New York State Office of the State Comptroller Thomas P.

DiNapoli
Division of State Government Accountability

Selected Operating and Administrative Practices of the Bureau of Narcotic Enforcement Department of Health

Report 2011-S-19

November 2012

2011-S-19

Executive Summary
Purpose
To determine whether the Bureau of Narcotic Enforcement (Bureau) is effectively and efficiently combating prescription drug diversion and abuse in New York State. The audit covers the period April 1, 2007 through March 8, 2012.

Background

Illegal use of prescription drugs is an escalating problem that drives up healthcare costs and threatens the safety of all citizens. So great is the problem that the Centers for Disease Control and Prevention has classified abuse and diversion of prescription drugs as an epidemic and the nations fastest growing drug problem. The underground market for these drugs is fueled in large part by individuals and criminal groups who use fraudulent tactics to acquire powerful and addictive medications, including painkillers like Oxycodone, Fentanyl or Morphine; stimulants like amphetamines or Ritalin; and hypnotic drugs and sleep aids like Ambien. The Bureau is responsible for combating these illegal activities by overseeing the States Official Prescription Program and investigating suspected cases of drug diversion and abuse. To this end, it maintains a database of all New York State prescriptions used to acquire controlled substances.

Key Findings

The Bureau has a significant amount of information and resources at its disposal to combat illegal drug activity. Our audit identified several areas where improvements are needed to ensure these resources are used effectively to stem the growing problem of prescription drug diversion and abuse through a range of efforts from prevention and deterrence, to detection and prosecution. By applying data mining techniques to 15 months of the Bureaus prescription data, we culled more than 565,000 filled prescriptions that contained errors or inconsistencies. These include 67,000 prescriptions for drugs like Oxycodone, each potentially used multiple times for a total of almost 180,000 transactions at different pharmacies and/or containing different information about the prescribers or the drugs involved. While we recognize further assessment and refinement of the data is needed, analyses like this can pinpoint patterns and relationships that identify criminal activity. The Bureau does not always properly secure or monitor returned prescription forms. As a result, data shows thousands of unused forms, supposedly destroyed, may actually have been used to obtain controlled substances. The Bureaus previous management failed to establish consistent investigative priorities among its regional offices, making the Bureau less effective in detecting and ceasing criminal conduct. Some Bureau funding was used for other activities or should have been used more efficiently, including over $43,000 of computer equipment purchased several years ago, the majority of which was still not in use by the end of 2011. During our audit, we provided Department officials with preliminary findings detailing our observations and recommendations. At the conclusion of our fieldwork and shortly thereafter, the Department announced several changes to Bureau operations including installation of new leadership, implementation of new data mining strategies and plans to eliminate the paper-based Division of State Government Accountability 1

2011-S-19 prescription system for controlled substances. These positive steps should help address several of the challenges discussed in this report. However, further improvements are still needed to maximize the Bureaus ability to combat the growing problem of prescription drug diversion and abuse.

Key Recommendations

Further review the prescription data identified by our audit to isolate instances and patterns that warrant formal investigation. Modernize the Bureaus use of technology and information resources by expanding routine data analysis to assist in more effectively identifying and investigating prescription drug diversion and abuse. Properly account for, safeguard and monitor the destruction or other disposition of prescription forms returned to both the Bureau and its contracted supplier. Establish and communicate clearly defined and consistent priorities, objectives and goals to guide regional investigations. Monitor outcomes to determine whether investigators and offices are meeting expectations. Monitor and reconcile expenditures to ensure that funding is used as intended. In responding to our draft report, officials acknowledge both the value of data mining and analysis, and that their own subsequent testing has shown some of the records we cited were related to specific instances of suspected criminal activity. Officials also reported they plan to expand the Bureaus analytical staff to conduct more in-depth analysis to address diversion. Officials also reported actions taken to better account for returned prescription forms, oversee statewide investigative activities, correct previously identified problems, and control the use of Bureau funding. At the same time, the Departments response also includes several statements that minimize the significance of the findings from our analysis of prescription data. Auditor Comment When looking for fraud and abuse, officials should expect that only a very small percentage of transactions will be problems and specific tools, like data mining and analysis, are necessary to highlight the ones that pose the highest risk. Considering the vast number of prescriptions filled for these controlled substances, we caution that officials should not be too quick to dismiss the impact of even a small percentage of problems; especially when only one-half of one percent could translate into 100,000 instances each year where dangerous drugs are dispensed improperly. Our specific rejoinders to some of the Departments statements are presented as State Comptrollers Comments at the end of this report.

Other Related Audits/Reports of Interest

Department of Health: Office of Professional Medical Conduct Complaints and Investigations Process (2008-F-29)

Division of State Government Accountability

2011-S-19

State of New York Office of the State Comptroller Division of State Government Accountability
November 21, 2012 Nirav Shah, M.D., M.P.H. Commissioner Department of Health Corning Tower Empire State Plaza Albany, New York 12237 Dear Dr. Shah: The Office of the State Comptroller is committed to helping State agencies, public authorities and local government agencies manage government resources efficiently and effectively and, by so doing, providing accountability for tax dollars spent to support government operations. The Comptroller oversees the fiscal affairs of State agencies, public authorities and local government agencies, as well as their compliance with relevant statutes and their observance of good business practices. This fiscal oversight is accomplished, in part, through our audits, which identify opportunities for improving operations. Audits can also identify strategies for reducing costs and strengthening controls that are intended to safeguard assets. Following is a report of our audit of the Department of Health entitled Selected Operating and Administrative Practices of the Bureau of Narcotic Enforcement. This audit was performed pursuant to the State Comptrollers authority under Article V, Section 1 of the State Constitution and Article II, Section 8 of the State Finance Law. This audits results and recommendations are resources for you to use in effectively managing your operations and in meeting the expectations of taxpayers. If you have any questions about this report, please feel free to contact us. Respectfully submitted, Office of the State Comptroller Division of State Government Accountability

