2021 -- H 5710

========

LC001778

========

     STATE OF RHODE ISLAND

IN GENERAL ASSEMBLY

JANUARY SESSION, A.D. 2021

____________

A N   A C T

RELATING TO FOOD AND DRUGS -- UNIFORM CONTROLLED SUBSTANCES ACT

     

     Introduced By: Representatives Baginski, McGaw, Caldwell, and Potter

     Date Introduced: February 24, 2021

     Referred To: House Health & Human Services

     It is enacted by the General Assembly as follows:

1

     SECTION 1. Section 21-28-3.32 of the General Laws in Chapter 21-28 entitled "Uniform

2

Controlled Substances Act" is hereby amended to read as follows:

3

     21-28-3.32. Electronic prescription database. [Effective until January 1, 2023.].

4

     (a) The information contained in any prescription-drug-monitoring database maintained by

5

the department of health pursuant to § 21-28-3.18 of this chapter shall be disclosed only:

6

     (1) To a practitioner who certifies that the requested information is for the purpose of

7

evaluating the need for, or providing medical treatment to, a current patient to whom the

8

practitioner is prescribing or considering prescribing a controlled substance;

9

     (2) To a pharmacist who certifies that the requested information is for a current client to

10

whom the pharmacist is dispensing, or considering dispensing, a controlled substance;

11

     (3) To an authorized designee of the practitioner and/or pharmacist to consult the

12

prescription-drug-monitoring database on the practitioner's and/or pharmacist's behalf, or to a

13

medical director or designee of the medical director of the practitioner's practice for quality

14

improvement activities within the practice, provided that:

15

     (i) The designee so authorized is employed by the same professional practice or pharmacy;

16

     (ii) The practitioner or pharmacist takes reasonable steps to ensure that such designee is

17

sufficiently competent in the use of the database;

18

     (iii) The practitioner or pharmacist remains responsible for ensuring that access to the

19

database by the designee is limited to authorized purposes as provided for in subsections (a)(1) and

 

1

(a)(2);

2

     (iv) The practitioner or pharmacist remains responsible for ensuring access to the database

3

by the designee occurs in a manner that protects the confidentiality of information obtained from

4

the database and remains responsible for any breach of confidentiality;

5

     (v) The practitioner or pharmacist terminates the designee's access to the database at the

6

termination of the designee's employment; and

7

     (vi) The ultimate decision as to whether or not to prescribe or dispense a controlled

8

substance remains with the practitioner or pharmacist and is reasonably informed by the relevant,

9

controlled-substance history information obtained from the database;

10

     (4) Pursuant to a valid search warrant based on probable cause to believe a violation of

11

federal or state criminal law has occurred and that specified information contained in the database

12

would assist in the investigation of the crime;

13

     (5) By a department employee to a certified law enforcement prescription drug diversion

14

investigator of a qualified law enforcement agency for use in an investigation.

15

     (i) A certified law enforcement prescription drug diversion investigator shall provide to the

16

department the following information in order to receive information from the database:

17

     (A) The identification credentials assigned by the department; and

18

     (B) The case number of the investigation.

19

     (ii) A qualified law enforcement agency shall submit to the department quarterly reports of

20

the data received by all certified law enforcement prescription drug diversion investigators in the

21

qualified law enforcement agency, including, without limitation:

22

     (A) Written verification that the inquiries were part of a lawful prescription drug diversion

23

investigation as provided to the department through the case number of the investigation; and

24

     (B) A brief description of each case closed during that quarter for which the qualified law

25

enforcement agency used information from the database; and

26

     (C) The disposition of the investigation.

27

     (iii) The department shall:

28

     (A) Create a verification form for use under subsection (5)(ii)(A) of this section; and

29

     (B) Make the verification form available annually to the qualified law enforcement agency.

30

     (iv) The verification form under subsection (5)(ii)(A) of this section shall be submitted to

31

the department within thirty (30) days of receipt of the form by the qualified law enforcement

32

agency.

33

     (v) Failure to submit a verification form under subsection (5)(iv) of this section shall result

34

in the immediate suspension of disclosure of information from the database by the department to

 

LC001778 - Page 2 of 11

1

the qualified law enforcement agency and its certified law enforcement prescription drug diversion

2

investigators until a determination is made by the department to allow continued disclosure.

