What happens if the audit or certification report indicates that the application does not meet DEA’s requirements?
A. If the third-party auditor or certification organization finds that the application does not meet one or more of DEA’s requirements, the application must not be used to create, sign, transmit, or process electronic controlled substance prescriptions. The application provider must notify DEA registrants within five business days of the issuance of the audit or certification report that they should not use the application for controlled substance prescriptions. The application provider must also notify DEA of the adverse audit or certification report and provide the report to DEA within one business day of issuance.