Division of State Government Accountability

2011-S-19

Table of Contents
Background Audit Findings and Recommendations The Bureau Can More Effectively Use Prescription Data to Target Illegal Activities Poor Controls Over Prescription Forms An Inconsistent Approach to Investigating Drug Diversion Causes a Wide Disparity in Results Among the Bureaus Regional Offices Use of Bureau Funding Failure to Fully Correct Problems Previously Identified Recommendations Audit Scope and Methodology Authority Reporting Requirements Contributors to This Report Exhibit Agency Comments State Comptrollers Comments 5 6 7 11 13 15 16 16 17 18 18 20 21 22 31

State Government Accountability Contact Information: Audit Director: John Buyce Phone: (518) 474-3271 Email: StateGovernmentAccountability@osc.state.ny.us Address: Office of the State Comptroller Division of State Government Accountability 110 State Street, 11th Floor Albany, NY 12236 This report is also available on our website at: www.osc.state.ny.us Division of State Government Accountability 4

2011-S-19

Background
The Centers for Disease Control and Prevention considers the diversion and abuse of prescription medications to be the nations fastest growing drug problem, having reached epidemic proportion in recent years. The Bureau of Narcotic Enforcement (Bureau) is the Department of Healths (Department) primary means of combating the abuse and diversion of potentially dangerous prescription drugs within New York State. The Bureau is charged with administering the States Official Prescription Program and overseeing the lawful distribution of controlled substances under Article 33 of the Public Health Law. To this end, the Bureau: provides official New York State prescription forms free-of-charge to over 95,000 prescribing practitioners throughout the State; conducts investigations of suspected drug diversion and illegal sales (e.g., involving theft, forgery and fraudulent visits to practitioners offices), while working closely with law enforcement agencies; issues controlled substance licenses to manufacturers, distributors, hospitals, nursing homes and researchers; and provides prescription drug abuse prevention outreach to parents, educators and healthcare professionals. Federal regulations categorize controlled substances into one of five schedules. Schedule I controlled substances have no accepted medical use in treatment in the United States and cannot be prescribed. Schedule II controlled substances, such as Oxycodone, have a high potential for abuse and can lead to severe psychological and physical dependence. Schedules III through V controlled substances have decreasingly lesser potential for abuse. To help combat prescription fraud, since 1972 the Official Prescription Program has required prescriptions for controlled substances (drugs that have a high potential for abuse) to be written on an official prescription form containing security features that prevent alterations and forgeries. In 2006, the program was expanded and required all prescriptions written in New York State to be on pre-numbered official prescription forms provided free-of-charge by the Department. In 2010, pharmacies filled 22.6 million New York State prescriptions for controlled substances, a 36 percent increase since 2007. Pharmacies must electronically submit information to the Bureau on all prescriptions dispensed for controlled substances. The Bureau uses the data as part of its Practitioner Notification Program (PNP) to notify practitioners when their patients have obtained drugs from multiple practitioners within a short time period, a practice known as doctor shopping. This information enables practitioners to better evaluate patients treatment and determine whether abuse may be occurring. The Bureau is funded through a sub-allocation from the Department of Financial Services (formerly from the State Insurance Department, one of the Department of Financial Services predecessor agencies). State fiscal year 2010-11 funding was $16.4 million. The Bureau is comprised of one Director and 33 employees, including 16 investigators who report to a Chief Investigator. The Bureaus headquarters is in Troy, with regional offices in Syracuse, Rochester, Buffalo and Manhattan. Division of State Government Accountability 5

2011-S-19

Audit Findings and Recommendations

To carry out its responsibility for protecting the public health, the Bureau investigates suspected drug diversion and illegal sales of prescription controlled substances. Our examination found that the Bureau needs to enhance its data mining efforts of the vast amount of controlled substance prescription data it collects to help pinpoint cases of possible criminal activity and serve as a greater deterrent to prescription drug diversion. Our initial analysis of this prescription data for just a 15-month period identified several hundred thousand prescription records containing inaccurate or inconsistent information. These prescriptions were reportedly filled over a halfmillion times to dispense potentially dangerous and addictive drugs such as Oxycodone, Fentanyl, Morphine and Hydrocodone. We also observed a distinct disparity in the types of cases pursued in various regions of the State during our audit period, indicating a lack of strategic direction from prior Bureau management in establishing investigative priorities. This disparity can undermine the effectiveness of the Bureau in detecting and ceasing large scale criminal conduct, and the resulting deterrent effect that should be created by a coordinated and consistent approach to investigation and prosecution. The Bureau is also responsible for overseeing the secure distribution of official State prescription forms, yet we found forms that were not properly secured and accounted for. The Bureaus data also showed that thousands of prescriptions that were supposedly destroyed may have actually been used. In some cases, these documents may have gone missing from the form suppliers facilities, or even the Bureaus own offices, due to lack of controls and proper records. As a result of the audit, the Bureau is taking steps to improve accountability over returned and unused prescription forms. Our report also addresses ineffective use of resources, including over $43,000 worth of computer equipment purchased in 2009 and 2010, the majority of which had yet to be placed in service by the end of 2011. Our report makes recommendations to monitor and reconcile expenditures to ensure that funding is not wasted and is used as intended. During the conclusion of our audit fieldwork and shortly thereafter, the Department implemented several changes in the Bureaus operations, many of which should help address the recommendations contained in our report. Among the most significant changes are plans to eliminate the use of paper-based prescriptions for controlled substances and institute a fully electronic system. The Bureau has also hired a new Director who, as a former prosecutor, has prior experience overseeing criminal narcotics investigations. The new Director has already implemented new data mining strategies and centralized operational control so that regional offices now report directly to the central office. These positive steps, along with the Bureaus movement into the Departments broader Center for Health Care Quality and Surveillance, should help address several of the challenges discussed in this report. At the same time, further improvements are still necessary if the Bureau is to maximize its ability to combat the growing problem of prescription drug diversion and abuse through a range of efforts from prevention and deterrence, to detection and prosecution. Division of State Government Accountability 6

