Colorado PDMP: Reporting, Query Duty, Access, and Penalties

Colorado’s Prescription Drug Monitoring Program requirements fall into three duties: pharmacies and dispensing practitioners must report every Schedule II through V controlled substance they dispense, prescribers must check a patient’s PDMP history before writing a controlled substance prescription, and access to the database is limited to a specific list of authorized users. The program is run by the Division of Professions and Occupations, and the Board of Pharmacy maintains the electronic tracking system for all controlled substances dispensed in the state.¹

Who Has to Report Dispensing

Every prescription drug outlet that dispenses a Schedule II through V controlled substance in Colorado has to report that transaction to the PDMP. The obligation covers retail pharmacies, mail-order pharmacies, and out-of-state pharmacies shipping to Colorado residents.¹

Practitioners who directly dispense controlled substances to patients for use outside a healthcare facility carry the same reporting duty. A veterinarian who hands a pet owner a controlled medication for home use reports it the same way a pharmacy would. In the veterinary setting the regulation defines “client” as the animal’s owner, the owner’s agent, or the person responsible for the animal.²

The Hospital Exemption and Its Limit

Licensed hospitals, prescription drug outlets inside hospitals that fill chart orders or dispense no more than a 24-hour supply, and licensed emergency medical service providers are exempt from PDMP reporting. The exemption stops at the 24-hour line. A hospital-based pharmacy that fills a discharge prescription for a week’s worth of oxycodone must report that transaction like any other outpatient pharmacy would.³

What Gets Reported and When

For each dispensed controlled substance, the PDMP captures the date dispensed, the patient’s name, the practitioner’s name, the drug name and quantity, the method of payment, and the dispensing pharmacy’s name, along with any additional data needed to identify patients who may be visiting multiple prescribers or pharmacies to obtain the same medication.¹

State regulations set the deadline at no later than the pharmacy’s next regular business day after dispensing.² A pharmacy that doesn’t dispense any controlled substances during a reporting period still has to submit a “zero report,” or it is considered noncompliant. The Board of Pharmacy requires only one data entry per patient per prescription, so outlets don’t have to re-enter the same information through multiple systems.

Who Has to Query Before Prescribing

Since 2014, every Colorado prescriber with authority to write controlled substance prescriptions has been required to query the PDMP.⁴ That duty reaches physicians, dentists, podiatrists, advanced practice nurses with prescriptive authority, optometrists, and resident physicians practicing under supervision. Pharmacists must also check the PDMP when dispensing or considering dispensing a controlled substance to a patient.⁵

Veterinarians can query the system, but access is narrower. A veterinarian may look up a client’s records only when, in professional judgment, there is a reasonable basis to suspect the client has committed drug abuse or mistreated an animal.⁶

Who Else Can Access PDMP Records

Colorado law restricts the database to a defined list of users:⁶

Prescribers querying records for a current patient, and pharmacists querying for a patient they are dispensing to or considering dispensing to.
Designees appointed by a prescriber or pharmacist, with no statutory cap on the number of delegates per account.
The medical director of a facility treating substance use disorders with controlled substances, with the patient’s permission.
Resident physicians with an active physician training license, working under the supervision of a licensed physician.
Patients requesting their own prescription history.
State regulatory boards within the Division of Professions and Occupations, and the division director, for data on an individual practitioner during a formal investigation, with an official court order or subpoena.
Law enforcement officers, for data on an individual patient, pharmacy, or practitioner as part of a bona fide investigation, with an official court order or subpoena.
The Colorado Department of Public Health and Environment, for population-level analysis subject to federal HIPAA requirements.

Law enforcement doesn’t need a judge-signed warrant; an administrative subpoena satisfies the statute. The request still has to be tied to a specific person or entity and an active investigation, and general browsing of the database is not permitted.

Delegate Accounts

Prescribers and pharmacists can authorize staff to query the PDMP on their behalf, with no statutory limit on the number of delegates. Each delegate operates under a master account holder, and the prescriber or pharmacist who creates the delegate account remains responsible for how that access is used.⁶ A nurse or medical assistant can pull a patient’s history before the prescriber walks into the room. Sharing login credentials instead of setting up a proper delegate account creates compliance risk, because the statute ties each query to an identifiable authorized user.

Interstate Prescription Data

Colorado has participated in the NABP’s PMP InterConnect platform since November 2012.⁷ When a Colorado prescriber runs a query, the system can pull prescription records from other participating states, which helps catch patients filling the same medication across state lines. Each state’s privacy and access rules travel with its data, so what Colorado sees from another state follows that state’s restrictions.

Penalties for Noncompliance

Reporting failures are the most common PDMP violation. A prescription drug outlet that fails to submit dispensing data or zero reports to the PDMP twice within a 30-day period can be referred to the Board of Pharmacy for discipline.² Two slips in a month is a low threshold, and inconsistent reporting habits can put a small pharmacy under Board scrutiny quickly.

Unauthorized access and misuse of PDMP data draw more serious sanctions. Pulling a patient’s records out of curiosity, looking up a neighbor’s prescriptions, or accessing data for financial gain all fall outside the authorized purposes in the statute. Sharing credentials rather than establishing a delegate account can also expose a practitioner to discipline. The Board of Pharmacy and the other licensing boards within the Division of Professions and Occupations investigate compliance and can impose sanctions ranging from corrective training to license suspension or revocation.⁴ Falsifying PDMP data draws the harshest administrative response.

Criminal exposure sits behind the administrative penalties. Deliberately accessing or misusing confidential prescription data may result in state criminal charges. Federally, any person who knowingly distributes or dispenses a controlled substance outside authorized medical purposes faces prosecution under 21 U.S.C. § 841, which carries mandatory minimum prison sentences for violations involving Schedule I or II substances.⁸

The Prescriber Fee

Colorado funds the PDMP through public and private money deposited into the Prescription Drug Monitoring Fund. If that funding falls short of operational costs, the Division of Professions and Occupations can charge an annual fee of up to $25 to any licensee authorized to prescribe controlled substances, collected alongside the regular license renewal fee.⁹

1
Justia. Colorado Code 12-280-403 – Prescription Drug Use Monitoring Program – Registration Required – Applications – Rules – Appropriation – Repeal
2
Legal Information Institute. Colorado Code of Regulations 3 CCR 719-1-23.00.00 – Electronic Prescription Monitoring Program
3
Justia. Colorado Code 12-280-408 – Exemption
4
Colorado Division of Professions and Occupations. Colorado Prescription Drug Monitoring Program
5
Colorado.Public” Law. Colorado Revised Statutes 12-280-404 – Program Operation – Access – Rules – Definitions
6
Colorado.Public.Law. Colorado Revised Statutes 12-280-404 – Program Operation – Access – Rules – Definitions
7
National Association of Boards of Pharmacy. PMP InterConnect
8
Office of the Law Revision Counsel. 21 USC 841 – Prohibited Acts A
9
Justia. Colorado Code 12-280-405 – Prescription Drug Monitoring Fund – Creation – Fee