The 340B Drug Pricing Program allows eligible healthcare providers, known as covered entities, to purchase certain outpatient drugs at reduced prices from pharmaceutical manufacturers. For federally qualified health centers (FQHCs), 340B can be essential to serving patients. Discounts of 25 to 50 percent on outpatient drugs can mean the difference between sustaining a clinic and scaling it back.
The statutory framework for the 340B program, established under Section 340B of the Public Health Service Act, is relatively concise. Yet, this legislation has given rise to one of the most complex drug pricing programs in the country. HRSA’s program integrity efforts have intensified in recent years, and pharmaceutical manufacturers are increasingly conducting their own audits under their statutory authority. A finding of non-compliance can trigger repayment obligations to drug manufacturers, require a corrective action plan, and in serious cases, result in removal from the program.
Here is what FQHC leaders need to know about the foundations of a strong 340B compliance program.
Why Front-End Pricing Matters for Your Health Center
As of this writing, one of the most important things to understand about 340B is that the program provides reduced pricing from drug manufacturers at the point of sale, not rebates paid after the fact.
In a rebate structure, covered entities would pay full price upfront and then submit claims for reimbursement. For FQHCs already managing thin margins and serving patients who cannot afford delays, that model can introduce cash flow strain, administrative burden, and a lag before financial benefits can be reinvested into patient care. The front-end pricing structure helps 340B function as a mission-aligned tool.
There have been efforts to move the 340B program to a rebate-based model.
In spring 2026, HRSA issued a Request for Information seeking input on a potential 340B Rebate Model Pilot Program, with a comment period that closed on April 20, 2026. Then, on August 3, 2026, HRSA published a Federal Register Notice announcing that it had reviewed the comments and is proceeding with a Pilot Program. The Pilot will implement a rebate approach for a limited set of drugs. HRSA has requested drug manufacturers to submit plans to participate in the program by August 24, 2026, for a start date of January 1, 2027. A final list of which drugs will be a part of the Pilot Program will be available in late September 2026.
For FQHCs, it is important to identify which of the selected drugs on the Pilot Program they utilize, so that they can model the impact of purchasing the drugs at wholesale acquisition cost (WAC) beginning January 1, 2027.
Understand What Makes FQHCs Distinct Under 340B
FQHCs qualify for the 340B program based on their federal grant status under HRSA, instead of hospital-specific criteria like disproportionate share percentages.
Your eligibility is tied to maintaining an active federal grant and operating within your federally approved scope of project, as reported on Form 5A: Services Provided. If your services shift or expand in ways that fall outside that approved scope, drugs purchased under that grant designation may no longer qualify for 340B pricing. HRSA maintains that services not deemed essential to delivering an approved health service under Form 5A fall outside a covered entity’s scope of project.
FQHCs that also operate other grantee-type programs, such as Ryan White clinics or STD clinics, face additional complexity. 340B drugs purchased under one designation cannot be applied to patients who qualify only under a different designation. For example, a patient who is HIV-positive receiving STI treatment may qualify under both programs, while an HIV-negative patient treated for an STI would qualify only under the STD 340B designation. Separate purchasing accounts, clear tracking systems, and well-trained staff are not optional in these scenarios.
Patient Definition Documentation Is Non-Negotiable
Compliance failures often begin with patient definitions. The Federal Register guidance on who is a patient seems straightforward.
The 1996 Guidelines provide, in relevant part, that an individual is a 340B-eligible “patient of the entity” only if:
- the covered entity has established a relationship with the individual, such that the covered entity maintains records of the individual’s health care; and
- the individual receives health care services from a health care professional who is either employed by the covered entity or provides health care under contractual or other arrangements (e.g. referral for consultation) such that responsibility for the care provided remains with the covered entity; and
- the individual receives a health care service or range of services from the covered entity which is consistent with the service or range of services for which grant funding or Federally-qualified health center look-alike status has been provided to the entity. Disproportionate share hospitals are exempt from this requirement.
An individual will not be considered a “patient” of the entity for purposes of 340B if the only health care service received by the individual from the covered entity is the dispensing of a drug or drugs for subsequent self-administration or administration in the home care setting.