2011-S-19

The Bureau Can More Effectively Use Prescription Data to Target Illegal Activities
The Bureau needs to enhance its data mining efforts of the vast amount of controlled substance prescription data it collects to help pinpoint cases of possible criminal activity. The Bureau is not fully using the controlled substance prescription data that it possesses to identify drug diversion. Despite access to a rich source of information on controlled substance drug activity in the State, the Bureau still largely relies on referrals and complaints from external sources to identify suspected drug diversion and abuse of controlled substances. We applied data mining techniques to the prescription data from the Bureaus own databases using just the 15-month period from April 1, 2010 through July 15, 2011. We conducted seven different analyses that identified records for over 325,000 prescriptions, filled more than 565,000 times to obtain controlled substances, that contain errors or inconsistencies. While we recognize that further assessment and refinement of the data results is necessary to pinpoint prescription drug diversion and abuse, data mining can be a powerful tool to find patterns and relationships in the data to help identify criminal activity. Three medications comprise almost half of the drugs acquired with these prescriptions: Zolpidem - a hypnotic drug used to treat insomnia and sometimes marketed as Ambien (19 percent); Oxycodone - a popular painkiller commonly marketed as OxyContin (13 percent); and Hydrocodone - another pain medicine sometimes marketed as Vicodin (12 percent). Two other medications each account for 4 percent of the drugs acquired: Methylphenidate Hydrochloride - a central nervous system stimulant, such as Ritalin, often used to treat attention deficit disorders; and Amphetamines - powerful psychostimulant drugs, such as Adderall, that produce effects like increased energy and euphoria. All of these valuable drugs carry significant demand on the street and through black market operations. According to the Bureaus prescription data on dispensed controlled substances, some of the examples we found include:

Division of State Government Accountability

2011-S-19 120,183 prescriptions filled 133,738 times with an invalid Drug Enforcement Administration (DEA) registration number for the prescriber. At least 37 percent of these prescriptions were for Oxycodone, Hydrocodone and Zolpidem, including: 143 prescriptions used for cash purchases of 25,200 Oxycodone pills from two New York City pharmacies located in close proximity to each other. Criminals often pay in cash to limit their paper trail and move between different pharmacies to avoid detection of fraudulent activity. The data showed some of the prescriptions were ostensibly ordered by practitioners specializing in pediatrics, the care of young children. Bureau officials confirmed that the DEA numbers from these prescriptions did not belong to the ordering practitioners, who were all located close to each other and to the pharmacies. When presented with this data, the Bureaus Chief Investigator agreed it was an unusual situation that would warrant an investigation. 66,407 prescriptions filled 179,667 times where the same prescription form number appeared in the data more than once, either at different locations or with inconsistent information about the prescriber and/or the drug. The Exhibit at the end of this report illustrates the inconsistencies and combinations of pharmacies, prescribers and drugs involved. These included: Thirteen prescriptions that were used 68 times to obtain 2,015 pills of Zolpidem. Each prescription was reportedly used more than once at different pharmacies in close proximity to each other. Four of the 13 prescriptions were filled using different prescribers at different times, and all 13 prescriptions were filled using variations of the same patient name and address. Bureau officials confirmed this was inappropriate prescription activity and that an investigation had already been opened based on a pharmacy tip. However, officials also stated that the Bureaus investigation addressed only a portion of the inappropriate activity we identified. Bureau officials reviewed this analysis and concluded based on their experience that, of the 66,407 cases we identified in this initial screening, 13,648 were likely the result of pharmacy data entry errors; 8,674 the result of a change in pharmacy ownership; and 23,664 the result of pharmacies failing to delete the original official prescription serial number from their internal database when dispensing a new prescription presented by the patient. At the same time, they were still unable to readily explain several thousand of the potential exceptions. While we do not necessarily agree with all of the assumptions made in the Bureaus analysis, the important issue is that this type of additional analysis is what the Bureau should be doing on a routine basis to enable it to hone in on suspicious activity and direct its limited investigative resources in the most effective manner.

