How HRSA Broke Its Silence on 340B Insulin Discounts
In February 2025, HRSA sent compliance notices to several FQHC Look-Alikes that had submitted insulin claims through contract pharmacy relationships blocked by manufacturer conditions. The notices followed the January decision in Sanofi v. HHS, where the D.C. Circuit reaffirmed that HRSA could enforce manufacturer obligations for covered entities that follow data reporting requirements. For the first time since 2020, HRSA explicitly said insulin, a drug at the center of the “340B insulin discount” political fight, would be a priority in fiscal year 2025 audits.
That’s a significant pivot. For years, HRSA talked about “ensuring patient access” while ducking direct manufacturer conflict. Now, with Sanofi, Novo Nordisk, and Eli Lilly all insisting on compliance with their “integrity initiatives,” covered entities are squarely in the crossfire. FQHC Look-Alikes, which often depend entirely on contract pharmacies, are the most exposed. In one HRSA audit I reviewed in April, the Look-Alike shipped over 2,000 vials of insulin glargine through a Walgreens that wasn’t listed in the manufacturer’s data portal. HRSA deemed every one of those claims non-compliant with the manufacturer’s distribution limits and sent the case to OIG for duplicate discount risk review. Not a small thing.
Why FQHC Look-Alikes Are Uniquely Vulnerable
The 340B statute doesn’t distinguish between FQHCs and FQHC Look-Alikes on eligibility. But operationally, Look-Alikes run without Section 330 grant oversight, meaning no Bureau of Primary Health Care compliance safety net. No built-in checks on sliding fee scale, scope of project, or pharmacy contracting. Many rely on third-party administrators (TPAs) to manage accumulations across dozens of pharmacies. That’s exactly where the insulin problem multiplies.
Manufacturers like Sanofi and Lilly now require 340B entities to report contract pharmacy locations through portals such as 340B ESP before restoring discount access. HRSA states that it “expects manufacturers to offer 340B pricing without conditions,” yet has not penalized manufacturers that deny pricing to unreported contract pharmacies. So when a Look-Alike skips a portal upload or misses regular data matches, insulin purchases bill at wholesale cost. Any later attempt to re-accumulate those claims under 340B status becomes a loaded compliance risk.
I’ve seen clinics attempt creative workarounds, buying insulin through in-house dispensing and transferring inventory to external pharmacies. HRSA calls that diversion. During the 2024 audit cycle, at least six Look-Alikes were cited for transferring 340B insulin to unregistered locations in OPAIS. That’s a plain violation of the Patient Definition guidance from 2010.
Contract Pharmacies and the Access Maze
Contract pharmacies are where 340B compliance turns messy. Even before manufacturer restrictions, verifying patient eligibility for chronic medications like insulin was a struggle. A patient might see a provider once a year, refill every 30 days at a CVS, and the TPA keeps auto-accumulating. HRSA auditors consistently flag that as lacking an active clinical relationship. Under the 2025 oversight plan, insulin claims are now being sampled specifically to confirm documentation of the prescriber encounter that generated each refill.
Add manufacturer restrictions to that mix. If your contract pharmacy wasn’t reported, the distributor can deny 340B pricing and fill the same claim at full price. You either bypass the accumulator, killing your savings, or reclassify later, risking diversion. Both paths create potential duplicate discount or false claim exposure depending on what’s reported in HRSA’s OPAIS. HRSA’s 2024 FAQ on duplicate discounts is blunt: if the covered entity can’t prove proper Medicaid rebate exclusion on those insulin claims, the liability stays with the covered entity, not the manufacturer.
Some TPAs now advise Look-Alikes to temporarily exclude insulin from contract pharmacy accumulations until manufacturer data submissions reconcile. That’s painful. Insulin remains one of the biggest 340B profit drivers for primary care networks. A Look-Alike with 10,000 diabetic patients can easily generate $1.5 million in annual 340B margin from contract pharmacy insulin. Lose that stream, and the pharmacy support program funding collapses. I’ll be honest, that’s the point where some CFOs start calling lawyers, not compliance officers.
What HRSA Auditors Are Actually Looking For
Everything in the 2025 audit protocol emphasizes traceability. When insulin is involved, HRSA expects four things: proof of prescriber-patient relationship, clear responsibility for ongoing care, precise 340B eligibility mapping in the TPA system, and documentation of any manufacturer access condition. Miss one and HRSA will flag “inadequate documentation to support eligibility.” That’s code for likely repayment.
Entities using manufacturer portals should assign one compliance coordinator, someone fluent in both pharmacy and billing, to routinely cross-reference upload lists with OPAIS registrations. Many Look-Alikes operate under multiple DBA names, and HRSA has publicly clarified that manufacturer restrictions apply to the organization’s legal name, not local site names. That small mismatch has cost more than a few entities. Lilly rejected 340B insulin purchases for a Look-Alike network in Texas because the OPAIS registration listed the corporate parent instead of the local site name used in Lilly’s ESP submission. HRSA classified the denial as a “manufacturer condition,” not a HRSA fault, leaving the entity to eat a $420,000 annual loss.
One approach that’s working: move insulin inventory to in-house dispensing for patients with active primary care visits. By filling through your own pharmacy, you sidestep most manufacturer access conditions and maintain a clean, defensible patient relationship. It doesn’t make up all lost savings, but it shores up your audit posture. HRSA tends to favor programs that scale access prudently over those that stretch definitions to maintain volume. Voluntary self-disclosure of affected insulin claims has earned “no finding” letters when entities showed real-time review and documentation of their compliance process.
Still, HRSA hasn’t said whether participation in manufacturer data portals is legally required. The courts are split: the Third Circuit (in Sanofi) backed HRSA’s enforcement view, while the Seventh Circuit questioned HRSA’s rulemaking authority altogether. That leaves 2025 uneven. Covered entities in enforcement-heavy circuits will feel pressure to comply with manufacturer conditions, even without formal regulations. Bottom line, FQHC Look-Alikes and their contract pharmacy partners need to tighten inventory controls, isolate insulin accumulations, and document everything: blocked orders, portal uploads, manufacturer emails. HRSA is watching insulin now, closely, and it shows.