3

     (vi) The director shall, beginning January 1, 2018, and annually thereafter, review

4

disclosure of information pursuant to subsection (a)(5) of this section. Thereafter, the disclosure of

5

information pursuant to subsection (a)(5) of this section shall automatically renew for successive

6

one-year terms unless the director provides written notice to:

7

     (A) The qualified law enforcement agencies; and

8

     (B) The speaker of the house and the president of the senate, at least sixty (60) days in

9

advance of the then-existing term's end, that the department wishes to discontinue providing

10

information from the database pursuant to this subsection. The director may reinstitute disclosure

11

by providing written notice to the same parties;

12

     (6) To a patient who requests his or her own prescription information, or the parent or legal

13

guardian of a minor child who requests the minor child's prescription information;

14

     (7) To a health professional regulatory board that documents, in writing, that the requested

15

information is necessary for an investigation related to licensure, renewal, or disciplinary action

16

involving the applicant, licensee, or registrant to whom the requested information pertains;

17

     (8) To any vendor or contractor with whom the department has contracted, pursuant to state

18

purchasing law and regulations in the contracting of vendors, to establish or maintain the electronic

19

system of the prescription-drug-monitoring database;

20

     (9) To public or private entities for statistical, research, or educational purposes, after

21

removing the patient and prescriber information that could be used to identify individual patients.

22

This shall not include entities receiving a waiver from the institutional review board; or

23

     (10) To any vendor, agent, contractor, or designee who operates an electronic health record

24

or clinical-management system for the purpose of sharing data with practitioners, pharmacists, or

25

licensed healthcare facilities or designees.

26

     (b) Information stored in the prescription-drug-monitoring database shall include only the

27

following:

28

     (1) Patient's first and last name and/or patient identification number; provided, however,

29

the patient's social security number shall not be recorded in whole or in part, patient sex, patient

30

date of birth, and patient address;

31

     (2) Prescribing practitioner's name and Drug Enforcement Administration prescriber-

32

information number;

33

     (3) Prescribing practitioner's office or hospital contact information;

34

     (4) Prescription name, prescription number, prescription species code, national drug code

 

LC001778 - Page 3 of 11

1

number, prescription dosage, prescription quantity, days' supply, new-refill code, number of refills

2

authorized, date the prescription was written, date the prescription was filled, payment type;

3

provided, however, no credit card number shall be recorded in whole or in part; and

4

     (5) The Drug Enforcement Administration pharmacy number of the pharmacy filling the

5

prescription.

6

     (c) The department shall disclose any information relating to a patient maintained in the

7

prescription-drug-monitoring database to that patient, at no cost to the patient, within thirty (30)

8

business days after the department receives a written request from the patient for the information.

9

This information shall include the records maintained by the department pursuant to subsection (e).

10

Notwithstanding the above, the department may, at the request of the law-enforcement agency,

11

withhold, for up to sixty (60) days following the conclusion of a law-enforcement investigation that

12

has been confirmed by the department, the disclosure to the patient that information has been

13

obtained pursuant to subsections (a)(4) and (a)(5) of this section.

14

     (d) A patient may request, from the dispensing pharmacy, correction of any inaccurate

15

information contained within the prescription-drug-monitoring database in accordance with the

16

procedure specified by § 5-37.3-5(c).

17

     (e) The department shall, for the period of time that prescription information is maintained,

18

maintain records of the information disclosed through the prescription-drug-monitoring database,

19

including, but not limited to:

20

     (1) The identity of each person who requests or receives information from the prescription-

21

drug-monitoring database and the organization, if any, the person represents;

22

     (2) The information released to each person or organization and the basis for its release

23

under subsection (a); and

24

     (3) The dates the information was requested and provided.

25

     (f) Prescription information contained within the prescription-drug-monitoring database

26

shall be removed no later than five (5) years from the date the information is entered into the

27

database. Records in existence prior to the enactment of this section shall be removed no later than

28

ten (10) years from the date the information is entered into the database.

29

     (g) The department shall promptly notify any affected individual of an improper disclosure

30

of information from the prescription-drug-monitoring database or a breach in the security of the

31

prescription-drug-monitoring database that poses a significant risk of disclosure of patient

32

information to an unauthorized individual.

33

     (h) At the time of signing a prescription that is required by the department to be entered

34

into the prescription-drug-monitoring database, the prescribing practitioner shall inform the patient

 

LC001778 - Page 4 of 11

1

in writing of the existence of the prescription-drug-monitoring database; the patient's right to access

2

his or her own prescription information; and the name and contact information of the agency

3

operating the program.

4

     (i) No person shall access information in the prescription-monitoring-database except to

5

the extent and for the purposes authorized by subsection (a).

