California pharmacies facing a PBM audit have specific, enforceable protections under state law, protections that only help if the pharmacy knows about them before a finding becomes a recoupment demand or a network termination notice. Business and Professions Code Chapter 9.5 caps how far back an auditor can reach, controls when a PBM can collect, and limits the use of statistical extrapolation against a pharmacy's claims. California has also moved to license PBMs directly, through Senate Bill 41, under the Department of Managed Health Care. Federal law still limits how far any of this reaches.
Audit Notice, Scope and Lookback Period
A PBM or carrier auditing a California pharmacy onsite must give at least two weeks' written notice, and cannot schedule the audit in the first five business days of the month without the pharmacy's agreement. The audit's reach is also bounded: Business and Professions Code Section 4437 limits a pharmacy audit to claims submitted or adjudicated within the 24 months before the audit, unless a longer period is required by state or federal law or the originating prescription is required. A pharmacy audit can also include a separate check of program documentation such as REMS certification records. A pharmacy that knows this window before the audit begins can flag out-of-period claims before they reach a recoupment demand.
Preliminary Reports, Appeals and When a PBM Can Collect
Section 4438 sets a strict sequence. The auditing entity must issue a preliminary audit report within 60 days of the audit's conclusion, and the pharmacy then has at least 30 days to respond with evidence or corrections. A final audit report follows within 120 days of that response, and the pharmacy has at least 30 days from the final report to file an audit appeal. The PBM cannot seek a recoupment, a chargeback, or penalties until the appeal window has closed or the appeal has been exhausted, whichever is later, though if a single audit's discrepancy exceeds $30,000, the PBM may withhold future payments above that amount while the appeal is pending, and interest does not accrue from the audit notice through the end of the appeal.
California law does not let a PBM collect, charge back, or accrue interest against a pharmacy while an audit appeal is still open, though it may withhold future payments above a $30,000 discrepancy pending that appeal.
Extrapolation and Clerical Error Protections
Chapter 9.5 defines extrapolation as inferring an error rate across a full claims population from a smaller sample, and it does not let that inference stand unchallenged. Under Section 4438, a pharmacy may present evidence to validate orders for dangerous drugs or devices that an extrapolated finding would otherwise invalidate. Section 4433 adds a separate protection for recordkeeping: a pharmacy is not subject to recoupment for a clerical or recordkeeping error unless the error caused actual financial harm to the PBM, the carrier, or the health plan beneficiary. A pharmacy responding to a PBM audit when records are missing can rely on that standard: a paperwork gap alone does not support a recoupment the way a billing error does.
Who Regulates PBMs in California
Section 4439 states that the chapter gives the Department of Consumer Affairs and the California State Board of Pharmacy no jurisdiction over its provisions, so a pharmacy building a PBM audit defense strategy should not expect the pharmacy board to hear an audit dispute. PBM licensure sits elsewhere: Senate Bill 41 placed that authority with the Department of Managed Health Care. Chapter 9.5 controls how an audit unfolds. Senate Bill 41 decides whether the PBM running it may operate in California at all.
Federal Limits: ERISA and Medicare Part D Preemption
Two federal statutes decide where California's authority stops. In Rutledge v. Pharmaceutical Care Management Association, the Supreme Court held that ERISA does not preempt a state law regulating PBM reimbursement, because a rate regulation that merely increases costs or alters incentives, without forcing a plan to adopt a particular benefit design, lacks the connection to an ERISA plan that triggers preemption. That reasoning supports Chapter 9.5's audit procedures against an ERISA challenge from a self-funded plan's PBM. Medicare Part D is narrower: federal law supersedes state law for Part D plans, with only two exceptions, state licensing laws and laws on plan solvency.
Why Early Legal Counsel Is Critical
It is critical that pharmacies promptly retain experienced healthcare defense counsel upon receiving a PBM audit notice, a preliminary report, or a final report with a recoupment demand. Early intervention protects the pharmacy's appeal rights and preserves defenses, including extrapolation evidence and clerical-error protections, before the record closes. Delaying counsel, including for a pharmacy responding to a PBM audit while short-staffed, can mean missing a 30-day window the pharmacy will not get back.
How Health Law Alliance Can Help
Health Law Alliance's California PBM audit defense attorneys represent pharmacies through every stage of a Chapter 9.5 audit, from the notice letter through the final appeal. Health Law Alliance's attorneys have overseen 2,000+ audits and handled 5,000+ matters, with 25+ years of experience. Contact us today for a free consultation before a recoupment becomes final.
