solution-fda-dea-epcs-page-inner-banners

FDA/DEA Regulatory Compliance: EPCS

Complying with Electronic Prescriptions for Controlled Substances (EPCS) Requirements

FDA/DEA Regulatory Compliance: EPCS

map
Regulation | Active Now

EPCS revises DEA’s regulations to provide practitioners with the option of writing prescriptions for controlled substances electronically as well as receiving, dispensing and archiving electronic prescriptions. The electronic prescription application must incorporate a secure process for practitioner authentication.

Thales can help prepare organizations to meet these regulations through:

  • Two-factor authentication
  • Hardware- and software-based EPCS-compliant tokens
  • Regulation
  • Compliance

The DEA's EPCS Regulation

"Electronic Prescriptions for Controlled Substances" revises DEA's regulations to provide practitioners with the option of writing prescriptions for controlled substances electronically. The regulations will also permit pharmacies to receive, dispense, and archive electronic prescriptions.

EPCS requires medical practitioners to use two-factor authentication to sign prescriptions for medical narcotics issued in digital form.

To comply with EPCS and enable the issuing of e-prescriptions for controlled substances, hospitals and healthcare institutions must instate EPCS-compliant processes certified by an independent third party, including the use of two-factor authentication (2FA) when signing e-prescriptions for controlled substances.

Thales’ SafeNet two-factor authentication solutions let hospitals and Critical Access Hospitals (CAHs) embrace EPCS quickly, without changing their current infrastructure.

Offering both hardware and software-based EPCS-compliant tokens, Thales provides frictionless authentication for practitioners and frictionless management for IT staff through fully automated workflows.

Related Resources

SafeNet Trusted Access - Product Demo Webinar

SafeNet Trusted Access - Product Demo Webinar

SafeNet Trusted Access (STA) is a cloud-based access management service that makes it easy to manage cloud and web access with single sign-on, access policies and strong multi-factor authentication. Watch the 30-minute demo webinar to learn how you can: - Simplify user access...

SafeNet MobilePASS+ Mobile Authenticator App - Push and OTP

SafeNet MobilePASS+ Mobile Authenticator App - Push and OTP - Product Brief

End users and IT teams are experiencing waves of high stress due to the pandemic and escalating cyberattacks. Thales offers a simple and highly secure authenticator app that makes login fast and secure throughout each login session, lowering risk and ensuring secure remote...

Thales Converged Badge Solutions - Solution Brief

Thales Converged Badge Solutions - Solution Brief

In today’s ever increasing digital world, protecting critical data and ensuring the identity of those accessing data is essential. The standard measures once thought to be strong enough are simply insufficient when compared to the sophistication and persistence of today’s...

Extending PKI Smart Cards to Cloud and Web Access Management - Solution Brief

Extending PKI Smart Cards to Cloud and Web Access Management - Solution Brief

PKI-based authentication, cloud single sign-on and access management are no longer mutually exclusive. With SafeNet Trusted Access, organizations can use their current PKI smart cards to secure cloud and web-based applications.

Other key data protection and security regulations

GDPR

Regulation
Active Now

Perhaps the most comprehensive data privacy standard to date, GDPR affects any organization that processes the personal data of EU citizens - regardless of where the organization is headquartered.

PCI DSS

Mandate
Active Now

Any organization that plays a role in processing credit and debit card payments must comply with the strict PCI DSS compliance requirements for the processing, storage and transmission of account data.

Data Breach Notification Laws

Regulation
Active Now

Data breach notification requirements following loss of personal information have been enacted by nations around the globe. They vary by jurisdiction but almost universally include a “safe harbor” clause.