SOP: Dual-Witness Protocol for Controlled Substance Waste

1. Purpose & Scope

This Standard Operating Procedure governs the documentation of controlled substance disposal at [Practice Name]. It applies to all staff who administer or dispose of Schedule II-V controlled substances under a DEA registration.

This SOP is effective immediately upon adoption and supersedes any prior paper-based or informal witnessing protocols.

2. Regulatory Basis

21 CFR §1304.22(a)(2)(vii) - Waste of controlled substances must be witnessed and co-documented by a second authorized person.

21 CFR §1304.04(a) - Controlled substance records must be retained for a minimum of 2 years.

State veterinary medical board regulations may impose additional or stricter requirements. Consult your state board or compliance consultant annually for updates.

3. Required Roles

Critical rule: The Primary and the Witness must be two different people. VetRx Ledger enforces this at the server level - a user cannot witness their own waste event.

4. Step-by-Step Procedure

1. Administer the drug. Draw the controlled substance and administer the required dose. Retain any remaining quantity in the original syringe or vial for disposal in the room.
2. Do not leave the room before witnessing is complete. Physical presence of both parties at the time of disposal is required.
3. Open VetRx Ledger on the room tablet. Navigate to the Ledger page and select the correct drug vial from the quick-pick panel or vial list.
4. Select WASTE event type. Enter the quantity wasted (in mL or units as applicable). Verify the vial, lot number, and quantity against the physical container.
5. Enter your employee ID or authenticate with your registered biometric (Touch ID / Face ID). Tap Request Witness.
6. System generates a one-time token (UUID + HMAC, 10-minute expiry). The token is displayed as a QR code and a 6-character code on your tablet.
7. Call the witness. Show the witness the QR code (they can scan with their camera) or read them the 6-character code.
8. Witness opens VetRx Ledger on their own device. They enter or scan the token. The system validates: token not expired, not previously used, witness ≠ primary.
9. Witness authenticates with their registered biometric or PIN on their own device. They confirm the waste quantity and drug name on their screen.
10. Both devices display confirmation:“Witness Confirmed - [Witness Name].” The primary device shows the event sealed in the running balance.
11. Both parties verify the event appears under the correct vial in the balance view. The entry is now sealed in the hash chain - it cannot be altered or deleted.

5. If the Witness Token Expires

The witness token expires after 10 minutes. If this window lapses before the witness can authenticate:

1. Tap Cancel Token on the primary device to invalidate the expired token.
2. Tap Request Witness again to generate a new token.
3. Repeat the witnessing procedure from Step 6.
4. If the token expired because no authorized witness was available, document “Witness Unavailable - token expired” in the event notes field. See Section 6 (Emergency Protocol).

6. Emergency Protocol - No Witness Available

In circumstances where no authorized witness is immediately available (e.g., solo overnight coverage, emergency surgery with full-team involvement):

1. Administer only the minimum necessary dose. Retain any unused portion in the original sealed vial or in a tamper-evident sealed syringe.
2. Do not discard unused drug until a witness is available.
3. Document the situation in VetRx Ledger using the event notes field: include time, reason witness was unavailable, and name of the on-call DVM if applicable.
4. Complete witnessing at the earliest opportunity - the next morning with the soonest available authorized person. Complete the token-based witness flow at that time.
5. Notify the Practice Manager within 24 hours that an emergency solo disposal occurred.
6. Review staffing protocols to ensure solo coverage situations are addressed in the schedule going forward.

7. Record Retention

Per 21 CFR §1304.04(a), controlled substance records must be retained for a minimum of2 years from the date of the entry. VetRx Ledger retains the full hash-chained event log indefinitely within the application.

For off-device backup (strongly recommended):

• Export the chain-of-custody JSON monthly from the Ledger page (Export → Chain JSON)
• Store exports in a password-protected, access-controlled location
• Do not store backups on unencrypted shared drives or personal email
• Cross-reference with DEA purchase records (Form 222 / 222C) annually

8. Training Requirements

All staff must complete the following before using VetRx Ledger for live waste events:

1. Complete the VetRx Ledger onboarding checklist (including the Dual-Witness step)
2. Register their biometric credential on at least one device
3. Successfully complete one practice WASTE + witness event in the demo environment
4. Acknowledge this SOP in writing (add to personnel file)

9. Review Cycle & Revision History

This SOP should be reviewed annually and updated whenever DEA regulations change, VetRx Ledger releases a major version update, or state regulations are amended.