Pennsylvania PDMP Dispenser Uploads: Privacy Laws and Compliance Guide

Which Schedule II–V dispensations must Pennsylvania dispensers report?

Pennsylvania pharmacies and dispensing practitioners must report each dispensation of a federal or Pennsylvania Schedule II–V controlled substance to the Pennsylvania Prescription Drug Monitoring Program (PDMP). The duty generally applies to dispensers authorized to dispense in Pennsylvania, including mail-order and internet pharmacies. The Pennsylvania Department of Health’s dispenser guidance lists certain exceptions to the definition of a dispenser, including veterinarians and some facility-based dispensing.

The reporting requirement covers the controlled substance dispensed, not just opioids or benzodiazepines. A dispenser that provides a controlled substance directly to a patient should report it even if the amount is small; the Department says a short-term or sample supply dispensed for a patient to take home must also be reported. Review the Department’s PDMP Q&A for details on dispensers and reporting responsibilities.

What data fields must a Pennsylvania PDMP upload include?

Pennsylvania’s ABC-MAP Act, Section 7, specifies the core information for each report: the prescriber’s full name and DEA number; the prescription’s written and dispensed dates; the patient’s full name, date of birth, gender, and address; the National Drug Code (NDC); quantity and days’ supply; the pharmacy or dispenser’s DEA number and NPI; and the payment method.

For electronic submissions, use the Pennsylvania PDMP’s applicable ASAP 4.2 reporting format and field specifications. The state system’s Pharmacist Guide and ASAP 4.2 specifications describe required and situational elements, including patient and pharmacy details, prescription number, refill information, product identification, quantity, and days’ supply. The precise elements can depend on the field and transaction type, so validate your file against the current guide rather than assuming every optional field is mandatory.

The Department says dispensers must report both the pharmacy’s NPI and DEA number; a pharmacist’s personal NPI is not required. If the pharmacy’s system records the date the prescription was sold or picked up, report that date; if it does not, the fill date is sufficient, according to the Department’s dispenser Q&A.

How and when should dispensers submit ASAP files?

Submit each Schedule II–V dispensation no later than the close of the next business day after dispensing. Pennsylvania’s requirement is commonly described as next-business-day dispenser reporting; the Department defines a business day as Monday through Friday and encourages submission on days the pharmacy is open, including weekends. See the Department’s Q&A and Section 7 of the ABC-MAP Act.

Use a file in the standard ASAP 4.2 format or a more recent accepted version. The system guide describes web-portal uploads and a file-transfer option; portal files must follow the defined ASAP format and use a .DAT extension. After uploading, check the submission status and resolve errors or rejected records promptly. The Pennsylvania PDMP Pharmacist Guide provides upload and file-format instructions.

When are zero reports and reporting waivers required?

If a pharmacy has no Schedule II–V dispensations to report for a business day, it must generally submit a zero report by the close of the subsequent business day. This applies even when there were no prescriptions to upload; an approved waiver is needed to be excused from zero reporting. The state’s Dispensation Data Submission Waiver Policy sets out the zero-report rule and waiver conditions.

A pharmacy that dispenses fewer than five Schedule II–V prescriptions per month may apply for a Pennsylvania PDMP zero-report waiver. The waiver excuses zero reports only; it does not excuse reporting actual dispensations. The policy also describes a separate data-submission waiver for dispensers that do not dispense monitored drugs or do not meet the statutory definition of a dispenser. Applications require supporting justification, and the policy specifies annual resubmission by June 1 for the applicable waivers. If a dispenser with a data waiver begins dispensing controlled substances, it must resume next-business-day reporting and notify the PDMP within 15 days. Check the policy for the waiver category and conditions that apply to your situation.

A separate electronic-reporting waiver may be available for good cause when a dispenser seeks to submit data using the Universal Claim Form rather than electronic reporting. This is distinct from a zero-report waiver and does not eliminate the underlying duty to report dispensations. Consult the current waiver policy before changing your reporting process.