61 Fed. Reg. 55156, 55157-58 (Oct. 24, 1996).
This definition is currently the subject of pending federal litigation that could narrow who qualifies as a 340B patient. However, unless and until a court rules otherwise, it remains the standard HRSA will apply in an audit.
As stated above, an individual is not considered a patient under 340B if the only service they receive from the covered entity is the dispensing of a drug.
In practice, proving that relationship, especially for patients receiving specialized care or referrals, can be difficult. HRSA auditors will cross-reference patient records against your 340B claims. The gaps they find most often are in the documentation.
For FQHCs, this means:
- The prescribing provider must be employed by or under contract with your health center or connected through a referral arrangement under which the patient’s care remains the responsibility of the health center.
- The health record must document the visit, diagnosis or clinical impression, and treatment provided.
- The services must fall within your approved scope as reported on Form 5A: Services Provided.
- Referral prescriptions require a documented outgoing referral and evidence of your health center’s ongoing care responsibility.
A patient walking in for a single prescription pickup without that documented relationship does not qualify. While most FQHCs understand this principle in theory, proper documentation often slips through the cracks without clear processes and the discipline to follow them.
Keep OPAIS Accurate and Recertify Every Year
Your registration in HRSA’s Office of Pharmacy Affairs Information System (OPAIS) is the system of record for your 340B participation. Wholesalers verify your 340B identification number against OPAIS before shipping discounted drugs. If your address, contact information, or contract pharmacy arrangements are out of date, shipments can be blocked and claims can be flagged.
Key maintenance steps:
- Update OPAIS immediately when your authorizing official, primary contact, or site addresses change.
- Register any new child sites or contract pharmacies in OPAIS before beginning 340B purchases at those locations.
- Complete annual recertification on time. HRSA uses recertification to confirm continued eligibility, and it is where you self-attest that you will report any material breaches.
Inaccurate OPAIS records are among the most commonly cited findings in HRSA audits. In fiscal year 2025, among the 56 entities with adverse findings, 75% were found to have incorrect OPAIS records.
Prevent Diversion and Duplicate Discounts
The 340B statute contains two key compliance prohibitions, both of which can occur inadvertently without strong operational controls.
Diversion means providing 340B drugs to individuals who are not patients of your covered entity. This can happen when patient eligibility is not verified before a prescription is filled, when contract pharmacy staff are not trained on your policies, or when referral prescriptions are processed without the required documentation.
Duplicate discounts occur when a 340B discount is applied to a drug and a Medicaid rebate is also collected on the same unit. For FQHCs that use 340B drugs for Medicaid patients and bill Medicaid for those drugs, billing forms must accurately reflect 340B acquisition costs. Billing errors here compound quickly across a health center’s revenue cycle.
As of January 1, 2025, all covered entities, including FQHCs, are required to report the TB modifier on applicable Medicare claims involving 340B-purchased drugs. This requirement stems from the Inflation Reduction Act and allows CMS to track 340B purchases for purposes of manufacturer rebate calculations.
Build Cross-Departmental Compliance Ownership
One of the most common structural mistakes in 340B compliance is treating it as a pharmacy department issue. The pharmacy team typically does not have organizational authority over billing, credentialing, compliance, or legal, and when something goes wrong, all of those functions are implicated.
A cross-departmental 340B oversight committee, with representation from the C-suite, finance, compliance, IT, legal, and pharmacy, creates shared accountability. This committee should meet regularly to review internal audit findings, evaluate material breach thresholds, and decide when self-disclosure to HRSA is required.
Because 340B compliance touches adjacent statutes, including the False Claims Act, the Anti-Kickback Statute, and state provider licensure laws, the pharmacy team alone may not catch every risk. Contract pharmacy dispensing fee arrangements that deviate from fair market value can raise Anti-Kickback concerns even when the 340B claim itself appears clean. Submitting Medicaid claims that exceed the 340B actual acquisition cost is a potential False Claims Act violation. These risks require legal review, not just compliance software.
Maintain Audit Readiness Year-Round
If you are a 340B-covered entity, an audit is a matter of when, not if. HRSA audits and manufacturer audits can lead to serious consequences if compliance gaps are found, including repayment obligations and termination from the program. An audit-ready program is not assembled in the weeks after the engagement letter arrives.
