Not legal or compliance advice: The patient definition is one of the most consequential and legally sensitive areas of the 340B program. Before implementing, changing, or defending any eligibility logic, consult your organization's legal counsel, 340B compliance officer, external auditor, HRSA Office of Pharmacy Affairs (OPA), and Apexus. Verify all interpretations against the most current guidance.
Why patient definition sits at the center: Section 340B of the Public Health Service Act restricts drug resale and limits 340B-priced drugs to patients of the covered entity. That word carries the program's conceptual weight. How your organization operationalizes it defines the program's boundaries — and, by extension, the responsible scope for business development.
Section 340B of the PHS Act allows covered entities to purchase certain outpatient drugs at reduced prices, subject to prohibitions against drug diversion and duplicate discounts.
HRSA's long-standing conceptual framework for the patient definition appeared in the 1996 "Notice Regarding Section 602 of the Veterans Health Care Act of 1992; Patient and Entity Eligibility" (often referred to as the 1996 patient definition guidance).
Interpretive debates and policy updates have occurred: The 1996 guidance has been the practical reference point for decades, but its interpretation has been tested in litigation and reexamined by HRSA. Before codifying internal logic, verify the current state of guidance with counsel and HRSA OPA.
A durable way to think about the conceptual elements typically examined:
An established relationship is typically evidenced by registration as a patient, a clinical encounter documented in the entity's health record system, and ongoing or plausible continuity of care. Walk-in, event-based, or one-off encounters require particular care.
The professional who writes the prescription must be connected to the covered entity in a manner that supports the entity's responsibility for the care. Common arrangements include employed clinicians; clinicians under written contract or credentialing arrangement with the entity; and referrals in some circumstances. The operational question is: can you produce records showing the nexus between this prescription and the covered entity's care responsibility?
For grantees (FQHCs, look-alikes, Ryan White clinics), the service generally must be within the grant's scope of project. For hospitals (DSH, CAH, SCH, RRC, free-standing cancer hospitals, children's hospitals), additional conceptual elements apply, including that services be provided at a registered 340B site and appropriately reflected on the Medicare cost report. Outpatient status is central for hospital types.
Every rule embedded in systems should be documented in plain language, version-controlled, and reviewed regularly. Each rule template should capture: applies to; policy basis; guidance basis; systems where implemented; owner; last reviewed; known edge cases and handling; and test method and frequency.
Plain-language first: If a compliance officer cannot describe the rule without opening the EHR or TPA configuration, the rule is not documented.
For each 340B-qualified prescription, a program should be able to produce, on request: the patient's registration and visit history; the prescribing provider's relationship to the entity at the time; the location and service line associated with the encounter; and the basis for concluding the prescription qualifies.
When a covered entity refers a patient externally, or receives a patient referred in, the eligibility question hinges on who is responsible for the care and whether records support that responsibility. Counsel involvement is strongly recommended before any referral-based eligibility logic is relied upon for non-trivial volume.
The 340B program applies to outpatient drugs. Patterns to watch include discharge prescriptions written before outpatient status is established; "meds-to-beds" programs; and transitional care encounters.
Telehealth encounters generally should be treated using the same conceptual framework — relationship, responsibility, and qualifying service — with attention to the patient's location, the provider's location and licensure, how the encounter is recorded in the EHR, and state-by-state rules on telehealth practice.
Employees may receive care at the entity as patients. The eligibility logic is the same. The pitfall is treating employees as categorically eligible or ineligible rather than evaluating the encounter.
Health fairs, vaccination events, street-medicine programs, and school-based events can present eligibility-definition challenges. Outreach is mission-central for many entities; it is also a frequent source of audit findings when documentation does not keep up with clinical activity.
The interplay between inpatient care, outpatient discharge, and contract pharmacy dispensing requires deliberate policy. Limited distribution networks can dictate where prescriptions can be filled. Care delivered under research protocols may or may not fit within the qualifying service element.
When in doubt, the conservative answer is usually the right one: Over-extending eligibility can produce diversion findings. Under-extending can leave patient access on the table. Edge cases should be resolved through documented analysis with counsel.
At a minimum, a defensible program will maintain or access:
Eligibility policy is often correct on paper and incorrect in practice because EHR configuration changed without compliance involvement, a TPA update altered default behavior, a new site or service was launched without eligibility review, or staff turnover left the rules in memory rather than documents.
Patient definition and eligibility logic are living systems that must evolve with clinical program changes, new sites, guidance updates, system upgrades, and referral arrangements.
Each BD move has an eligibility dimension: adding a child site; launching a specialty service line; contracting with a new contract pharmacy; expanding telehealth; launching outreach programs; or acquiring another entity. A BD plan that does not include an eligibility review is incomplete.
Counsel involvement is especially important for close-call eligibility decisions, interpreting current HRSA guidance, telehealth expansion, research-related prescriptions, acquisitions and affiliations, responses to manufacturer audit inquiries, and any HRSA audit engagement.
This article is educational and does not constitute legal, tax, regulatory, compliance, or financial advice. Program rules change; verify current guidance with HRSA's Office of Pharmacy Affairs, Apexus, and qualified counsel before acting.