Division of State Government Accountability

2011-S-19 The Public Health Law prohibits pharmacies from refilling prescriptions for Schedule II drugs, which are the most dangerous and/or potentially addictive among those that can be prescribed in the United States. In another analysis, we identified 39,500 prescriptions for these substances that were not reported as refills on the Bureaus database, but were apparently dispensed a total of 86,702 times. About 30 percent of the time these prescriptions were for Oxycodone. Ritalin, amphetamines and Morphine account for another 41 percent. In addition: 1,160 prescriptions were used 2,358 times to obtain Testosterone, which is sometimes illegally used as a performance enhancing drug. In these instances, the patients addresses and the addresses of the prescribers places of business were the same. Officials indicated the pharmacy involved was previously under investigation in 2007 for similar activity, but the case was closed in 2008 due to a district attorneys decision not to prosecute the case. Due to renewed interest, the Bureau indicated they subsequently reopened the case on January 9, 2012, five days after we originally presented this analysis to the Bureau. By comparing filled prescription data with the report of lost and stolen prescriptions maintained on the Bureaus website, we identified 4,001 prescription form numbers that prescribers had reported as either lost or stolen that were apparently filled 4,539 times. Bureau officials told us whenever prescription forms are reported lost or stolen, they automatically open an investigation. However, they also noted that lost and stolen prescription forms are sometimes used before they are reported to the Bureau. While the Bureau periodically performs some tests of the data, including monthly reports run on noncritical fields to look for possible errors, we found that staff is not performing certain routine analyses that could identify potential prescription drug diversion. These tests include matching prescription data against other information such as: authorized refill quantities; the prescription form ordering information; and information about Office of Professional Medical Conduct actions against practitioners. We performed these tests which revealed: 90,497 prescriptions were apparently refilled 157,879 times beyond their authorized refill quantities, including: 11,764 prescriptions refilled 17,377 times for Schedule II controlled substances, which are prohibited from refills. In contrast to the 39,500 prescriptions discussed earlier, these items were clearly noted as refills in the Bureaus database, yet still did not raise suspicion. About 25 percent of these cases involved Morphine; while Fentanyl, Oxycodone, Testosterone and Methadone accounted for another 66 percent. Just one of these prescriptions was reportedly used 11 extra times to obtain 334 Methadone pills. Further analysis showed three pharmacies in Long Island, Buffalo and Syracuse were responsible for filling 48 percent of the prescriptions; and 78,733 prescriptions refilled 140,502 times for other controlled substances in excess of the authorized refill quantity. More than half of these orders were for Zolpidem Division of State Government Accountability 9

2011-S-19 and Hydrocodone. One prescription was used 18 times beyond its authorized limit to obtain more than 2,100 ml of liquid Hydrocodone. 4,449 prescription form numbers were used 4,719 times before they were ever even issued to practitioners. Some prescription form numbers were used more than a year before they were ordered - a strong indication of potential counterfeiting. 125 prescriptions filled 135 times were prescribed by practitioners who had already had their licenses revoked, suspended, surrendered or otherwise inactivated. As a result of our discussions, the Bureau now receives direct notification whenever license actions are taken. After the Bureaus review of the analyses we conducted, officials concluded a majority of the findings were likely attributable to data entry errors. For instance, according to officials, in the past the Bureau regularly sent letters to pharmacies notifying them of invalid DEA information. Pharmacies were then instructed to resubmit prescription data with accurate DEA numbers. According to the Bureau, however, this process stopped in 2009 due to staffing shortages. Under the new Bureau leadership, these compliance reviews are slated to begin again. The Bureau also conducted an onsite review at a local chain-operated pharmacy to examine prescription forms supporting 34 of the items identified by our analyses. Based on this review, the Bureau determined that 32 of the exceptions were the result of pharmacy clerical errors. However, the other two (6 percent of the items identified) did exhibit signs of diversion, having been reported missing by the hospitals to which they were issued. The Bureau informed us that these two cases were already under investigation as a result of a pharmacy tip. While we recognize that data entry errors explain some anomalies detected in the data, data mining, and further refinement of the data, can be a powerful tool to find patterns and relationships in the data to help pinpoint criminal activity. Historically, the Bureau has generally used the prescription data as a tool to support investigations, rather than for identifying possible cases of diversion and illegal activity by pharmacies and prescribers. The Bureaus overall approach to managing investigations is to largely rely on referrals and complaints from external sources to identify suspected drug diversion and abuse of controlled substances. Even though data on all prescriptions that are dispensed for controlled substances is available on its own systems, the vast majority of the Bureaus cases still stem from information received from external sources. As the chart on the following page shows, from January 1, 2009 through July 11, 2011, 75 percent of the Bureaus 881 investigative cases resulted from a phone call (600 cases), an email (33 cases) or some other correspondence (26 cases); 21 percent were self-initiated, often based on reports by pharmacies and doctors about missing pills. Conversely, only 35 cases (4 percent) resulted from data analysis. Most of these (25) were focused on doctor shopping by patients, rather than on pharmacies or doctors who may be the source of diversion or whose identities are possibly being used to commit crimes.

Division of State Government Accountability

10

2011-S-19 We recognize that external referrals are one of the most valuable sources of case information. For instance, one of the Bureaus most noteworthy cases, dubbed Operation Bad Medicine, dismantled an Oxycodone ring as a result of a pharmacists tip. Still, by failing to properly use the data it already has, the Bureau is missing opportunities to combat illegal use of controlled substances.

PercentageofCasesbySource

75%

4% 8%

Bureau officials are part of an interagency workgroup comprised of leaders and staff from various federal and 13% State agencies. This workgroup is examining the issues of prescription drug misuse, diversion and overdose. Although some data analysis has occurred, it has been mostly DataAnalysis directed at demographics and has not included identifying PhoneCalls,Emails,Letters prescription drug diversion cases. However, officials told us RegionorInvestigatorInitiated one of the most significant areas being explored is the most effective use of the controlled substance prescription data LossReport collected by the Bureau, including the potential for sharing the data with other agencies. Also, Department epidemiologists are performing analyses of the controlled substance prescription data to guide this initiative and the Bureaus investigative program will be aligned accordingly based on the outcome of this analysis. Furthermore, the new Director has recently implemented new data mining strategies and officials state they plan to assign additional resources to analyze the prescription data to identify drug diversion and illegal use of controlled substances.

