Dispensing Medications and Labs at Cost in a DPC Practice (2027 Rules)

Can a DPC Practice Dispense Medications and Sell Labs at Cost?

Yes, in most states a direct primary care practice can dispense medications to its own patients and pass through wholesale lab prices, but the rules come from your state, not from DPC itself. Some states let physicians dispense non-controlled drugs with no permit, others require a registration with the medical or pharmacy board, and a few limit dispensing to a starter dose or to rural areas without a pharmacy. Starting in 2026, medications (other than vaccines) and labs not typically run in a primary care office also need to be sold separately from the membership if you want members to stay HSA eligible.

In-office dispensing and at-cost labs are among the most visible things a DPC practice offers. A patient leaves with antibiotics in hand, or gets a lipid panel for a fraction of what a hospital would bill, and the membership suddenly makes sense to them. This guide walks through the state rules, the federal rules for controlled substances, CLIA certificates for in-office testing, how wholesale lab pricing works, and how the new HSA rule changes the way you package all of it in 2027.

This is general information, not legal advice. Dispensing law changes often, so confirm your plan with your state medical board, your state board of pharmacy and a health care attorney.

Physician Dispensing Laws by State

There is no national physician dispensing law. Each state decides whether a prescriber can hand a patient a labeled bottle of medication, and the answer lives in the medical practice act, the pharmacy act or both. That is why it is worth calling both boards, since one board's website often says nothing about the other board's rules.

The DPC Startup Kit's dispensing guide, reviewed by a DPC physician in September 2026, groups states into three rough buckets. Some are commonly reported as needing no state registration for non-controlled drugs, some require a registration or notice, and some significantly restrict physician dispensing. It is a useful starting map, though it notes that only some entries have been confirmed against the statute.

Examples of how states handle physician dispensing

The table below includes only states where we read the statute itself in October 2026.

The Florida registration fee is set by each board, and the statute caps it at 100 dollars at registration and at each license renewal.

If your state is not in the table, start with the DPC Startup Kit list, then confirm with the boards. Our guide to direct primary care laws by state covers the separate question of whether your state treats a DPC membership as insurance.

What to do if your state restricts dispensing

A restrictive state does not end the conversation. Many practices in those states negotiate cash prices with a nearby independent pharmacy, send prescriptions to low-cost mail-order or discount pharmacies, or use a supplement dispensary for non-prescription products. Our Fullscript dispensary workflow covers the supplement side.

DEA Rules for Dispensing Controlled Substances

Federal law only adds requirements when controlled substances are involved. Ordinary non-controlled generics are governed by your state's labeling and recordkeeping rules, not by the DEA.

If you do dispense controlled substances, three federal rules matter most:

• One registration per location. 21 CFR 1301.12 requires a separate DEA registration for each principal place of business where controlled substances are stored or dispensed, so a second clinic site needs its own.
• A dispensing record for every fill. 21 CFR 1304.22(c) requires the name and address of the person, the date, the number of units or volume dispensed, and the name or initials of the person who dispensed it.
• Inventories. 21 CFR 1304.11 requires an initial inventory and a new one at least every two years, with an exact count for Schedule I and II drugs.

States can be stricter. Montana's statute, for example, generally bars practitioners from dispensing controlled substances unless they are practicing pharmacy, and Florida limits Schedule II and III dispensing. Many DPC practices simply keep controlled substances off the shelf and send those prescriptions to a pharmacy, which keeps the inventory and storage burden small.

Labeling and Recordkeeping for an In-Office Dispensary

Once you dispense, most states hold you to some version of the pharmacy rulebook. Florida's statute says a dispensing practitioner must comply with "all laws and rules applicable to pharmacists and pharmacies." Montana points practitioners to the Board of Pharmacy's labeling, storage, inspection and recordkeeping requirements. In practice that means each bottle carries a pharmacy-style label and each fill leaves a record you can produce on request.

Montana's statute also shows a detail that is easy to miss. If staff other than the practitioner hand the medication to the patient, the drug must be prepared and sealed with two forms of patient identification on the package, and the staff member must verify the patient's identity. It is a good habit even where the law does not require it.

Lot numbers and expiration dates matter too. When a manufacturer recalls a lot, you want to find every patient who received it in minutes, not days. The same tracking discipline applies to vaccines, which our guide to vaccine supply and inventory tracking walks through.

How DPC Wholesale Medications Work

DPC practices typically buy generics from a licensed wholesale distributor or repackager that sells to physician offices. The practice orders common acute and chronic medications (antibiotics, blood pressure drugs, statins, metformin and similar) in small unit-of-use packages, prices them close to cost, and dispenses them during the visit.

