Blog

In 2010, the Drug Enforcement Administration (DEA) released its interim final ruling on electronic prescriptions for controlled substances (EPCS). The DEA ruling allows healthcare providers to take advantage of the benefits of EPCS if they meet a pair of security conditions:

• Providers must complete a stringent one-time identity proofing process conducted by a credential service provider (CSP)
• Providers must use two-factor user authentication whenever they e-prescribe a controlled substance

Over the past few years, individual states have also begun adopting legislation mandating all controlled substances be prescribed electronically in an effort to fight drug diversion. (ie. I-STOP in New York)

To continue the momentum and move further away from paper prescriptions, Health IT vendors must take action now. To fully leverage the advantages of their e-prescribing system, vendors must integrate identity proofing and two-factor authentication (2fa) capabilities into their EHR solutions, and navigate the complex technical security requirements outlined in the Code of Federal Regulations (21 CFR, Part 1311).

Even though states have been slow to piggyback on the Federal legislation legalizing EPCS, the pace is about to accelerate. According to Medical Practice Insider, “about two-thirds of the pharmacies are fully ready for receipt of electronic prescriptions of controlled substances.” This fact is empowering states to move now to enact legislation of their own.

Are You Ready?

While pharmacies are equipped to handle EPCS transmissions, many Health IT vendors (and by extension, medical practices) are not.  The challenges of integrating with a credential service provider and enabling two-factor authentication within existing e-prescribing modules are challenging, to say the least.

However, Health IT vendors need not tackle this challenge alone. Exostar provides a cloud-based, fully-integrated EPCS solution that works in tandem with your current e-prescribing platform to quickly and painlessly add identify proofing and two-factor user authentication compliance – all without disrupting the user interface and experience.

Don’t Wait Until it’s Too Late to Act!

The state of New York has mandated EPCS compliance by March 27, 2016. Other states aren’t far behind. The longer you wait, the more you risk increased costs and timelines as everyone else is vying for the same integrations. Don’t join the mad last-minute rush and scramble to meet these deadlines!

Take advantage of Exostar’s EPCS solution today. It’s a simple fix that can be implemented quickly – giving you an immediate competitive advantage and a winning customer retention strategy as EPCS becomes the standard for prescribing controlled substances.