R156-37f-303. Access to Opioid Prescription Information Via an Electronic Data System

  In accordance with Subsection 58-37f-301(1) and Section 58-37f-303:

  (1) Pursuant to Subsection 58-37f-303(4)(a)(i), to access opioid prescription information in the database, an electronic data system must:

  (a) interface with the database through the Division-approved Prescription Monitoring Program (PMP) Hub system; and

  (b) comply with all restrictions on database access and use of database information, as established by the Utah Controlled Substances Database Act and the Controlled Substance Database Act Rule.

  (2) Pursuant to Subsection 58-37f-303(4)(a)(ii), to access opioid prescription information in the database via an electronic data system (EDS), an EDS user must:

  (a) register to use the database by creating an approved account established by the Division pursuant to a memorandum of understanding with the Division;

  (b) use the unique user name and password associated with the account created for the EDS user to access database information through the original internet access system;

  (c) comply with all restrictions on database access established by the Utah Controlled Substance Database Act and the Controlled Substance Database Act Rule; and

  (d) use opioid prescription information in the database only for the purposes and uses designated in Section 58-37f-201, and as more particularly described in the Utah Controlled Substances Database Act and the Controlled Substances Database Act Rule.

  (3) The Division may immediately suspend, without notice or opportunity to be heard, an electronic data system's or an EDS user's access to the database, if the Division determines by audit or other means that such access may lead to a violation of Section 58-37f-601 or may otherwise compromise the integrity, privacy, or security of the database's opioid prescription information. This remedy shall be in addition to the criminal and civil penalties imposed by Section 58-37f-601 for unlawful release or use of database information, and the Division's obligation under Subsections 58-37f-303(5) and (6) to immediately suspend or revoke database access and pursue appropriate corrective or disciplinary action against a non-compliant electronic data system or EDS user.