340B Drug Pricing Program: Eligibility, GPO Rule, and Audits

The 340B Drug Pricing Program, codified at 42 U.S.C. § 256b and administered by the Health Resources and Services Administration’s (HRSA) Office of Pharmacy Affairs (OPA), requires drug manufacturers that participate in Medicaid to sell covered outpatient drugs at a discounted ceiling price to certain safety-net providers, known as “covered entities.” The program was created by the Veterans Health Care Act of 1992. It does not appropriate federal funds — the discount is a condition manufacturers accept in exchange for Medicaid coverage of their drugs, and covered entities generate savings on the spread between the 340B ceiling price and what they would otherwise pay.

This guide covers what determines eligibility, the group purchasing organization (GPO) prohibition, how duplicate discounts arise and are prevented, contract pharmacy arrangements, and what HRSA compliance audits look at. It does not cover the underlying pharmaceutical procurement relationship in general — see Hospital Supply Chain: How Procurement, GPOs, and Inventory Management Fit Together for that.

Who qualifies as a covered entity

Eligibility is defined by provider type, not by an institution applying generally. Covered-entity categories fall into two broad groups:

• Hospitals — disproportionate share hospitals (DSH) that meet a minimum DSH adjustment percentage, children’s hospitals, free-standing cancer hospitals, sole community hospitals, rural referral centers, and critical access hospitals (CAHs). Each hospital category has its own statutory qualification test, generally tied to the hospital’s DSH percentage, ownership (public or nonprofit with a state/local government contract), and Medicare cost report data.
• Federal grantees and grant-funded look-alikes — entities receiving specific federal grants, including Federally Qualified Health Centers (FQHCs) and FQHC look-alikes, Ryan White HIV/AIDS Program grantees, Title X family planning clinics, STD and tuberculosis clinics, black lung clinics, hemophilia treatment centers, and other categories tied to a specific federal grant or cooperative agreement.

Covered entities must register and be recertified with HRSA’s Office of Pharmacy Affairs Information System (OPAIS) to participate; there is no self-certification exemption. An entity that no longer meets its qualifying criteria (for example, a hospital whose DSH percentage drops below the threshold, or a grantee that loses its federal grant) must be removed from the database and stop purchasing at 340B prices.

The “patient” definition matters as much as entity eligibility

Covered-entity status alone does not make every prescription 340B-eligible. HRSA’s 1996 patient-definition guidance (still the operative framework) requires, in substance, that the entity maintains records of the individual’s care, the individual receives a health care service from a provider employed or contracted by the covered entity (not simply a drug dispensed in isolation), the drug is ordered or prescribed as a result of that service, and the individual’s care is consistent with the scope of the grant, project, or contract that makes the entity eligible. Dispensing 340B-priced drugs to someone who does not meet this definition is a form of diversion and is the single most common HRSA audit finding category.

The group purchasing organization (GPO) prohibition

Section 340B(a)(4) generally prohibits a covered entity from purchasing covered outpatient drugs through a group purchasing organization (GPO) or other group purchasing arrangement. The rule exists so that a covered entity cannot stack a GPO-negotiated discount with the separate 340B ceiling price on the same units of the same drug — a form of double-dipping the statute is designed to prevent. In practice this means covered entities must maintain purchasing accounts and workflows that route 340B-eligible purchases outside their GPO contract, typically through a wholesaler account flagged for 340B pricing.

The GPO prohibition does not apply to every covered-entity type. Disproportionate share hospitals, children’s hospitals, and free-standing cancer hospitals are subject to it for their outpatient drug purchases; several other covered-entity categories (including CAHs, rural referral centers, and sole community hospitals, per amendments enacted through the Affordable Care Act) have either an exception or a narrower version of the restriction. Because the exact scope depends on covered-entity type and has been amended more than once, entities should confirm current applicability against their OPAIS registration category rather than assume a blanket rule.

Duplicate discounts

The statute also prohibits a manufacturer from having to provide both a 340B discount and a Medicaid drug rebate on the same unit of a drug — the duplicate discount problem. Because 340B pricing and Medicaid rebates are calculated and administered separately, a covered entity must identify which of its drug purchases are billed to Medicaid and exclude those units from 340B replenishment (or use 340B stock and forgo billing Medicaid for the drug cost, depending on the entity’s chosen “carve-in” or “carve-out” Medicaid billing method). Entities report their choice and their Medicaid billing number(s)/NPI to HRSA’s Medicaid Exclusion File, which state Medicaid agencies use to prevent manufacturers from being billed twice for the same drug unit. Getting the carve-in/carve-out designation wrong, or failing to update it when billing arrangements change, is a recurring source of duplicate-discount exposure.

Contract pharmacy arrangements

Many covered entities, especially outpatient clinics and grantees without an in-house dispensing pharmacy, contract with outside retail or specialty pharmacies to dispense 340B-purchased drugs on their behalf. HRSA guidance from 1996 (and expanded in 2010 guidance permitting entities to contract with multiple pharmacies) allows this, provided the covered entity maintains oversight, auditable records, and a written contract governing the arrangement. Contract pharmacy access has been a heavily contested area in recent years, with several manufacturers restricting shipments of certain drugs to contract pharmacy locations and related litigation ongoing in federal courts; entities relying on contract pharmacy channels should confirm current manufacturer-specific restrictions directly, since the landscape has continued to shift and specific manufacturer policies are not something a general reference page can keep current.

HRSA compliance audits

HRSA conducts compliance audits of both covered entities and manufacturers. Entity-focused audits typically examine: whether dispensed drugs meet the patient definition (diversion), whether the entity has effective mechanisms to prevent duplicate discounts, whether contract pharmacy oversight is documented, and whether the entity’s own internal audit and self-disclosure processes are functioning. Audit findings and corrective action plans (where issued) are published by HRSA. Entities found out of compliance may be required to repay manufacturers for improperly discounted purchases and to implement corrective action plans; egregious or repeated violations can result in removal from the 340B program. This guide does not cite specific audit-finding rates or penalty amounts, since these vary by audit cycle and are best confirmed against HRSA’s current published audit results rather than restated as a fixed figure.

Frequently asked questions

Is 340B the same as a Medicaid rebate?

No. Medicaid drug rebates are a separate statutory mechanism (Medicaid Drug Rebate Program) that returns a rebate to state Medicaid programs after a drug is dispensed to a Medicaid beneficiary. 340B is a point-of-purchase discount available to covered entities regardless of the patient’s insurance status. The duplicate-discount rules exist specifically because these two programs can otherwise apply to the same drug unit.

Can a covered entity lose its 340B eligibility?

Yes. Eligibility is tied to the covered-entity category’s qualifying criteria (DSH percentage, grant funding, cost-report data, etc.) and must be recertified with HRSA. An entity that stops meeting its category’s criteria, or that is removed following an audit for uncorrected violations, loses its ability to purchase at 340B prices.

Does 340B require a specific inventory model?

The statute does not mandate one inventory method. Entities commonly use either “actual acquisition cost” replenishment (physically maintaining separate 340B stock) or a virtual inventory / split-billing software model that tracks eligibility at the point of dispensing and replenishes 340B stock accordingly. Either approach must be auditable back to individual patient encounters.

See also: Hospital Supply Chain: How Procurement, GPOs, and Inventory Management Fit Together and Research Pharmacy: How Sites Set Up, Staff, and Run an Investigational Drug Service.