Hospitals prevent drug diversion by forming a multidisciplinary diversion committee, tightening automated dispensing cabinet controls, auditing staff access every six months, and enforcing strict chain-of-custody protocols for controlled-substance waste. The most effective programs combine collaborative oversight with routine auditing, following guidance from the American Society of Health-System Pharmacists (ASHP).
Getting this right matters more than ever, because drug diversion is no longer just a pharmacy problem. It’s a board-level financial and compliance risk. Pharmacy leaders are reporting that the DEA is stepping up controlled substance audits, and the cost of falling short is steep. In July 2026, West Virginia University Health System agreed to pay more than $4.17 million and sign a three-year compliance agreement with the DEA over controlled substance recordkeeping and reporting violations spanning seven years.1
What is Drug Diversion in a Hospital Pharmacy?
Drug diversion is the illegal or unauthorized redirection of prescription medications, in particular controlled substances such as opioids, benzodiazepines, and stimulants, away from their intended medical use. In a hospital setting, this usually means an employee with legitimate access to controlled substances (nurse, pharmacist, or technician) removes, withholds, or substitutes medication for personal use or resale purposes. It’s rarely obvious because diversion happens inside a system built on trust and clinical access. For that reason, prevention can only succeed with a structural approach.
Why Drug Diversion Prevention Matters
Diversion isn’t rare or isolated. It’s a persistent operational risk in every hospital that stores and dispenses controlled substances. It also carries consequences that extend well beyond the person involved, affecting patient safety, regulatory standing, and institutional trust.
Warning Signs of Diversion
Diversion is easiest to detect when staff and leadership know exactly what to look for. Several common indicators fall into two categories: how staff behaves around controlled substances and what patients report about their care.
| Category | Warning Signs |
|---|---|
| Staff Behavior | Frequent unexplained absences, volunteering for medication tasks alone, discrepancies in controlled substance counts, arriving early or staying late without a clear reason |
| Patient-Reported | Reports of inadequate pain relief despite documented dosing, missing or tampered medication, unusual staff behavior during medication administration |
No single sign can confirm diversion on its own. What matters is a program built to notice patterns across both categories and investigate consistently.
The Financial & Compliance Risk
The cost of inadequate controls is well documented. In 2015, Massachusetts General Hospital agreed to pay $2.3 million to resolve DOJ allegations that stated lax controls permitted employees to divert controlled substances for personal use, in a case that the hospital itself voluntarily disclosed to the DEA.2
In a more recent case, Effingham Health System in Georgia agreed to pay $4.1 million in what the DOJ said was the largest civil penalty settlement of its kind in U.S. history.3 It was linked to inadequate controls against theft of controlled substances and delayed reporting to the DEA.
This isn’t just historical. In a July 2026 case, Indiana’s Board of Pharmacy approved a settlement with a hospital whose pharmacy manager is accused of diverting opioids for nearly four years without detection.4 The criminal case against him remained pending as of August 2026.
Building a Drug Diversion Prevention Program
A prevention program is so much more than a single policy or piece of software. Instead, it’s an operating structure with four core components.
Multidisciplinary Diversion Committees
Effective programs are governed by a committee that covers pharmacy, nursing, risk management, compliance, and hospital leadership. Diversion doesn’t respect departmental divisions, and a program owned solely by pharmacy will miss nursing-unit-level risk (and vice versa). The committee’s job is to set policy, review flagged cases, and keep the program proactive rather than a reactive one-time fix.
Automated Dispensing Cabinet & Inventory Controls
Automated Dispensing Cabinets (ADCs) can be a control point and a common diversion vector when configured loosely. Well-built programs can restrict override access, require witness/waste for partial doses, and generate exception reports for unusual withdrawal patterns. These issues can range from after-hours access and excessive overrides to discrepancies between what’s pulled and what’s documented as administered.
Staff Access Reviews
Access privileges should not be permanent by default. ASHP suggests reviewing who has access to controlled substances at a minimum every six months, updating the list as staff changes roles, transfers, or leaves. Regular audits between those reviews can help catch anything that slips through in the meantime.
Chain of Custody Protocols for Controlled Substance Waste
Wasting a partial dose is one of the most exploited points in the medication-use process. A solid chain-of-custody protocol needs three things:
- A second, independent witness for all controlled substance waste
- Documentation at the moment of waste (not later)
- Regular checks comparing what was dispensed, given, and wasted
2026 Regulatory Context: What’s Changed
Regulators continue to raise the bar on diversion prevention. Joint Commission medication management standards expect hospitals to secure controlled substances and use data to monitor and improve their medication systems, and its diversion guidance recommends actively monitoring dispensing data rather than letting policy sit untouched until survey prep.