Poor Controls Over Prescription Forms

Returned and unused prescription forms are not always properly secured and accounted for, thus increasing the risk of misuse of prescription forms. The Bureau does not always secure or monitor returned prescription forms. Properly securing these forms is essential to protecting the public health and safety. Blank prescription forms returned to the Bureau are usually the result of an order by the Departments Office of Professional Medical Conduct. There is no official process for this to occur and, as a result, the Bureau is unaware forms are being returned. One Bureau employee is responsible for receiving and maintaining a log of all returned prescription forms. With assistance from the Chief Investigator, he stores returned forms in a locked cabinet that is only accessible to Bureau personnel. The Chief Investigator has the only key to the cabinet. Periodically, the staff member boxes up the returned forms and notifies investigators that they are ready to be destroyed (i.e., burned) in conjunction with the State Police. During our audit, we observed one of these boxes stored outside the secure cabinet. The staff member responsible for logging these forms was under the impression that the box had already Division of State Government Accountability 11

2011-S-19 been destroyed. As a result, it likely could have remained outside the locked cabinet until the next burn occurred four to six weeks later. While the box was still within the Bureaus locked office space, this area is at times accessible to cleaning staff, escorted visitors and other Department employees who Bureau staff allow to enter. We inventoried the box and found: 78 prescriptions that had been logged as returned were missing from the box. The prescription data we used for our other tests indicated four of these forms were reportedly used to acquire controlled substances. Three were prescribed by a veterinarian for antiseizure and anti-anxiety medications, while the fourth was prescribed by a medical doctor for an anti-anxiety drug. 2,034 prescriptions found in the box had not been logged in, including 1,500 pieces of blank Electronic Medical Record (EMR) paper. EMR paper is particularly vulnerable to theft since it contains all the enhanced security features of a valid prescription and can easily be made into counterfeit forms using a laptop and laser printer. Our further review of these issues showed that since August 17, 2007, 362,531 prescription forms were logged in as returned to the Bureau and reportedly destroyed. However, according to the Bureaus prescription data, between April 2010 and July 2011, 772 of these purportedly destroyed forms were used a total of 920 times to obtain controlled substances. We also noted that no new items had been entered into the log for about a year, so there was no way to determine what had been returned and supposedly destroyed during that period. Bureau officials indicated they are in the process of purchasing scanning software to improve the timeliness and accuracy of these logs. Prescription form orders are also returned to the contracted supplier for several reasons including misspellings or other errors. The company has two facilities located outside New York: one in Connecticut and the other in New Jersey. Printed forms are usually returned to the companys warehouse in Connecticut, while most EMR paper orders go to the facility in New Jersey. According to its contract with the Department, the company is required to destroy all prescription forms that are deemed unusable and report the prescription form numbers to the Bureau. However, prior to our audit the Bureau had never requested a list of destroyed prescriptions and the company had never provided one. We reviewed the suppliers log of returned prescription forms, as well as the returned item information captured by its product ordering system, and found several indications that the records were inaccurate and incomplete. In some cases, it was not clear whether forms had been destroyed or reshipped for use by others. In Connecticut, returned orders are first logged in on a spreadsheet, which is then used to update the ordering system. These records are then updated to show the final disposition of the returned forms. For the period April 1, 2007 to July 15, 2011, there were no records to substantiate the final disposition of 55 returned orders totaling 82,000 prescriptions. We also identified 182 orders totaling 234,200 forms that were recorded on the initial spreadsheet, but had not been subsequently noted as returned in the ordering system. Division of State Government Accountability 12

2011-S-19 Over the roughly four and a half years between April 1, 2007 and September 15, 2011, Connecticut records indicate at least 735,100 prescription forms were returned and purportedly destroyed. We compared this information against the Bureaus prescription data and identified 180 prescriptions for controlled substances reportedly filled 200 times during the 15 month period between April 2010 and mid-July 2011. In addition, of the 55 returned orders for which the company could not explain the disposition, 607 prescriptions were reportedly filled 693 times. We found even more problems with the records maintained in New Jersey, where the bulk of the highly vulnerable blank EMR paper is returned. Serial numbers recorded in those logs often appeared inaccurate, being composed of too many or too few digits, or spanning ranges that were too large or too small for conventional orders. As a result, it is unclear how much EMR paper may have actually been returned to the facility or what became of that material. For the New Jersey location, since we were unable to determine exactly what lots of EMR paper were returned, we ran our tests against a sample of 898,400 prescription form numbers that appeared to be valid and were scheduled to be destroyed. We identified 4,367 prescriptions for controlled substances reportedly filled 5,652 times during the 15-month period. This relatively high incidence rate indicates there is substantially more risk that this highly vulnerable material may be making its way into the hands of individuals or groups engaged in illegal activities, such as creating counterfeit prescriptions. In response to the audit, the Bureau agreed that a standard log indicating the disposition of returned official prescription forms is an appropriate measure and has directed the contracted supplier to begin forwarding a log of returned prescription forms to the Bureau.

