PTCB Federal Programs, Waste, Recalls and DSCSA study guide

What this topic actually asks of you

Domain 2 of the PTCE is Federal Requirements (18.75% of the exam). Four of its six knowledge areas sit in this topic:

Federal requirements for storage, handling, and disposal of non-hazardous, hazardous (e.g., P-list), and pharmacological substances and wastes

That is KA 2.1;

Federal restricted drug programs and related medication-processing requirements (e.g., pseudoephedrine, Risk Evaluation and Mitigation Strategies [REMS])

KA 2.4;

FDA requirements for medication recalls

KA 2.5; and

FDA product serialization, tracking, tracing, handling, and quarantining requirements (i.e., Drug Supply Chain Security Act [DSCSA])

KA 2.6. Together they are the federal programs a community pharmacy lives inside that are not about controlled-substance schedules: the pseudoephedrine counter, the restricted-distribution programs, the recall machinery, the product-tracing law, and the waste and workplace rules.

The thread that ties them together is accountability for a product once it exists. Every one of these regimes exists because a drug can go wrong after it leaves the pharmacist's hands: someone buys it to cook meth, a batch is defective, a counterfeit slips into the supply chain, or a cytotoxic tablet goes down the drain. The exam asks who is responsible for catching each one and what they do.

One arithmetic fact lives here. The pseudoephedrine limits are written in grams of base, while the label states the salt — so a technician has to convert. That is the only calculation in this topic, and it is the one this guide works out step by step.

The federal frame is the exam's frame. Where a state is stricter, it governs what you do, but a question that asks the federal rule wants the federal answer.

Restricted programs: pseudoephedrine and REMS

What the CMEA covers

The Combat Methamphetamine Epidemic Act of 2005 — the CMEA, part of the USA PATRIOT Improvement and Reauthorization Act — put the nonprescription ingredients used to make methamphetamine behind the counter and under a logbook. The law calls them scheduled listed chemical products, and the three are:

• Pseudoephedrine (the common oral decongestant),
• Ephedrine, and
• Phenylpropanolamine.

The rules follow the product wherever it is sold at retail — a pharmacy, a grocery, a convenience store (21 CFR Part 1314):

• The product must be placed so customers cannot reach it before the sale — "behind-the-counter" placement, or a locked cabinet (21 CFR 1314.25(b)).
• The seller must deliver the product directly into the purchaser's custody (1314.25(c)).
• The seller must be a regulated seller and meet the recordkeeping and training rules below.

The exam's favorite CMEA fact is that the limits are on the base — the CMEA statute and 21 CFR 1314.20 speak in grams of ephedrine base, pseudoephedrine base and phenylpropanolamine base — while the package in your hand is labeled as a salt (pseudoephedrine hydrochloride, or pseudoephedrine sulfate). That gap is the whole reason a CMEA question can be a calculation.

The CMEA gram limits

Three limits live here, and the exam's trick is to ask whom each one binds (21 CFR 1314.20; 21 U.S.C. 844(a)):

• 3.6 grams of base in a single calendar day to a single purchaser, without regard to the number of transactions — this is the limit on the seller, so three small sales to the same person in one day add up (21 CFR 1314.20(a)). The 3.6 g is of ephedrine base, pseudoephedrine base, or phenylpropanolamine base.
• 7.5 grams of base in any 30-day period to a single purchaser — this one binds a mobile retail vendor (21 CFR 1314.20(b)).
• 9 grams of base in a 30-day period purchased at retail by one person — this one binds the purchaser, and it is not in 1314.20: it is the federal statute itself, 21 U.S.C. 844(a). Of that 9 g, no more than 7.5 g may be imported by shipping through a private or commercial carrier or the Postal Service.

So the day is the seller's clock, and the 30 days are two different clocks — 7.5 g for the mobile vendor, 9 g for the buyer. A question about the pharmacy selling is asking 3.6 g a day; a question about the customer buying is asking 9 g in 30 days.

The logbook has its own threshold: a single sales package containing not more than 60 milligrams of pseudoephedrine is exempt from the logbook entry (21 CFR 1314.30(a)) — but not from the behind-the- counter placement or the quantity limits. Mail-order distributors must also verify the purchaser's identity, receiving a copy of a government photo ID before shipping (21 CFR 1314.105).

