The wholesaler self-assessment, Form 17M-26: what the five sections ask and what 16 CCR 1780 actually requires.
"I just took over as DRIC. The self-assessment isn't due until next July, right?"
A designated representative-in-charge asked me that a few weeks into a new role. Most people in wholesale know the self-assessment as an odd-year chore due July 1, and the next one is July 1, 2027.
The uncomfortable answer is that the July deadline was not the one that applied to them. Changing the DRIC starts its own 30-day clock, and the new DRIC owns it. Here is how that works, what the current form asks, and the minimum standards in Title 16 that most of the form is built on.
Who signs, and when the clock starts
Business and Professions Code section 4102 sets the self-assessment schedule for every facility the Board licenses. Under 4102(a)(1), the process is completed "by July 1 of every odd-numbered year."
For wholesalers and third-party logistics providers, 4102(d)(6) adds three more triggers. The Wholesaler/Third-Party Logistics Provider Self-Assessment form "shall be completed within 30 days" of any of these:
A new license is issued.
There is a change of designated representative-in-charge or responsible manager, and they become the new DRIC or responsible manager.
There is a change in the location to a new address.
The Board's regulation says the same thing and assigns the responsibility. 16 CCR 1784, as printed in the Board's 2026 Lawbook, repeats the three triggers in subdivision (b). Subdivision (b)(2) is the line I point new DRICs to: "The new designated representative-in-charge of a wholesaler or responsible manager of a third-party logistics provider is responsible for compliance with this subdivision."
So the person who inherits the facility inherits the deadline. The prior DRIC's assessment from last year does not cover them.
Do not copy last year's form
Here is the second trap. When a new DRIC finds a completed assessment in the binder, the temptation is to update the names and dates and sign.
The form itself closes that door. The instructions on page 2 of the current Wholesaler and Third-Party Logistics Provider Self-Assessment, Form 17M-26, say: "A new self-assessment form must be filled out each time the self-assessment process is required to be completed; do not use or copy from a previous self-assessment form."
The copy on the Board's site today carries the footer "Approved: 4/30/2026." An older version in your binder may not match what the Board now asks.
One wrinkle: subdivision (c) of 1784, as printed in the 2026 Lawbook (Rev. 7/2026), still incorporates "Form 17M-26 (Rev. 12/21)" by reference. The regulation text lags the form posted on the Board's website. I am not going to tell you how the Board reconciles that; I have not confirmed it. My practical advice is to download the current form from the Board each time and keep a note of the version you used.
What signing actually means
The last page of 17M-26 is where the weight sits.
The DRIC or responsible manager certifies that they completed the assessment "to the best of my professional ability," fills in the date by which any deficiency "will be corrected," acknowledges that "all responses are subject to verification by the Board of Pharmacy" and that the assessment "will be readily available for review during any inspection," and states "under penalty of perjury" that the information is true and correct.
Then the facility owner or an authorized officer signs an acknowledgement that "failure to correct any deficiency identified in this self-assessment could result in action by the California State Board of Pharmacy." That tracks BPC 4102(c)(1). The regulation goes further: 16 CCR 1784(c)(7) has the owner, partner or corporate officer certify, under penalty of perjury, an understanding that failure to correct "could result in the revocation of the license issued by the board."
A few housekeeping rules come with it:
Every page is initialed. Each page of the form has a "DRIC/RM Initials" line, and 1784(c)(5) requires it.
The form is completed "in its entirety" and kept on the licensed premises for three years, with the signed original "readily available for review during any inspection" (1784(d)).
Under 1784(e), the wholesaler or 3PL is jointly responsible with the DRIC or responsible manager for compliance with the section. This is not only the DRIC's problem.
The five sections of the current form
The 4/30/2026 form runs 17 pages. After the facility information and a roster of licensed staff, the questions fall into five sections:
Facility Requirements/Operation Standards/Security
Drug and Device Inventory
Designated Representative-In-Charge, Responsible Manager, Ownership Responsibilities
Record Keeping
Controlled Substances
Each item has a reference column and Yes, No and N/A boxes. The instructions say N/A is only for a requirement that "clearly and objectively does not apply."
16 CCR 1780 is the spine
If you read one regulation before you sit down with this form, read 16 CCR 1780, "Minimum Standards for Wholesalers and Third-Party Logistics Providers." It is cited more often than anything else on the form, in all five sections.
What 1780 requires, in plain terms:
Storage and security. Dangerous drugs are stored "in a secured and lockable area" (1780(a)). Entry to areas where prescription drugs are held is limited to authorized personnel (1780(c)).
Premises. Clean and orderly, well ventilated, "free from rodents and insects," adequately lighted, plumbing in good repair (1780(b)).
Temperature and humidity. Under 1780(b), "Temperature and humidity monitoring shall be conducted to assure compliance with the standards set forth in the latest edition of the United States Pharmacopeia." Note the word humidity. I see temperature logs far more often than humidity records.
Alarm, security system, lighting. An alarm "to detect entry after hours," a security system that protects against theft and diversion, including, when appropriate, diversion "facilitated or hidden by tampering with computers or electronic records," and a well-lighted outside perimeter (1780(c)(1) to (3)).
Quarantine. Outdated, damaged, deteriorated, misbranded or adulterated drugs, and anything whose sealed containers have been opened or used, go to a quarantine area "physically separated from other drugs" until destroyed or returned (1780(e)(1) and (2)). A questionable return is destroyed or returned unless testing shows it meets USP standards (1780(e)(3)).
