Most optical compliance content on the internet is describing the rules as they were before September 2024.

The RealityThe release is now a record, not a courtesy

⚠️

The Problem

A rule changed and the workflow did not.

Eyeglass prescriptions handed over as they always were, with nothing retained to show it happened.

🔧

The Solution

Make the release produce a record.

Signed confirmation or retained evidence of digital delivery, held for three years, alongside the prescription itself.

✅

The Resolution

One record that satisfies both rules.

Exam, prescription, release confirmation and dispensing history in the same place.

The Eyeglass Rule changed, and prescription release is now a record

If you take one thing from this piece, take this.

The FTC’s final rule amending the Ophthalmic Practice Rules, published 26 July 2024 and effective 24 September 2024, requires that prescribing eye care practitioners obtain a signed confirmation after releasing an eyeglass prescription to a patient and maintain each such confirmation for a period of not less than three years.

The same rule permits electronic delivery instead, but only after obtaining verifiable affirmative consent from the patient, with a record of that consent also kept for not less than three years. FTC’s own guide for prescribers and sellers makes the companion point on the contact lens side: you may not ask or require a patient to sign the confirmation before you give them their prescription. It clarifies that presentation of proof of insurance coverage is deemed to be a payment for the purpose of determining when a prescription must be provided. And it renames “eye examination” to “refractive eye examination” throughout.

That is four separate changes, all live, none of which existed in the version of this rule most optical practice guidance still describes.

Who is exempt, and it is not nobody

The obligation is targeted rather than universal, and the boundary is about financial interest.

16 CFR 456.4 states that the confirmation and retention paragraphs do not apply to prescribers who do not have a direct or indirect financial interest in the sale of eye wear, including through an association, affiliation, or co-location with an optical dispenser. The Contact Lens Rule carries a parallel exemption in 16 CFR 315.3.

Read “co-location” carefully. A practice that shares premises with a dispensary it does not own may still be caught. This is a question worth answering deliberately rather than assuming, because the answer decides whether you need to build the workflow at all.

What a contact lens prescription must contain

The contact lens side is older and better known, but the required contents are worth listing because a template that omits one of them produces an invalid prescription.

16 CFR 315.2 defines the prescription as containing the name of the patient; the date of examination; the issue date and expiration date; the name, postal address, telephone number and facsimile telephone number of the prescriber; the power, material or manufacturer or both; the base curve or appropriate designation; and the diameter, where appropriate. Private label lenses additionally require the manufacturer name, the private label trade name and, if applicable, the equivalent brand trade name.

On expiry, 16 CFR 315.6 sets one year after the issue date as the position where state law specifies no date or a shorter one. A prescriber may set a shorter date only where that is based on medical judgement about the ocular health of the patient, and the medical reason has to be documented in the record with sufficient detail. One year is a floor, not a term.

Contact lens verification, and the clock that runs against you

The verification obligation is where a dispensary’s phone system becomes a compliance system.

Under 16 CFR 315.5, a prescription is verified if the prescriber confirms its accuracy by direct communication, or communicates that it is inaccurate and provides the correct one, or fails to communicate with the seller within eight business hours after receiving the required information. A business hour is defined as an hour between 9am and 5pm on a weekday, excluding federal holidays.

Silence verifies. That is the mechanism, and it means an unattended voicemail box is an active compliance risk rather than a passive one. The prescriber side also carries an obligation to provide a copy to a person designated by the patient within forty business hours of a request, noting the requester’s name and the date and time in the patient’s record — which is a record-keeping requirement sitting inside what looks like a phone call.

Records retention, and where the six-year number comes from

Three different retention periods apply to a dispensing practice and they are frequently conflated.

The FTC artifacts — release confirmations, digital delivery consents, seller verification records — are all “not less than three years” and must be available for FTC inspection. HIPAA’s six-year requirement, at 45 CFR 164.316(b)(2)(i), applies to required documentation and not to medical records. Patient record retention itself is state law: New York’s Education Department, for example, tells ophthalmic dispensers that all patient records must be kept for six years, and records for children until the child is 22.

There is no federal optical dispensing records retention standard. If a vendor tells you their system is configured to “the federal requirement”, ask which one they mean. Getting this straight is ordinary HIPAA compliance work and it pays for itself the first time somebody asks.

What Medicare covers around a refractive eye examination

Worth a paragraph because it shapes what the dispensary can expect to collect.

The Medicare Benefit Policy Manual excludes eyeglasses, contact lenses, and eye examinations for the purpose of prescribing, fitting or changing eyeglasses, and excludes eye refractions by whatever practitioner and for whatever purpose performed. The exclusion does not reach physicians’ services performed in conjunction with an eye disease such as glaucoma or cataracts, and there is a narrow exception for one pair of prosthetic eyeglasses or contact lenses after cataract surgery with an intraocular lens insertion.

• Check whether the exemption applies to you. Co-location counts as an interest.
• Make the release produce an artifact. Signature, or retained evidence of digital delivery.
• Record a refusal properly. Note it and sign it.
• Staff the verification line. Eight business hours of silence verifies.

Qventive provides optical dispensary EHR integration support in New Jersey, normally within broader IT support for optometry practices rather than as a standalone project.

Where the integration touches how the clinical system is configured, that work runs through optometry EHR and IT support, and the workflow changes usually belong alongside EHR workflow optimization rather than being bolted on afterwards.

Optical dispensaries: common questions