Converting a label to grams of base

Because the limit is on the base but the label states the salt, a CMEA question can hand you a package and ask how much base it holds — or whether a purchase is over the daily limit. The conversion uses the two formulas' molecular weights. Pseudoephedrine base has a molecular weight of about 165 and the hydrochloride salt about 202, so the base is roughly 82% of the labeled hydrochloride (the sulfate salt is roughly 77% base):

1. Read the labeled salt strength and the count. A box of 48 tablets of pseudoephedrine hydrochloride 30 mg holds 48 × 30 mg = 1,440 mg of the hydrochloride salt.
2. Convert the salt to base by multiplying by the base fraction: 1,440 mg × 0.82 ≈ 1,181 mg of pseudoephedrine base, or about 1.18 g.
3. Compare to the limit. 1.18 g of base is well under the 3.6 g daily limit — so that box, by itself, is a sale the CMEA allows.

The direction of the conversion is the trap. The salt weighs more than the base, so a labeled number converts to a smaller base number — never larger. A question that gives you the base limit and asks for the salt-equivalent divides instead of multiplies: 3.6 g of base is about 4.4 g of the hydrochloride salt. Keep the two directions apart and the arithmetic is one multiplication.

The logbook, the photo ID and the age

Every sale of a scheduled listed chemical product (above the 60 mg single-package exemption) goes into a logbook (21 CFR 1314.30):

• What is recorded: the purchaser's name, address, and the date and time of the sale, and the product name and quantity sold. The purchaser signs the logbook.
• The identification: the purchaser presents an identification card with a photograph issued by a state or the federal government before the sale.
• Retention: each entry is kept for not fewer than two years after the date it is made, and the records must be readily retrievable for inspection (1314.30(e), (g)).
• The warning: the logbook displays the federal warning that knowingly falsifying an entry is a crime (18 U.S.C. 1001).

The CMEA sets no federal minimum age; a state commonly sets one (often 18) — the "states may be stricter" note in action. Sellers must also train and self-certify their sales staff under Part 1314. The privacy rule wraps the logbook: the information may be released to law enforcement and for a product recall, and not for any other purpose (1314.45).

Restricted programs: REMS and the patient handouts

What a REMS is

A Risk Evaluation and Mitigation Strategy (REMS) is a drug-safety program the FDA can require for a medication whose risks need more than the label to manage. Congress gave the FDA that authority in the Food and Drug Administration Amendments Act of 2007 (FDAAA). A REMS exists to ensure the benefits of the drug outweigh its risks, and it has a defined set of elements:

• A Medication Guide (the patient handout), and/or
• A communication plan to health-care providers, and/or
• Elements to Assure Safe Use (ETASU) — the restrictions a prescriber, pharmacy or patient must meet before the drug is dispensed, and
• A timetable for assessment of the program.

The REMS that matters most is the one whose ETASU a technician actually touches at the counter. The clozapine program was for years the classic: a shared-system REMS that required a patient's absolute neutrophil count (ANC) to be on file before the drug could be dispensed. That program was removed by the FDA effective June 13, 2025 — the routine ANC monitoring moved back into the product's labeling rather than a REMS — so the clozapine example is now the caution: a REMS can be added, changed, or removed, and anything time-sensitive should be checked against REMS@FDA before you rely on it. Other programs to recognize: iPLEDGE for isotretinoin, the opioid analgesic REMS for outpatient opioid analgesics (the 2018 expansion brought immediate-release products in alongside the extended-release and long-acting ones), and the programs for thalidomide and lenalidomide (the ETASU with required pregnancy testing and counseling). Because they change, the bank keys exactly one of them — the clozapine removal, which the FDA dated — and no other item names a REMS drug: the guide names them, dates the list, and the reader is told to check REMS@FDA.

Medication Guides and patient package inserts

Two different patient handouts are easy to confuse. A Medication Guide is an FDA-approved handout that must be given with certain drugs (the authority is 21 CFR Part 208) — the pharmacist hands it to the patient with the dispensed product. A Patient Package Insert (PPI) is a longer, FDA-required leaflet for a smaller set of products; the two the exam favors are oral contraceptives and estrogens, which must be dispensed with a PPI. The rule of thumb: a MedGuide rides along with a drug whose risk needs spelling out to the patient; a PPI is the required leaflet for those hormonal products.

