The Protecting Patient Access to Emergency Medications Act (PPAEMA) has been law for nearly nine years – but 2026 is a great time to review your handling of controlled substances and ensure your processes and recordkeeping under it are airtight.
That’s because on February 5, the Drug Enforcement Administration (DEA) published the long-awaited final rule detailing how it would implement PPAEMA’s statutory changes.
That didn’t dramatically alter a lot for EMS. But with the DEA’s final articulation of specifics, EMS organizations’ legal responsibilities have now been fully spelled out and clarified – and the hazards that may trip them up can be clearly identified and addressed, if they haven’t been.
“It just adds to [those legal responsibilities] somewhat,” said Dennis Wichern, a retired special agent who once ran the DEA’s Chicago Field Division, in a recent conversation with leaders of LogRx, the popular medication tracking and management platform for EMS.
“Even before this reg came out, EMS professionals had to maintain security for their drugs and strong recordkeeping. With the new reg, there are a few more requirements. There are some additional dispensing data requirements the reg calls for, but in essence, you’re still required to secure your drugs and track your drugs and keep great records. That’s really the bottom line.”
While you should be doing the right things already, there are some aspects of the final rule to note. Here is Wichern’s guidance.
Biggest impacts of the final rule
For EMS chiefs and leaders, the biggest takeaways are these:
1. Standing and verbal orders are A-OK.
Personnel from registered EMS agencies may administer controlled substances outside the physical presence of a medical director under such orders where authorized by state law. That’s been done in EMS for years, of course, but now it’s specifically federally protected.
This component of PPAEMA resolves a discrepancy that in the early 2010s briefly threatened the ability of EMS to administer controlled substances.
That ability is governed in the U.S. by the Controlled Substances Act (CSA). However, EMS was a nascent field when that law was written in 1970, and the CSA never addressed its role administering drugs in the field. That led to unclear legal authority and wide variations in practice, with states and agencies employing mechanisms like using the DEA registration of a medical director or affiliated hospital or relying on standing or verbal orders from control MDs.
In the early 2010s, the DEA suggested standing orders might not be valid under the CSA. Docs and EMS leaders pushed back, and PPAEMA came about as a solution in 2017.
The final rule defines both standing orders (written protocols) and verbal orders (real-time oral directives) and specifies what must be documented for each.
2. It’s easier to supply multiple sites.
Registered EMS agencies can deliver controlled substances from their registered locations to unregistered “designated” locations like stationhouses. These deliveries aren’t considered distribution and don’t require distributor registration. “It allows for a wider base of service, especially in rural areas,” said Wichern.
Agencies must identify their designated locations via the DEA website at least 30 days before first delivery.
3. Recordkeeping matters.
Registered EMS agencies can deliver controlled substances from their registered locations to unregistered “designated” locations like stationhouses. These deliveries aren’t considered distribution and don’t require distributor registration. “It allows for a wider base of service, especially in rural areas,” said Wichern.
LogRx
Your recordkeeping requirements under PPAEMA are fairly extensive and include:
- Documentation of every provider’s authority to administer controlled substances.
- Complete tracking of all controlled substances received, administered, distributed and destroyed, with records kept at all registered and designated locations for at least two years (more in some states).
- For every dose given or destroyed, the medication name and form, date, strength, amount administered, administering clinician, patient identifier if applicable and several other required fields.
- Disposal documentation includes manner of disposal and disposal/witness initials (if applicable).
“It also adds … a new layer of recordkeeping for EMS professionals that kind of drills down to specifics,” Wichern said. “I strongly advise anyone taking advantage of these new regs to sit down and read those regulations and incorporate good recordkeeping.”
Other key aspects of PPAEMA and the final rule create a new registration category for EMS and address drug storage requirements, hospital restocking and emergency drug sharing. The National Association of EMS Physicians offers a summary here.
‘EMS is on the radar’
The obvious positives from this are federal clarity and standardized practice rather than lingering uncertainty. The challenges are clear enough as well: Compliance demands are significantly higher than some current practices, and with their own licenses, EMS agencies will bear increased responsibility and liability. Those without secure medication management platforms may need to upgrade.