6

     (j) In any civil action allowing a violation of this chapter, the court may award damages,

7

including punitive damages, and reasonable attorneys' fees and costs to a prevailing plaintiff, and

8

injunctive and any other appropriate relief.

9

     (k) Any pharmacist who, in his or her professional judgment, refuses to fill a prescription

10

based on information contained within the prescription-drug-monitoring database shall inform the

11

prescribing physician within twenty-four (24) hours.

12

     (l) All practitioners shall, as a condition of the initial registration or renewal of the

13

practitioner's authority to prescribe controlled substances, register with the prescription-drug-

14

monitoring database maintained by the department of health.

15

     (m) The prescription-monitoring program shall be reviewed prior to starting any opioid. A

16

prescribing practitioner, or designee as authorized by subsection (a)(3) of this section, shall review

17

the prescription-monitoring program prior to refilling or initiating opioid therapy with an

18

intrathecal pump. For patients the prescribing practitioner is maintaining on continuous opioid

19

therapy for pain for three (3) months or longer, the prescribing practitioner shall review information

20

from the prescription-monitoring program at least every three (3) months. Documentation of that

21

review shall be noted in the patient's medical record.

22

     (n) The department shall improve the usefulness and value of the prescription-drug-

23

monitoring database program by increasing its analytical functionality, timeliness, and scope, such

24

as by:

25

     (1) Utilizing data from additional data sources as permissible under state and federal

26

statutes;

27

     (2) Analyzing information submitted to the prescription-drug-monitoring database to

28

ensure that prescription data collected from dispensing pharmacists is readily accessible for a given

29

patient; to identify unusual or aberrant patterns of prescribing, dispensing, or receiving controlled

30

substances; and to generate an automatic alert when such patterns arise to automate standard

31

reports; and to provide ad hoc reports on a real-time basis on this data as well as other data feeds.

32

These reports shall comply with the patient confidentiality requirements of federal and state law;

33

     (3) Developing regulations to ensure that prescription-drug-monitoring analyses are

34

updated and disseminated regularly to appropriate officials and that summary reports are provided

 

LC001778 - Page 5 of 11

1

to the general assembly on or before February 1st of each year. Given the intent to decrease the

2

number of Rhode Island citizens affected by opioid use, the department shall provide an interim

3

report on the status of the directives included herein and any progress made as of October 1, 2016.

4

In the development of said regulations, the department may include any of the following analytical

5

functions, within the boundaries of patient confidentiality rights under state and federal law:

6

     (i) Consolidate raw prescription data collected from dispensing pharmacists into a single

7

view of all prescriptions filled for a given patient;

8

     (ii) Identify unusual or aberrant patterns of prescribing controlled substances, by relevant

9

prescriber attributes, and generate an automatic alert when such patterns arise;

10

     (iii) Identify unusual or aberrant patterns of receiving prescriptions for controlled

11

substances, by relevant patient attributes, and generate an automatic alert when such patterns arise;

12

     (iv) Identify unusual or aberrant patterns of dispensing controlled substances, by relevant

13

dispenser attributes, and generate an automatic alert when such patterns arise;

14

     (v) Identify and visually display linkages among prescribers, patients, and dispensers that

15

can be used to detect any collusive behaviors; and

16

     (vi) The department shall apply for federal funding in support of the goals and objectives

17

contained in this subsection.

18

     21-28-3.32. Electronic prescription database. [Effective January 1, 2023.].

19

     (a) The information contained in any prescription-drug-monitoring database maintained by

20

the department of health pursuant to § 21-28-3.18 of this chapter shall be disclosed only:

21

     (1) To a practitioner who certifies that the requested information is for the purpose of

22

evaluating the need for, or providing medical treatment to, a current patient to whom the

23

practitioner is prescribing or considering prescribing a controlled substance;

24

     (2) To a pharmacist who certifies that the requested information is for a current client to

25

whom the pharmacist is dispensing, or considering dispensing, a controlled substance;

26

     (3) To an authorized designee of the practitioner and/or pharmacist to consult the

27

prescription-drug-monitoring database on the practitioner's and/or pharmacist's behalf, or to a

28

medical director or designee of the medical director of the practitioner's practice for quality

29

improvement activities within the practice, provided that:

30

     (i) The designee so authorized is employed by the same professional practice or pharmacy;

31

     (ii) The practitioner or pharmacist takes reasonable steps to ensure that such designee is

