Md. Code Regs. 10.47.07.05

Current through Register Vol. 51, No. 22, November 1, 2024

Section 10.47.07.05 - Disclosure of Naloxone Medication Data

A. Registration of a Prescriber, a Prescriber Delegate, a Pharmacist, a Pharmacist Delegate, or a Licensed Health Care Practitioner to Request Prescription Monitoring Data.

(1) A prescriber, a prescriber delegate, a pharmacist, a pharmacist delegate, or a licensed health care practitioner shall register with the Department or its agent, in a manner specified by the Department, in order to request disclosure of or otherwise access prescription monitoring data.

(2) The Department or its agent shall:

(a) Establish procedures to authenticate a prescriber, a dispenser, or an authorized licensed health care practitioner in accordance with Health-General Article, §21-2 A-06(b)(1)-(2), Annotated Code of Maryland; and

(b) Issue credentials to a prescriber, a prescriber delegate, a pharmacist, or a pharmacist delegate that can be used to request disclosure of or otherwise access prescription monitoring data electronically.

(3) If the credentials issued to a registrant are lost, stolen, or otherwise compromised, the registrant shall notify the Department or its agent, by a method approved by the Department, as soon as reasonably possible.

(4) A prescriber or pharmacist who authorizes the registration of a licensed health care practitioner, prescriber delegate, or pharmacist delegate to request disclosure of or otherwise access prescription monitoring data shall:

(a) Make every reasonable effort, including regularly reviewing and auditing any available logs of system access and use, to ensure the prescriber delegate or pharmacist delegate is requesting disclosure of, redisclosing, or otherwise accessing prescription monitoring data in clear compliance with Health-General Article, Title 21, Subtitle 2A, Annotated Code of Maryland, and all other State and federal laws and regulations governing the security and confidentiality of protected health information and personal medical records;

(b) Immediately notify the Department or its agent, by a method approved by the Department, as well as the licensing entity responsible for licensing, certifying, or registering the prescriber delegate, or pharmacist delegate, if applicable, if the prescriber or pharmacist believes that the confidentiality of prescription monitoring data or the security of the Program has been compromised by that individual; and

(c) Immediately notify the Department or its agent, by a method approved by the Department, of any requested change in the registration status of a licensed health care practitioner, prescriber delegate, or pharmacist delegate, including if that individual is no longer employed by or practicing under the authority of the prescriber or pharmacist.

B. Disclosure of Prescription Monitoring Data to a Prescriber, a Prescriber Delegate, a Pharmacist, or a Pharmacist Delegate.

(1) Upon request from a prescriber or a licensed health care practitioner or a prescriber delegate authorized by a prescriber, the Program shall disclose patient-specific prescription monitoring data provided that the request is made solely for the purpose of the medical care or treatment of the patient about whom prescription monitoring data is being requested.

(2) Upon request from a prescriber, the Program may provide a report containing prescription monitoring data on all monitored prescription drugs dispensed pursuant to the prescriber's prescriptions, provided that the request is submitted on a form or in a manner approved by the Department.

(3) Upon request from a pharmacist or a licensed health care practitioner or pharmacist delegate authorized by a pharmacist, the Program shall disclose patient-specific prescription monitoring data provided that the request is made pursuant to a pharmacist's responsibility to perform due diligence and exercise professional judgment when presented with a prescription to dispense a monitored prescription drug for use by the patient about whom prescription monitoring data is being requested.

(4) The Department or its agent shall make available the electronic means by which a prescriber, a pharmacist, a prescriber delegate, or a pharmacist delegate may request disclosure of or otherwise access patient-specific prescription monitoring data.

(5) If the Program's review of prescription monitoring data under Regulation .04 of this chapter indicates possible misuse or abuse of a monitored prescription drug, possible violation of law, or possible breach of professional standards by a prescriber or dispenser, the Program shall:

(a) Report the possible misuse or abuse, possible violation of law, or possible breach of professional standards to the prescriber or dispenser of the monitored prescription drug in a manner and form determined by the Program; and

(b) Provide education to the prescriber or dispenser.