“In essence, the recordkeeping … is now directly on that EMS professional who got that registration and leads or manages that EMS agency,” Wichern said. “[It’s] much like a pharmacy keeps records – I know EMS professionals always have kept them too, but now they have their own number and probably, you could argue, are held to an even higher standard for the recordkeeping and security.”
LogRx’s cloud-based narcotics and controlled-substance tracking solution is uniquely suited to help EMS and other first-response organizations solidify their medication management and reduce their risk. Based on QR or barcodes scanned with a phone app, it centralizes and simplifies drug tracking, inventory management and chain of custody, with security features such as GPS and biometric verification.
LogRx
That means missing or incomplete records could trigger enforcement actions or other discipline, discrepancies could lead to diversion investigations, and severe noncompliance could mean fines and registration suspensions or restrictions.
“Even for agencies that are already being compliant, the fact the DEA is looking at this stuff shows EMS is on the radar, which it historically has not been,” said LogRx founder and CEO Clive Savacool, a longtime paramedic and fire chief, now retired. “We’ve had customers see that writing on the wall and know they can’t keep doing business as usual.”
Platform can simplify compliance, reduce risk
LogRx’s cloud-based narcotics and controlled-substance tracking solution is uniquely suited to help EMS, fire departments, law enforcement and other first-response organizations solidify their medication management and reduce their risk.
Based on QR or barcodes scanned with a phone app, it centralizes and simplifies drug tracking, inventory management and chain of custody, with security features such as GPS and biometric verification.
The codes are adhered to medication boxes and vials upon receipt, and meds are assigned to the appropriate station, unit or safe. Inventories are as simple as opening the LogRx app and scanning, thus creating a comprehensive audit trail. Vials are also scanned before administration, with the provider logging the patient/incident number, dose given and time.
The scan-based system is fast, prevents errors in manual data entry, facilitates tracking and links uses to specific providers. Scanning also enables ordering and expiration warnings and helps keep a tight rein on waste, the documentation of which is a major compliance risk area.
Under PPAEMA, LogRx users can download, complete and submit official DEA forms, such as forms 222 for transfers and 41 for destructions, from the LogRx administrator’s portal – a major time-saver for agencies taking on their own licenses.
What should you do next?
This is all very high-stakes stuff. As direct registrants, EMS agencies are independently responsible for their own drug acquisition, inventories, transfers, storage and loss reporting. “There are basically 11 components your documentation must comply with, and we can track all 11,” noted Savacool. Violations can bring penalties that range from fines to registration suspensions and revocations, and criminal charges may be possible.
Here’s some additional guidance from Wichern, who now runs his own company, Prescription Drug Consulting, and assists LogRx as an advisor:
- For the most part, EMS agencies aren’t in the DEA’s crosshairs. When they are, it’s usually sparked by something like an overdose, theft or diversion incident.
- Designate one or two employees within your organization to learn the rules inside and out and spearhead recordkeeping and compliance. “What I find often is, many agencies, EMS included … don’t have one assigned point person that understands the records, maintains the records and can talk about the records,” Wichern said. “That’s the biggest and best thing one can do in an agency. It’s usually the first indicator, if there’s like 3–4 people trying to talk to the DEA auditor at one time and they all have a little piece, that … they don’t have their stuff together.”
- The most common EMS violations of DEA regulations involve missing and spotty recordkeeping, lack of the required biennial inventory, and failure to retain purchase orders. “For some reason people are unaware they have to keep those records at least two years,” Wichern said.
- The final rule talks a bit about drug storage and security, including jump bags. Controlled substances may be stored in vehicles at registered and designated locations and while traveling, but with a few exceptions, vehicles parked outside or left unattended must be locked. Apart from jump bags carried by personnel, meds must be stored in a locked, substantially built cabinet or safe or automated dispensing system. Jump bag contents must be returned to approved storage once an emergency is complete. Views on storage strength may differ, Wichern noted, so err on the side of caution. LogRx integrates with a pair of EMS safe options from Knox.
- Your next steps should include reviewing the final rule in its entirety; training your employees to ensure strong recordkeeping with a single point of contact; and updating your recordkeeping software and system as needed. “You want to keep it current, accurate, and as fast and smooth as you can do it,” Wichern said.
The PPAEMA final rule takes effect March 9, 2026. For more information, visit LogRx.