The pricing model is up to you within state law. Some practices charge exactly what they paid, some add a small handling fee per fill, and some add a modest markup to cover labels, shrinkage and staff time. Whatever you choose, write the price list down and apply it the same way to every patient, which matters for the HSA rule below.

How DPC Practices Get Wholesale Lab Pricing

At-cost labs work through a client-billed account. The practice opens an account with a reference lab such as Labcorp or Quest, or with a regional hospital or independent lab, and negotiates a cash price list. The lab bills the practice rather than the patient's insurance, and the practice passes the price through to the patient, usually with no markup or a small draw fee.

Prices depend on the lab, your region and your volume, so there is no single wholesale lab price list to quote. Ask every lab within courier range for its client fee schedule, compare the tests you order most (CMP, CBC, lipid panel, A1c, TSH, urinalysis), and ask about courier pickup times, specimen requirements and how results arrive in your EHR. Our Labcorp results workflow for DPC covers what happens after the draw.

A few things to settle before your first draw:

• Who draws the specimen, and whether your state requires a phlebotomy license.
• How specimens are stored and handed to the courier.
• Whether the patient pays at the visit or on a monthly statement.
• Who reviews each result and how the patient hears about it.

Do You Need a CLIA Waiver for a DPC Practice?

If you run any test on a human specimen in your office, even a rapid strep or a urine dipstick, you need a CLIA certificate. CLIA is the federal lab quality law that CMS runs, and the certificate type depends on the most complex test you perform.

CMS's CLIA certificate fee schedule lists the Certificate of Waiver at 248 dollars and the PPM certificate at 297 dollars, each billed every two years.

A waived lab has fewer rules than a full lab, but not none. Under 42 CFR 493.15, a lab with a Certificate of Waiver must follow the manufacturer's instructions for each test and allow CMS to inspect. You apply through your state survey agency, and most states use CMS Form 116. Logging quality control results and lot numbers is the part that slips most often in busy clinics, which our guide to point-of-care testing quality control logging covers.

The 2026 HSA Rule for DPC Medications and Labs

The One Big Beautiful Bill Act (Public Law 119-21) made qualifying DPC memberships compatible with HSAs starting January 1, 2026. The catch for dispensing practices is that the law excludes some services from "primary care" for this purpose, and IRS Notice 2026-5 explains how.

Notice 2026-5 Q-17 confirms that prescription drugs (other than vaccines) and lab services not typically administered in an ambulatory primary care setting are not primary care services. A membership that includes them is not a qualifying arrangement, and members lose the ability to contribute to their HSA. Q-12 provides the way through. A practice can sell separately billed services to members and non-members alike, outside the membership, and the membership can still qualify.

In practice that means:

• Keep the membership fee for primary care visits, messaging, in-office waived tests you typically run in primary care, and vaccines if you include them.
• Sell wholesale medications and send-out labs from a separate price list, outside the membership terms.
• Offer that price list to non-members on the same terms, and say so in your membership agreement.

For 2027, Rev. Proc. 2026-24 keeps the fee cap at 150 dollars a month for one person and 300 dollars a month for a membership covering more than one person.

Our DPC HSA rules for 2027 goes deeper on the cap, the excluded services and the open questions, including exactly which in-office labs count as "typically administered in an ambulatory primary care setting." Confirm your structure with a tax advisor.

DPC Dispensing Setup Checklist

Keeping Dispensing and Lab Work From Falling Through the Cracks

The legal setup is a one-time project. The daily work is what wears on a small team. A medication gets dispensed but the inventory count is not updated, a send-out lab comes back abnormal on a Friday afternoon, or a recalled lot needs a list of every patient who received it. Most of those misses happen because the EHR, the billing system and the lab portal each hold part of the story and nothing connects them.

Tabflows is a dedicated tech team that connects the tools your clinic already uses, like your EHR, billing and messaging, so the follow-ups, tasks and patient context live in one place. It is not an EHR or a pharmacy system. It makes sure a result gets reviewed and the patient hears back, and that a low-stock medication turns into a reorder task instead of a surprise.

If you are planning a new practice, our guide to starting a DPC practice in 2027 puts dispensing and labs in the context of the full launch, and the DPC Finder shows how other practices near you describe their medication and lab offerings.

This article summarizes the statutes, regulations and IRS guidance linked above as of October 29, 2026. It is general information, not legal or tax advice.