An Inconsistent Approach to Investigating Drug Diversion Causes a Wide Disparity in Results Among the Bureaus Regional Offices
Inconsistent investigative priorities among its regions makes the Bureau less effective in detecting and ceasing criminal activity.
The Bureau does not have a consistent approach to investigating drug diversion across the State. As a result, caseloads and case results differed significantly among the five offices and their assigned investigators during the audit period. Some offices seem more inclined to pursue criminal matters, while others focus more on civil cases and administrative issues. Absent a uniform approach, similar matters are likely to be treated differently rather than follow a statewide focus that ensures the appropriate remedy is employed to maximize the prevention of prescription drug diversion and abuse. For example: The Syracuse office accounted for half of the Bureaus completed cases that resulted in criminal charges and was the only region that closed cases with both criminal and civil charges. The Rochester and Buffalo offices completed 78 percent of the Bureaus civil cases and were the only offices to issue notices of noncompliance and administrative warnings. Further, the Rochester office accounted for 76 percent of the cases that resulted in no findings. Division of State Government Accountability 13

2011-S-19

NumberofCompletedCasesbyRegion
25 20 15 10 5 0
Noncompliance /Administrative Warnings

Criminal

Civil

Civiland Criminal

Central

NewYork

Syracuse

Rochester

Buffalo

The number of cases assigned to each investigator during our audit period also varied significantly, ranging from a high of 143 to a low of 55. Over half of the cases completed by one investigator (16 of 31 cases) resulted in criminal charges. This was more than twice the number of criminal cases produced by any other investigator. This inconsistency in approach, as well as in case results, occurred in part because the Department allowed the regional offices to run autonomously and under the direction of non-Bureau leadership. While the Chief Investigator provided quality assurance over investigation reports and provided guidance on an as-needed basis, he had little direct authority over what cases the regional investigators actually worked. Instead, the regional investigators were sometimes supervised by non-Bureau employees, including managers from the Office of Professional Medical Conduct in the Rochester and Buffalo regions. Such inconsistency potentially reduced the Bureaus ability to prevent prescription drug diversion. Bureau management has also not established goals, objectives or performance standards for its investigations unit. The Chief Investigator informed us that the investigators annual performance evaluation form includes a standard of completing 25 prosecutable cases (civil or criminal), but that the goal was set arbitrarily. Between January 5, 2010 and July 11, 2011, not one investigator met this standard. Instead, Bureau officials told us they actively monitor investigative outcomes, including investigator time and productivity, through ongoing reviews of the investigative case management system by the Director and Chief Investigator. They also point to frequent communication between the Director, Chief Investigator and regional office supervisors and investigators. Officials state they will now plan for semi-annual in-person reviews of all investigations with each investigator. Also, additional development of goals, objectives and performance measures will ensue as part of the Departments Strategic Planning Initiative.

Division of State Government Accountability

14

2011-S-19 In November 2011, the Bureau hired a new Director with extensive narcotics investigative experience. The new Director informed us that he recognizes there will be some discrepancies in results across the regions due to different levels of responsiveness by local law enforcement. However, under its new leadership, the Bureau is taking steps to standardize enforcement among the regions. Since November 2011, regional investigators now report operationally to the Bureaus central office leadership. The Bureaus new Director is the direct-line supervisor for all regional program directors, and the Chief Investigator supervises all investigations and assignments conducted by investigators regardless of their geographical assignment. With this direct oversight, the Bureau is confident it will have more effective direction and oversight of investigative activities throughout the State.

Use of Bureau Funding

Technology resources purchased to aid in investigations were not put to use, while Bureau funding is sometimes spent on other activities. We found the Bureau spent $43,386 in federal grant monies to buy computers for its investigators and other staff, yet the majority of the computers went unused for several years. In 2009, the Bureau spent $21,736 to buy 23 laptop computers and, again in 2010, $21,650 for 25 desktop units. At the end of 2011, only five desktops and seven laptops had been put to use. Bureau officials report all of this equipment is now deployed. The Bureau is funded through a special revenue account devoted solely to its operations. Over a two-year period, about $550,000 of Bureau funding was used to support other activities and operations. At the same time, about $710,000 in funding originally allocated to other areas of the Department was actually spent on Bureau operations. From April 1, 2009 through March 31, 2011, the Bureau spent about $5.1 million on payroll costs to fund 46 employees. Five of these 46 employees, whose costs totaled $486,931, did not work in the Bureau. However, during this same timeframe, $711,100 in personal service costs for seven employees working in the Bureau was charged to other Department programs. During the same period, the Bureau also spent $552,133 for temporary personnel services to supplement its permanent staff. The Bureau sometimes uses temporary personnel to assist practitioners in registering for the Official Prescription Program and to carry out various administrative tasks. We identified 19 temporary staff members costing $64,902 who were actually assigned to areas unrelated to the Bureau, such as the Departments donor registry program. Bureau management told us they were unaware that funds were being used for temporary staff not working in the Bureau. This problem reportedly occurred because the Finance Office paid the invoices and allocated costs based on purchase order information created by the Bureaus parent division, the Division of Quality and Patient Safety, without knowledge of who the temporary staff members were and where they actually worked. In response to the audit, to assure proper use and recording of sub-allocated funds, the Division of State Government Accountability 15

2011-S-19 Department will immediately implement periodic reconciliations of expenditures to confirm that the level of expenditures is appropriate. Additionally, the Department will provide training to individuals involved in coding expenditures to ensure they are properly charged.

Failure to Fully Correct Problems Previously Identified

Some issues raised more than three years ago by the State Inspector General have yet to be addressed. The Bureau has not fully remedied the following problems identified by the New York State Office of the Inspector General in its 2008 report that outlined several internal control weaknesses. Bureau management has still not established controls to ensure that investigators do not abuse State time in relation to outside employment. We identified one senior investigator in the Syracuse regional office who, in May 2011, was appointed Chief of Police at a local police department with a salary of $30,000; apparently without the knowledge, or approval, of the former Bureau Director. The Bureaus Peace Officers manual still has not been updated. The Bureau issued a State Vehicle Parking Policy, but other policies remain outdated. The former Bureau Director stated several policies were still being worked on. Although the Bureau acted to address some of the issues in the Inspector Generals report, management acknowledges that more work needs to be done. In response to the audit, Bureau officials stated that the review and revision of the manual will be done by the end of 2012.

