18VAC76-20-60. Criteria for discretionary disclosure of information by the director.

A. In accordance with § 54.1-2523 C of the Code of Virginia, the director may disclose information in the program to certain persons provided the request is made in a format designated by the department.

B. The director may disclose information to:

1. The recipient of the dispensed drugs, provided the request is accompanied by a copy of a valid photo identification issued by a government agency of any jurisdiction in the United States verifying that the recipient is over the age of 18 and includes a notarized signature of the requesting party. The report shall be mailed to the address on the license or delivered to the recipient at the department.

2. The prescriber for the purpose of establishing a treatment history for a patient or prospective patient, provided the request is accompanied by the prescriber's registration number with the United States Drug Enforcement Administration (DEA) and attestation of having obtained written consent for such disclosure from the recipient. Such written consent shall be maintained as part of the patient record that the prescriber is in compliance with patient notice requirements of 18VAC76-20-70.  The prescriber may delegate the submission of a request for information, provided the delegation is in compliance with § 54.1-2523.2 of the Code of Virginia. The health care professionals to whom the prescriber has authorized access to information shall be registered with the program. Requests for information made by a delegated health care professional shall be made in his own name, using his own unique identifiers assigned by the program.

3. Another regulatory authority conducting an investigation or disciplinary proceeding or making a decision on the granting of a license or certificate, provided the request is related to an allegation of a possible controlled substance violation and that it is accompanied by the signature of the chief executive officer who is authorized to certify orders or to grant or deny licenses.

4. Governmental entities charged with the investigation and prosecution of a dispenser, prescriber or recipient participating in the Virginia Medicaid program, provided the request is accompanied by the signature of the official within the Office of the Attorney General responsible for the investigation.

5. A dispenser for the purpose of establishing a prescription history for a specific person to assist in determining the validity of a prescription, provided the request is accompanied by the dispenser's license number issued by the relevant licensing authority in Virginia and an attestation that the dispenser is in compliance with patient notice requirements of 18VAC76-20-70. If the dispensing occurs in a pharmacy located outside Virginia, the request shall include the registration number issued by the Virginia Board of Pharmacy for a nonresident pharmacy.

C. In each case, the request must be complete and provide sufficient information to ensure the correct identity of the prescriber, recipient and/or dispenser.

D. Except as provided in subdivision B 1 of this section, the request form shall include an attestation that the prescription data will not be further disclosed and only used for the purposes stated in the request and in accordance with the law.

E. In order to request disclosure of information contained in the program, a designated employee of the Department of Medical Assistance Services or of the Office of the Chief Medical Examiner shall register with the director as an authorized agent entitled to receive reports under § 54.1-2523 C of the Code of Virginia.

1. Such request for registration shall include an attestation from the applicant's employer of the eligibility and identity of such person.

2. Registration as an agent authorized to receive reports shall expire on June 30 of each even-numbered year or at any such time as the agent leaves or alters his current employment or otherwise becomes ineligible to receive information from the program.

18VAC76-20-70. Notice of requests for information.

A. Any dispenser who intends to request information from the program for a recipient or prospective recipient of a Schedule II, III, or IV controlled substance shall post a sign that can be easily viewed by the public at the place where the prescription is accepted for dispensing and that discloses to the public that the pharmacist may access information contained in the program files on all Schedule II, III or IV prescriptions dispensed to a patient. In lieu of posting a sign, the dispenser may provide such notice in written material provided to the recipient, or may obtain written consent from the recipient.

 B. Any prescriber who intends to request information from the program about a patient or prospective patient shall post a sign that can be easily viewed by the public that discloses to the public that the prescriber may access information contained in the program files on all Schedule II, III or IV prescriptions dispensed to a patient. In lieu of posting a sign, the prescriber may provide such notice in written material provided to the patient, or may obtain written consent from the patient.