Arkansas Administrative Code
Agency 070 - Board of Pharmacy
Rule 070.00.96-001 - Reg. 58 - Electronic Prescription Processing and Patient Confidentiality

Universal Citation: AR Admin Rules 070.00.96-001

Current through Register Vol. 49, No. 2, February 2024

58. ELECTRONIC PRESCRIPTION PROCESSING AND PATIENT CONFIDENTIALITY

1. DEFINITIONS:
A. "Confidential Information" means information that is personally identifiable and, therefore, can be traced back to the patient or prescribing practitioner that is accessed or maintained by the pharmacist in the patient's records or which is communicated to the patient, as part of patient counseling, which is privileged and may be released only to the patient or prescriber or, as the patient or prescriber directs; to those practitioners, other authorized health care professionals, and other pharmacists where, in the pharmacist's professional judgement, such release is necessary to protect the patient's health and well being; and to such other persons or governmental agencies authorized by law to receive such confidential information, regardless of whether such information is in the form of paper, preserved on microfilm, or is stored on electronic media.

B. "Electronic Transmission" means transmission of information in electronic form or the transmission of the exact visual image of a document by way of electronic equipment.

C. "Prescription Drug Order" means a lawful order of a Practitioner for a drug or device for a specific patient that is communicated to a pharmacist.

2. PATIENT CONFIDENTIALITY REQUIREMENTS:
A. Prescription information and other patient health care information shall be maintained in a manner that protects the integrity and confidentiality of such information as provided by rules of the Board.

B. The pharmacy shall provide a mechanism for patients to prevent the disclosure of any information (confidential or otherwise) about them that was obtained or collected by the pharmacist or pharmacy incidental to the delivery of Pharmaceutical Care other than as authorized by law or rules of the Board.

C. The pharmacist-in-charge shall:
(a) Establish written policies and procedures for maintaining the integrity and confidentiality of prescription information and patient health care information. All employees of the pharmacy, with access to any such information, shall be required to read, sign, and comply with the established policies and procedures.

(b) Assure that the requirements of this regulation are established and implemented.

3. MANNER OF ISSUANCE OF A PRESCRIPTION DRUG ORDER
A. A prescription drug order may be transmitted to a pharmacy by electronic transmission. If transmitted by way of electronic transmission, the prescription drug order shall be immediately reduced to a form, by the pharmacist, that may be maintained for the time required by law or rules. Persons other than those bound by a confidentiality agreement, pursuant to a consent agreement, shall not have access to pharmacy records containing personally identifiable confidential information concerning the pharmacy's patients or prescribers.

B. All prescription drug orders, communicated by way of electronic transmission shall:
(a) Be sent only to the pharmacy of the patient's choice with no intervening person having access to the prescription drug order.

(b) Identify the transmitter's phone number for verbal confirmation, the time and date of transmission, and the pharmacy intended to receive the transmission - as well as any other information required by Federal or State Law.

(c) Be transmitted by the authorized practitioner or his designated agent.

(d) Be deemed the original prescription drug order provided it meets the requirement of this regulation and other law or regulation.

C. All electronic equipment, for receipt of prescription drug orders communicated by way of electronic transmission, shall be maintained so as to ensure against unauthorized access. The pharmacist shall exercise professional judgement regarding the accuracy, validity, and authenticity of the prescription drug order consistent with existing Federal or State Laws or Regulations.

D. The prescribing practitioner may authorize his agent to transmit a prescription drug order, by electronic transmission, to the pharmacy - provided that the identity of the transmitting agent is included in the order.

4. PATIENT RECORDS:
A. Personally identifiable confidential information, in the patient medication record, may be released to the patient, the prescriber, other licensed practitioners then caring for the patient, another licensed pharmacist, the Board or it's representatives, or any other person duly authorized by law to receive such information. Personally identifiable confidential information, in the patient medication record, may be released to others only on written release of the patient. Personally identifiable confidential information, in the patient medication record related to identity of the prescriber, may be released only on written release of the prescriber.

5. DISCIPLINE:
A. The Board of Pharmacy may refuse to issue or renew, or may suspend, revoke, restrict the licenses or the registration of, or fine any person for divulging or revealing confidential information to a person other than as authorized by rules of the Board.

6. SECURITY:
A. To maintain the confidentiality of patient and prescriber records, the computer system shall have adequate security and system safeguards designed to prevent and detect unauthorized access, modification, or manipulation of patient records. Once the drug has been dispensed, any alterations in prescription drug order data shall be documented - including the identification of the pharmacist responsible for the alteration.

Disclaimer: These regulations may not be the most recent version. Arkansas may have more current or accurate information. We make no warranties or guarantees about the accuracy, completeness, or adequacy of the information contained on this site or the information linked to on the state site. Please check official sources.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.