EPCS protocols will require:
- Identity Proofing: This seeks to recognize the identity of the prescriber of the Schedule ll-V drugs. The intelligent software will mitigate the risk of unqualified doctors prescribing highly addictive substances.
- Digital Signature: This gives the prescription authentication; thus, the patient is eligible for opioid use for pain management. It also prevents unqualified people from giving illegal prescriptions.
- Two-Factor Authentication: This helps in verifying the credibility of the prescriber. The medical facility will have to adopt biometrics or tokens for correct integration.
- Regular Monitoring by the DEA: On an occasional basis, the DEA will require well-audited reports on the prescription of regulated substances in health facilities. Monitoring of opioid use will be enabled.
The COVID-19 pandemic added additional EPCS challenges for some prescribers, as some organizations indicated that updates to their current Electronic Health Record (EHR) would need to be rescheduled. CMS recognized the challenges prescribers are facing during the pandemic, so it indicated that requiring EPCS by January 1, 2022, strikes the balance between not providing too large of a burden on providers and helping ensure that the benefits of EPCS are still leveraged appropriately.
The extension in requiring EPCS by 2022 has now allowed for additional feedback and discussion with Request for Information from prescribers. CMS released a Request for Information on how it should implement the requirement going forward. In this RFI, CMS sought comment on three issues:
1) Compliance with the requirement;
2) Enforcement and penalties; and
3) Potential exceptions to the requirement.
On December 1, 2020, CMS finalized the Requirement for EPCS for a Covered Part D drug under a Prescription Drug Plan or an MA-PD plan rule indicating the compliance date has been set for January 1, 2022.