.png)
The 340B Drug Pricing Program is often spoken about as a single compliance framework, but covered entities do not all operate under the same rules. The two largest categories, federal grantees and DSH and other qualifying hospital types, face different eligibility standards, audit exposures, and operational constraints.
This article explains how 340B federal grantees and 340B hospitals differ structurally, particularly in their patient definition, contract pharmacy models and audit exposure.
The HRSA patient definition is where grantees and hospitals diverge most significantly in day-to-day operations. Both must satisfy the core three-part test, established relationship, provider responsibility, and medical record documentation, but the scope of qualifying services differs substantially.
For federal grantees, patient eligibility is bounded by the scope of the federal grant. A patient qualifies for 340B-purchased drugs only when the services they receive fall within the grant’s approved scope of care. A Ryan White clinic, for example, can only extend 340B eligibility to patients receiving HIV-related services covered under their Part A, B, C, or D grant. A patient seen by the same provider for an unrelated condition, even at the same site, would not qualify unless that service falls within the grant scope. This constraint is frequently misunderstood and is a primary driver of improper 340B utilization findings in grantee audits.
This constraint is not unique to Ryan White clinics. Federally Qualified Health Centers (FQHCs) also operate within defined federal boundaries. Although their scope is broader and not tied to a single diagnosis, 340B eligibility is still limited to services and sites included in the HRSA-approved Scope of Project. Being an FQHC does not make every patient interaction automatically eligible, the project defines the boundary.
Hospital patient eligibility turns on whether the patient received a qualifying outpatient service at a registered outpatient department. Hospitals frequently operate “mixed-use” sites, areas that treat both inpatient and outpatient populations, such as observation units, infusion centers, or emergency departments, where 340B eligibility varies by encounter type. HRSA expects hospitals to maintain written policies governing how patient eligibility is determined in these settings. The absence of rigorous mixed-use policies is among the most cited findings in hospital audits.
When auditing a federal grantee, HRSA’s Office of Pharmacy Affairs (OPA) will first verify that the entity maintains an active, qualifying federal grant and remains in good standing with the relevant funding agency, HRSA, HHS, or otherwise. Auditors will then examine whether patients receiving 340B drugs were served within the approved scope of that grant. Claims will be traced back to clinical encounters and evaluated against the grant’s scope of project. Grantees should be prepared to produce current Notice of Award documentation and grant scope definitions alongside their patient eligibility records.
For DSH hospitals, auditors prioritize recertification of the DSH adjustment percentage, reviewing Medicare cost reports to confirm the entity maintained a qualifying adjustment throughout the prior program year. Auditors will also scrutinize purchasing records for evidence of prohibited GPO utilization (discussed below) and examine mixed-use site policies for adequacy and consistent implementation. The documentation burden in hospital audits tends to be higher due to the volume and complexity of outpatient encounters across multiple registered sites.
Both grantees and hospitals may utilize contract pharmacies to dispense 340B-purchased drugs on their behalf, subject to HRSA’s written agreement and OPAIS registration requirements. However, the operational pain points differ by entity type.
The 340B compliance obligations facing a Ryan White grantee and those facing a DSH hospital share a common statutory foundation but diverge significantly in practice. Treating them as equivalent, whether in internal audit design, staff training, or policy development, creates gaps that HRSA auditors are well-positioned to find.
Federal grantees should build their compliance infrastructure around grant scope management, patient eligibility traceability to grant-covered services, and contract pharmacy contingency planning. Hospitals should prioritize annual DSH recertification, Medicare cost report accuracy, mixed-use site policy rigor, and GPO procurement controls.
In both cases, the underlying standard is the same: covered entities must be able to demonstrate, through contemporaneous documentation, that every 340B-purchased drug reached a qualifying patient through a compliant process. The path to that demonstration looks very different depending on which side of the hospital-grantee line your organization falls on.
