Pharmaceutical Fax Compliance Guidance (Permission, EBR, and Content)

Important: This article is operational and product guidance, not legal advice. TCPA / Junk Fax rules and FDA promotional requirements are fact-specific. Your Legal, Compliance, and Medical Review (MLR) teams must approve any fax program and each piece before send. Mobile Locker does not practice law and does not certify that a given fax is compliant.

This article helps pharmaceutical and life-sciences administrators design a fax program in Mobile Locker: who may be faxed (permission or established business relationship), what evidence your organization should maintain, how cover-page unsubscribe relates to page-one opt-out in your PDF, and how to use fax history and exports for compliance review. It also covers considerations when faxing materials for products with an FDA boxed warning (“black box”) — a secondary topic; permission and list hygiene are usually the harder operational constraints.

Who should read this

• Administrators with Can edit faxes who configure team fax access and review history
• Compliance, Legal, and MLR stakeholders evaluating or auditing an HCP fax program
• Commercial or medical affairs leaders launching fax as a channel for approved promotional materials

For step-by-step product instructions, see the other articles in Manage Faxes. This article focuses on program design and responsibility.

Two separate regulatory lenses

Faxing a branded piece to an HCP office implicates two different regimes. Mixing them causes confusion.

Most pharmaceutical teams find that list permission, EBR evidence, and page-one opt-out in the PDF require more upfront program design than product configuration in Mobile Locker. Boxed-warning products add content requirements (see below) but do not, by themselves, disable faxing in Mobile Locker.

Permission and EBR: your program design

Before anyone on your team can fax a contact, Mobile Locker requires a permission basis on that contact. This creates an audit trail of who affirmed what and when. Mobile Locker does not independently verify consent or business relationships — your organization owns the underlying truth and evidence.

What users affirm in the product

When creating or editing a fax contact, the user selects:

1. Permission basis — either:
   • Prior express permission — the recipient (or their office) agreed to receive fax advertisements at this number (for example on a form, business card, email, or call); or
   • Established business relationship (EBR) — there is an ongoing business relationship that your Legal team accepts as supporting fax under Junk Fax rules.
2. How the fax number was obtained — required only when the basis is EBR (provided by the recipient, from the recipient’s directory or website, or another verified source).
3. Optional notes — a short pointer to your evidence (for example, “Sample request card, ASCO 2025” or “CRM inquiry 2025-03-12”). Mobile Locker is not a document repository.

See Permission and Established Business Relationship (EBR) for Fax Contacts in this category for product behavior, send blocking, and snapshots at send time.

Decisions your Legal / Compliance team should make

• Which basis types reps may use — prior express permission only, EBR only, or both under defined rules
• What evidence you expect reps to maintain outside Mobile Locker (CRM notes, business cards, permission forms, inquiry logs)
• Whether existing contacts must be updated with attestation before the next send
• Whether optional notes are sufficient or you require additional fields or processes in CRM
• Who may access team-wide fax history and CSV exports, and where exported files are stored under your records policy

Send controls Mobile Locker enforces

Each fax message stores a copy of permission fields as they were at send time. Later contact edits do not rewrite history. Use message detail or CSV export when Legal asks “what was on file when we sent this?”

Contacts and sends from before permission tracking may show Permission not recorded or Permission not recorded at send time. That wording is neutral operational history — not a legal conclusion. Mobile Locker does not backfill attestation onto old sends.

What the in-product affirmation is — and is not

It is: a contemporaneous user declaration and durable audit trail tied to the contact and each send.

It is not: legal advice, proof that Junk Fax or FDA rules were met, automatic EBR detection from CRM, or a substitute for underlying evidence your Legal team requires.

The sender bears the burden of proof if permission or EBR is challenged. Ordinary-course records (cards, forms, CRM notes) matter. Mobile Locker’s affirmation supports your program; it does not replace your records.

Opt-out: cover page vs page one of the PDF

Every Mobile Locker fax includes a cover page with a Message ID and a web unsubscribe path: https://app.mobilelocker.com/fax/unsubscribe. Recipients enter the code printed on the cover page (format ABCD-1234 ) without logging in. Mobile Locker honors opt-outs and blocks future sends to that number.

