A pharmacy that purges prescription records on a five-year schedule can find itself unable to defend a Medicare Part D claim that federal law required it to keep for 10 years. Retention obligations come from three sources at once: the Centers for Medicare & Medicaid Services (CMS), the pharmacy benefit manager (PBM) contract itself, and the state board of pharmacy where the pharmacy is licensed. When a PBM audit letter arrives, the claims under review are often years old, and a pharmacy that purged early has no invoice, no signature log, and no prescription hard copy left to answer it. The result is a recoupment demand that stands unopposed for lack of paperwork, not for lack of merit.
What Medicare Part D and PBM Contracts Actually Require
The federal floor holds regardless of state law. Under 42 CFR 423.505(i)(2), Medicare Part D sponsors and their downstream entities, which include every network pharmacy, must keep records available for 10 years from the end of the provider agreement or a CMS audit, whichever is later. Both major PBMs write that floor into their own manuals. CVS Caremark's 2026 Provider Manual sets a 6-year minimum for general prescription and financial records but requires 10 years for Medicare Part D records and third-party signature logs. OptumRx's provider manual sets a 5-year minimum generally and 10 years specifically for Medicare Part D claims. Neither PBM treats the shorter number as optional once a claim touches Part D.
State Rules Add a Second Layer
State pharmacy boards add their own schedule on top of the federal and PBM numbers, and the two do not always match. New Jersey requires audit trail records kept for not less than 5 years under N.J.A.C. 13:39-7.6, with the oldest four years retrievable within 2 weeks and the most recent year within 1 business day. Other states set shorter or different windows, and some cap how far back a PBM can reach. A pharmacy filling for several PBMs, including Prime Therapeutics, has to retain each claim for whichever requirement runs longest. For one PBM's own procedure, see Prime Therapeutics Audits: Findings, Deadlines, and Appeals.
Format Requirements Auditors Actually Check
Retention only matters if the record is usable. PBM manuals are specific about format: a scanned prescription must show both the front and back of the original hard copy, not just the face of the script. Signature logs must be in date order and tied to a specific prescription number, not reconstructed after the fact. Wholesaler and distributor invoices have to identify the drug name, NDC, quantity, and package size so the pharmacy can prove every unit dispensed came from an authorized source. A pharmacy that keeps the right documents but cannot produce them in this format is in the same position as one that never kept them. See Inventory Shortage Findings in PBM Audits: The Invoice Reconciliation Defense and Signature Log Findings in Pharmacy Audits and How to Rebut Them for both problems in detail.
The Risk of Purging Too Early
The trap is treating retention as one clock instead of several. A pharmacy that purges everything at year 5 or 6, because that is what a shorter state rule allows, will have already destroyed the Medicare Part D claims federal law required it to keep for 10 years, along with the invoices and signature logs needed to defend them. Once an audit notice or recoupment letter arrives, the normal schedule stops applying to the claims at issue; those records need to survive until the matter, including any audit appeal, is resolved. PBM auditors apply extrapolation to sample findings across the full lookback period, so one purged file can multiply into a larger demand, and a pattern of missing documentation is also the fact pattern PBMs cite when moving toward network termination.
A five-year purge policy that ignores Medicare Part D claims violates the federal 10-year retention rule and destroys the only evidence that could have defended the audit that has not happened yet.
Why Early Legal Counsel Is Critical
It is critical that pharmacies promptly retain experienced healthcare defense counsel upon receiving a PBM audit notice, recoupment letter, or any other inquiry that turns on claims documentation. Early legal intervention can protect the pharmacy's rights, ensure appropriate responses to document requests, avoid inadvertent admissions about what was or was not retained, preserve relevant defenses, and allow counsel to communicate with the auditor on the pharmacy's behalf. Delaying representation can affect the outcome of a matter, particularly when the underlying question is whether a record still exists.
How Health Law Alliance Can Help
Health Law Alliance represents pharmacies nationwide in PBM audits where documentation retention, not the underlying claim, decides the outcome. If your pharmacy has received an audit notice, or is unsure whether its retention schedule matches what Medicare Part D, its PBM contract, and its state board actually require, contact Health Law Alliance for a free, confidential consultation to review the matter.
