What May Pharmacies and Hospitals Do with Patient-Owned Controlled Substances?

Healthcare facilities routinely encounter controlled substances that belong to patients, often when a patient is admitted to a hospital, transferred to another level of care, or leaves medications behind after discharge or a visit. While these situations are common, the regulatory framework governing patient-owned controlled substances is frequently misunderstood and, when such controlled substances are mishandled, can expose a facility to DEA scrutiny.

Understanding what pharmacies and hospitals may and may not do with patient-owned controlled substances, and the available options for lawful destruction, is essential for maintaining compliance and preventing diversion.

Why Patient-Owned Controlled Substances Are a Compliance Risk

Under the Controlled Substances Act, a controlled substance prescribed to a patient remains lawfully possessed by that ultimate user. DEA regulations do not allow healthcare personnel to routinely take possession of a patient’s controlled substances simply for convenience or safekeeping. Once a patient hands a controlled substance to an unauthorized individual, even a DEA registrant, that transfer can be viewed as an unlawful distribution.

This creates a regulatory dilemma for hospitals and pharmacies, particularly when patients arrive with controlled substances during emergencies or admission through emergency departments, surgical centers, or inpatient units.

When Can a Facility Handle Patient-Owned Controlled Substances?

In general, a pharmacy or hospital cannot accept, store, or destroy a patient’s controlled substances merely because the patient no longer wants them. DEA regulations draw a clear distinction between:

• Registrant-owned inventory (which a pharmacy or hospital may destroy under DEA regulations), and
• Patient-owned medications, which remain the responsibility of the ultimate user unless very specific conditions are met.

Collection Programs: When Facilities May Accept Patient Medications

DEA regulations do provide structured pathways for accepting patient-owned controlled substances for the purpose of disposal, but only if the facility is properly authorized. Pharmacies and hospitals with an onsite pharmacy may modify their DEA registration to become an authorized collector. Once registered, the facility may maintain:

• Secure collection receptacles (kiosks),
• Mail‑back programs, or
• Participation in DEA authorized takeback events.

Importantly, the patient, or another authorized ultimate user, must personally deposit the controlled substance into the collection receptacle. Hospital or pharmacy staff may not receive the medication hand-to-hand and then place it into the kiosk on the patient’s behalf.

Abandoned Controlled Substances

Facilities occasionally discover controlled substances that have been abandoned by patients or visitors in waiting rooms, restrooms, or patient areas. DEA guidance addresses abandonment by patients but not voluntary surrender. If a reasonable attempt to return the medication to the patient fails, the facility may treat the substance as abandoned and dispose of it in accordance with DEA guidance applicable to registrants. However, these situations should be rare and carefully documented.

How Are Collected Controlled Substances Destroyed?

Once patient-owned controlled substances are lawfully collected, either through a registered collection program or having been determined to be abandoned, the destruction process must still meet strict regulatory standards.

Facilities generally have three lawful options:

Use of a DEA-Registered Reverse Distributor

Most pharmacies and hospitals rely on DEA-registered reverse distributors to manage the destruction process. Reverse distributors assume custody of the controlled substances, maintain chain of custody, complete required DEA forms, and arrange for non-retrievable destruction at authorized facilities.

Law Enforcement Transfer

In some situations, controlled substances may be transferred to law enforcement agencies for destruction. These arrangements are typically agency-specific and must be carefully documented.

On-site Destruction (Limited and Rare)

On-site destruction is permitted only under narrow circumstances and requires methods that render the substance non-retrievable, along with DEA Form 41 documentation and, in some cases, witness or law enforcement oversight. Most hospitals and pharmacies do not use this option due to operational complexity.

A Common Compliance Mistake

One of the most frequent compliance failures occurs when facilities comingle patient-owned controlled substances with facility inventory awaiting reverse distribution. Doing so can lead to significant recordkeeping discrepancies and may be interpreted as unlawful possession or diversion.

Policies should clearly prohibit staff from placing patient medications into pharmaceutical waste bins, narcotic vaults, or reverse distributor totes unless the substance has been lawfully collected through an authorized DEA process.

Best Practices for Pharmacies and Hospitals

Facilities should maintain written policies that:

• Clearly define patient-owned vs. facility-owned controlled substances
• Specify when medications may be temporarily secured for patient care
• Outline how abandoned substances are handled
• Identify whether the facility is a registered collector
• Specify approved destruction pathways and documentation requirements
• Train staff regularly, especially admissions, nursing, and pharmacy personnel

DEA Guidance on Patient-Owned Medications

The DEA guidance document titled “Disposal of Controlled Substance Prescription Medications (Schedules II–V) Abandoned by Patients and/or Visitors at the Locations of DEA-Registered Practitioners” explains how DEA-registered practitioners are expected to handle controlled substances that are left behind at registered locations.

The guidance indicates that controlled substances lawfully possessed by an ultimate user remain that individual’s responsibility and instructs registrants to attempt to return abandoned medications to the patient or another authorized ultimate user whenever feasible.

“[W]hen controlled substance prescription medications (schedules II-V) are abandoned by patients or visitors and return to them as the ultimate user is not feasible, DEA recommends that practitioners contact state, local, and tribal law enforcement or their local DEA office as soon as possible for guidance on proper disposal procedures” 79 FR 53546.

In practice, however, facilities frequently find that law enforcement agencies and local DEA offices, due to workload considerations or other factors, do not respond to requests to take custody of abandoned controlled substances for destruction. This disconnect reflects an ongoing compliance challenge, particularly where DEA field offices may provide differing guidance on how registrants should lawfully manage these situations in the absence of practical assistance.

Final Thoughts

Patient-owned controlled substances present a persistent and often misunderstood compliance risk for pharmacies and hospitals, particularly when operational realities collide with rigid regulatory boundaries. While DEA regulations and guidance establish clear limits on when facilities may accept, store, or destroy patient-owned medications, they offer limited practical solutions for the real-world scenarios healthcare staff face every day.

The dichotomy of DEA’s published guidance and the frequent reluctance of law enforcement or DEA offices to accept abandoned substances for destruction leaves many facilities navigating gray areas with significant compliance exposure. Ultimately, the best protection lies in well-defined policies, staff training, strict segregation of patient- and facility-owned drugs, and a conservative approach that prioritizes documentation and compliance over convenience. Facilities that underestimate this issue do so at their own risk.

How Brinks DEA Consulting Can Help

Navigating the regulatory complexities surrounding patient-owned controlled substances requires more than a surface level understanding of DEA rules, it demands practical experience with how those rules are interpreted and enforced. Brinks DEA Consulting brings more than 75 years of combined regulatory, enforcement, and diversion control experience, including firsthand expertise inside the DEA.

We work with pharmacies, hospitals, and healthcare organizations to identify compliance gaps, develop defensible policies, and address real-world scenarios that place facilities at risk. If your organization is struggling with how to properly manage patient-owned controlled substances or wants to strengthen its compliance posture, we encourage you to contact us to discuss your specific challenges at Brinks DEA Consulting.