A. The following procedures apply to an audit conducted by an auditing entity:

1. 1. When conducting an in-pharmacy audit an auditing entity shall:

   1. (a) Give a pharmacy at least fourteen days' written notice.
   2. (b) Not conduct an audit during the first five days of the month unless the pharmacy otherwise consents.
   3. (c) Provide the pharmacy a list of items to be audited that provides for identification of prescription number or numbers or date range that the auditing entity is seeking to audit.
   4. (d) When conducting an in-pharmacy audit or desktop audit, limit the audit to claims that do not exceed two years from the date that the claim was adjudicated by the pharmacy benefits manager.
2. 2. An in-pharmacy audit or desktop audit that involves clinical or professional judgment shall be conducted by or in consultation with a pharmacist.
3. 3. The pharmacy may use the records of a hospital, physician or other authorized practitioner to validate the pharmacy records. The validated records may be obtained via electronic methods, fax, telephone or written prescription orders and do not have to be the original hard copy prescription order.
4. 4. Each pharmacy shall be audited under the same standards and parameters as other similarly situated pharmacies in this state.

5. 5. When conducting a wholesale invoice audit, an auditing entity shall:

   1. (a) Not audit the pharmacy claims of another auditing entity.

   2. (b) Reverse a finding of discrepancy if the pharmacist or pharmacy dispensed the correct quantity of the drug according to the prescription and either of the following applies:

      1. (i) The national drug code published by the United States food and drug administration is in a quantity that is a subunit or multiple of the drug purchased by the pharmacist or pharmacy according to the supplier invoice.
      2. (ii) The drug dispensed by the pharmacist or pharmacy shares all but the last two digits of the United States food and drug administration's national drug code of the drug reflected on the supplier invoice.

   3. (c) As a presumption of validity of a purchase of a dispensed drug, accept any of the following to support the pharmacy's claim related to a dispensed drug:

      1. (i) Copies of the supplier invoices in the pharmacist's or pharmacy's possession, subject to validation that includes validating the pharmacy purchase order and the payment of the supplier invoice, and including any supplier invoices that were issued before the date the drug was dispensed but not earlier than ninety days before the first day of the audit period and any other invoices and supporting documentation from a supplier that is authorized by federal or state law to transfer ownership of the drug to the pharmacist or pharmacy. The validation may also require information that is required under the drug supply chain security act (P.L. 113-54; 127 Stat. 599; 21 United States Code sections 360eee through 360eee-4).
      2. (ii) Any reports required by a state board or agency.
   4. (d) Not later than the tenth business day after receiving the pharmacy's request, provide any supporting documentation that the pharmacy supplier provided to the auditing entity.

B. When conducting an in-pharmacy audit or desktop audit, an auditing entity shall comply with the following requirements:

1. 1. The auditing entity shall base a finding of overpayment or underpayment on the actual overpayment or underpayment and not on a projection based on the number of patients served who have similar diagnoses or on the number of similar orders or refills for similar drugs, unless required by federal or state law.
2. 2. The auditing entity may not recoup monies from the pharmacy for any clerical errors identified in an audit.

3. 3. Any finding of an overpayment may not include the dispensing fee amount unless any of the following criteria is met:

   1. (a) A prescription was not received by the patient or the patient's designee.
   2. (b) The prescriber denied authorization.
   3. (c) The prescription dispensed was a medication error by the pharmacy.
   4. (d) The identified overpayment is based solely on an extra dispensing fee.

D. An auditing entity may not, directly or indirectly, retroactively reduce the amount of a claim payment to a pharmacist or a pharmacy after adjudication of the claim for a prescription drug unless any of the following applies:

1. 1. The original claim was found to have been fraudulently submitted through an audit conducted in accordance with this article.
2. 2. The claim submitted was a duplicate for which the pharmacy had already received payment.
3. 3. The original reimbursement was incorrect due to an error that resulted in an overpayment by an insurer or a pharmacy benefit manager.