ePCS Reports

NextGen® Enterprise EHR Help

ePCS Setup

The Drug Enforcement Administration (DEA) allows DEA registrants to write Electronic Prescriptions of Controlled Substances (ePCS). To control who can send these electronic prescriptions, the System Administrator application meets the DEA regulations that determine how applications and practices are to restrict eRx access rights. These measures rely on identity-proofing to prevent fraud. To comply with the DEA regulations, NextGen Healthcare providers can use any of the following ePCS authentication methods: Symantec™ VIP Token IdenTrust Mobile Authentication Service Imprivata Confirm ID™ for EPCS Note: You can prevent a specific medication (controlled substance) from being electronically prescribed by selecting the Do not allow eRX option from the Medication Tasks master file in File Maintenance. The ePCS setup process involves the following procedures in the System Administrator application: Set up the ePCS authentication method. Authorize ePCS registrar access. ePCS registrars give

NextGen® Enterprise EHR Help

Medications SAP Crystal Reports

The Medications SAP Crystal Reports enable you to print and fax prescriptions, create auditing reports, and meet other clinical reporting needs. SAP Crystal Reports displays with the new logo, NextGen Healthcare provides the following Medications module: Report Description ePCS The ePCS (electronically prescribed controlled substance) reports allows you to monitor and track information about prescriptions that have been processed for controlled substances. The following reports are included: ePCS auditable events report ePCS prescriptions report Prescriptions Audit Report Includes all prescriptions written by providers (including faxed, printed, or sent electronically) for a selected timeframe. The report contains a Delete Reason column which displays the reason for deleting a medication if the user entered it in error. It is used for auditing purposes. You can delete any prescribed medication without mentioning a reason for deletion. If you delete a medication after it has been sent y

NextGen® Enterprise EHR Help

DEA Provider Requirements

To send Electronic Prescriptions of Controlled Substances (ePCS), a provider must meet the following Drug Enforcement Administration (DEA) requirements: The provider's relationship with user is set up as self. The provider's retail service level is set up for ePCS. A valid DEA number is assigned to the provider. If a provider is exempted from the DEA registration, a link to the institutional practitioner’s DEA number must exist. Two-factor authentication credentials are added for the provider. Something you know, for example a password or PIN Something you have, for example a token that generates one-time password or a push notification to registered devices Something you are, for example a biometric test NextGen® Enterprise EHR uses the something you know (user password), something you have (token generating a one-time access password or a push notification to registered devices), and something you are (biometric test) authentications for ePCS. The provider is authenticated by two reg

NextGen® Enterprise EHR Help

ePCS Message Handling Processes

To handle Electronic Prescriptions of Controlled Substances (ePCS) messages, NextGen Healthcare has the following processes in place: NextGen® Enterprise EHR uses RSA to digitally sign the ePCS message and SHA1 algorithm to hash ePCS messages. The application includes a time stamp within five minutes of National Institute of Standards and Technology (NIST) time source. NextGen® Enterprise EHR uses time server provided by Symantec® VIP service, which is Drug Enforcement Administration (DEA) compliant. The application displays the following information to the provider prior to dispensation of the controlled substance: Date of issuance Full name of the patient Medication name Dosage strength of medication Form of medication Quantity of medication Directions for use of medication Number of refills authorized Earliest fill date of the medication Name, address, and DEA number of the provider Attestation statement Indication that each controlled substance is ready for signing NextGen® Enterpr

NextGen® Enterprise EHR Help

Requirements to Submit Electronic Prescriptions of Controlled Substances

You can electronically submit a prescription for Drug Enforcement Administration (DEA) controlled substances by using Electronic Prescription of Controlled Substances (ePCS). ePCS uses the Surescripts retail and mail-order networks of pharmacies and must be set up through File Maintenance and System Administrator. Before you can electronically submit prescriptions for controlled substances, you must meet the following requirements: You are enrolled in ePrescribing. You are assigned with Surescripts Provider Identifier (SPI). You may also be required to select a supervising physician. You have two-factor authentication credentials. You must have prescribed the medication. Note: The application allows only the prescribing provider to sign and electronically submit a controlled substance medication. Submit Electronic Prescriptions of Controlled Substances Prescribers can submit electronic prescriptions for controlled substances with the two-factor authentication method. Parent topic: DEA

NextGen® Enterprise EHR Help

DEA Application Requirements

Drug Enforcement Administration (DEA) requires the application to restrict printing, faxing, and electronically prescribing controlled substances. The application applies the following rules for controlled substances: If you printed or faxed a controlled substance prescription, you cannot electronically send that prescription. If you electronically prescribe a controlled substance, you can print or fax that prescription. The printed or faxed report indicates that the printed or faxed copy is not for dispensing. If you electronically prescribe a controlled substance and the transmission fails, you can print or fax that prescription. The printed or faxed report shows a message stating the prescription was originally sent electronically to a pharmacy. The report also shows the following information: The pharmacy’s name The date and time of the eRx message A notification that the eRx message failed Note: The application meets the DEA cryptography requirements. Parent topic: DEA Requirement

ePCS Reports

Recommendations

ePCS Setup

Medications SAP Crystal Reports

DEA Provider Requirements

ePCS Message Handling Processes

Requirements to Submit Electronic Prescriptions of Controlled Substances

DEA Application Requirements

ePCS Setup

Medications SAP Crystal Reports

DEA Provider Requirements

ePCS Message Handling Processes

Requirements to Submit Electronic Prescriptions of Controlled Substances

DEA Application Requirements