Why pediatric formulations are suddenly on HRSA’s radar
In several 2024 HRSA audits of children’s hospitals, auditors flagged something they’d mostly overlooked for years: pediatric formulations sharing the same NDCs as adult strengths. One HRSA auditor told a pharmacy director at a Midwestern children’s hospital that “the patient definition doesn’t change because the bottle says ‘cherry flavored.’” Translation, HRSA believes some covered entities are stretching eligibility when the same prescriber writes for both adult and pediatric patients under a hospital outpatient account.
That suspicion triggered a new 2025 audit focus on dosage forms and documentation of patient eligibility for pediatric-use drugs. Think oral suspensions, chewables, low-dose injectables, compounded items billed under the outpatient hospital but dispensed to patients with both inpatient and off-site encounters. HRSA’s December 2024 notice to the Children’s Hospital Association made clear this isn’t random. It’s data-driven targeting facilities where pediatric NDCs exceed 10% of total 340B spend and contract pharmacy claims track Medicaid patterns too closely.
Nothing in Section 340B of the Public Health Service Act distinguishes pediatric formulations. HRSA’s audit practice, though, does. When auditors can’t see clear evidence that a child received care in a registered outpatient department or listed contract clinic, they’re calling diversion, finding code DF-003, incorrect patient status documentation. For most hospitals that means repayment. In 2024 alone, children’s hospitals received sixteen such findings.
How the patient definition collides with off-site pediatric clinics
Children’s hospitals often run satellite clinics, neurology, cardiology, rehab, under one hospital NPI. The friction lies in which of those sites are actually registered under 340B. HRSA’s patient definition from the 1996 guidance says the individual must have an established relationship with the covered entity, which maintains their health record, and must receive care from a provider employed by or under contract with that entity. Straightforward on paper. In reality, pediatric hospitals rely heavily on community pediatricians or specialists in shared-care networks rather than full employees.
HRSA’s 2025 audit teams now want hard proof of those relationships: provider contracts, scheduling records, EMR screenshots showing care at a registered site. If your off-site asthma clinic operates under a community pediatric group via PSA but isn’t registered in the 340B database, you’re out of compliance. HRSA’s stance hasn’t shifted since the 2021 Albany Medical Center report, but enforcement has. Hospitals banking on a “pending registration” excuse are now racking up diversion findings.
I’ve watched administrators try to argue continuity, “same EMR, same patient”, and HRSA never moves. The agency checks OPAIS listings, not logic. If a site’s missing, it’s non-340B. Full stop. This surfaces again and again in outpatient rehab programs for cystic fibrosis or developmental delay. The care is legitimate, but if the prescriptions originate from an unregistered site, HRSA deems the patient encounter ineligible.
Tracking NDC-level differences across manufacturers
At the formulary level, the challenges compound. Pediatric dosage forms often carry unique NDCs, and manufacturer restrictions on contract pharmacy use can hide those NDCs from split-billing systems. Pfizer’s 2024 contract pharmacy limitation doesn’t spare pediatric formulations; neither does Eli Lilly’s October 2024 list. Under the Novartis v. HHS ruling from the Third Circuit, manufacturers have some discretion. Facilities, however, remain fully responsible for documenting purchase eligibility and keeping restricted NDCs out of 340B processing unless cleared under HRSA’s affidavit rules.
This tangles quickly with suspension antibiotics or pediatric chemo preps. Picture this: a children’s hospital orders Amoxicillin 250mg/5mL through a contract pharmacy carved into Medicaid. The 340B system tags it as excluded by manufacturer policy, so the pharmacy buys at WAC. Later, that same lot moves back to an in-house clinic pharmacy, mistakenly marked 340B eligible because the patient was hospital-based. That single restock destroys the trace chain HRSA expects. Any intermingling of WAC and 340B inventory at the NDC batch level brings an AD-102 inventory integrity citation, count on it.
The compliance fix is dull but solid: separate pediatric NDCs in split-billing setups, assign unique identifiers, and produce quarterly reconciliation reports showing segregation. Epic Willow or Swisslog can automate it now. HRSA doesn’t care about the tech; it wants evidence that the setup prevents cross-contamination. And train your pharmacy buyer to drop the “pediatric equals specialty” mindset. HRSA sees NDCs. Nothing else.
Putting together a usable 340B pediatric compliance guide, before the knock
Written manuals don’t save you if they’re binder fluff, but HRSA now asks to see one during audits. In FY2024, many children’s hospitals had to produce written policies specific to pediatric prescribing and dispensing. HRSA never said it must be stand-alone, yet hospitals with a distinct section ready did better. The best versions I’ve seen include appendices with workflow diagrams for infusion-clinic eligibility, sample EMR screenshots, internal audit checklists, and citations to the 1996 and 2010 Federal Register guidance PDFs. Anything less reads like paperwork theater.
The guide needs four concrete parts: patient eligibility procedures for pediatric clinics, split-billing rules for pediatric formulations, how purchasing handles manufacturer restrictions, and how internal audits test those controls. HRSA reviewers look for version numbers, signatures, and clear ownership. You don’t need a consultant, just someone who actually knows the system. And skip the vendor boilerplate promising “100% audit success.” HRSA’s seen those templates, too.
I’ve sat in audit debriefs where a pharmacy director tried to justify a chewable tablet claim based on flavoring differences. Don’t. HRSA only cares that every prescription ties back to a valid 340B-eligible encounter with a registered provider at a registered site. The fix is boring: crosswalk prescribing data weekly, flag encounters missing billing credentials, and clean them up. One client trimmed eight percent of total pediatric claims that way, roughly $220,000 in avoided repayments. Not glamorous, but real.
Most children’s hospitals still treat 340B audits as a once-a-year panic. They’re not. They’re a running dialogue with an agency that has thin resources and sharp focus. If your pediatric formulations start showing up in HRSA’s analytics, it means they already see risk. Look, don’t hand them the conclusion. Map your sites. Clean your NDCs. Register your clinics. The statute won’t rescue you from sloppiness, and HRSA enforces guidance, not grace.