What Did Arkansas Attorney General Tim Griffin Actually File?
Arkansas Attorney General Tim Griffin filed suit against 22 defendants: 13 drug manufacturers, their related corporate entities, and data management firm Second Sight Solutions in Polk County Circuit Court. The complaint alleges the defendants engaged in deceptive business practices and violated Arkansas’ 2021 law requiring 340B-participating drugmakers to sell discounted drugs to contract pharmacies. Named defendants include Pfizer, Bristol Myers Squibb, AstraZeneca, and Eli Lilly.
Arkansas was the first state to pass a contract pharmacy access law of this kind, and several other states have since followed. This is the first case of a state attorney general using that law offensively against manufacturers, rather than defending it in court.
Why Is This Lawsuit Happening Now?
This lawsuit follows the resolution of a multi-year legal fight over whether states even have the authority to pass these laws. PhRMA, the industry’s trade group, challenged Arkansas’ 2021 law in federal court, arguing federal 340B rules preempt state contract pharmacy protections. That litigation ended in 2024 when the U.S. Supreme Court declined to hear PhRMA’s appeal, leaving in place a lower court ruling that federal law does not preempt Arkansas’ statute.
With the preemption question settled at the appellate level, Griffin’s office is now the first to test enforcement. According to Griffin, manufacturers responded to the 2021 law not by complying in full, but by building replacement restrictions rules he described as “so burdensome and so prohibitive” that the 340B program can’t function as intended for the pharmacies it’s supposed to reach.
What Specific Conduct Is Arkansas Alleging?
The complaint alleges two categories of conduct:
- Illegal limits on contract pharmacy relationships restricting how many independent pharmacies a covered entity can use to dispense 340B drugs on its behalf, a practice the 2010 program expansion was designed to permit.
- Data reporting as a precondition for program access requiring healthcare organizations to submit claims data before manufacturers will honor 340B pricing at contract pharmacies.
This is why a data management firm, Second Sight Solutions, is named alongside the manufacturers. The state is treating data-collection requirements not as a neutral compliance tool, but as a mechanism manufacturers allegedly used to functionally limit program access a distinction worth watching closely, since it extends legal exposure beyond drugmakers to the vendors and platforms that operationalize these data demands.
What Is Arkansas Actually Asking the Court For?
The suit asks the court to find the defendants liable under the Arkansas Deceptive Trade Practices Act and to fine them $10,000 per offense. Because the statute allows per-offense penalties rather than a single lump-sum fine, Griffin estimates that if the state’s claims are upheld, aggregate exposure for the defendants could exceed $1 billion.
Notably, Arkansas is not suing under a 340B-specific enforcement mechanism; it’s using a general consumer protection statute. That approach sidesteps arguments about HRSA’s limited 340B enforcement authority. Instead, it treats manufacturer restrictions as a deceptive trade practice under state law, the same legal theory already validated by the Supreme Court’s refusal to hear the preemption appeal.
Is This Related to the Existing Insulin Pricing Litigation in Arkansas?
Partially. Three of the 22 defendants, Eli Lilly, Sanofi, and Novo Nordisk, were also named in a 2022 lawsuit filed by then-Attorney General Leslie Rutledge, which accused the three of conspiring with the largest pharmacy benefit managers to inflate insulin prices. That case, filed in Pulaski County Circuit Court, was folded last year into multi-state litigation covering 444 separate insulin-pricing lawsuits.
The two cases allege different conduct under different theories. Still, their overlap signals a broader pattern: Arkansas has been building a sustained enforcement posture against drug manufacturer and PBM practices across multiple 340B and pricing-related fronts, including a first-of-its-kind law banning PBMs from holding pharmacy permits, which a federal judge has since temporarily blocked.
What Does This Mean for 340B Covered Entities Outside Arkansas?
Three things are worth tracking regardless of where your organization operates:
- State enforcement is now a live category of 340B risk, not just a compliance obligation defined by HRSA. Arkansas’ law was the first of its kind, and other states including Colorado, Hawaii, and Illinois have advanced or enacted similar contract pharmacy access protections. If Arkansas’ enforcement theory succeeds, other state AGs have a tested legal template to follow.
- Data reporting demands are now under direct legal scrutiny, not just operational friction. Covered entities that have been asked to submit claims data as a condition of contract pharmacy access should treat that history as documentation worth preserving, since it may become directly relevant to how this litigation and any that follows it in other states plays out.
- This does not create immediate relief. Litigation timelines are long, and manufacturers are likely to contest both the underlying facts and the applicability of the Deceptive Trade Practices Act. Covered entities should not assume restrictions will lift before this case resolves.
What Should Covered Entities Do While This Case Plays Out?
Nothing about a covered entity’s own compliance obligations changes because of this lawsuit. HRSA’s patient definition, audit-readiness expectations, and documentation standards remain exactly what they were. What changes is the value of having a clean, defensible record of every manufacturer restriction your organization has encountered: denied contract pharmacy relationships, data submission demands, and the dates and terms attached to each. That record is what turns a general grievance into evidence, and it’s the same audit-ready discipline that separates 340B programs that can defend their decisions from those that can’t.
Frequently Asked Questions (FAQ)
What is the Arkansas 340B contract pharmacy law that this lawsuit is based on?
It’s a 2021 Arkansas law, the first of its kind nationally, requiring drug manufacturers participating in Medicaid to sell 340B-discounted drugs to contract pharmacies, not just a covered entity’s own in-house pharmacy.
Did the Supreme Court rule that Arkansas’ law is valid?
The Supreme Court did not rule on the merits. In 2024, it declined to hear PhRMA’s appeal of a lower court decision, which means that the lower court’s ruling that federal law does not preempt Arkansas’ statute stands as the current legal outcome.
Who are the defendants in the Arkansas 340B lawsuit?
Twenty-two defendants total: 13 drug manufacturers and their related corporate entities, plus data management firm Second Sight Solutions. Named manufacturers include Pfizer, Bristol Myers Squibb, AstraZeneca, and Eli Lilly.
What law is Arkansas suing under?
The Arkansas Deceptive Trade Practices Act, a general consumer protection statute, rather than a 340B-specific enforcement mechanism. The state is asking for $10,000 per offense, which it estimates could total more than $1 billion in aggregate.
Does this lawsuit affect 340B covered entities outside Arkansas?
Not directly or immediately, but it establishes a legal template other state attorneys general could use, particularly in states with similar contract pharmacy access laws already in place or advancing, such as Colorado, Hawaii, and Illinois.