one-business-day notice, and no federal inventory requirement. What remains is still substantial:

  • Security. In a hospital, all drugs and biologicals must be kept in a secure area and locked when appropriate, and only authorized personnel may have access (42 CFR 482.25(b)(2)(i) and (iii)). A pattern of non-controlled losses is evidence about whether that standard is met.
  • State rules. Some states require pharmacies to report losses of any prescription drug, or of drugs on a state list, to the board or to a state agency. Your policy should say which applies to you rather than leaving the question to whoever is on shift.
  • Your own policy. If the policy says every discrepancy is documented and reviewed, a non-CDS discrepancy that is written off as shrink is a policy violation even when it is not a regulatory one.

Why the non-CDS path still belongs in a diversion program

The regulatory split tempts programs to put non-controlled discrepancies in a different, lower-priority queue. Three reasons not to:

Some non-controlled drugs are diverted for the same reasons controlled ones are. Propofol is the clearest case. It is not federally scheduled, but it is an anesthetic with a well-recognized history of misuse by clinicians with access to it, and losses of it in operating rooms and procedure areas deserve the same attention as losses of fentanyl. Other non-scheduled drugs are diverted for resale rather than use. A program that only watches the schedules is watching where the rules point, not where the risk is.

Non-CDS discrepancies show up in substitution. Someone who removes a controlled substance and replaces it with something that looks the same creates a mirror image in the records: a controlled count that balances and a non-controlled count that is short, or a non-controlled product found where it does not belong. A short count of saline flushes or of a look-alike vial is a data point in a controlled substance investigation, and it is only visible if non-CDS discrepancies are logged in the same structured way as CDS ones.

The process is the same process. The habits that produce accurate controlled substance records, posting receipts the day they arrive, documenting returns before they are credited, having a second person check counts, are the same habits that produce accurate non-controlled records. A unit that cannot keep its non-controlled stock straight is telling you something about its controlled stock.

One intake, two paths

The practical answer is a single discrepancy intake that asks the scheduling question early and routes accordingly.

  1. Freeze and record. Note the drug, strength, form, location, time, who counted and the size and direction of the difference, before anything is adjusted.
  2. Recount with a second person, and check the usual causes: a wrong strength counted, an unposted dispense, return, waste or transfer, a receipt put away but not entered.
  3. Classify. Is the drug on a federal schedule? On your state's schedule? If either, it is a CDS discrepancy.
  4. CDS path. Resolve with a documented transaction or escalate as unresolved to the person your policy names. Apply the significance factors in 21 CFR 1301.76(b). If a theft or significant loss, send the written notice within one business day and file Form 106 within 45 days. In a hospital, report under 42 CFR 482.25(b)(7). Check the state deadline.
  5. Non-CDS path. Resolve or record as unresolved with the same fields. Adjust inventory only with a reason code and a second signature. Flag drugs with known misuse or resale value for the same trend review the controlled drugs get.
  6. Trend both by drug, location, shift and person. The discrepancy pattern guide covers how.

Mistakes seen on both paths

  • Applying the Form 106 only to Schedule II. The reporting rule covers “any controlled substances” (21 CFR 1301.76(b)). A significant loss of a Schedule IV benzodiazepine is reportable.
  • Starting the one-business-day clock at confirmation. The rule says “within one business day of discovery”. If you need the investigation to finish before deciding, that decision is itself one of the factors, and the notice can say the loss is under review.
  • Closing a CDS discrepancy by editing the perpetual balance. That makes the record match the shelf while leaving the loss unexplained. See perpetual inventory pitfalls.
  • Logging non-CDS discrepancies in free text, or not at all. They cannot be trended, and the substitution pattern above becomes invisible.
  • Forgetting the state schedule. A drug your state has scheduled is a CDS for state reporting purposes regardless of what the federal schedule says.

Frequently asked questions

Is a propofol loss ever reportable to DEA?
Not under the federal theft and loss rule, which applies to controlled substances. It may be reportable to your state, and a propofol loss tied to a particular person is a reason to look at that person's controlled substance activity, which may surface a reportable loss of something else.

Our state scheduled a drug that federal law has not. Which rules apply?
The state's rules apply to that drug in your state. Federal DEA reporting and recordkeeping duties attach to federally controlled substances. Treat the drug as a CDS for state purposes and follow the state's loss-reporting rule. If in doubt, ask the board.

Does a resolved CDS discrepancy need to be kept?
The inventory and the continuing records it reconciles to must be kept and available for at least two years (21 CFR 1304.04(a)). The resolution is the document that shows those records are accurate. Keep it with them, and keep the unresolved ones too; they are what the pattern analysis under 21 CFR 1301.76(b) is built from.

Sources