Recalls and market withdrawals

The recall classes

The FDA grades every recall by how badly the product could hurt someone (21 CFR 7.3(m)):

• Class I — a reasonable probability that use of, or exposure to, the product will cause serious adverse health consequences or death. The image to hold: a product contaminated with a lethal organism, or a mislabeled drug that could kill.
• Class II — use may cause temporary or medically reversible adverse health consequences, or the probability of serious harm is remote. The image: a sub-potent tablet.
• Class III — use is not likely to cause adverse health consequences. The image: a labeling or packaging defect with no health risk.

Two things are not recalls: a market withdrawal is the firm's removal of a product for a minor violation that would not be subject to legal action, or for no violation at all — ordinary stock rotation is a market withdrawal — and a stock recovery is removal of product that never left the firm's control (7.3(j), (k)). A recall is run at a depth (level): wholesale, retail, or consumer, depending on how far the product must be pulled.

What the pharmacy does on a recall

When a recall notice arrives, the pharmacy's job is mechanical and the same every time:

1. Compare the recalled lot numbers against the stock on hand. The lot number is the index the recall runs on (see the NDC, lot and expiration guide).
2. Pull and quarantine every match so it cannot be dispensed.
3. Follow the notice — return the stock as directed, and record what was pulled and what was returned.
4. At consumer level, contact the patients who received the recalled lot.

DSCSA: tracing a package through the supply chain

The three Ts and the product identifier

The Drug Supply Chain Security Act (DSCSA), part of the Drug Quality and Security Act of 2013, makes every package of a prescription drug traceable through the chain. The DSCSA names three Ts — the transaction data the law is built on:

• Transaction Information (TI) — the product, lot, and who bought from whom,
• Transaction History (TH) — the path the product took, and
• Transaction Statement (TS) — the seller's attestation that it is authorized and the product is legitimate.

A dispenser (a pharmacy) needs only the TI and TS; the TH requirement was sunset for dispensers on November 27, 2023 (FD&C Act §582(k)(1)), so TH is now a trading-partner obligation. A pharmacy still keeps TI and TS — and the product identifier below — but not a TH.

Records are kept for six years. The package carries a product identifier — the NDC, a serial number unique to that one package, the lot number, and the expiration date — printed in both a human-readable and a machine-readable (2D data-matrix) form. The NDC plus the serial number is the standardized numerical identifier (SNI), the piece that distinguishes one bottle from every other bottle of the same NDC.

Suspect product, and the small-dispenser exemption

If a pharmacy has reason to believe a product is suspect (potentially counterfeit, stolen, misbranded or otherwise illegitimate), it quarantines the product, investigates, and does not dispense it. If the product is confirmed illegitimate, the pharmacy quarantines it and notifies the FDA — and the trading partners from whom it came and to whom it went — within 24 hours of making that determination (FD&C Act §582(d)(4)), with the FDA report on FDA Form 3911. The clock is 24 hours, and it starts when the product is determined illegitimate, not when the suspicion first arose. The enhanced, interoperable electronic tracing the law pointed toward applies to trading partners, with a small-dispenser exemption. FDA's page, current as of August 26, 2026, grants it "from certain requirements of section 582 of the FD&C Act to small dispensers (e.g. pharmacies), and where applicable their trading partners, until November 27, 2027", and defines the class it covers: "A dispenser is considered a small dispenser, for the purposes of the exemptions, if, as of November 27, 2026, the company that owns the dispenser has 25 or fewer full-time employees licensed as pharmacists or qualified as pharmacy technicians." Two details live in that sentence and nowhere else: the headcount is measured on November 27, 2026 — not on the day you are asking — and the number counts licensed pharmacists and qualified technicians only, not every employee the company has. The exemption is not an application: FDA says a small dispenser that uses it "do[es] not need to submit anything to FDA or inform the agency."

Waste: hazardous, non-hazardous and controlled

Waste is the part of KA 2.1 that turns a pharmacy into a regulated waste handler, and the exam's first question is always which rule applies. There are three separate regimes, and a product belongs to exactly one of them: hazardous drug waste (EPA), non-hazardous drug waste (state/other), and controlled substances that are being destroyed (DEA).

