Dimension
503A Compounding Pharmacy
503B Outsourcing Facility
Regulatory framework
Section 503A of the FD&C Act. State board of pharmacy primary regulator; FDA secondary. Patient-specific prescriptions only.
Section 503B (Drug Quality and Security Act, 2013). FDA registration required; cGMP compliance. May compound without patient-specific prescriptions for office stock.
Primary liability theory
Druggist professional liability (pharmacist-as-professional). Bodily injury exposure tied to compounding error or sterility failure on a per-patient basis.
Products liability (drug manufacturer theory) plus druggist PL. Exposure is batch-level - a single sterility failure can affect hundreds of patients across many hospitals.
Products liability tower
$1M / $1M to $1M / $2M typical. Sponsors and PBM credentialers rarely demand more for patient-specific work.
$5M to $10M required by most hospital purchase contracts. FDA-registered facilities operating at scale often carry $10M.
Druggist professional liability
Primary coverage line. Limits sized to the volume of sterile and hazardous-drug compounding. $1M / $3M common.
Still required but secondary to products liability. Limits typically harmonized with products tower.
USP 797 / 800 compliance
Required for sterile and hazardous-drug compounding. State board enforces. Insurance carriers may exclude or limit coverage for facilities out of compliance.
Required and continuously inspected by FDA against cGMP standards (more stringent than USP 797 alone). Lapses can trigger insurance non-renewal.
Property coverage
Generic pharmacy property forms usually sufficient. Limits sized to the inventory and equipment in a single dispensary.
cGMP-aligned drug manufacturer property forms required. Validation losses, batch losses, and cleanroom contamination need manufacturer-classed terms. Generic pharmacy property is materially inadequate.
Recall coverage
Less common - patient-specific prescriptions mean recalls are individualized rather than batch-wide.
Critical. FDA-recall-extension wording on products forms is rarely sufficient at scale. Dedicated recall coverage with $1M+ limits is standard for active 503B operators.
Hospital purchase contract requirements
Generally not in scope - 503A pharmacies do not sell to hospitals as office stock.
Central to the business model. Hospital procurement and IDN credentialing schedules require named additional insured, primary/non-contributory, FDA-registration COI, 30-day notice, and $5M-$10M products at minimum.
PBM credentialing
Required for any 503A taking insurance reimbursement. Carrier rating A.M. Best A- VII or better is standard.
Less relevant - 503Bs sell to hospital systems, not retail patients, and most do not bill PBMs directly.
Cyber & HIPAA
PHI exposure on a per-patient basis. $1M-$3M cyber typical. HIPAA breach response required.
PHI exposure narrower (hospital purchaser data, not patient data), but cybersecurity expectations under FDA cGMP and Joint Commission are higher. $3M-$10M cyber typical.
GLP-1 specific issues
Most carriers have exited or restricted GLP-1 compounding for 503A operations. Druggist PL and products liability both affected.
Same firestorm - more acute because batch-level exposure compounds the carrier risk. Limited markets willing to underwrite GLP-1 503B compounding at scale.
Typical annual premium (Texas)
$8,000 to $35,000 for an established 503A in the $2M-$10M revenue range, depending on sterile/hazardous mix.
$75,000 to $400,000+ depending on revenue, product mix (sterile injectables, GLP-1, oncology raise the floor significantly), and hospital contract obligations.