32

sufficiently competent in the use of the database;

33

     (iii) The practitioner or pharmacist remains responsible for ensuring that access to the

34

database by the designee is limited to authorized purposes as provided for in subsections (a)(1) and

 

LC001778 - Page 6 of 11

1

(a)(2);

2

     (iv) The practitioner or pharmacist remains responsible for ensuring access to the database

3

by the designee occurs in a manner that protects the confidentiality of information obtained from

4

the database and remains responsible for any breach of confidentiality;

5

     (v) The practitioner or pharmacist terminates the designee's access to the database at the

6

termination of the designee's employment; and

7

     (vi) The ultimate decision as to whether or not to prescribe or dispense a controlled

8

substance remains with the practitioner or pharmacist and is reasonably informed by the relevant,

9

controlled-substance-history information obtained from the database.

10

     (4) Pursuant to a valid search warrant based on probable cause to believe a violation of

11

federal or state criminal law has occurred and that specified information contained in the database

12

would assist in the investigation of the crime;

13

     (5) To a patient who requests his or her own prescription information, or the parent or legal

14

guardian of a minor child who requests the minor child's prescription information;

15

     (6) To a health professional regulatory board that documents, in writing, that the requested

16

information is necessary for an investigation related to licensure, renewal, or disciplinary action

17

involving the applicant, licensee, or registrant to whom the requested information pertains;

18

     (7) To any vendor or contractor with whom the department has contracted, pursuant to state

19

purchasing law and regulations in the contracting of vendors, to establish or maintain the electronic

20

system of the prescription-drug-monitoring database;

21

     (8) To public or private entities for statistical, research, or educational purposes, after

22

removing the patient and prescriber information that could be used to identify individual patients.

23

This shall not include entities receiving a waiver from the institutional review board; or

24

     (9) To any vendor, agent, contractor, or designee who operates an electronic health record

25

or clinical-management system for the purpose of sharing data with practitioners, pharmacists, or

26

licensed healthcare facilities or designees.

27

     (b) Information stored in the prescription-drug-monitoring database shall include only the

28

following:

29

     (1) Patient's first and last name and/or patient identification number; provided, however,

30

the patient's social security number shall not be recorded in whole or in part, patient sex, patient

31

date of birth, and patient address;

32

     (2) Prescribing practitioner's name and Drug Enforcement Administration prescriber-

33

information number;

34

     (3) Prescribing practitioner's office or hospital contact information;

 

LC001778 - Page 7 of 11

1

     (4) Prescription name, prescription number, prescription species code, national drug code

2

number, prescription dosage, prescription quantity, days' supply, new-refill code, number of refills

3

authorized, date the prescription was written, date the prescription was filled, payment type;

4

provided, however, no credit card number shall be recorded in whole or in part; and

5

     (5) The Drug Enforcement Administration pharmacy number of the pharmacy filling the

6

prescription.

7

     (c) The department shall disclose any information relating to a patient maintained in the

8

prescription-drug-monitoring database to that patient, at no cost to the patient, within thirty (30)

9

business days after the department receives a written request from the patient for the information.

10

This information shall include the records maintained by the department pursuant to subsection (e).

11

Notwithstanding the above, the department may, at the request of the law-enforcement agency,

12

withhold, for up to sixty (60) days following the conclusion of a law-enforcement investigation,

13

the disclosure to the patient that information has been obtained pursuant to subdivision (a)(4).

14

     (d) A patient may request, from the dispensing pharmacy, correction of any inaccurate

15

information contained within the prescription-drug-monitoring database in accordance with the

16

procedure specified by § 5-37.3-5(c).

17

     (e) The department shall, for the period of time that prescription information is maintained,

18

maintain records of the information disclosed through the prescription-drug-monitoring database,

19

including, but not limited to:

20

     (1) The identity of each person who requests or receives information from the prescription-

21

drug-monitoring database and the organization, if any, the person represents;

22

     (2) The information released to each person or organization and the basis for its release

23

under subsection (a); and

24

     (3) The dates the information was requested and provided.

25

     (f) Prescription information contained within the prescription-drug-monitoring database

26

shall be removed no later than five (5) years from the date the information is entered into the

27

database. Records in existence prior to the enactment of this section shall be removed no later than

28

ten (10) years from the date the information is entered into the database.

29

     (g) The department shall promptly notify any affected individual of an improper disclosure

30

of information from the prescription-drug-monitoring database or a breach in the security of the

31

prescription-drug-monitoring database that poses a significant risk of disclosure of patient

32

information to an unauthorized individual.