C. Disclosure of Prescription Monitoring Data to a Federal, State, or Local Law Enforcement Agency. The Program shall disclose prescription monitoring data to a federal, State, or local law enforcement agency, for the purpose of furthering an existing bona fide individual investigation, on receipt of a subpoena that:

(1) Includes information sufficient to identify the unique prescriber, dispenser, or patient about whom prescription monitoring data is requested;

(2) Specifies the time frame for which prescription monitoring data is requested, including the day, month, and year the report is to begin and end;

(3) Includes an agency case number or other identifier sufficient to identify an existing bona fide individual investigation; and

(4) Bears the name, title, and signature of the official under whose authority the subpoena is issued.

D. Disclosure of Prescription Monitoring Data to a Licensing Entity.

(1) The Program shall disclose prescription monitoring data to a licensing entity upon receipt of an administrative subpoena

(2) The licensing entity shall include in the administrative subpoena:

(a) Information sufficient to identify the unique prescriber, dispenser, or patient about whom prescription monitoring data is requested;

(b) The time frame for which prescription monitoring data is requested, including the day, month, and year the report is to begin and end;

(c) A case number or other identifier sufficient to identify an existing bona fide individual investigation; and

(d) The name, title, and original signature of the official under whose authority the subpoena is issued.

E. Disclosure of Prescription Monitoring Data to a Rehabilitation Program under a Health Occupations Board. The Program shall disclose prescription monitoring data to a rehabilitation program under a health occupations board upon receipt of an administrative subpoena that:

(1) Includes information sufficient to identify the unique licensed health care practitioner about whom prescription monitoring data is requested;

(2) Specifies the time frame for which prescription monitoring data is requested, including the day, month, and year the report is to begin and end; and

(3) Bears the name, title and original signature of the official under whose authority the subpoena is issued.

F. Disclosure of Prescription Monitoring Data to a Patient or a Patient's Authorized Representative.

(1) Upon request, the Program shall disclose to a patient 18 years old or older prescription monitoring data about the patient provided that the request is submitted to the Program:

(a) On a completed form approved by the Department that contains a notarized signature of the requester; or

(b) In any other manner approved by the Department.

(2) Upon request, the Program shall disclose patient-specific prescription monitoring data to a patient's authorized representative who is 18 years old or older, including the parent or legal guardian of a minor, an individual with power of attorney, the personal representative of a decedent's estate, or any other person duly authorized by State law to request or otherwise access medical records on behalf of a patient, provided that the request shall be submitted to the Program:

(a) In person and accompanied by:

(i) A completed form approved by the Department;

(ii) Valid photo identification issued by a government agency of any jurisdiction of the United States verifying that the patient's authorized representative is 18 years old or older; and

(iii) An original copy of any form or documentation required by State law or regulation to verify the authority of the representative to request or otherwise access the medical records of a patient on their behalf; or

(b) In any other manner approved by the Department.

(3) If a patient, a patient's authorized representative, or a patient's prescriber believes that prescription monitoring data relating to the patient's prescription history is incorrect, the patient, authorized representative, or prescriber may request that the Program correct the data provided that the request:

(a) Is submitted to the Program in writing and on a form or in a manner approved by the Department; and

(b) Includes documentation, which may include but not be limited to, a copy of the original prescription and a signed, notarized statement from the prescriber or dispenser that demonstrates which of the specific data elements reported to the Program under Regulation .03A of this chapter are incorrect.

(4) Upon determination by the Secretary that prescription monitoring data specific to a patient's prescription history is incorrect, the Program shall issue a corrected prescription history report to the patient or the patient's authorized representative.

G. Disclosure of Prescription Monitoring Data to the Office of the Attorney General. The Program shall disclose prescription monitoring data to the Office of the Attorney General, for the purpose of furthering an existing bona fide investigation, on receipt of a subpoena that:

(1) Includes information sufficient to identify the prescribers dispensers, or patients about whom prescription monitoring data is requested;

(2) Specifies the time frame for which prescription monitoring data is requested, including the day, month, and year the report is to begin and end;

(3) Includes an agency case number or other identifier sufficient to identify an existing bona fide investigation; and

(4) Bears the name, title, and signature of the official under whose authority the subpoena is issued.

H. Disclosure of Prescription Monitoring Data to an Authorized User of Another State's Prescription Drug Monitoring Program or of any Other Authorized Agency.

