503B Pharmacy Growth Demands New Compliance Strategy

Clinician reviewing digital patient records connected to pharmacy data, illustrating compliance and safe management of compounded medications.
athenahealth%20logo_RGB_leaf
athenahealth
April 02, 2026
7 min read

How 503B pharmacies and custom formulations are creating new documentation challenges for independent practices

The resurgence of compounding pharmacies — the global market, valued at roughly $13.5 billion in 2024, is projected to surpass $19 billion by 20301 — is reshaping how independent practices deliver personalized care. Driven by patient demand for customized hormone therapy, GLP-1 weight loss alternatives during shortages, and innovative mental health treatments like ketamine, compounding has moved from a niche service to one of the fastest-growing segments in outpatient care.

That growth reflects a genuine clinical need. Compounded formulations give clinicians tools that standard medications can't always provide — precise dosing, alternative delivery mechanisms, and options for patients who can't tolerate commercially available drugs.

But this expansion comes with mounting regulatory scrutiny from both the FDA and state pharmacy boards, and a set of documentation and integration challenges that create real patient safety risks — particularly if independent practices don't have a dedicated compliance infrastructure. Connected data systems and intelligent interoperability aren't just nice-to-have features. They're essential tools for practices that want to prescribe or manage a patient's compounded drugs safely while staying compliant with an evolving regulatory framework.

The compounding pharmacy boom: Opportunity meets scrutiny

Several forces are converging to drive unprecedented growth in compounding pharmacy services. Bioidentical hormone therapy has become one of the most requested compounded treatments — driven largely by wellness culture and direct-to-consumer marketing — even as major medical organizations continue to raise questions about standardized dosing and long-term safety data. GLP-1 shortages created surging demand for compounded semaglutide and tirzepatide.  Concierge medicine and direct primary care models embrace customization as a core value proposition.

Regulatory agencies have taken notice. The FDA has intensified enforcement actions2, distinguishing between 503A pharmacies3 — which compound for patient-specific prescriptions — and 503B outsourcing facilities that operate at larger scale under stricter Current Good Manufacturing Practice (cGMP) standards. State boards of pharmacy are heightening oversight with new guidance and warning letters.4 Recent enforcement actions — including approximately 100 cease-and-desist letters sent to compounding pharmacies and telehealth providers in September 2025 alone5 — signal that the compliance landscape is shifting rapidly, and practices that relied on informal arrangements with compounding partners may find themselves exposed.

Independent practices are particularly vulnerable and often lack dedicated compliance staff to track regulatory changes across multiple jurisdictions. Limited resources mean they tend to rely on pharmacy partners without full visibility into compounding practices or quality controls. The documentation burden falls on already-stretched clinical teams who may not fully understand the distinctions between 503A and 503B pharmacies or their different compliance obligations.

The EHR integration challenge: Where compounded drugs fall through the cracks

The standardization problem starts with how medication data flows through healthcare IT systems. Standard EHR medication databases like First Databank and Medi-Span don't include custom compounded formulations.6 Compounded drugs lack National Drug Codes, which means they can't be tracked the same way as FDA-approved medications. Drug interaction checkers that flag risks for standard prescriptions can't evaluate non-standard formulations, leaving a critical safety gap.

Documentation gaps can further intensify the problem. Compounded prescriptions are often documented as free-text notes rather than structured medication entries. They're not always integrated into structured medication lists that clinical decision support tools can analyze. Because compounded formulations lack the standardized drug codes and identifiers that health IT systems use to communicate, they can fall outside the data infrastructure that modern EHRs are built around — making them a unique and largely unsolved interoperability problem. These challenges reflect the persistent barriers to healthcare interoperability — particularly around data standardization and workflow integration — that continue to frustrate clinicians more than 15 years after the HITECH Act set nationwide interoperability as a goal.7

The medication reconciliation challenge becomes acute when patients move between care settings. A patient receiving compounded hormones from a direct primary care practice visits an emergency room at a hospital using a different EHR system. The compounded medications often don't transfer via health information exchange networks. Dangerous information gaps can emerge at transitions of care, with no automated deduplication for custom formulations that might be documented differently across systems.

athenaOne® addresses this challenge through ChartSync, which automatically processes 94% of incoming medication information from external sources, deduplicating medication notifications and adding the information to a patient’s chart. 8 By leveraging athenaOne to identify and reconcile errors, clinicians spend less time checking duplicative lists and more time focused on patient care. This capability becomes especially critical for compounded medications that require extra vigilance.

Navigating the regulatory maze: FDA vs. state oversight

Understanding the distinction between 503A and 503B pharmacies matters for prescribing practices because compliance obligations differ significantly. Traditional 503A compounding operates under state pharmacy board oversight and requires patient-specific prescriptions based on documented medical necessity. Outsourcing facilities operating as 503B pharmacies must register with the FDA, follow current good manufacturing practices, and can produce larger batches without patient-specific prescriptions.

The patchwork of state regulations adds another layer of complexity that multi-state practices feel acutely. While federal law draws the 503A/503B line, each state pharmacy board also writes its own rules — varying consent and disclosure requirements, different standards for documenting medical necessity, and inconsistent adverse event reporting obligations. For a practice operating across even two or three states, compliance isn't a single protocol. It's a matrix that has to be actively managed.

That's where documentation becomes both the heaviest administrative burden and the strongest line of defense. Practices must maintain patient-specific medical necessity documentation explaining why FDA-approved alternatives aren't appropriate — not just as a regulatory checkbox, but as the evidentiary record that protects them in an audit or enforcement action. Informed consent for off-label compounded use, adverse event reporting, and record retention requirements all serve the same dual function: They protect patients, and they protect the practice. The burden is real, but so is the exposure for practices that treat these requirements as optional.

