US · guidance
CMS SOM App. A, Tag A-0504
§482.25(b)(2)(iii) - Only authorized personnel may have access to locked areas
Interpretive Guidelines §482.25(b)(2)(iii)
The hospital must assure that only authorized personnel may have access to locked areas where
drugs and biologicals are stored.
A hospital has the flexibility to define which personnel have access to locked areas, based on the
hospital’s needs as well as State and local law. For example, a hospital could include within its
definition of “authorized personnel” ancillary support personnel, such as engineering,
housekeeping staff, orderlies and security personnel as necessary to perform their assigned
duties. The hospital’s policies and procedures must specifically address how “authorized
personnel” are defined for purposes of this section. It is not necessary for the policy to name
specific authorized individuals, but the policy should be clear in describing the categories of
personnel who have authorized access, as well as whether there are different levels of access
authorized in different areas of the hospital, or at different times of day, or for different classes of
drugs and biologicals, etc.
The hospital’s policies and procedures must also address how it prevents unauthorized personnel
from gaining access to locked areas where drugs and biologicals are stored. Whenever
unauthorized personnel have access, or could gain access, to those locked areas, the hospital is
not in compliance with this requirement and is expected to re-evaluate and tighten its security
measures.
Survey Procedures §482.25(b)(2)(iii)
• Determine whether there is a hospital policy and procedure defining authorized personnel
that are permitted access to locked areas where drugs and biologicals are stored.
• Determine whether there is a hospital policy and procedure for limiting access to locked
storage areas to authorized personnel only.
• Observe whether or not access to locked storage areas is limited to personnel authorized by
the hospital’s policy.
History
Rev. 37, Issued: 10-17-08; Effective/Implementation Date: 10-17-08
Provenance
- Source
- cms.gov
- Retrieved
- 2026-07-22
- Edition
- som-2026-07-22
- Content hash
b9a38bf586b08d010102c21f0879862d5ba49f1df7e6fc34566e9ca0459e4505
The link goes to the issuing authority’s own document — the one we read to produce this record. Where a source publishes whole titles rather than sections, your browser may need a moment to jump to the provision.
Unofficial copy of government-published law, reproduced from official sources with full provenance. Not an official publication; verify against official sources before relying on it in a filing. Records in the 'guidance' corpus, and only that corpus, are sub-regulatory (interpretive guidelines, survey procedures) and are not binding law. Validity bounds follow each jurisdiction's declared temporalBasis.