(1) Upon request, the Program shall disclose prescription monitoring data to an authorized user of another state's prescription drug monitoring program or an authorized user with any other authorized local, state, territorial, or federal agency in connection with the provision of medical care, provided that the request:

(a) Is submitted in a manner approved by the Department;

(b) Is under the authority of the authorized administrator of that state's program or authorized agency;

(c) Includes an attestation that prescription monitoring data will only be used or redisclosed in a manner consistent with the provisions of Health-General Article, §21-2A-06, Annotated Code of Maryland, and Regulation .08D of this chapter; and

(d) Relates to a patient to whom the authorized user anticipates providing, is providing, or has provided medical care.

(2) The Program may develop and implement interoperability with another state's prescription drug monitoring program or authorized agency to facilitate the automated exchange of prescription monitoring data provided that a written agreement has been established with the other state's program or authorized agency specifying that the information technology employed will:

(a) Only disclose prescription monitoring data to authorized users in a manner consistent with the provisions of Health-General Article, §21-2A-06, Annotated Code of Maryland, and this regulation; and

(b) Operate in accordance with all other State and federal laws and regulations governing the security and confidentiality of protected health information and personal medical records.

I. Disclosure of Prescription Monitoring Data to Units of the Department. Upon request, the Program may disclose prescription monitoring data to the Maryland Medical Assistance Program, the Office of the Inspector General of the Department, the Office of Health Care Quality, and the Office, provided that the request:

(1) Includes information sufficient to identify the unique individual about whom prescription monitoring data is requested;

(2) Specifies the time frame for which prescription monitoring data is requested, including the day, month and year the report is to begin and end;

(3) Includes a case number or other identifier sufficient to identify an existing bona fide individual investigation; and

(4) Is approved by the Secretary.

J. Disclosure of Prescription Monitoring Data to a Medical Director of a Health Care Facility. The Program may disclose prescription monitoring data to the medical director of a health care facility, as defined in Health-General Article, §19-114, Annotated Code of Maryland, or the medical director's designee for the purpose of providing health care practitioners employed or contractually employed at the health care facility access to the prescription monitoring data in connection with the provision of medical care or the dispensing of a monitored prescription drug to an individual who receives health care at the health care facility and on whom a medical record is maintained at the health care facility, provided that the health care facility:

(1) Is licensed by the Department of Health or is operated by the federal government or a federally recognized Indian tribe;

(2) Has an active participation agreement with the State's Health Information Exchange;

(3) Operates in accordance with all other State and federal laws and regulations governing the security and confidentiality of protected health information and personal medical records; and

(4) Can provide an audit trail of the facility's staff access to the prescription monitoring data to the Department upon request.

K. Disclosure of Prescription Monitoring Data to the Office of the Chief Medical Examiner.

(1) Upon request from the Office of Chief Medical Examiner, the Program shall disclose decedent-specific prescription monitoring data, provided that the request is made solely for the purpose of carrying out duties authorized under Health-General Article, §5-309, Annotated Code of Maryland.

(2) The Program shall determine the electronic means by which the Office of the Chief Medical Examiner may request disclosure of or otherwise access decedent-specific prescription monitoring data.

L. Disclosure of Prescription Monitoring Data to Case Review Entities.

(1) Upon request, the Program may disclose prescription monitoring data to the following case review entities for the purposes of furthering an existing bona fide individual case review:

(a) The State Child Fatality Review Team or a local child fatality review team as defined in Health-General Article, §5-701, Annotated Code of Maryland, upon request from the chair of the State or local team;

(b) A local drug overdose fatality review team as described in Health-General Article, §§5-902 and 5-902, Annotated Code of Maryland, upon request from the chair of the local team;

(c) The Maternal Mortality Review Program, as defined in Health-General Article, §13-1203, Annotated Code of Maryland, on request from the Program; and

(d) A medical review committee described in Health Occupations Article, 1-401(b)(3), Annotated Code of Maryland, upon request from the committee.

(2) The request shall:

(a) Include information sufficient to identify the unique individual about whom prescription monitoring data is requested;

(b) Specify the time frame for which prescription monitoring data is requested, including the day, month, and year the report is to begin and end;

(c) Include a case number or other identifier sufficient to identify an existing bona fide individual case review; and

(d) Be approved by the Secretary.