The DEA’s enforcement approach also remains highly active. Industry reports indicate the DEA’s Diversion Control Division is ramping up controlled substance audits, and recent settlements show what investigators expect hospitals to have in place. West Virginia University Health System’s three-year agreement with the DEA requires added diversion oversight, rapid reporting of thefts and losses, hundreds of new security cameras at controlled substance storage sites, and stronger staff training and auditing.1 Across recent settlements and pending state board actions, the same fundamental problems keep surfacing: automated dispensing and access controls that weren’t tight enough to catch diversion before it went on for years. The lesson for pharmacy leadership remains the same: diversion prevention must run as an ongoing program, not a once-a-year checkbox.
The Director of Pharmacy’s Role in Diversion Prevention
A diversion prevention program is only as strong as the leadership behind it. The Director of Pharmacy typically translates committee-level policy into practice on the floor. That includes training staff, maintaining the audit cadence, and keeping diversion prevention visible to hospital leadership even when no recent incident has occurred. That leadership function is worth a closer look; our Director of Pharmacy Playbook outlines the role’s broader responsibilities, including where diversion oversight fits within the rest of pharmacy leadership.
Unsure where your current diversion prevention program stands? A pharmacy performance assessment can identify gaps in your controls before they become compliance issues. Schedule an assessment today.
How CompleteRx Helps Hospitals Strengthen Diversion Prevention
Most resources on drug diversion prevention fall into one of two categories: association-level frameworks that stop short of hospital-specific application, or software vendors selling a detection tool marketed as a complete solution. Unfortunately, neither addresses the operational reality that diversion prevention is as much a leadership and process problem as a technology one.
CompleteRx works with hospital pharmacy leadership to build and strengthen diversion prevention programs from their infancy by establishing committee structures, tightening ADC and inventory controls, setting a sustainable audit cadence, and training staff on chain-of-custody protocols that withstand regulatory scrutiny. As part of our process, we remain vendor-neutral regarding the tools a hospital chooses to use. Instead, our focus is on the program and the people running it, since even the best software can’t compensate for a policy that isn’t consistently enforced. This work connects to the broader pharmacy compliance and accreditation support we provide, and to the operational rigor behind our hospital pharmacy quality and compliance approach.
Building a Program That Lasts
Drug diversion prevention isn’t a policy you write once and then file away. Instead, it’s an ongoing program that needs committee ownership, tight ADC controls, a consistent audit cadence, and enforced chain-of-custody protocol regarding waste. Hospitals that refuse to take this approach often end up in a DOJ press release! If you want a clearer picture of where your program stands today, use our pharmacy audit checklist as a starting point, or talk to our CompleteRx team directly.
Drug Diversion Prevention Frequently Asked Questions
What is drug diversion in a hospital pharmacy? Drug diversion is the illegal or unauthorized redirection of prescription medications, particularly controlled substances, from their intended medical use.
What are the warning signs of drug diversion? Common signs include discrepancies in controlled substance counts, unusual staff behavior around medication access, and patient reports of inadequate pain relief despite documented dosing.
How often should hospitals audit controlled substance access? ASHP guidance recommends reviewing staff access privileges at least every six months and pairing this with continuous routine auditing.
What role does the Joint Commission play in diversion prevention? The Joint Commission expects hospitals to secure medications and monitor their medication management systems with data, and its diversion guidance recommends active surveillance of dispensing records and clear reporting pathways.
How can a Director of Pharmacy strengthen a diversion prevention program? A Director of Pharmacy drives program success by championing multidisciplinary oversight, ensuring consistent audit cadence, and keeping leadership engaged in diversion prevention as an ongoing priority, not a one-time fix.
Resources
- U.S. Drug Enforcement Administration. (2026, July 13). United States reaches $4.17 million civil settlement and three-year compliance agreement with West Virginia University Health System over controlled substance violations [Press release]. https://www.dea.gov/press-releases/2026/07/13/united-states-reaches-417-million-civil-settlement-and-three-year
- U.S. Attorney’s Office, District of Massachusetts. (2015, September 28). MGH to pay $2.3 million to resolve drug diversion allegations [Press release]. U.S. Department of Justice. https://www.justice.gov/usao-ma/pr/mgh-pay-23-million-resolve-drug-diversion-allegations
- U.S. Attorney’s Office, Southern District of Georgia. (2018, May 16). Southern District of Georgia announces largest hospital drug diversion civil penalty settlement in U.S. history (at the time) [Press release]. U.S. Department of Justice. https://www.justice.gov/usao-sdga/pr/southern-district-georgia-announces-largest-hospital-drug-diversion-civil-penalty
- Smith, C. (2026, July 14). ‘I don’t know how we approve this’: Pharmacy board narrowly accepts drug diversion settlement. Indiana Capital Chronicle. https://indianacapitalchronicle.com/2026/07/14/i-dont-know-how-we-approve-this-pharmacy-board-narrowly-accepts-drug-diversion-settlement/
