Compounding Pharmacy Compliance Checklist: USP 797/800 Sterile Products and HIPAA

Sterile Compounding Facility Requirements

Cleanroom suite design and airflow

Establish a cleanroom suite that maintains an ISO Class 5 cleanroom work zone at the point of aseptic manipulation, housed within appropriately classified buffer and ante areas. Use unidirectional HEPA-filtered airflow, smooth and cleanable surfaces, and a workflow that separates dirty-to-clean transitions to reduce bioburden and particulate load.

Primary engineering controls (PECs)

Place PECs (e.g., laminar airflow workbenches, biological safety cabinets, compounding aseptic isolators) in rooms that meet their required background classifications. Position PECs to avoid airflow disruptions, perform routine certification, and keep only essential, low-shedding items inside to preserve first air and sterility assurance.

Pressure, placement, and utilities

Maintain appropriate room pressurization: positive pressure for non-hazardous sterile compounding and negative pressure for hazardous drug areas. Provide dedicated handwashing sinks in the ante area (not in buffer rooms), adequate lighting, temperature/humidity control, and pass-throughs or workflows that prevent cross-contamination.

Cleaning and disinfection

Implement written schedules for cleaning, disinfection, and periodic use of a sporicidal agent. Use lint-free wipes and low-residue agents, and document each task with date, time, products used, and responsible personnel to support continuous compliance verification.

Hazardous Drug Handling Procedures

Containment and room design

Provide hazardous drug containment with a containment primary engineering control (e.g., Class II BSC or compounding aseptic containment isolator) located within a containment secondary engineering control that is externally vented and under negative pressure. Segregate receipt, storage, compounding, and waste areas to minimize contamination transfer.

Receipt, storage, and transport

Unpack hazardous drugs in neutral or negative-pressure areas away from sterile compounding zones. Store antineoplastic and other hazardous agents in dedicated, labeled spaces with appropriate ventilation. Use sealed, cleanable transport containers and route materials to avoid patient-care or non-HD areas whenever possible.

PPE and work practices

Equip staff with chemotherapy-tested gloves, disposable impermeable gowns, eye/face protection as needed, and respiratory protection when warranted. Adopt closed-system drug-transfer devices where feasible, particularly for administration, to reduce aerosolization and leaks. Standardize priming, disconnection, and purge practices to prevent releases.

Decontamination and spill response

Follow a stepwise process—deactivation, decontamination, cleaning, and disinfection—using compatible agents. Stage and maintain spill kits, train staff on immediate response, and manage waste per hazardous regulations. Document all incidents and corrective actions to strengthen your quality system.

Personnel Training and Garbing

Competency program

Build a structured program that includes aseptic technique training, demonstration of garbing and hand hygiene, media-fill testing (aseptic process simulation), and gloved fingertip/thumb sampling. Qualify personnel before independent work and requalify on a defined cadence and after any performance gap or extended absence.

Garbing sequence and hygiene

Standardize the garbing order: don dedicated shoes or shoe covers, head and beard covers, face mask, and gown; perform vigorous hand and forearm hygiene; then don sterile gloves inside the PEC. For hazardous drug tasks, add chemotherapy-tested gloves (double gloving) and HD-rated gowns; change PPE at defined intervals and when contaminated.

Ongoing observation and documentation

Use direct observation checklists to assess aseptic manipulations, cleaning technique, and hazardous handling. Capture training dates, assessors, results, and remediation steps to demonstrate compliance readiness at any inspection.

Environmental Monitoring Protocols

Certification and nonviable monitoring

Certify PECs and classified spaces at installation, after relocation or repair, and on a defined routine cadence. Verify nonviable particle counts to confirm each area meets its ISO classification and immediately investigate deviations that could impair sterility assurance.

Viable air and surface sampling

Perform viable particle sampling of air using volumetric methods at representative locations in PECs, buffer, and ante areas, and conduct routine surface sampling on high-touch zones. Trend colony-forming unit results, establish alert/action levels, and apply targeted corrective and preventive actions when thresholds are exceeded.