How does Pennsylvania protect PDMP data and restrict access?

Prescription records contain HIPAA protected health information when held by covered entities. HIPAA permits a covered entity to disclose information as necessary to comply with state law; Pennsylvania requires dispensers to submit specified controlled-substance dispensing data. See HHS guidance on disclosures required by law and Section 7 of the ABC-MAP Act.

Pennsylvania limits PDMP access to authorized users and authorized purposes under state law. The Department states that prescription information is confidential and not subject to disclosure under the Pennsylvania Right-to-Know Law exemption. The state also says the PDMP record retention period for prescription records is seven years. See the Department’s privacy and confidentiality guidance and ABC-MAP Act Section 9 on confidentiality and access.

Use individual credentials only for permitted work, limit access to authorized personnel, and follow applicable state and federal privacy and security requirements. The state’s confidentiality protections do not make PDMP data public simply because it is held by a government program.

How can patients review and correct dispensing records?

Patients may request their PDMP information once per calendar quarter at no cost. Additional copies during the same quarter cost $20 each, according to the Department’s patient information page. Patients should use the state’s Patient Prescription History Request Form to obtain a report before identifying a specific record for correction.

For a PDMP patient record correction, first contact the pharmacy or dispenser that submitted the record and ask it to correct its source information. If the issue remains unresolved, submit the completed Patient Prescription Correction Request Form to the PDMP with the information requested on the form. The dispensing pharmacy or practitioner must correct its record and send a corrected submission; the Department says it does not directly edit submitted dispensing data. See the Department’s patient guidance and PDMP Q&A.

When must dispensers query the PDMP before dispensing opioids or benzodiazepines?

Before dispensing an opioid or benzodiazepine, a dispenser must query the PDMP when any of these conditions applies: the patient is new to the dispenser; the patient pays cash while having insurance; the patient requests an early refill; or the patient is receiving opioid or benzodiazepine prescriptions from more than one prescriber. These requirements appear in Section 7 of the ABC-MAP Act and the Department’s dispenser guidance.

A patient is not considered new if they use the same pharmacy, including a different location of that pharmacy, and their record is available to the dispenser. The Department defines an early refill as one requested before the date the patient is eligible for insurance coverage, or when more than 15 percent of the earlier-dispensed medication would remain if taken as directed. Pennsylvania recommends checking the PDMP before dispensing any controlled substance as a matter of good practice, but distinguish that recommendation from the specific mandatory query conditions above.

Reliable compliance depends on accurate Schedule II–V data, timely ASAP submissions, zero reports when required, appropriate access controls, and a documented process for handling patient corrections. Confirm current technical instructions and waiver conditions with the Pennsylvania Department of Health when your workflow or circumstances change.

FAQs

What is the deadline for submitting Pennsylvania PDMP dispenser uploads?

Submit dispensing data no later than the close of the next business day after dispensing. Pennsylvania defines a business day as Monday through Friday; weekend submissions are encouraged when the pharmacy is open. See the Department’s reporting guidance.

When must a dispenser submit a zero report?

If the pharmacy has no Schedule II–V dispensations to report for a business day, it generally must file a zero report by the close of the subsequent business day, unless it has an approved waiver from zero reporting. A waiver from zero reports does not waive actual dispensation reporting. Review the state waiver policy.

How long are Pennsylvania PDMP records retained?

The Pennsylvania Department of Health states that prescription records are retained for seven years. See the Department’s privacy and confidentiality information.

How can a patient request correction of a PDMP record?

First contact the pharmacy or dispenser that submitted the record and ask it to correct the source information. If the problem is not resolved, obtain the PDMP correction form from the Department’s patient information page, complete it, and submit it as instructed. The pharmacy or dispenser must correct and resubmit its record; the Department does not directly edit the submitted dispensing data. See Pennsylvania’s patient instructions.