By leveraging athenaOne to identify and reconcile errors, clinicians spend less time checking duplicative lists and more time focused on patient care. This capability becomes especially critical for compounded medications that require extra vigilance.

Patient safety through better data: The interoperability solution

EHR platforms connected to pharmacies, hospitals, and health information exchange networks reduce compounding risks by providing real-time visibility across the care continuum. When medication information follows the patient seamlessly between care settings, clinicians are more likely to have the complete picture they need. Because compounded medications so often fall outside structured records, clinicians frequently depend on patients to self-report what they're taking. Reducing that reliance means fewer dangerous omissions.

athenahealth's medication tracking capabilities address compounding challenges at multiple levels. athenaOne's ChartSync feature automatically pulls medication data from pharmacies, hospitals, and external sources. It deduplicates information across sources and existing chart data, then surfaces consolidated medication lists directly in the clinical workflow — greatly reducing (or even in some cases, eliminating) manual reconciliation gaps that can lead to documentation gaps. 

athenaOne scans and categorizes incoming faxes from compounding pharmacies. The system then works to place documentation in the patient chart and extracts clinical information as discrete data elements that can be searched, trended, and reported for quality programs. This transforms unstructured fax data into actionable clinical information.

Smarter document processing reduces the burden on clinicians — but the most seamless data is the kind that never requires manual handling at all. Network-wide connectivity enables athenaOne practices to access a large network of pharmacies through standard e-prescribing infrastructure, minimizing the need for one-off integrations. External data flows seamlessly, ensuring compounded medication information reaches clinicians when and where they need it. As athenahealth implemented TEFCA, practices gained access to the latest nationwide health information exchange standard — updating how 85K+ clinicians connect through CommonWell without additional configuration.9

Chart Assistant provides AI-powered overviews across clinical documents and medication history, offering quick query-based access to relevant patient medical backgrounds, including compounded treatments, helping clinicians prepare for encounters with complete context.

Building compliance protocols that work

Patient education and informed consent create the foundation for safe compounding practices. Clinicians need to document medical necessity clearly, explaining why FDA-approved alternatives aren't appropriate for the individual patient. Patients should understand they're receiving a non-standard formulation — what that means, why it's being prescribed for them specifically, and what the alternatives are. That conversation, documented, is what transforms informed consent from a checkbox into a clinical safeguard.

Workflow integration is where good intentions either hold or fall apart. Structured documentation templates bring consistency to compounded prescriptions across the practice. Pharmacy partner vetting protocols ensure quality doesn't vary by who's filling the script. Medication reconciliation helps catch gaps before they reach the patient. And EHR alerts, used judiciously, keep compliance embedded in the workflow rather than outside of it.

The role of interoperability extends beyond data exchange. This ensures compounded medications are visible across care settings and protects patients during transitions. Maintaining accurate longitudinal medication records supports continuity of care. These capabilities also support value-based care quality reporting, as practices increasingly participate in programs that reward comprehensive care coordination.

Safe, personalized care requires connected data

The path forward requires recognizing that connected, interoperable systems are essential, not optional. Intelligent data integration reduces administrative burden while improving safety outcomes. athenahealth's platform demonstrates how interoperable, network-enabled health IT can make compliance a byproduct of good care rather than a separate burden.

For independent practices navigating the new compliance frontier, the message is clear: The tools exist to prescribe compounded medications safely and remain compliant with evolving regulations. Success requires choosing technology partners that understand both the clinical and regulatory complexity of compounding — and that build solutions making connected care the default rather than the exception.

Explore how accurate documentation and data integration reduce compounding risks. Learn more about athenahealth's interoperability solutions.

interoperability and EHRhealthcare regulationsathenahealth productspractice managementelectronic health recordregulatory compliancedata & interoperabilityclinical documentationhealthcare compliancereducing admin burden
  1. https://www.marketsandmarkets.com/PressReleases/compounding-pharmacy.asp
  2. https://www.mwe.com/insights/fda-publishes-proposed-rule-on-sections-503a-and-503b-compounding/
  3. https://www.govinfo.gov/content/pkg/PLAW-113publ54/pdf/PLAW-113publ54.pdf
  4. Multiple state boards of pharmacy have issued enforcement actions and disciplinary orders against compounding pharmacies, including California's Board of Pharmacy placing Empower Pharmacy on four-year probation (2023), and Massachusetts Board of Registration in Pharmacy issuing new guidance on 503A/503B compliance (April 2025).
  5. U.S. Food and Drug Administration. (September 9, 2025). "FDA and HHS Taking Action Against Misleading Direct-to-Consumer Pharmaceutical Advertisements." FDA issued approximately 100 cease-and-desist letters to compounding pharmacies, telehealth providers, and pharmaceutical companies regarding GLP-1 compounding and advertising.
  6. First Databank's MedKnowledge database covers FDA-approved prescription drugs, OTC medications, and medical supplies—custom compounded formulations fall outside its scope. Medi-Span operates similarly; medications entered outside its database are excluded from drug interaction screening. See: https://ehr.meditech.com/vendors/first-databank and https://www.axxess.com/help/agencycore/clinical/medi-span/
  7. https://www.athenahealth.com/resources/blog/interoperability-challenges-in-healthcare
  8. https://www.businesswire.com/news/home/20250814198797/en/athenahealth-is-Ushering-in-the-Era-of-AI-enabled-Intelligent-Interoperability-for-Physician-Practices-Nationwide
  9. https://www.businesswire.com/news/home/20250729545985/en/athenahealth-is-the-First-Healthcare-IT-Company-to-Implement-TEFCA-at-Scale-Leading-the-way-in-Nationwide-Interoperability