Ohio Administrative Code
Title 3796:6 - Dispensaries
Chapter 3796:6-3 - Operations
Section 3796:6-3-17 - Record keeping requirements

Universal Citation: OH Admin Code 3796:6-3-17

Current through all regulations passed and filed through December 16, 2024

(A) Dispensary records may be maintained either manually and/or electronically and shall be available for inspection by the state board of pharmacy in a readily retrievable manner upon request. The dispensary shall develop recordkeeping policies and procedures consistent with this division.

(B) Any dispensary that uses an electronic system for the storage and retrieval of patient information or other medical marijuana records, shall use a system that:

(1) Guarantees the confidentiality of the information contained within;

(2) Can be accessed by the state board of pharmacy in accordance with this division;

(3) Can provide safeguards against erasures and unauthorized changes in data after the information has been entered and verified by the dispensary;

(4) Contains a true audit trail that indicates and dates any edits or deletions to a patient record; and

(5) Is capable of being reconstructed or retrieved within three business days, in the event of a computer malfunction or accident resulting in the destruction of the database.

(C) Each dispensary shall keep a record of all medical marijuana received, dispensed, sold, destroyed, or used. The acts of dispensing and destroying of a controlled substance must be documented with the positive identification of the responsible individual. These records may be kept electronically if the method is approved by the state board of pharmacy and the records are backed-up each business day.

(D) Any dispensary intending to maintain records at a location other than the licensed dispensary premises must first send a written request to the state board of pharmacy. The request shall contain the dispensary name and license number of the requestor and the name and address of the alternate location. The state board of pharmacy will send written notification to the dispensary documenting the approval or denial of the request. A copy of the state board of pharmacy's approval shall be maintained with the medical marijuana records located on the licensed dispensary premises. Any alternate location shall be secured and accessible only to authorized dispensary employees.

(E) Documentation maintained and organized by a dispensary in the normal course of business must be available for inspection by the state board of pharmacy and include, but is not limited to:

(1) Background checks for employees conducted by the dispensary, if applicable;

(2) Operating procedures;

(3) Inventory records;

(4) Audit records;

(5) Staffing plan;

(6) Business records that include:
(a) Assets and liabilities;

(b) Third party vendor list;

(c) Monetary transactions;

(d) Written or electronic accounts that shall include bank statements, journals, ledgers, and supporting documents, agreements, checks, invoices and vouchers; and

(e) Any other financial accounts reasonably related to dispensary operations.

(7) Surveillance records (not including video camera recordings);

(8) Attendance logs;

(9) Employee training records;

(10) Quality assurance review logs;

(11) Records relating to the purchase or return, dispensing, distribution, destruction, and sale of medical marijuana; and

(12) All other records required under Chapter 3796. of the Revised Code and this division.

(F) All records listed in paragraph (E) of this rule shall be maintained for at least three years under appropriate supervision to ensure confidentiality and be made readily available for release in accordance with rule 3796:6-3-18 of the Administrative Code.

Disclaimer: These regulations may not be the most recent version. Ohio may have more current or accurate information. We make no warranties or guarantees about the accuracy, completeness, or adequacy of the information contained on this site or the information linked to on the state site. Please check official sources.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.