If an application supports the use of a biometric as one factor of the two-factor authentication credential, does DEA have any special requirements?
A. DEA is establishing several standards for the use of biometrics and for the testing of the software used to read the biometrics. These standards may be found in 21 C.F.R. 1311.116. DEA wishes to emphasize that these standards do not specify the types of biometrics that may be acceptable. Any biometric that meets the criteria DEA has specified may be used as the biometric factor in a two-factor authentication credential used to indicate that prescriptions are ready to be signed and sign controlled substance prescriptions. The use of biometrics as one factor in the two-factor authentication protocol is strictly voluntary, as is all electronic prescribing of controlled substances.
Related Questions
- What is a pharmacy’s responsibility if the pharmacy’s application cannot accommodate special DEA requirements, such as extension data for institutional-based practitioners?
- What are the requirements of a biometric feature used for authentication purposes?
- What is biometric multiple factor authentication?