Bindinglaw

US · guidance

CMS SOM App. A, Tag A-0502

§482.25(b)(2)(i) - All drugs and biologicals must be kept in a secure area, and

activein force · 2026-07-22 – presentas-observed

locked when appropriate.

Interpretive Guidelines §482.25(b)(2)(i)

A secure area means that drugs and biologicals are stored in a manner to prevent unmonitored

access by unauthorized individuals. Drugs and biologicals must not be stored in areas that are

readily accessible to unauthorized persons. For example, if medications are kept in a private

office, or other area where patients and visitors are not allowed without the supervision or

presence of a health care professional (for example, ambulatory infusion), they are considered

secure. Areas restricted to authorized personnel only would generally be considered “secure

areas.” If there is evidence of tampering or diversion, or if medication security otherwise

becomes a problem, the hospital is expected to evaluate its current medication control policies

and procedures, and implement the necessary systems and processes to ensure that the problem is

corrected, and that patient health and safety are maintained. (71 FR 68689)

All controlled substances must be locked. Hospitals are permitted flexibility in the storage of

non-controlled drugs and biologicals when delivering care to patients, and in the safeguarding of

drugs and biologicals to prevent tampering or diversion. An area in which staff are actively

providing care to patients or preparing to receive patients, i.e., setting up for procedures before

the arrival of a patient, would generally be considered a secure area. When a patient care area is

not staffed, both controlled and non-controlled substances are expected to be locked.

Generally labor and delivery suites and critical care units are staffed and actively providing

patient care around the clock, and, therefore, considered secure. However, hospital policies and

procedures are expected to ensure that these areas are secure, with entry and exit limited to

appropriate staff, patients and visitors.

The operating room suite is considered secure when the suite is staffed and staff are actively

providing patient care. When the suite is not in use (e.g., weekends, holidays and after hours), it

would not be considered secure. A hospital may choose to lock the entire suite, lock non-mobile

carts containing drugs and biologicals, place mobile carts in a locked room, or otherwise lock

drugs and biologicals in a secure area. If an individual operating room is not in use, the hospital

is expected to lock non-mobile carts, and ensure mobile carts are in a locked room. (71 FR

68689)

This regulation gives hospitals the flexibility to integrate patient self-administration of non-controlled drugs and biologicals into their practices as appropriate. When a hospital allows a

patient to self-administer selected drugs and biologicals, the hospital authorizes the patient to

have access to these medications. This regulation is consistent with the current practice of

giving patients access at the bedside to urgently needed medications, such as nitroglycerine

tablets and inhalers. It supports the current practice of placing selected nonprescription

medications at the bedside for the patient’s use, such as lotions and creams, and rewetting eye

drops. Hospitals are expected to address patient self-administration of non-controlled drugs and

biologicals in their policies and procedures (see self-administration discussion at

§§482.23(c)(6)(i) and 482.23(c)(6)(ii)). This regulation supports hospital development, in

collaboration with the medical staff and the nursing and pharmacy departments, of formal patient

medication self-administration programs for select populations of patients, including hospital

policies and procedures necessary to ensure patient safety and security of medications. The

policies and procedures are expected to include measures to ensure the security of bedside drugs

and biologicals. They are also expected to address both the competence of the patient to self-administer drugs and biologicals as well as patient education regarding self-administration of

drugs and biologicals. (71 FR 68689)

Due to their mobility, mobile nursing medication carts, anesthesia carts, epidural carts and other

medication carts containing drugs or biologicals (hereafter, all referred to as “carts”) must be

locked in a secure area when not in use. Hospital policies and procedures are expected to

address the security and monitoring of carts, locked or unlocked, containing drugs and

biologicals in all patient care areas to ensure their safe storage and to ensure patient safety. (71

FR 68689)

Medication automated distribution units with security features, such as logon and password or

biometric identification, are considered to be locked, since they can only be accessed by

authorized personnel who are permitted access to the medications. Such units must be stored in

a secure area.

Survey Procedures §482.25(b)(2)(i)

• Review hospital policies and procedures governing the security of drugs and biologicals

to determine whether they provide for securing and locking as appropriate;

• Review hospital policies and procedures governing patient self-administration of drugs

and biologicals;

• Observe whether medications in various areas of the hospital are stored in a secure area,

and locked when appropriate. Are medication storage areas periodically inspected by

pharmacy staff to make sure medications are properly stored?

• Determine that security features in automated medication distribution units are

implemented and actively maintained, e.g., that access authorizations are regularly

updated to reflect changes in personnel, assignments, etc.

• Interview staff to determine whether policies and procedures to restrict access to

authorized personnel are implemented and effective;

• If patient self-administration of drugs and biologicals is permitted, interview patients and

staff to determine whether policies and procedures are implemented and effective.

History

Rev. 151, Issued: 11-20-15, Effective: 11-20-15, Implementation: 11-20-15

Provenance

Source
cms.gov
Retrieved
2026-07-22
Edition
som-2026-07-22
Content hash
e04f95136a04a8ae95e92e575b57bb12ddacdc3ac3a77781819247526f87c2e9
View the official source →

The link goes to the issuing authority’s own document — the one we read to produce this record. Where a source publishes whole titles rather than sections, your browser may need a moment to jump to the provision.

Unofficial copy of government-published law, reproduced from official sources with full provenance. Not an official publication; verify against official sources before relying on it in a filing. Records in the 'guidance' corpus, and only that corpus, are sub-regulatory (interpretive guidelines, survey procedures) and are not binding law. Validity bounds follow each jurisdiction's declared temporalBasis.

Coverage · API docs

Bindinglaw

Point-in-time US law with the receipt attached. Source URL, retrieval time, content hash, and validity dates on every answer.

curl api.binding.law/v1/law/coverage

© 2026 binding.law · a Jubal, Inc. productAttorneys and firms never pay. Ever.