RCRA: the four characteristics and the P-list

The Resource Conservation and Recovery Act (RCRA) defines a hazardous waste two ways — by a characteristic or by a list:

• The four characteristics (40 CFR 261.21–261.24): ignitable (flash point below 140 °F — some alcohol-based liquids), corrosive (pH ≤ 2 or ≥ 12.5 — some compounding acids and bases), reactive (unstable; reacts with water or air), and toxic (fails the TCLP leaching test — the heavy-metal solutions).
• The lists: the P-list is the acutely hazardous list and the U-list is the hazardous list, both at 40 CFR 261.33. The P-list examples a pharmacy actually holds: warfarin in strengths above 0.3%, nicotine (the OTC nicotine-replacement products are now exempt), and arsenic trioxide. Epinephrine is on the P-list but its salts are not P042 — the common epinephrine salt wastes are not automatically listed hazardous waste, so they are hazardous only if they show one of the four characteristics (the concentration in a spent vial usually does not), a distinction the exam has used.

For healthcare facilities, the operative rule is 40 CFR Part 266, Subpart P (Hazardous Waste Pharmaceuticals, §266.500–266.510). Three of its points matter at the bench:

• It bans sewering hazardous waste pharmaceuticals — no flushing a P-listed drug down the drain.
• It splits the waste by whether the facility can get credit for it. Potentially creditable hazardous waste pharmaceuticals — the ones a reverse distributor will take back for credit — may go to a reverse distributor (§266.500). Non-creditable ones go to a permitted hazardous waste facility as RCRA hazardous waste.
• A P-listed pharmaceutical managed under Subpart P does not count toward the facility's generator status, which is why the rule was adopted.

Non-hazardous waste, sharps and take-back

Most expired and unused medication a pharmacy pulls is non-hazardous pharmaceutical waste — the product is not on a P/U list and does not carry a hazardous characteristic, so RCRA does not reach it. It is still not trash: it is segregated from usable stock, managed under the pharmacy's waste vendor's rules, and never dispensed. A technician should know that the color-coded waste containers are convention, not federal law — there is no federal rule that a hazardous drug must go in a black bin — so the color a given vendor uses is a local procedure, not an exam fact. Sharps (needles, syringes with needles, lancets) go into a puncture-resistant sharps container and are handled under the FDA's and EPA's consumer guidance, not mixed with drug waste. Patient take-back and the pharmacy's own collection receptacle are DEA Part 1317 activities (see the controlled substances guide).

The workplace rules: packaging, OSHA and privacy

Child-resistant packaging and who may waive it

The Poison Prevention Packaging Act of 1970 (PPPA) requires child-resistant (CR) packaging for most household substances, including most oral prescription drugs — the rules are at 16 CFR Part 1700, and the list of substances requiring special packaging is 16 CFR 1700.14. An oral controlled drug specifically requires CR packaging under 1700.14(a)(4). Two pieces of the rule a technician uses:

• A prescriber or the patient may request a non-child-resistant package, and the pharmacy may legally supply one: under the PPPA statute itself, 15 U.S.C. 1473(b), a prescription drug may be dispensed in a non-complying package "only when directed in such order or when requested by the purchaser." Those are two different shapes of request — the prescriber's direction is per prescription, written in that order, while the patient may make a blanket request (the standing "no child-resistant cap, please" note kept on file).
• 16 CFR 1700.14(a)(10) exempts a short list of oral prescription drugs from CR packaging entirely. These are the ones a pharmacy actually dispenses, so this is the part of the section the exam draws from: sublingual nitroglycerin; sublingual or chewable isosorbide dinitrate ≤ 10 mg; prednisone tablets in packages of ≤ 105 mg; methylprednisolone tablets ≤ 84 mg; unit-dose potassium supplements ≤ 50 mEq per unit dose; cyclically administered oral contraceptives in mnemonic dispenser packages; pancrelipase; sodium fluoride ≤ 110 mg per package; and conjugated estrogens or progestogen-estrogen products in mnemonic packages. The section's other entries (cholestyramine, colestipol, colesevelam, sevelamer, mebendazole, betamethasone, erythromycin ethylsuccinate and baloxavir) are there too — recognize the handful above first. Note that sub-items (xi) and (xii) of that list are reserved, so its numbering runs from (x) to (xiii).

OSHA: HazCom and bloodborne pathogens

Two OSHA standards are the exam's targets:

• Hazard Communication, 29 CFR 1910.1200. The pharmacy must have safety data sheets (SDSs) available for the hazardous chemicals on hand, labeled containers, and a training program for employees who work with them.
• Bloodborne Pathogens, 29 CFR 1910.1030. The rules that follow a sharps injury: sharps containers, engineering controls, safe work practices, and the offer of the hepatitis B vaccine free of charge to at-risk employees, plus a post-exposure evaluation.

