DEA Form 106: the one-business-day clock most pharmacies miss

The clock starts at discovery, not at confirmation

Most pharmacies know that a theft or significant loss of controlled substances has to be reported to the Drug Enforcement Administration on DEA Form 106. Fewer know that the form is the second deadline, not the first. Under 21 CFR 1301.76(b), a registrant must notify the DEA Field Division Office for its area, in writing, within one business day of discovering the theft or significant loss. The Form 106 itself follows within 45 calendar days.

The order matters because the one-business-day notice is the one that gets missed. A technician notices a count is short on a Friday afternoon. The pharmacist wants to recount on Monday, check the CCTV, ask the relief pharmacist, and be sure before putting anything in writing. By the time the loss is confirmed, the notice is a week late, and the inspector who eventually reads the Form 106 will see the discovery date and the notice date side by side.

What the regulation actually says

The text of 21 CFR 1301.76(b) sets out three things.

Who and when. The registrant notifies the Field Division Office in writing within one business day of discovery. Federal holidays are not business days. A loss discovered on the Friday before a Monday federal holiday has its notice due on the Tuesday.

The form. The registrant then completes DEA Form 106. Since the 2023 amendment to the rule, the form is submitted electronically through DEA's portal, within 45 calendar days of discovery.

What counts as significant. The regulation does not give a number. It lists factors the registrant must consider, and the list is worth quoting closely because an inspector will ask which of them you weighed:

• The actual quantity lost in relation to the type of business.
• The specific controlled substances lost.
• Whether the loss can be associated with access by specific individuals, or attributed to unique activities that may take place involving the controlled substances.
• A pattern of losses over a specific time period, whether the losses appear to be random, and the results of efforts to resolve the losses.
• Whether the specific controlled substances are likely candidates for diversion.
• Local trends and other indicators of the diversion potential of the missing controlled substances.

A single missing tablet of a Schedule III cough preparation and a single missing bottle of 100 oxycodone 30 mg tablets are both "one unit", and the factors above are the reason one is a note in the log and the other is a Form 106.

The fields on the form

DEA Form 106 asks for a fixed set of facts, and the fastest way to be late is to discover on day 40 that one of them was never captured. The form covers:

• Registrant name, address and DEA registration number.
• Date of discovery, and the date of the theft or loss if known.
• Type of loss: night break-in, armed robbery, employee pilferage, customer theft, other, or lost in transit.
• Whether the police were notified, and the name of the agency and the report number.
• The number of thefts or losses the registrant has experienced in the past 24 months.
• Corrective measures taken to prevent future thefts or losses.
• The substances lost, one line per NDC, with the quantity and dosage form.

Losses in transit are the supplier's report, not the purchaser's, under 21 CFR 1301.74(c). The pharmacy's Form 106 covers what left its own custody.

Why pharmacies miss the first deadline

Three patterns come up repeatedly.

Waiting to be sure. The regulation is triggered by discovery, and discovery is the moment the count did not reconcile. The notice can say the investigation is ongoing. It cannot be back-dated.

Not knowing the Field Division. The notice goes to the DEA Field Division Office for the registrant's area, in writing. A pharmacy that has never looked up which office that is will spend its one business day finding out.

Treating the count as the record. A biennial inventory under 21 CFR 1304.11 that is taken, witnessed and then put in a drawer will show the discrepancy two years later. A count that is reconciled against the book balance on the day shows it that afternoon, which is when the one-business-day clock can still be met.

The DSCSA for pharmacies page sets out the related records a DEA or Board of Pharmacy inspector asks for first, and the pharmacy compliance page covers the Schedule II register and running balance that make a shortfall visible on the day it happens.

Canada: 10 days, regardless of amount

Health Canada's rule is simpler and stricter on one point. A licensed dealer or a pharmacist who discovers a loss or theft of a controlled substance must report it to the Office of Controlled Substances within 10 days of discovery. There is no significance test; the Loss or Theft Report form is filed for any amount. Ontario adds the College's expectation that pharmacies reconcile their controlled-substance counts on a regular cadence, so a shortfall surfaces within the period rather than at an audit.

Running the clocks as tasks

ShelfLifePro records a loss incident in the fields of the form itself: registrant, discovery, type, police report, prior-24-month count, corrective measures, and the substances by NDC or DIN, with the six 1301.76(b) factors recorded on the incident. On confirm, the core facts freeze and two tasks start in the pharmacy's own time zone: the written notice to the Field Division within one business day, with federal holidays observed, and Form 106 within 45 days. For a Canadian pharmacy the single task is the 10-day Health Canada report. Amendments are counted and audited, stock is only adjusted by an explicit action, and the packet is prepared for the pharmacist to submit on the DEA portal; the incident number that comes back is recorded against it. ShelfLifePro does not file the form.

Sources: 21 CFR 1301.76(b), 1301.74(c), 1304.11 (eCFR); DEA Form 106; Health Canada CS-GD-005; Ontario College of Pharmacists, "Controlled Substances: Security and Reconciliation". Nothing here is legal advice.