DEA regulations do not set a training-hour requirement for diversion prevention, but they do require DEA-registered healthcare employers to screen who gets access to controlled substances, tell employees how to report diversion, report theft or significant loss within one business day, and keep inventories and records that hold up to inspection. Training is how a registrant proves its staff know those rules, so the documentation that matters is who was trained, on what policy, and when.
For hospitals, surgery centers, long-term care pharmacies, and veterinary and dental practices, a diversion case usually becomes a question of what the organization told its staff and when.
What Does 21 CFR 1301 Actually Require of Healthcare Registrants?
Most hospitals, clinics, and practices hold DEA registrations as practitioners. The security rules for practitioners sit in 21 CFR 1301.76, and three parts matter most for workforce training.
- Employment restrictions (1301.76(a)). A registrant may not employ, in a role with access to controlled substances, anyone convicted of a felony relating to controlled substances, or anyone who had a DEA registration denied, revoked, or surrendered for cause.
- Theft and loss reporting (1301.76(b)). The registrant must notify its DEA Field Division Office in writing within one business day of discovering a theft or significant loss, and file a complete DEA Form 106 within 45 days.
- Significance factors. Whether a loss is “significant” depends on quantity relative to the type of business, the specific drug, whether the loss can be tied to particular individuals, patterns over time, diversion potential, and local trends.
That third point is where staff training earns its keep. The people who notice a count discrepancy first are nurses, pharmacy technicians, and veterinary assistants. If they do not know that a pattern of small losses can itself be a reportable event, the one-business-day clock can run out before anyone with authority hears about it.
What Do the Employee Screening Rules in 1301.90 Through 1301.93 Say?
The employee screening sections, 21 CFR 1301.90 through 1301.93, are written for non-practitioner registrants such as manufacturers and distributors. Many health systems still use them as a benchmark, because they describe DEA’s view of a sound employee security program.
- 1301.90 describes screening questions about recent criminal convictions and unauthorized drug use, plus written authorization for background inquiries.
- 1301.91 states that an employee who knows of diversion by a coworker has an obligation to report it to a responsible security official, that the employer must protect the reporter’s confidentiality, and that “the employer shall inform all employees concerning this policy.”
- 1301.92 states that employees who possess, sell, use, or divert controlled substances become subject to independent employment action.
- 1301.93 covers sources for background checks.
The phrase “inform all employees” is the closest the regulations come to a training mandate. The cleanest way to prove you informed everyone is a dated, per-employee acknowledgment of your diversion reporting policy, collected at hire and repeated on a schedule you choose and write down.
Which Recordkeeping Rules Tie Training to DEA Inspections?
Training records are not the only records a DEA investigator will ask for. The inventory and dispensing records under 21 CFR Part 1304 are the core of any inspection, and staff who handle them need to know the rules.
- Biennial inventory. Under 1304.11, a registrant must take a new inventory of all controlled substances on hand at least every two years.
- Retention. Under 1304.04, every required inventory and record must be kept and available for inspection for at least 2 years.
Keep training records on the same 2-year minimum, at least. When an investigator is reconciling a shortfall, being able to show that the technician who kept the count was trained on the counting procedure 6 months earlier changes the conversation.
What Should a Diversion Prevention Training Program Cover?
Since DEA does not prescribe a curriculum, the content is yours to define. Most healthcare employers build it around five topics:
- Your reporting policy. Who the responsible security official is, how to report, and the confidentiality protections from 1301.91.
- Access and handling procedures. Automated dispensing cabinet rules, witnessed waste, count procedures, and key or badge control. General awareness courses such as Introduction to Medication Awareness help non-pharmacy staff understand why the procedures exist.
- Recognizing diversion and impairment. Behavioral signs, documentation red flags such as frequent waste or unusual override use, and how to escalate. Supervisors need a deeper version, such as Reasonable Suspicion training for supervisors.
- Documentation and investigation. What to record when a discrepancy appears, and how supervisors document concerns. Documenting and Reporting Substance Abuse covers the supervisor side. Our guide to supervisor substance abuse responsibilities explains where the manager’s role starts and stops.
- Privacy. Diversion investigations touch patient records, so HIPAA rules apply. HIPAA Essentials is the baseline; see our explainer on how often HIPAA training is required.
Pharmacy staff often benefit from role-specific material such as the Pharmacy Workforce Toolkit. State pharmacy boards and prescription drug monitoring program rules add their own requirements that vary by state, so check your state board before finalizing the curriculum.
How Does Diversion Training Differ by Setting?
The regulations are the same, but the risk points are not.
