California Security Prescription Form Requirements

Every paper prescription for a Schedule II–V controlled substance in California must be written on a tamper-resistant security form that meets the specifications in Health and Safety Code Section 11162.1. California security prescription form requirements cover the physical paper (six anti-fraud features plus a serialized barcode), the information pre-printed on it (prescriber identity, license, DEA number), and the fields the prescriber fills in at the time of writing (patient, drug, quantity range, signature). Forms may be obtained only from printers approved by the California Department of Justice.¹

The Six Required Security Features

Section 11162.1 builds six anti-counterfeiting elements into the paper and printing of every compliant form:

A latent, repetitive “void” pattern across the front of the form that appears when the prescription is photocopied or scanned.
A watermark on the back reading “California Security Prescription.”
Chemical void protection, meaning the paper reacts visibly if someone tries to wash or alter written entries.
At least one feature printed in thermochromic ink that changes color when heat is applied.
An opaque writing area where entries disappear if the document is lightened or bleached.
A printed description of the security features so a pharmacist can verify authenticity.¹²

Every form also carries a unique serialized number that doubles as a scannable barcode. The Department of Justice sets the specifications for that number, which must comply with National Council for Prescription Drug Programs standards. Each form additionally carries an identifying number assigned by DOJ to the approved security printer, tying that batch back to a specific vendor.³

What Must Be Pre-Printed on the Form

Some information is baked in by the security printer before the form ever reaches the prescriber. That includes the prescriber’s name, category of licensure (MD, DO, DDS, and so on), California license number, federal DEA registration number, and address. The printer’s own DOJ-assigned identifying number appears on the form as well.³

Six pre-printed check-off boxes let the prescriber indicate the quantity range being ordered:

1–24
25–49
50–74
75–100
101–150
151 and over

A separate space allows the prescriber to note the unit type when the drug is not in tablet or capsule form. At the bottom of the form, a printed warning states that the prescription is void if the number of drugs prescribed is not noted.³

What the Prescriber Fills In

At the time of prescribing, the practitioner writes in the patient’s name and address; the drug name, quantity, strength, and directions for use; checks the appropriate quantity box; and signs and dates the form in ink.³

Ordering Forms From an Approved Security Printer

Prescribers cannot use just any print shop. Compliant forms come only from vendors registered with the DOJ under the California Security Prescription Printers Program. To place an order, the prescriber must provide the printer with a state license number and DEA registration.⁴

Once forms are delivered, the printer has until the next working day to report the serial numbers of every delivered form to the DOJ through a web-based application. That report also includes the prescriber names, the DEA numbers shown on the forms, the recipient’s name, and the delivery date. Any single form can be traced back to both the printer that produced it and the prescriber who received it.³

When a Paper Security Form Is Actually Used

Since January 1, 2022, California has required prescribers to issue prescriptions electronically, including for controlled substances, and all California pharmacies must be able to receive them. Paper security forms come into play only when a statutory exemption applies.⁵

Business and Professions Code Section 688 recognizes exemptions including a technology failure such as a power, software, or internet outage; prescriptions to be dispensed at an out-of-state pharmacy; certain emergency or urgent care encounters where the patient lives outside California or outside the hospital’s area, is homeless or indigent without a preferred pharmacy, or the patient’s regular pharmacy is likely closed; veterinary prescriptions; low-volume prescribers who issue 100 or fewer prescriptions per calendar year and have registered with the Board of Pharmacy; prescribers volunteering without pay at a free clinic; situations where the prescriber and dispenser are the same entity; cases where requiring an electronic prescription would delay treatment and harm the patient; and prescriptions containing elements not supported by the current NCPDP SCRIPT standard.⁵

When any of these exemptions applies and a paper controlled substance prescription is issued, it must be on a compliant security form. The one carve-out is prescriptions for terminally ill patients under Health and Safety Code Section 11159.2, which may be written on ordinary, non-security forms.⁵

Storage and Reporting Lost or Stolen Forms

Because every form is serialized and tracked back to a specific prescriber, losing a pad is a compliance problem. Prescribers should store blank forms in locked, access-restricted locations.

If forms are lost or stolen, the prescriber (or the security printer, if the loss occurred before delivery) must report the loss to the CURES Prescription Drug Monitoring Program immediately, and no later than three days after discovering it. Reports may be submitted in writing on the DOJ form or through CURES directly.⁶

Prescribers should also notify the California State Board of Pharmacy’s complaint unit. The Board maintains a public, county-organized list of prescribers who have reported that fraudulent or stolen security forms have appeared in California pharmacies, which helps pharmacists statewide flag suspicious prescriptions before filling them.⁷

Penalties for Non-Compliance and Counterfeiting

Counterfeiting a controlled substance prescription form is a misdemeanor punishable by up to one year in county jail, a fine of up to $1,000, or both. Possessing a counterfeit form is also a misdemeanor, punishable by up to six months in jail and a $1,000 fine. The same penalties apply to obtaining security forms under false pretenses or fraudulently producing them.

No prescriber may write, and no pharmacist may fill, a controlled substance prescription that does not comply with the security form requirements. Pharmacies that dispense from non-compliant forms risk citation and fines from the Board of Pharmacy. The Board’s initial response is typically educational, with formal discipline reserved for repeat violations or willful disregard.⁸

1
California Legislative Information. California Code HSC 11162.1 – Prescription Forms for Controlled Substances
2
California Legislative Information. California Code Health and Safety Code HSC 11162.2
3
California Office of the Attorney General. California Health and Safety Code 11162.1 – Prescription Form Requirements
4
California Department of Justice – Office of the Attorney General. California Security Printer Program
5
California Legislative Information. California Code BPC 688 – Health Care Practitioners
6
California Legislative Information. California Code HSC 11165.3 – Report of Theft or Loss of Prescription Forms
7
California State Board of Pharmacy. Security Prescription Forms Reported Stolen or Fraudulent
8
Dental Board of California. Notice of Non-Compliant Security Forms for Prescribing Controlled Substances