A pharmacy that cannot produce a record during a PBM audit does not get a pass on that claim. A system migration, a flood, a fire, a ransomware event, or a change of ownership can each destroy the file an audit requests, and the audit proceeds anyway. OptumRx, CVS Caremark, and Express Scripts treat an undocumented claim the same way regardless of why the record is gone: subject to full recoupment. The response filed in the days after finding the gap, not the explanation for the gap itself, decides whether that recoupment holds.
What PBM Network Agreements Require
Every PBM network agreement obligates a pharmacy to produce the record behind a paid claim on demand. The provider manual layered onto that agreement typically lists the prescription itself, the signature log confirming pickup or delivery, any prior authorization, the wholesaler invoice tying the fill to purchased inventory, and the prescriber's chart note supporting medical necessity. State pharmacy boards set an independent floor, commonly two to ten years of retention depending on the state, and federal rule requires two years specifically for controlled-substance records. A pharmacy's retention practice must satisfy whichever period is longer, because the audit lookback does not shorten to match a gap in the file.
A Documentation Gap Defaults to a Full Recoupment
When a pharmacy cannot produce a record an audit calls for, the auditor does not weigh the gap against the pharmacy's history. The claim is treated as unsupported and recouped at the full paid amount, not the disputed margin, whether the underlying dispensing was accurate or not. Partial Fills and Audit Discrepancies covers the same default applied to a narrower gap. Enough findings in one sample can be extrapolated across the full lookback period, and a pattern of undocumented claims read as a compliance failure can itself become grounds for network termination.
Documenting the Cause, Then Reconstructing What Remains
The first move after discovering a gap is not to search harder for the record. It is to fix the cause and its date in writing: the migration cutover date and the vendor's own log, the fire department report or insurance claim for a flood or fire, the ransomware incident report and the restoration date, or the closing date of an ownership change and what records did or did not transfer. That record of cause becomes the pharmacy's own exhibit if the finding is later appealed.
Reconstruction follows the order the PBM's audit team checks first. The dispensing system's own audit trail often survives a hardware loss even when a printed hard copy does not. The wholesaler can usually produce its own purchase and shipment history independent of the pharmacy's system, corroborating inventory even when the invoice file is gone. The prescriber's chart, requested directly from the prescriber's office, frequently closes the specific gap an auditor is testing.
Characterizing the Gap in the Response
A short file with no explanation reads to an auditor as a pharmacy with something to hide. The response should state plainly which records are missing, why, and what substitute evidence stands in their place, rather than submitting a partial production and hoping the gap goes unnoticed. That framing decision often separates a documentation gap the auditor accepts from one that becomes a full recoupment.
If a recoupment demand issues anyway, the audit appeal runs on a contractual clock, a Level 1 review followed by a Level 2 review, with deadlines set by the network agreement and provider manual, not by courtesy. Missing that deadline forfeits the right to challenge the finding no matter how strong the reconstruction evidence is. Where the contract routes an unresolved dispute to arbitration rather than litigation, PBM Arbitration Clauses: Where Your Dispute Actually Goes covers where that dispute lands next.
A documentation gap caused by a flood, a migration, or a ransomware event is real. Left unexplained in the audit response, it reads no differently than a claim that was never valid at all.
Why Early Legal Counsel Is Critical
It is critical that pharmacies promptly retain experienced healthcare defense counsel upon receiving a PBM audit notice, particularly one that lands after a migration, a disaster, or an ownership change has already compromised the file. Early legal intervention can protect the pharmacy's rights, shape how a documentation gap is characterized before the response is filed, avoid inadvertent admissions in the reconstruction evidence submitted, and let counsel communicate with the audit team on the pharmacy's behalf. Delaying representation can turn a defensible gap into an uncontested recoupment.
How Health Law Alliance Can Help
Health Law Alliance has handled 5,000+ matters across PBM audit defense and healthcare regulatory work over 25+ years, including audits complicated by missing or destroyed pharmacy records. If your pharmacy has received an audit notice and cannot produce part of the requested file, contact Health Law Alliance's PBM audit defense attorneys for a free, confidential consultation before the response deadline runs.