For many unsolicited advertisement faxes, Junk Fax rules also require a compliant opt-out notice on the first page of the advertisement itself — the promotional PDF you transmit — not only on the transmission cover sheet. FCC guidance treats the cover page as an additional layer, not a substitute for the statutory notice on page 1 of the ad.

Elements your Legal team typically expects in the page-one notice (high level — exact wording is for your counsel) include:

• A clear statement that the recipient may request not to receive further unsolicited ad faxes
• A statement that failure to honor an opt-out within 30 days is unlawful
• A cost-free opt-out mechanism available 24/7 (toll-free number, fax number, website, or email as Legal approves)
• Domestic phone and fax contact numbers where the rules require both
• Clear and conspicuous placement on the first page of the advertisement

If your organization treats a fax as fully solicited (prior express permission only), Legal may analyze notice requirements differently — still design pieces with a strong opt-out where practical.

See Manage Fax Unsubscribe and Resubscribe in this category and Fax Cover Page and Unsubscribe in the Users collection for product behavior.

What Mobile Locker provides vs what your organization owns

See View Fax Message History and Export to CSV in this category for filtering by permission-at-send and export limits (10,000 rows per download).

Recommended launch checklist (Legal / MLR / Compliance)

Before launching or expanding HCP faxing, work through:

1. Permission / EBR program — Basis types reps may use, expected evidence, and whether existing contacts must be updated before the next send.
2. TCPA / Junk Fax — Page-one opt-out on the advertisement PDF; permission or EBR policy matches how numbers are sourced. Review FCC FAQs about Junk Faxes and 47 CFR §64.1200 with counsel.
3. Sample approved fax kit — Walk one MLR-approved PDF end-to-end: cover page + page 1 of the ad + typical page count and file size.
4. Public unsubscribe page — Preview app.mobilelocker.com/fax/unsubscribe (recipients do not need a login).
5. Reporting and exports — Who may access team fax history and CSV exports; where files are stored.
6. User training — Reps complete attestation when creating contacts, not at the last second before send.
7. Page quota — Size team fax limits to expected page counts (cover page + PDF pages). See Enable Files for Faxing in this category.

Auditing and exports

Administrators with Can edit faxes can:

• Filter team fax history by date, delivery status, sender, and permission at send
• Open message detail including permission snapshot for that send
• Export filtered results to CSV for offline review (delivery fields plus permission-at-send columns)

Exports are operational records from Mobile Locker — not a legal opinion. They complement, but do not replace, evidence stored in CRM or document systems.

Products with boxed warnings (“black box”)

This section is secondary guidance for teams faxing promotional materials for products whose FDA-approved labeling includes a boxed warning. Permission, EBR, and page-one opt-out remain the primary operational focus for most programs.

A boxed warning does not, by itself, prohibit faxing promotional materials to HCPs. FDA rules make boxed-warning products harder to promote correctly; they do not ban HCP-directed promotional faxes as a channel.

What changes for boxed-warning products

• No reminder-style ads. Reminder advertisements (name-only pieces without indication or risk) are not permitted when labeling contains a boxed warning. Fax PDFs should generally be full promotional pieces — on-label claims with adequate risk information, Important Safety Information, and brief summary or prescribing information as MLR requires for the medium — not name-only “reminder” faxes.
• Fair balance and prominence. Communications must be truthful, not misleading, and present fair balance between benefits and risks. Boxed warnings should receive appropriate emphasis; burying the box fails fair balance even if the text appears somewhere in the PDF.
• MLR owns the PDF. Mobile Locker transmits the file you select. Fair balance, boxed warning placement, and ISI are content decisions for your MLR — not configuration in Mobile Locker.

What “good” often looks like in an HCP fax PDF

What not to assume

• That cover-page unsubscribe alone satisfies all Junk Fax opt-out requirements
• That Mobile Locker verifies EBR or consent (users affirm; your organization owns evidence)
• That boxed-warning products cannot be faxed at all
• That Mobile Locker certifies FDA compliance of your PDF

Further reading (starting points for your counsel)

These links are starting points for your Legal and MLR teams — not a complete compliance checklist.

FDA — promotional content

• FDA — Office of Prescription Drug Promotion (OPDP)
• FDA — Incorrect Reminder Ad (educational example)
• 21 CFR §202.1 — Prescription drug advertising

TCPA / Junk Fax

• FCC — FAQs about Junk Faxes
• 47 CFR §64.1200 — Fax advertisements