HIPAA at the counter

HIPAA protects protected health information (PHI) — health information that identifies a patient. The rules a technician actually applies:

• Minimum necessary — use and disclose only the least information needed for the task.
• Permitted disclosures for treatment, payment and health-care operations; other uses need the patient's authorization.
• The patient has the right to access their record, to request an amendment, and to an accounting of disclosures; the pharmacy provides the Notice of Privacy Practices.
• Likely scenarios: an overheard counseling conversation (keep the volume and the location private), a voicemail or a phone message left with a third party, a will-call bag whose label exposes a drug name, and a discarded prescription label in the trash. Each is a PHI exposure the counter is responsible for preventing.

Compounding: 503A and 503B

Two federal pathways let a pharmacy make a drug rather than dispense an approved one, and the exam contrasts them:

• 503A — traditional compounding, done by a pharmacy or physician for an identified patient on a prescription, overseen by the state board and following USP standards. A 503A compounder may not make, regularly or in inordinate amounts, a drug that is essentially a copy of a commercially available approved product.
• 503B — outsourcing facilities, which register with the FDA and follow current Good Manufacturing Practice (cGMP), and may compound without a patient-specific prescription, on a larger scale. A 503B facility also may not compound a drug that is essentially a copy of an approved product.

The line to remember: 503A = a patient and a prescription; 503B = a registered facility, cGMP, and no patient-specific prescription required.

The landmark laws, one line each

The exam occasionally asks which law did what. One line each:

• Pure Food and Drug Act (1906) — the first federal food-and-drug law; banned adulterated and misbranded products.
• Federal Food, Drug, and Cosmetic Act (1938) — required drugs to be safe before marketing.
• Durham-Humphrey Amendment (1951) — created the prescription (Rx) versus OTC distinction.
• Kefauver-Harris Amendment (1962) — required proof of efficacy as well as safety.
• Controlled Substances Act (1970) — created the five schedules.
• Poison Prevention Packaging Act (1970) — child-resistant packaging.
• Orphan Drug Act (1983) — incentives for drugs for rare diseases.
• Hatch-Waxman Act (1984) — the generic-drug approval pathway (ANDA).
• OBRA '90 — prospective DUR, the offer to counsel, and patient profiles (for Medicaid).
• DSHEA (1994) — the framework for dietary supplements.
• HIPAA (1996) — health-insurance portability and privacy.
• CMEA (2005) — pseudoephedrine behind the counter (the Combat Methamphetamine Epidemic Act).
• DQSA (2013) — created 503B outsourcing facilities and the DSCSA.
• CARA (2016) — the C-II partial fill at the patient's or prescriber's request.
• SUPPORT Act (2018) — the EPCS requirement for Medicare Part D controlled prescriptions.

Where the technician's scope ends

State boards set technician scope. Licensure, registration or certification, and what a technician may do at each stage, all vary by state. What is close to universal: counseling and clinical judgment are reserved to the pharmacist in essentially every state, and final verification is too in most — with narrow exceptions, because some states let a trained technician perform a final check in defined settings ("tech-check-tech") under conditions the board sets. A technician's certification is a credential, not a license; the license or registration comes from the state board. Federal law does not itself draw the technician line — it says what a valid prescription requires and who may dispense, which is why the exam's answer is the near-universal state rule rather than a federal statute.

The federal numbers, in one table

Pairs to keep apart

How to practice this

• Read the free federal programs practice set and, on each item, name the regime first — CMEA, REMS, recall, DSCSA, waste — because the regime picks the answer.
• Work the CMEA conversion once from memory: labeled salt × 0.82 = base (and divide to go the other way), then compare to 3.6 g a day.
• Fix the two retention clocks: CMEA logbook 2 years; DSCSA transactions 6 years.
• Remember the one form that means "illegitimate product": FDA Form 3911 — filed within 24 hours of the determination.
• Work the controlled substances guide next — the other half of Domain 2 — and the NDC, lot and expiration guide for the lot-number half of a recall.

Where to go next

• Next topic — high-alert medications and error prevention
• The exam itself — the passing score, how many questions, and what makes the PTCB exam hard.

This topic sits inside Domain 2 — Federal Requirements, 18.75% of the exam — the outline's own weight, and PTCB publishes no per-knowledge-area split.

PTCE® is a registered trademark of the Pharmacy Technician Certification Board (PTCB). Elk Ridge Academy is not affiliated with or endorsed by PTCB.