When infusion chairs trigger an audit finding
Last fall, HRSA’s auditors walked into a large Midwest DSH hospital and asked a single question that made the pharmacy director’s heart drop: “Show me how you split 340B vs non-340B bevacizumab doses at your outpatient infusion clinic.” That one request uncovered hundreds of infusion encounters incorrectly tagged as eligible because the accumulation software used a scheduling feed rather than charge capture data. In 2024, HRSA’s Office of Pharmacy Affairs began steering its audit teams to start with infusion service lines, especially when hospitals rely on automated split-billing without provider-level verification. And from the early indicators in HRSA’s FY 2025 audit plan, oncology and infusion service 340B controls will face even tighter scrutiny.
Pharmacies that once treated infusion documentation as a clean downstream process now face a compliance minefield. The high-dollar oncology drugs, pembrolizumab, nivolumab, trastuzumab, are exactly the molecules HRSA wants to see properly tracked and accumulated. One misaligned interface between revenue codes and patient status can turn tens of thousands of dollars in 340B savings into audit paybacks that echo for years.
HRSA’s 2025 audit lens on infusion services
In December 2024, HRSA published its updated Audit Readiness and Program Integrity Roadmap. A single footnote in section III made the agency’s direction unmistakable: auditors will verify drug use at provider-based clinics “where infusion or injection services are rendered” and confirm that each infusion episode meets the covered outpatient drug definition under 42 U.S.C. 256b(b). Oncology spending makes up around 40% of total 340B outpatient drug dollars, and manufacturers like Amgen, Genentech, and Bristol Myers Squibb have filed ADRs pointing to diversion through infusion departments. That pressure has reshaped HRSA’s posture.
Historically, audit teams sampled infusion claims for billing consistency. By mid‑2023 they’d shifted to cumulative data pulls tied to J‑codes and charge master entries. Going into 2025, HRSA auditors are expected to match each 340B infusion dose to both an encounter note and a medication administration record. If the covered entity can’t show that the infusion was ordered, administered, and billed appropriately for an eligible outpatient, it’s diversion. Full stop.
Some hospitals argue HRSA’s stance stretches the statute beyond the 1996 Federal Register patient definition. They aren’t wrong that the 1996 guidance never mentioned infusion workflows or pre‑drawing medications for oncology suites. Still, HRSA’s interpretation has become standard audit practice, and no court has reversed it. Ignoring that reality invites repayment demands. And they do come.
Where split-billing fails in oncology environments
Oncology split-billing systems were never designed for HRSA audits. They were built to manage payer charge splits. Many still rely on static charge codes, encounter type, or room location to determine accumulation status. That logic collapses under modern infusion models, where inpatients are “boarded” on outpatient chairs before discharge or where observation hours extend past midnight. The result: data fragments your accumulator reads as 340B-eligible when the patient should have been flagged “GPO only.”
I’ve seen this more times than I care to count. A clinic uses an ADT feed to mark encounters as outpatient. The patient starts chemo, gets admitted later that day, and pharmacy never reclassifies the drug usage. Because the order was written pre‑admission, the drug still appears outpatient in the EHR. HRSA calls it diversion. The facility calls it a system limitation. Either way, the repayment happens.
Carve‑in status mismatches are another trap. If your Medicaid exclusion file isn’t reconciled daily, duplicate discounts under manufacturer rebate programs become almost inevitable. State Medicaid agencies now demand invoice-level 340B flags for J‑coded drugs. One mapping error between NDCs and HCPCS codes, and both HRSA and your state auditor start asking the same uncomfortable questions. Texas and California have already matched 340B oncology infusion claims against rebate data, and the results have not been flattering.
Building a defensible 340B compliance guide for oncology drugs
Start with your definition of a 340B-eligible infusion encounter. HRSA will not accept “the patient had an outpatient visit.” Explain, clearly, which data elements, encounter type, billing location, provider NPI, payer plan, drive accumulation. Back that up with internal test cases and documentation trails. When auditors ask for “evidence that the covered entity has sufficient policies and procedures,” a three‑page policy is empty without proof the system did what it said it would.
Then go deeper. Operational controls mean verifying eligibility at order entry and again at billing. Technical controls mean validating data feeds between the EHR, pharmacy system, and accumulator. Map every infusion charge code in your chargemaster to the correct accumulation flag and test quarterly. Keep screenshots of your accumulator logic showing exactly how oncology orders are included or excluded. Don’t assume IT still has the same version of that logic you saw last year.
Ambiguous cases deserve structure. Partial‑hospitalization or observation crossover episodes rarely fit neatly into 340B or GPO boxes. HRSA usually accepts a conservative carve‑out faster than a risky carve‑in. Document who makes that call, pharmacy business analyst, compliance officer, 340B coordinator, and preserve the decision log for at least five years. It’s a small habit that saves big during an audit.
And yes, drug replacement workflows. Manufacturer contract pharmacy restrictions have fragmented replenishment rights. Each restriction letter carries its own reporting rules. Match your split‑billing guide to those letters, not assumptions. Genentech’s policy, for instance, bars 340B dispensing of Avastin at contract pharmacies even when billed under the hospital NPI. Make sure your accumulator doesn’t “pick up” those doses before you’ve checked replenishment eligibility. That one mistake can undo months of reconciliation work.
Preparing for HRSA’s deeper data inspections
HRSA’s 2025 audits will lean heavily on data. Expect requests for split‑billing exports showing every logic element that determines NDC eligibility. Auditors will trace 10-15 patients from physician order to administration to billing to 340B purchase. If your documentation can’t mirror that chain, compliance risk climbs fast. HRSA has said it often: automation does not transfer accountability.
Mock audits are worth every hour. At one FQHC hospital growing its infusion line to $25 million annually, an internal review found 7% of accumulated oncology doses tied to ineligible encounters. Fixing that prevented a potential $1.8 million payback. The biggest takeaway? Ownership. Pharmacy must coordinate with revenue integrity and IT. Don’t hand compliance to the software vendor, their logic always trails HRSA guidance by a cycle or two.
There’s still no “HRSA‑approved” compliance guide template. What matters is traceability. Every 340B accumulation event for an oncology drug should connect clearly to an eligible patient encounter backed by documentation. Entities that treat this as a technical settings issue instead of a core compliance function keep learning the same hard lesson. The data doesn’t lie. And HRSA keeps looking.