Supportive engineering checks

Record pressure differentials, temperature, and humidity at routine intervals. Investigate alarms, document root causes, and verify effectiveness of fixes with repeat monitoring to close the quality loop.

Documentation and Recordkeeping

Core records

• Standard operating procedures covering sterile compounding, hazardous drug containment, cleaning, and environmental monitoring.
• Master formulation records and compounding records with ingredients, lot numbers, calculations, in-process checks, and assigned beyond-use dating.
• Training files, competency results (including media-fill testing and gloved fingertip sampling), and corrective actions.
• Equipment maintenance and certification reports, calibration logs, and cleaning/disinfection logs.
• Environmental monitoring plans, raw data, trend reports, and investigations.
• Hazardous drug assessments of risk, SDS access, spill reports, and waste manifests.

Change control and investigations

Control changes to facilities, equipment, and procedures with documented impact assessments. Investigate deviations, out-of-specification results, or complaints, and implement CAPA with documented effectiveness checks to prevent recurrence.

Beyond-Use Dating Practices

Framework for assigning BUDs

Assign beyond-use dating based on sterile process integrity, container-closure characteristics, storage conditions, and stability information. Align with USP 797 categories and manufacturer labeling, and clearly display BUD, storage, and handling instructions on each label.

Extended beyond-use dating

Use extended beyond-use dating only when supported by appropriate sterility assurance and stability data. This can include sterility testing, stability-indicating assays, and validated aseptic processes, with controls that demonstrate the compounded preparation maintains safety and quality through the assigned period.

Release, storage, and reassessment

Inspect each preparation for clarity, container integrity, and correct labeling before release. Store under validated conditions with continuous or routine checks, and reassess BUDs when components, processes, or packaging change.

HIPAA Compliance Safeguards

Administrative safeguards

Conduct a formal risk analysis, adopt minimum-necessary policies, train your workforce on privacy and security, and execute business associate agreements with vendors. Define incident response and breach notification procedures and maintain sanction policies for violations.

Physical safeguards

Control facility and workstation access with keys or badges, secure paper records in locked locations, and restrict viewing of labels and compounding logs containing patient identifiers. Use secure shredding for disposal of PHI-bearing materials.

Technical safeguards (ePHI)

Implement electronic protected health information (ePHI) security with role-based access, unique user IDs, multifactor authentication, encryption in transit and at rest, automatic logoff, backups, and audit logging. Validate interfaces for e-prescribing, inventory, and dispensing systems to prevent unauthorized disclosure.

Operational integration

Embed HIPAA checks into daily workflows: verify patient identity discreetly, avoid discussing PHI in open areas, and de-identify data used for quality improvement. Limit the PHI printed on labels to what is operationally necessary and store patient-specific records separately from public-facing areas.

Summary

This compounding pharmacy compliance checklist ties USP 797 sterile controls, USP 800 hazardous drug containment, robust environmental monitoring, disciplined documentation, risk-based beyond-use dating, and strong HIPAA safeguards into one integrated quality system. By institutionalizing these practices, you protect patients, personnel, and your operation’s compliance posture.

FAQs

What are the key USP 797 requirements for sterile compounding?

USP 797 centers on maintaining an ISO Class 5 work zone within a properly classified suite, validated aseptic processes, qualified personnel, and a documented quality system. Core elements include aseptic technique training, media-fill testing, gloved fingertip sampling, routine environmental monitoring, effective cleaning/disinfection, and risk-based beyond-use dating supported by sound data.

How does USP 800 affect hazardous drug handling?

USP 800 requires hazardous drug containment using suitable C-PECs in negative-pressure, externally vented rooms, PPE specific to HD risks, defined workflows for receipt-to-disposal, and rigorous deactivation/decontamination procedures. Its goal is to minimize exposure through engineering controls, administrative controls, and safe work practices.

What HIPAA safeguards are necessary for compounding pharmacies?

Implement administrative policies (risk analysis, training, BAAs), physical protections (facility and workstation access controls, secure storage), and technical controls that prioritize electronic protected health information (ePHI) security (role-based access, MFA, encryption, audit logs). Integrate minimum-necessary principles and defined incident response into daily operations.