Key Takeaways
- The 340B program can be one of an FQHC’s largest sources of operating margin, but that margin depends entirely on compliance infrastructure most finance leaders don’t have direct visibility into.
- A patient prescribed medication during an eligible visit who fills that prescription at a contract pharmacy three weeks later still generates 340B savings, but only if your tracking system can document the connection between the qualifying encounter and the dispense event.
- HRSA audits consistently surface failures in four areas: OPAIS registration accuracy, patient eligibility documentation, contract pharmacy oversight, and duplicate discount prevention when Medicaid is the payer. The last two carry the heaviest financial consequences.
- Split billing systems that toggle between 340B and non-340B inventory based on patient eligibility status require daily reconciliation, and most compliance gaps trace back to configuration errors or staff workarounds that bypass the intended controls.
The 340B Drug Pricing Program exists to stretch scarce federal dollars for safety-net providers. For Federally Qualified Health Centers, it often represents one of the largest sources of margin outside of grant revenue.
That margin can also be one of the most audit-exposed. HRSA’s Office of Pharmacy Affairs has maintained a consistent audit pace while intensifying scrutiny of diversion, duplicate discounts, and eligibility documentation; manufacturers have restricted access to contract pharmacies; and the compliance infrastructure required to defend 340B savings has grown more complex every year since the program’s expansion.
FQHC finance leaders who treat 340B as a pharmacy operations issue rather than a financial controls issue are managing one of their largest revenue drivers with limited visibility into it.
What the 340B Program Actually Requires of FQHCs
The statutory framework appears straightforward: covered entities, including FQHCs registered with HRSA, purchase outpatient drugs at discounted prices from participating manufacturers. The savings generated from dispensing those drugs at acquisition cost below reimbursement rates fund services for underserved populations.
The compliance complexity hides in the operational details.
The Health Resources and Services Administration requires that 340B drugs be dispensed only to patients of the covered entity. For FQHCs, “patient” has a specific regulatory definition: an individual who receives a health care service from a provider employed by or contracted with the FQHC, and for whom the FQHC maintains records demonstrating responsibility for the care provided. A patient who receives only a referral or is seen at a location not registered in the FQHC’s 340B database does not qualify.
Eligibility determination must happen before the 340B purchase, not after. When an FQHC dispenses a 340B drug to someone who does not meet the patient definition, that dispense constitutes diversion, one of the most serious audit findings HRSA can issue.
The second core prohibition is duplicate discounts. When a state Medicaid program has already received a manufacturer rebate on a drug, the covered entity cannot also claim the 340B discount on that same dispense. FQHCs operating in Medicaid expansion states must maintain systems that identify Medicaid-covered patients and exclude them from 340B purchasing, or carve them into 340B while ensuring the state does not also claim the rebate. The coordination between these two discount mechanisms is where most compliance breakdowns occur.
Where Audit Findings Actually Come From
HRSA audits follow referrals, complaints, and patterns in purchasing data that suggest potential diversion or duplicate discount violations. When an audit occurs, three areas of documentation receive the most scrutiny.
- Patient Eligibility. Auditors request a sample of 340B transactions and trace each one back to a qualifying encounter. The FQHC must produce records showing that the patient met the definition at the time of dispense, that the prescriber was an authorized provider, and that the service occurred at a registered site. Contract pharmacy arrangements further complicate this because the dispense event occurs at a location the FQHC does not directly control, and the eligibility determination must still be defensible.
- Contract Pharmacy Oversight. FQHCs that use contract pharmacies to extend 340B access must have written agreements, defined policies, and auditable controls demonstrating that the contract pharmacy only dispenses 340B drugs to eligible patients. Manufacturer restrictions have reduced the number of contract pharmacy relationships many FQHCs can maintain, but those that remain carry heightened compliance expectations.
- Duplicate Discount Prevention. Auditors examine whether the FQHC has a system to prevent claiming 340B pricing on drugs for which Medicaid has also claimed a rebate. This requires either carving out Medicaid patients from 340B entirely or participating in a state Medicaid carve-in arrangement with appropriate reporting. The burden of proof falls on the covered entity to demonstrate that duplicate discounts did not occur.
The Financial Exposure Most FQHCs Underestimate
A 340B audit finding does not result in a fine, but in repayment. HRSA can require covered entities to repay manufacturers for the difference between the 340B price and the non-340B price on every identified non-compliant transaction, and extrapolate to the broader population of dispenses if the sample findings suggest systemic issues.
For an FQHC generating significant pharmacy volume, that repayment obligation can reach six or seven figures. Program savings that funded expanded services, additional staff, or facility improvements can be clawed back during a single audit cycle.
Beyond direct financial exposure, can result in removal from the 340B program. Termination eliminates the discount pricing entirely, converting a margin-generating pharmacy operation into a cost center overnight. Reinstatement requires demonstrating that the compliance failures have been corrected and sustained, a process that can take years.
What Finance Leaders Should Be Tracking
Pharmacy operations teams manage the day-to-day mechanics of 340B compliance, but finance leaders are responsible for the financial controls that determine whether the program’s savings are defensible.
Five areas warrant direct attention from the finance function.
- Eligibility match rates measure the percentage of 340B dispenses that can be traced to a documented qualifying encounter. A rate below 95 percent suggests either data integration problems between the EHR and the pharmacy system or policy gaps in determining patient eligibility. Finance leaders should receive this metric monthly.
- Contract pharmacy reconciliation reports should show every dispense at each contract pharmacy, matched against patient eligibility records maintained by the FQHC. Discrepancies should be investigated and resolved within the same reporting period, not accumulated.
- Medicaid carve-out or carve-in documentation must be current. The FQHC should have written policies describing how Medicaid patients are handled, and those policies should match the actual system configuration. Finance should verify this annually at minimum.
- 340B savings as a percentage of pharmacy margin provides context for how dependent the FQHC’s financial model is on program integrity. Organizations in which 340B generates 30 percent or more of pharmacy-related margin may face a disproportionate exposure if compliance gaps emerge.
- Manufacturer restriction tracking has become essential. As manufacturers limit access to contract pharmacies, FQHCs must adjust their 340B purchasing patterns and document which drugs are now excluded from discounted pricing. Finance should understand which restrictions are in effect and how they affect projected savings.
Build the Financial Oversight 340B Requires
FQHCs that treat compliance as a pharmacy problem rather than a finance and governance problem are managing substantial financial exposure without the visibility to detect issues before they become audit findings.
Rea’s not-for-profit advisors work with FQHCs on the financial controls, compliance infrastructure, and audit preparation required by 340B programs. If your organization’s 340B savings have grown faster than your compliance monitoring has, or if you have not conducted a structured self-audit in the past year, contact the Rea team to discuss which oversight structure makes sense.
About the Author
Cole Reynolds is a Senior Manager with Rea’s not-for-profit advisory team, where he works with community health centers and other mission-driven organizations on financial reporting, reimbursement strategy, and compliance. With more than eight years of experience at Rea, Cole brings a detailed understanding of the funding complexities facing health centers. He is passionate about helping not-for-profit organizations build the financial infrastructure they need to protect their mission for the long term.
Connect with Cole or learn more about Rea’s not-for-profit advisory services at reaadvisory.com/contact/.