1311.125—Requirements for establishing logical access control—Individual practitioner.

(a) Description. Nonfat dry milk is the product obtained by removal of water only from pasteurized skim milk. It contains not more than 5 percent by weight of moisture, and not more than 1 1/2 percent by weight of milkfat unless otherwise indicated.
(b) Optional ingredients. Safe and suitable characterizing flavoring ingredients (with or without coloring and nutritive carbohydrate sweetener) as follows:
(1) Fruit and fruit juice, including concentrated fruit and fruit juice.
(2) Natural and artificial food flavorings.
(c) Methods of analysis. The following referenced methods of analysis are from “Official Methods of Analysis of the Association of Official Analytical Chemists,” 13th Ed. (1980), which is incorporated by reference. Copies may be obtained from the AOAC INTERNATIONAL, 481 North Frederick Ave., suite 500, Gaithersburg, MD 20877, or may be examined at the National Archives and Records Administration (NARA). For information on the availability of this material at NARA, call 202-741-6030, or go to: http://www.archives.gov/federal_register/code_of_federal_regulations/ibr_locations.html.
(1) Milkfat content—“Fat in Dried Milk—Official Final Action,” sections 16.199-16.200.
(2) Moisture content—“Moisture—Official Final Action,” section 16.192.
(d) Nomenclature. The name of the food is “Nonfat dry milk”. If the fat content is over 1 1/2 percent by weight, the name of the food on the principal display panel or panels shall be accompanied by the statement “Contains _% milkfat”, the blank to be filled in with the percentage to the nearest one-tenth of 1 percent of fat contained, within limits of good manufacturing practice. The name of the food shall include a declaration of the presence of any characterizing flavoring, as specified in § 101.22 of this chapter.
(e) Label declaration. Each of the ingredients used in the food shall be declared on the label as required by the applicable sections of parts 101 and 130 of this chapter.

Code of Federal Regulations

[42 FR 14360, Mar. 15, 1977, as amended at 43 FR 19836, May 9, 1978; 47 FR 11823, Mar. 19, 1982; 49 FR 10091, Mar. 19, 1984; 54 FR 24892, June 12, 1989; 58 FR 2890, Jan. 6, 1993]
(a) At each registered location where one or more individual practitioners wish to use an electronic prescription application meeting the requirements of this subpart to issue controlled substance prescriptions, the registrant(s) must designate at least two individuals to manage access control to the application. At least one of the designated individuals must be a registrant who is authorized to issue controlled substance prescriptions and who has obtained a two-factor authentication credential as provided in § 1311.105.
(b) At least one of the individuals designated under paragraph (a) of this section must verify that the DEA registration and State authorization(s) to practice and, where applicable, State authorization(s) to dispense controlled substances of each registrant being granted permission to sign electronic prescriptions for controlled substances are current and in good standing.
(c) After one individual designated under paragraph (a) of this section enters data that grants permission for individual practitioners to have access to the prescription functions that indicate readiness for signature and signing or revokes such authorization, a second individual designated under paragraph (a) of this section must use his two-factor authentication credential to satisfy the logical access controls. The second individual must be a DEA registrant.
(d) A registrant's permission to indicate that controlled substances prescriptions are ready to be signed and to sign controlled substance prescriptions must be revoked whenever any of the following occurs, on the date the occurrence is discovered:
(1) A hard token or any other authentication factor required by the two-factor authentication protocol is lost, stolen, or compromised. Such access must be terminated immediately upon receiving notification from the individual practitioner.
(2) The individual practitioner's DEA registration expires, unless the registration has been renewed.
(3) The individual practitioner's DEA registration is terminated, revoked, or suspended.
(4) The individual practitioner is no longer authorized to use the electronic prescription application (e.g., when the individual practitioner leaves the practice).