Common mistakes revealed in 340B audits include:
- Inaccurate record keeping in OPAIS, including outdated addresses and contact information.
- Incomplete patient records that fail to establish the required patient-provider relationship.
- Inaccurate inventory tracking, leading to diversion or duplicate discount findings.
- Misalignment with Form 5A, where services provided do not match the approved scope of project.
- Vendor contract issues, particularly with contract pharmacies or third-party administrators.
Stay prepared for audits with these steps:
- Conduct internal self-audits regularly across all program elements: eligible providers, eligible locations, patient definition, OPAIS accuracy, diversion, and duplicate discounts.
- Retain 340B purchase records, patient records, and policies and procedures in an organized, accessible format.
- Ensure your documented policies and procedures match your actual operations. Describing a control your team does not consistently follow will create exposure when auditors compare policy to practice.
- Review contract pharmacy agreements for compliance and confirm they match your current OPAIS registrations.
Get Legal Guidance on 340B Compliance
By understanding the rules, tracking definitions carefully, and preparing for audits before they happen, covered entities can maintain their 340B eligibility and continue providing vital services.
If your health center has questions about program eligibility, audit readiness, or how 340B obligations interact with your broader legal responsibilities, Malek + Malek’s healthcare attorneys are ready to help.
Frequently Asked Questions About 340B Compliance for FQHCs
What is the biggest compliance risk for FQHCs specifically in the 340B program?
Patient definition violations are among the most frequently cited audit findings. To reduce this risk, FQHCs must ensure every 340B prescription is linked to a documented clinical relationship between the patient and a provider employed or contracted by the health center or connected through a referral arrangement under which responsibility for the patient’s care remains with the health center, within the health center’s approved scope of project as listed on Form 5A. For FQHCs operating multiple grantee designations, failure to keep those purchasing channels separate is an additional common risk.
What is the difference between 340B pricing and rebates, and why does it matter?
The 340B program provides reduced pricing at the point of sale, meaning the discounted price is applied when the covered entity purchases the drug from the manufacturer. In comparison, a rebate model would require covered entities to pay full price upfront and later receive reimbursement. For FQHCs operating on tight margins and serving patients who depend on consistent access to medications, the rebate model could create cash flow strain and delay the reinvestment of savings into patient care.
FQHCs should monitor updates related to 340B rebates, as a Pilot Program implementing a rebate approach is set to begin January 1, 2027. For the most recent updates, contact a knowledgeable attorney.
What happens if HRSA finds a compliance violation during an audit?
HRSA will issue findings and typically require a corrective action plan. The covered entity must repay any improper discounts to affected manufacturers. If a violation is knowing and intentional, HRSA may require repayment with interest. Repeated findings of the same violation can trigger additional audits and potentially result in removal from the program.
How should FQHCs manage contract pharmacy compliance?
FQHCs are responsible for their contract pharmacy arrangements even though the pharmacy is a third party. This includes confirming all contract pharmacies are registered in OPAIS, reviewing quarterly financial statements and dispensing records, maintaining a tracking system to prevent diversion, and auditing contract pharmacy claims regularly. Contract pharmacy agreements should also be reviewed to ensure dispensing fees reflect fair market value and do not create Anti-Kickback concerns.
When should an FQHC involve a healthcare attorney in 340B compliance matters?
If your organization is preparing for an HRSA or manufacturer audit, has identified a potential material breach, is expanding to new child sites or adding contract pharmacy arrangements, or has questions about how 340B obligations intersect with the False Claims Act, the Anti-Kickback Statute, or state law, consulting a knowledgeable healthcare attorney is a sound step. Compliance consultants are valuable, but they typically focus on the 340B regulations themselves. The adjacent legal risks carry more severe penalties and require legal counsel to assess properly.
This blog is not legal advice and does not create an attorney-client relationship with our firm. The content is intended to promote a general understanding of legal concepts and should not be relied upon as a substitute for obtaining legal advice from a qualified attorney regarding the reader’s specific circumstances. Readers should consult legal counsel for advice concerning their individual situations. All content is provided without any representations or warranties regarding completeness, accuracy, or timeliness.