Written policies. Under 1780(f)(1), written policies and procedures for "the receipt, security, storage, inventory and distribution of prescription drugs," including identifying, recording and reporting losses or thefts, correcting inventory errors, and keeping records that document proper storage. Those records are kept three years after disposition of the drugs (1780(f)(2)).
People. Lists of officers, directors, managers and others in charge of drug distribution, storage and handling, "including a description of their duties and a summary of their qualifications" (1780(f)(3)), and "adequate training and experience" for all personnel (1780(f)(4)).
Form items 1.1 through 1.4, 1.6, 2.1, 2.9, 3.2, 3.8 and 4.5 map almost word for word to those subdivisions.
The requirement the form does not ask about on its own
This is the part I would want a new DRIC to hear.
Subdivision (d) of 1780 says: "All materials must be examined upon receipt and before shipment." Under (d)(1), each outside shipping container is visually examined on receipt "for identity and to prevent the acceptance of contaminated prescription drugs." Under (d)(2), each outgoing shipment "shall be carefully inspected" for product identity and to make sure nothing damaged in storage or held under improper conditions goes out the door.
I could not find a 17M-26 item that asks about receiving and shipping inspection as its own question. The form does not need to. Its notes say it "is not an all-inclusive compilation of all laws and regulations," and that the DRIC is responsible for compliance "regardless of whether such laws or regulations are referenced on this self-assessment." BPC 4160(d) says the same in statute: the DRIC "shall be responsible for the wholesaler's compliance with state and federal laws governing wholesalers."
A clean form is not a clean facility, and the self-assessment will not tell you what your receiving dock skips.
The items that tend to catch people
A few lines deserve a slower read than the rest.
1.5, someone qualified on site. The form asks whether a pharmacist or a designated representative (or a DR-3PL, for a 3PL) "is present and in control of the licensed premises during the conduct of business." BPC 4160(c)(1) requires at least one designated representative present "at all times during which a place of business is open for business," and a separate license for each place of business.
2.10, DSCSA. One line: "The facility complies with applicable provisions of the Drug Supply Chain Security Act (DSCSA)," citing 21 USC 360eee-1. One checkbox, a large body of federal law behind it.
3.3, ownership changes. The form asks whether written notice goes to the Board within 30 days of a transfer of 10 percent or more of the beneficial interest to someone who did not hold one when the license issued, or a transfer of management or control. It cites BPC 4201 and 16 CCR 1709.
3.5 and 3.6, DRIC turnover. The facility notifies the Board in writing within 30 days of the date a DRIC or responsible manager ceases to act, and notifies the Board of a proposed new DRIC within 30 days of that same date. Put these next to the 30-day self-assessment clock in 4102(d)(6) and a change of DRIC sets off several 30-day obligations at once.
5.2, controlled substance inventory. "The facility completes an inventory of all controlled substances every two years," citing 16 CCR 1718, 16 CCR 1780 and 21 CFR 1304.11.
5.11, suspicious orders. "Suspicious orders are reported to the Board and the DEA Suspicious Orders Report System (SORS)."
For items 3.3, 3.5, 3.6, 5.2 and 5.11 I am quoting the form's own wording. I did not reopen BPC 4201, 4305.5, 4169.1 or the federal sections for this post, so read the cited law before you rely on my summary of it.
"No" is allowed. A blank or a hopeful "Yes" is the problem.
The form expects some answers to be No. BPC 4102(b) says that "for each 'no' response, the facility shall undertake a written corrective action or action plan to come into compliance with the law." Under 1784(c)(4), each No gets a corrective action or action plan, and under 1784(f), deficiencies "shall be corrected as specified in the certification," meaning by the date the DRIC wrote on the last page.
I would rather see three honest Nos with real plans and real dates than a form full of Yeses that the logs do not support.
How I work through it with a DRIC
When I sit down with a new DRIC on a 17M-26, the process is not complicated:
Start from the current form. Download it from the Board, confirm the approval date, and never start from last year's copy.
Open the record behind every Yes. The temperature and humidity logs, the alarm service records, the quarantine area, the written policies, the personnel list with duties and qualifications, the training records, the most recent controlled substance inventory.
Read 1780 alongside the form. Especially subdivision (d), since receiving and shipping inspection does not have a line of its own.
Calendar every 30-day clock together. A change of DRIC is a self-assessment deadline and two Board notices, all inside the same window.
If you want an independent pass through the form before you sign it, that is part of our wholesaler and pharmacy licensing work.
And if you just became DRIC and are not sure where your 30 days stand, tell me the date you took over and I will help you sort out what is due. Reach out if you have any questions or concerns.
Sources
California State Board of Pharmacy, Wholesaler and Third-Party Logistics Provider Self-Assessment, Form 17M-26 (Approved: 4/30/2026), pages 1 to 17, including the instructions, Sections 1 to 5, and the DRIC/RM certification and owner acknowledgement.
Business and Professions Code section 4102 (facility self-assessment; subdivisions (a), (b), (c) and (d)(6)).
Business and Professions Code section 4160 (wholesaler and 3PL license; subdivisions (c)(1) and (d)).
California Code of Regulations, title 16, sections 1780 (minimum standards for wholesalers and third-party logistics providers) and 1784 (self-assessment of a wholesaler or 3PL), as published in the Board's 2026 Pharmacy Lawbook (Rev. 7/2026).
General information from a consultant pharmacist, not legal advice. Statutes and forms change; everything above was checked against the official source on the date of publication.
Comments