33

     (h) At the time of signing a prescription that is required by the department to be entered

34

into the prescription-drug-monitoring database, the prescribing practitioner shall inform the patient

 

LC001778 - Page 8 of 11

1

in writing of the existence of the prescription-drug-monitoring database; the patient's right to access

2

his or her own prescription information; and the name and contact information of the agency

3

operating the program.

4

     (i) No person shall access information in the prescription-monitoring-database except to

5

the extent and for the purposes authorized by subsection (a).

6

     (j) In any civil action allowing a violation of this chapter, the court may award damages,

7

including punitive damages, and reasonable attorneys' fees and costs to a prevailing plaintiff, and

8

injunctive and any other appropriate relief.

9

     (k) Any pharmacist who, in his or her professional judgment, refuses to fill a prescription

10

based on information contained within the prescription-drug-monitoring database shall inform the

11

prescribing physician within twenty-four (24) hours.

12

     (l) All practitioners shall, as a condition of the initial registration or renewal of the

13

practitioner's authority to prescribe controlled substances, register with the prescription-drug-

14

monitoring database maintained by the department of health.

15

     (m) The prescription-monitoring program shall be reviewed prior to starting any opioid. A

16

prescribing practitioner, or designee as authorized by subsection (a)(3) of this section, shall review

17

the prescription-monitoring program prior to refilling or initiating opioid therapy with an

18

intrathecal pump. For patients the prescribing practitioner is maintaining on continuous opioid

19

therapy for pain for three (3) months or longer, the prescribing practitioner shall review information

20

from the prescription-monitoring program at least every three (3) months. Documentation of that

21

review shall be noted in the patient's medical record.

22

     (n) The department shall improve the usefulness and value of the prescription-drug-

23

monitoring database program by increasing its analytical functionality, timeliness, and scope, such

24

as by:

25

     (1) Utilizing data from additional data sources as permissible under state and federal

26

statutes;

27

     (2) Analyzing information submitted to the prescription-drug-monitoring database to

28

ensure that prescription data collected from dispensing pharmacists is readily accessible for a given

29

patient; to identify unusual or aberrant patterns of prescribing, dispensing, or receiving controlled

30

substances; and to generate an automatic alert when such patterns arise to automate standard reports

31

and to provide ad hoc reports on a real-time basis on this data as well as other data feeds. These

32

reports shall comply with the patient confidentiality requirements of federal and state law;

33

     (3) Developing regulations to ensure that prescription-drug-monitoring analyses are

34

updated and disseminated regularly to appropriate officials and that summary reports are provided

 

LC001778 - Page 9 of 11

1

to the general assembly on or before February 1st of each year. Given the intent to decrease the

2

number of Rhode Island citizens affected by opioid use, the department shall provide an interim

3

report on the status of the directives included herein and any progress made as of October 1, 2016.

4

In the development of said regulations, the department may include any of the following analytical

5

functions, within the boundaries of patient confidentiality rights under state and federal law:

6

     (i) Consolidate raw prescription data collected from dispensing pharmacists into a single

7

view of all prescriptions filled for a given patient;

8

     (ii) Identify unusual or aberrant patterns of prescribing controlled substances, by relevant

9

prescriber attributes, and generate an automatic alert when such patterns arise;

10

     (iii) Identify unusual or aberrant patterns of receiving prescriptions for controlled

11

substances, by relevant patient attributes, and generate an automatic alert when such patterns arise;

12

     (iv) Identify unusual or aberrant patterns of dispensing controlled substances, by relevant

13

dispenser attributes, and generate an automatic alert when such patterns arise;

14

     (v) Identify and visually display linkages among prescribers, patients, and dispensers that

15

can be used to detect any collusive behaviors; and

16

     (vi) The department shall apply for federal funding in support of the goals and objectives

17

contained in this subsection.

18

     SECTION 2. This act shall take effect upon passage.

========

LC001778

========

 

LC001778 - Page 10 of 11

EXPLANATION

BY THE LEGISLATIVE COUNCIL

OF

A N   A C T

RELATING TO FOOD AND DRUGS -- UNIFORM CONTROLLED SUBSTANCES ACT

***

1

     This act would add medical directors or their designees to the list of those individuals to

2

whom disclosure of information contained in any prescription-drug-database is allowed for quality

3

improvement activities within the practice.

4

     This act would take effect upon passage.

========

LC001778

========

 

LC001778 - Page 11 of 11