M. Disclosure of Prescription Monitoring Data for Research, Analysis, Education, and Public Reporting.

(1) The Program may disclose prescription monitoring data for research, analysis, education, and public reporting:

(a) In response to requests determined by the Department to be consistent with institutional review board protocols and human subjects research protections;

(b) Upon approval by the Department of a written proposal or abstract explaining the purpose and scope of the research, analysis, education, and public reporting; and

(c) After redaction of all information that could identify a patient, prescriber, dispenser, or any other individual.

(2) The Secretary may waive the requirement of §M(l)(b) of this regulation for requests from units of the Department.

N. Technical Advisory Committee Review.

(1) Before the Program discloses prescription monitoring data under §§C-E, H and I of this regulation, the Technical Advisory Committee may:

(a) Review the request for disclosure; and

(b) Within 10 business days of submission of the request to the Technical Advisory Committee for review, submit to the Program, in written form, clinical guidance and interpretation of the prescription monitoring data requested to:

(i) Assist the Secretary's decision on how to respond to a judicial subpoena, administrative subpoena, or other request; and

(ii) Be made available for use by the recipient of prescription monitoring data should the request for disclosure be authorized.

(2) Notwithstanding §N(1) of this regulation, the Program may disclose prescription monitoring data to the authorized administrator of another state's prescription drug monitoring program or authorized agency for disclosure to an authorized user in a manner consistent with §H of this regulation.

(3) Before the Program discloses prescription monitoring data to a prescriber or dispenser under §B(5) of this regulation, the Technical Advisory Committee:

(a) For indications of possible misuse or abuse, may provide clinical guidance and interpretation of the prescription monitoring data that indicates possible misuse or abuse; and

(b) For indications of possible violations of law or breach of professional standards, shall provide clinical guidance regarding the method used and advise whether the method identifies possible violations of law or breach of professional standards.

(4) If the Technical Advisory Committee has not provided clinical guidance and interpretation in accordance with §N(1) or (3) of this regulation within 10 business days of submission of the request or data to the Technical Advisory Committee for review, the Program may proceed as if the Technical Advisory Committee does not have clinical guidance or interpretation to provide regarding the request, data, or method at issue.

(5) Before making a referral to the Office in accordance with Regulation .050 of this chapter, the Program shall provide to the Technical Advisory Committee notice and an opportunity to make recommendations within 10 business days on the referral.

(6) If the Technical Advisory Committee has not provided recommendations within 10 business days under §N(5) of this regulation, the Program may proceed as if the Technical Advisory Committee does not have clinical guidance or interpretation to provide.

(7) The Department shall establish procedures, which may include but not be limited to secure electronic messaging, for the timely disclosure of prescription monitoring data to the Technical Advisory Committee and the receipt of responses from the Technical Advisory Committee to ensure that the review process is conducted with all possible expediency.

(8) For all purposes, including but not limited to confidentiality, security, redisclosure, and admissibility as evidence, Program reports based on evaluation of prescription monitoring data and that contain individual identifying information shall be considered as one and the same with the prescription monitoring data.

O. Disclosure of Prescription Monitoring Data to the Office. The Program may disclose prescription monitoring data and make a referral to the Office about a possible violation of law or possible breach of professional standards by a prescriber or dispenser as identified under Regulation .04 of this chapter, if the Program:

(1) Determines the:

(a) Outreach and education provided was inadequate to address the possible breach or violation; or

(b) Outreach and education would be inadequate to address the possible violations of law or a possible breach of professional standards;

(2) Provides notice and an opportunity to the Technical Advisory Committee to make recommendations within 10 business days regarding interpretation of the prescription monitoring data;

(3) Provides the recommendations, if any, of the Technical Advisory Committee to the Office; and

(4) Notifies the prescriber or the dispenser that the prescription monitoring data will be provided to the Office for further investigation.

Md. Code Regs. 10.47.07.05

Regulation .05 amended effective 42:11 Md. R. 725, eff.6/8/2015; amended effective 43:4 Md. R. 332, eff.2/29/2016; amended effective 45:20 Md. R. 918, eff. 10/8/2018; amended effective 47:10 Md. R. 519, eff. 5/18/2020; amended effective 50:8 Md. R. 338, eff. 7/20/2023