Recommendations
1. Further review the prescription data identified by our audit to isolate instances and patterns that warrant formal investigation. 2. Modernize the Bureaus use of technology and information resources by expanding routine data analysis to assist in more effectively identifying and investigating prescription drug diversion and abuse. 3. Properly account for, safeguard and monitor the destruction or other disposition of prescription forms returned to both the Bureau and its contracted supplier. 4. Establish and communicate clearly defined and consistent priorities, objectives and goals to guide regional investigations. Monitor outcomes to determine whether investigators and offices are meeting expectations. 5. Monitor and reconcile expenditures to ensure that funding is used as intended.

Division of State Government Accountability

16

2011-S-19

Audit Scope and Methodology

We audited whether Bureau of Narcotic Enforcement resources are used in an effective and efficient manner to combat prescription drug diversion and abuse in New York State. We also determined whether Bureau funds were used solely for their intended purpose and followed up on the implementation of recommendations included in a 2008 report by the New York State Inspector Generals Office. Our audit scope included the period April 1, 2007 through March 8, 2012. To accomplish our audit objectives, we interviewed Department officials, along with warehouse managers from the Departments contracted prescription supplier. Using data mining software, we conducted seven analytical tests on 28.5 million records of dispensed prescriptions for controlled substances as reported by pharmacies for the period April 1, 2010 through July 15, 2011. Our analyses used the most up-to-date pharmacy data available, which included and accounted for subsequent corrections made by pharmacies to the data they originally reported. Part of our analysis included matching this data against the Bureaus Lost/Stolen list of prescriptions as of August 5, 2011 and against Office of Professional Medical Conduct actions for a judgmental sample of 141 of 295 actions effective as of 2009. Our sample was based on the action and whether we could clearly determine the outcome (e.g., license revoked). We also matched the data against official prescription form ordering information for the period January 1, 2010 through July 15, 2011. In addition, we reviewed: relevant federal and State laws; the Bureaus relevant policies and procedures; the Bureaus personal and non-personal service expenditures, organizational charts, New York State Central Accounting System expenditure data, and all invoices for temporary personal services; the Bureaus former and current Case Tracking Systems; State vehicle and cell phone records for the Bureaus narcotic investigators; license renewal applications; Bureau employees qualifications; and Bureau outreach efforts. We conducted our performance audit in accordance with generally accepted government auditing standards. Those standards require that we plan and perform the audit to obtain sufficient, appropriate evidence to provide a reasonable basis for our findings and conclusions based on our audit objectives. We believe that the evidence obtained provides a reasonable basis for our findings and conclusions based on our audit objectives. In addition to being the State Auditor, the Comptroller performs certain other constitutionally and statutorily mandated duties as the chief fiscal officer of New York State. These include operating the States accounting system; preparing the States financial statements; and approving State contracts, refunds, and other payments. In addition, the Comptroller appoints members to certain boards, commissions and public authorities, some of whom have minority voting rights. These duties may be considered management functions for purposes of evaluating organizational independence under generally accepted government auditing standards. In our opinion, these functions do not affect our ability to conduct independent audits of program performance.

Division of State Government Accountability

17

2011-S-19

Authority
This audit was performed according to the State Comptrollers authority under Article V, Section 1 of the State Constitution and Article II, Section 8 of the State Finance Law.

Reporting Requirements
We provided a draft copy of this report to Department officials for their review and comment. Their comments were considered in preparing this final report and are attached in their entirety at the end of the report. Within 90 days after final release of this report, as required by Section 170 of the Executive Law, the Commissioner of the Department of Health shall report to the Governor, the State Comptroller, and the leaders of the Legislature and fiscal committees, advising what steps were taken to implement the recommendations contained herein, and where recommendations were not implemented, the reasons why. In responding to our draft report, Department officials acknowledge the value of data mining and analysis as a tool to identify prescription drug diversion and abuse, and also recognize that the drill down approach used in our data mining analysis identified instances of suspected criminal activity and diversion. Officials further indicate they will hire additional analytical staff and routinely conduct more in-depth analyses to address diversion. To improve controls over official prescription forms returned to the Bureau and its contractor, Department officials state they will automate the Bureaus inventorying process and have taken additional steps to ensure the proper safeguarding of prescription forms. Officials also reaffirmed their commitment to ensuring effective direction and oversight of statewide investigative activities, fully correcting problems previously identified by the State Inspector General, and improving controls over the use of Bureau funding. At the same time, the Departments response also includes several statements and analyses which seek to minimize the significance of the findings and conclusions from our analysis of prescription data, and thus the need for appropriate follow-up.