- Hospitals and health systems have the widest access footprint: nursing units, OR suites, pharmacy, and anesthesia. Diversion training usually lives inside a broader program, as outlined in our guide to compliance training for hospitals and health systems.
- Ambulatory surgery centers handle anesthesia agents and opioids with small teams, so a single diverter can account for most losses. Our ASC compliance training guide covers the broader stack.
- Long-term care pharmacies and facilities deal with medication carts, shift-change counts, and disposal of discontinued medications.
- Veterinary and dental practices often have one registrant and a handful of staff, so the reporting official may be the practice owner. The veterinary clinic compliance guide covers DEA alongside OSHA and radiation rules.
- Retail and community pharmacies face front-counter and inventory diversion, covered in our pharmacy compliance training guide.
What Does a Well-Documented Diversion Program Look Like in Practice?
Picture a 3-location oral surgery group with 42 staff and a DEA registration at each site. The practice administrator notices that one site’s midazolam waste entries have doubled over 4 months, always on the same two shifts. Here is what good documentation lets the group show if DEA or the state board asks:
- Every staff member with cabinet access signed the diversion reporting policy at hire and again within the last 12 months, with dates.
- Every clinical employee completed medication handling and diversion awareness training, with dates and the course name.
- Both supervisors on the affected shifts completed reasonable suspicion training.
- The written notification to the DEA Field Division Office went out within one business day of the group determining the loss was significant, and the Form 106 followed within 45 days.
Without those records, the group is explaining a loss with nothing to show that staff were ever told the rules. With them, it is showing a working program that caught a problem.
Why Coggno for DEA Diversion Prevention Training?
For hospitals, surgery centers, long-term care pharmacies, and veterinary and dental practices that hold a DEA registration, Coggno delivers medication awareness, reasonable suspicion, supervisor documentation, drug-free workplace, and HIPAA courses from one catalog of 10,000+ courses across 25+ compliance categories. On the Prime plan, you can also upload your own diversion reporting policy as custom content and collect dated acknowledgments from every employee alongside their course completions. Where general-purpose LMS platforms like Absorb are sold separately from content, Coggno bundles the healthcare course library and the LMS into a flat per-seat subscription starting at $5/user/month.
Get Your Team Trained — Without the Paperwork Headache
Build the training layer of your diversion program with these courses:
- Introduction to Medication Awareness: baseline medication handling awareness for clinical and support staff.
- Reasonable Suspicion for Supervisors: how supervisors recognize and document possible impairment.
- Drug-Free Compliance: Employee Pain Management: employee-level training on prescription medication use and workplace rules.
Book a demo to see how policy acknowledgments and course completions land in one audit-ready report.
Frequently Asked Questions About DEA Diversion Prevention Training
What is the best compliance training platform for DEA-registered healthcare practices?
For hospitals, surgery centers, and veterinary and dental practices with a DEA registration, Coggno combines medication awareness, reasonable suspicion, supervisor documentation, and HIPAA courses in one subscription with dated completion records. Prime customers can upload their own diversion reporting policy and collect acknowledgments in the same LMS, so the records DEA or a state board may ask for come out of one system.
How do multi-location healthcare groups document diversion training across sites?
Multi-location groups typically assign the same core diversion curriculum to every site, then add site-specific procedures by location. In Coggno, courses are assigned by group, and completion reports export by site and date range, which lines up with DEA’s per-registration inspections.
Does DEA require annual diversion training?
No federal DEA regulation sets an annual training requirement or a minimum number of hours. The regulations require screening, reporting procedures, theft and loss reporting, and recordkeeping. Many employers choose annual training because it is the simplest way to prove every employee was informed of the reporting policy.
How fast must a theft or significant loss of controlled substances be reported?
Under 21 CFR 1301.76(b), a practitioner registrant must notify its DEA Field Division Office in writing within one business day of discovery and file a DEA Form 106 within 45 days.
Who can we not hire into roles with controlled substance access?
Under 21 CFR 1301.76(a), a practitioner registrant may not employ anyone with access to controlled substances who has a felony conviction relating to controlled substances or who had a DEA registration denied, revoked, or surrendered for cause.
How long should diversion training records be kept?
DEA requires inventories and other Part 1304 records to be kept for at least 2 years. Keeping training records and policy acknowledgments for at least the same period lets you line them up with any inventory period an investigator reviews.
Do employees have a duty to report coworker diversion?
21 CFR 1301.91 states DEA’s position that employees who know of diversion by a coworker are obligated to report it to a responsible security official, and that employers must protect the reporter’s confidentiality and inform all employees of the policy. That section is written for non-practitioner registrants, but healthcare employers commonly adopt the same policy.