Sending and Approving a Controlled Substance

1. 1. After the EPCS feature is activated, the practitioner downloads the identity-proofed digital certificate and logs in to the mobile app. The practitioner is then ready to begin sending controlled substance prescriptions. To send a controlled substance prescription, the practitioner authenticates to their EnableMyPractice account using a user ID and strong password.
   2. Upon successful login, the practitioner can either open a note from a visit on the appointment calendar or provider dashboard or add a new prescription from the Patient Center. 
   3. Click on the prescription screen and select a controlled substance medication by typing the name of the medication.
   4. The practitioner selects the medication script of dosage amount, quantity, frequency of use, days, supervisor (if they have one), and directions and clicks save.
   5. Clicking Send checks whether any controlled substance prescriptions have already been printed. If a controlled substance prescription has been printed, it will not appear on the Send Electronic Prescriptions screen.
   6. On the Send screen, all prescriptions that can be electronically sent are displayed. After selecting a pharmacy and clicking Send, the practitioner is notified that the EPCS prescription is ready for signing and approval.
   7. A notification is sent to the EnableMyPractice app on the practitioner’s mobile phone enrolled in the system. If the mobile app is open, the practitioner will see the list of EPCS prescriptions that are ready for approval.
   8. Practitioner clicks Review and reviews that the EPCS prescription is correct, then clicks Sign and Approve to validate, generate a digital signature and send the prescription. The application will check if the digital certificate is valid (not revoked or expired) and that the EPCS practitioner status is still approved. At the bottom of the screen will display: “By completing the two-factor authentication protocol at this time, you are legally signing the prescription(s) and authorizing the transmission of the above information to the pharmacy for dispensing. The two-factor authentication protocol may only be completed by the practitioner whose name and DEA registration number appear above.” The full name and address of the patient, the drug name, strength, dosage form, quantity prescribed, directions for use, and the name, address and registration number of the practitioner are shown. If the digital certificate is invalid, revoked, or expired, an error message is displayed to the practitioner.
   9. Pressing Sign and approve, generates a digital signature from the private certificate key managed using the Microsoft Azure Key Vault. The prescription is then sent. The prescription status is updated to Sent electronically.  If Cancel is clicked, then the EPCS prescription is deleted.
   10. The prescription is removed from the approved list and the list of EPCS prescriptions that needs to be approved displays. If there is no additional prescription, then the list is blank.