Auditor Comment
When looking for fraud and abuse, one has to expect that only a very small percentage of transactions will be problems. As a result, these items will become lost in large populations unless specific tools, like data mining and analysis, are used to highlight the ones that pose the highest risk. As our report indicates, our analyses represent only the initial steps that management should be taking to highlight records with errors or inconsistencies that may be initial indicators of fraud or diversion. Our analyses have culled the population of over 28 million records down to less than five percent that pose the greatest risk based on the factors we considered. As demonstrated by its analysis of the 66,407 duplicate records, the Bureau should be able to hone down the list of possible exceptions even further as it applies its professional knowledge and expertise in this area. In fact, its goal should be to sharpen its focus by explaining and eliminating Division of State Government Accountability 18

2011-S-19 as many items as possible. We are confident such analysis can be a valuable tool to help the Bureau identify specific individuals, prescribers and pharmacies that may be involved in abuse and diversion. Considering the vast number of prescriptions filled for these controlled substances, we caution that officials should not be too quick to dismiss the impact of even a small percentage of problems; especially when only one-half of one percent could translate into 100,000 instances each year where dangerous drugs are dispensed improperly. Our specific rejoinders to some of the statements in the Departments response to our draft report are presented as State Comptrollers Comments at the end of this report.

Division of State Government Accountability

19

2011-S-19

Contributors to This Report

John Buyce, Audit Director Andrea Inman, Audit Manager Joel Biederman, Audit Supervisor Scott Heid, Examiner-in-Charge Joseph Gillooly, Staff Examiner Stanley Goodman, Staff Examiner Panika Gupta, Staff Examiner Michele Krill, Staff Examiner Andre Spar, Staff Examiner

Division of State Government Accountability

Andrew A. SanFilippo, Executive Deputy Comptroller 518-474-4593, asanfilippo@osc.state.ny.us Elliot Pagliaccio, Deputy Comptroller 518-473-3596, epagliaccio@osc.state.ny.us Jerry Barber, Assistant Comptroller 518-473-0334, jbarber@osc.state.ny.us

Vision
A team of accountability experts respected for providing information that decision makers value.

Mission
To improve government operations by conducting independent audits, reviews and evaluations of New York State and New York City taxpayer financed programs.

Division of State Government Accountability

20

2011-S-19

Exhibit
Unique Prescription Numbers Used at Different Pharmacies and/or Containing Different Prescribers or Drugs April 1, 2010 - July 15, 2011

66,407 PRESCRIPTIONS USED179,667 TIMES SINGLEPHARMACY 32,094PrescriptionsUsed 91,840Times

MULTIPLE PRACTITIONERS 20,486Prescriptions Used60,931Times SINGLE PRACTITIONER 11,608Prescriptions Used30,909Times

MULTIPLEPHARMACIES 34,313PrescriptionsUsed 87,827Times

MULTIPLE PRACTITIONERS 10,031 Prescriptions Used23,906Times

SINGLEPRACTITIONER 24,282Prescriptions Used63,921Times

MULTIPLETYPES OFNARCOTICS
2,541Prescriptions Used9,691Times

SINGLETYPLEOF NARCOTIC
17,953Prescriptions Used51,240Times

MULTIPLETYPES OFNARCOTICS 11,608 Prescriptions Used30,909 Times

MULTIPLETYPES OFNARCOTICS 7,843 PrescriptionsUsed 18,974Times

SINGLETYPLE OFNARCOTIC 2,188 Prescriptions Used4,932 Times

MULTIPLETYPES OFNARCOTICS 5,817 PrescriptionsUsed 13,528Times

SINGLETYPLEOF NARCOTIC 18,465 PrescriptionsUsed 50,393Times

Division of State Government Accountability

21

2011-S-19

Agency Comments

Division of State Government Accountability

22

2011-S-19

Division of State Government Accountability

23

2011-S-19

* Comment 1

* See State Comptrollers Comments, page 31

Division of State Government Accountability

24

2011-S-19

* Comment 2

* See State Comptrollers Comments, page 31

Division of State Government Accountability

25

2011-S-19

Division of State Government Accountability

26

2011-S-19

* Comment 3

* Comment 4

* See State Comptrollers Comments, page 31

Division of State Government Accountability

27

2011-S-19

Division of State Government Accountability

28

2011-S-19

* Comment 5

* Comment 6

* See State Comptrollers Comments, page 31

Division of State Government Accountability

29

2011-S-19

Division of State Government Accountability

30

2011-S-19

State Comptrollers Comments

1. Officials cite a 0.15 percent error rate by comparing the 325,000 records we identified to the entire pool of 218 million forms supplied to practitioners. However, our exceptions were drawn from only the 10 percent of these forms (22 million) used to acquire controlled substances. 2. Officials explain various reasons why errors may be responsible for about 51,000 of the over 66,000 records that we identified as being filled more than once, often at different locations. However, they still offer no explanation for the remaining 15,000 cases. 3. At this level of data analysis, it is not surprising for aspects of such a large pool of potential problems to continue to resemble the population from which it was drawn, especially when searching for problems like fraud or diversion. Differences like the type of drug acquired may only be apparent after the Bureau applies its professional knowledge and expertise in the area to further hone down the list of possible exceptions. 4. We do not downplay the value of these outside referrals. In fact, on Page 7 of our report we specifically recognize them as one of the most valuable sources of case information. 5. The Departments comments focus on attempting to explain the 78 prescriptions that appeared to be missing from the box in the Bureaus office. It does not address the over 2,000 prescription forms in the box that officials did not even have a record of, nor the almost 800 forms recorded as destroyed by the Bureau but apparently used to dispense controlled substances. Given these circumstances, we question the Departments assertion that forms were never actually susceptible to theft. 6. Regarding the roughly 5,000 filled prescriptions that were reported as returned to the contract vendor, officials point out that they only represent 0.0005 percent of the total number of forms printed by the vendor. Not only would this calculation require that 1 billion forms had been printed as compared to the 218 million supply that officials cite earlier, but the more relevant comparison is against the roughly 1.6 million forms returned to, and supposedly destroyed by, the vendor.

Division of State Government Accountability

31