White bagging workflow: receiving a drug the practice did not buy
A policy post rather than a clinical one. What actually governs this, what does not, and which record the practice has to keep itself.
No federal regulation governs payer-mandated white bagging. CMS has said Medicare does not mandate or encourage it, and in September 2026 was still asking what the term means. A white bagging workflow is therefore built on payer contracts, state law where it exists, and the practice’s own custody records.
The phrase white bagging appears nowhere in the Code of Federal Regulations. Not once.
We checked by full-text search of the eCFR for both white bagging and brown bagging, and ran a nonsense control query against the same interface to confirm the search was doing exact-phrase matching rather than returning nothing by default. Zero results for both terms.
The Federal Register is a different story, but not in the way practices expect. Four documents mention it, and all four are preamble, commentary or a request for comment. None is a binding rule. The most useful of them is a 2018 CMS notice that says, in one sentence, that Medicare does not mandate use of or encourage white bagging or brown bagging, and describes it as something private payers are mandating to control drug costs.
The most recent is more telling. On 24 September 2026, CMS published a request for information asking whether Part D plan sponsors have policies related to so-called brown bagging or white bagging, and how those terms are understood by the parties. An agency asking what a term means is an agency that has not regulated it.
Clinician administered drugs: where the rules actually are
White bagging is regulated, where it is regulated at all, by state insurance law. The pattern of those laws matters for a practice building a policy, because they differ in who they constrain.
Vermont’s is the cleanest. Under its pharmacy benefit management act, signed 24 May 2022 and effective 1 January 2023, an insurer or pharmacy benefit manager may not require that a pharmacy it designates dispense a medication directly to a health care setting, and separately may not require dispensing directly to a patient with the expectation that the patient will transport it. Both practices, named separately, both prohibited.
Texas took a different route. Its 2023 law bars a plan from requiring clinician-administered drugs to be dispensed only by certain pharmacies or only by network pharmacies — but it applies only to enrollees with chronic, complex, rare or life-threatening conditions, and it excludes Medicaid, the children’s programme, military coverage, workers’ compensation and drugs administered in hospital settings. A practice reading the headline and not the scope will overestimate its protection.
Louisiana protects payment rather than dispensing: an issuer may not condition, deny, restrict or reduce payment because a participating provider obtained a physician-administered drug from a pharmacy outside the network. Note the term — Louisiana says physician-administered where Texas says clinician-administered, and contract language tends to track whichever term the drafter learned first.
New Jersey has no white bagging law. The state regulated pharmacy benefit managers in an act approved 10 July 2023, and that act contains none of the relevant terms — not white bagging, not brown bagging, not clinician-administered or physician-administered. We read the enacted text and four related bills looking for one. New Jersey practices therefore have no state-law basis to refuse a payer mandate. Their position is contractual and clinical.
Drug chain of custody: no tracing paperwork is coming
Practices often assume a white-bagged drug should arrive with the same transaction history a wholesaler supplies, and treat its absence as the supplier’s failure. It is not. Two separate exemptions in the drug supply chain security statute take this shipment outside the framework.
First, the statute defines a transaction in terms that expressly exclude the dispensing of a product pursuant to a prescription. A white-bagged drug is dispensed by a pharmacy against a patient-specific prescription, so the shipment is not a transaction and the tracing obligations never attach.
Second, the requirements do not apply to licensed health care practitioners authorised to prescribe or administer medication under state law, nor to those working under their supervision who dispense or administer product in the usual course of professional practice.
So the practice is not out of compliance for lacking documentation it was never entitled to receive. But the corollary is the useful part: there is no external paper trail to fall back on. If a dose is lost, degraded or misdirected, the only record of what happened is the one the practice made itself.
Can your system tell practice-owned stock from patient-specific supply?
We will look at how white-bagged product is received, flagged and reserved in your system, and where the custody record has gaps.
Specialty pharmacy intake: what the record system has to hold
Start with the obvious field that usually does not exist: a flag distinguishing practice-owned stock from patient-specific supply. Without it, inventory counts are wrong in both directions and a nurse under time pressure can reach for a vial that belongs to a different patient. In oncology EHR and IT builds this flag is usually the first thing missing.
Then the custody chain the tracing rules would have produced: date and time of receipt, who accepted it, the condition on arrival, the storage location, and the patient and order it is reserved against. For temperature-sensitive products, whatever the shipper’s monitor recorded on arrival, captured as a value rather than glanced at.
And a documented exception path. A white-bagged drug that arrives late, warm or in the wrong quantity cannot be replaced from the shelf, so the workflow has to include cancelling and rescheduling the appointment. That is a scheduling problem as much as a pharmacy one, which is why it belongs in the practice management system rather than in a binder. It is workflow optimization work, and it sits inside our EHR solutions.
A brown bagging policy needs two questions we are not answering here
Storage and handling of a patient-specific drug supplied by a third party is a real question with no free authoritative answer we could reach. The relevant compounding chapter became official on 1 November 2023 and its scope is stated as ensuring a compounded preparation maintains its integrity up until administration begins, but the chapter text itself is behind a subscription and we will not cite what we have not read. A state board of pharmacy rule is the better route here.
The 340B question is similar. The statute contains no reference to white bagging, and the federal administrator’s published guidance does not mention it either. The structural tension is real — a white-bagged drug is purchased by the payer’s pharmacy rather than by the covered entity, so it never enters that inventory — but nothing in the primary sources makes it a violation, and describing it as one would be inventing a rule to match an intuition.
White bagging and specialty drug intake: common questions
Is there a CMS rule governing white bagging?
Does New Jersey restrict payer-mandated white bagging?
Should a white-bagged drug arrive with transaction history documentation?
Is a white-bagged drug shipment a HIPAA concern?
What is the difference between white bagging and brown bagging?
What should the practice capture when a white-bagged drug arrives?
Let’s meet
Qventive supports oncology, rheumatology and infusion practices across New Jersey. Thirty years healthcare IT, one team for EHR and infrastructure.
- CMS statement that Medicare does not mandate use of or encourage white bagging or brown bagging, published 30 October 2018. federalregister.gov
- CMS request for information asking whether Part D plan sponsors have policies on brown bagging or white bagging, published 24 September 2026 with comments due 23 November 2026. federalregister.gov
- The exclusion of dispensing pursuant to a prescription from the definition of a transaction, and the exemption for licensed health care practitioners. uscode.house.gov
- Vermont’s prohibition on requiring a designated pharmacy to dispense directly to a health care setting or to a patient, enacted 24 May 2022. legislature.vermont.gov
- New Jersey’s pharmacy benefit manager act, approved 10 July 2023, which contains no bagging or clinician-administered provisions. pub.njleg.state.nj.us