Cal. Bus. & Prof. Code § 4438

(a)
1. (1) An entity conducting a pharmacy audit shall deliver a preliminary audit report to the pharmacy before issuing a final audit report. This preliminary report shall be issued no later than 60 days after conclusion of the audit.
2. (2) A pharmacy shall be provided a time period of at least 30 days following receipt of the preliminary audit report under paragraph (1) to respond to the findings in the report, including addressing any alleged mistakes or discrepancies and producing documentation to that effect.
3. (3) To validate the pharmacy record and delivery, the pharmacy may use authentic and verifiable statements or records, including medication administration records of a nursing home, assisted living facility, hospital, physician and surgeon, or other authorized prescriber, or additional documentation parameters located in the provider manual.
4. (4) Any legal prescription may be used to validate claims in connection with prescriptions, refills, or changes in prescriptions, including medication administration records, facsimiles, electronic prescriptions, electronically stored images of prescriptions, electronically created annotations, or documented telephone calls from the prescriber or the prescriber’s agent. Unless specifically addressed in the audit policies and procedures contained in the contract or provider manual, documentation of an oral prescription order that has been verified by the prescriber shall meet the requirements of this subdivision.
5. (5) If an entity conducting a pharmacy audit uses extrapolation to calculate penalties or amounts to be recouped, the pharmacy may present evidence to validate orders for dangerous drugs or devices that are subject to invalidation due to extrapolation.
6. (6) Prior to issuing a final audit report, an entity conducting a pharmacy audit shall take into consideration any response by the pharmacy to the preliminary audit report provided within the timeframes allowed under this section, unless otherwise agreed to by the entity conducting the audit.
(b)
1. (1) An entity conducting a pharmacy audit shall deliver a final audit report to the pharmacy no later than 120 days after receipt of a pharmacy’s response to the preliminary audit report.
2. (2) An entity conducting a pharmacy audit shall establish, in the contract between the pharmacy and the contracting entity, a process for appealing the findings in a final audit report that complies with the following requirements:
  1. (A) A pharmacy shall be provided a time period of at least 30 days following receipt of the final audit report to file an appeal with the entity identified in the appeal process.
  2. (B) An entity conducting a pharmacy audit shall provide the pharmacy with a written determination of appeal issued by the entity identified in the appeal process, which shall be appended to the final audit report, and a copy of the determination shall be sent to the carrier, health benefit plan sponsor, or other third-party payer.
  3. (C) If, following the appeal, either party is not satisfied with the appeal, the party may seek relief under the terms of the contract.
(c) An entity conducting a pharmacy audit, a carrier, a health benefit plan sponsor, or other third-party payer, or any person acting on behalf of those entities, shall not attempt to make chargebacks or seek recoupment from a pharmacy, or assess or collect penalties from a pharmacy, until the time period for filing an appeal to a final audit report has passed, or until the appeal process has been exhausted, whichever is later. Should the identified discrepancy for a single audit exceed thirty thousand dollars ($30,000), future payments to the pharmacy in excess of thirty thousand dollars ($30,000) may be withheld pending adjudication of an appeal.
(d) Interest shall not accrue during the audit period for either party, beginning with the notice of the audit and ending with the conclusion of the appeal process.
(e) If, following final disposition of a pharmacy audit pursuant to this section, an entity conducting a pharmacy audit, a carrier, a health benefit plan sponsor, or other third-party payer, or any person acting on behalf of those entities, finds that an audit report or any portion thereof is unsubstantiated, the entity shall dismiss the audit report or the unsubstantiated portion thereof without the necessity of any further proceedings.