1. 1. Authority of member state Under the compact a member state:

   1. A. Retains its authority and autonomy over its prescription monitoring program and prescription data in accordance with its laws, rules and policies;

      [PL 2011, c. 217, §1 (NEW).]

   2. B. May provide, restrict or deny prescription data to a requestor of another state in accordance with the member state's laws, rules and policies;

      [PL 2011, c. 217, §1 (NEW).]

   3. C. May provide, restrict or deny prescription data received from another state to a requestor within that state; and

      [PL 2011, c. 217, §1 (NEW).]

   4. D. Has the authority to determine which requestors are authorized.

      [PL 2011, c. 217, §1 (NEW).]

   [PL 2011, c. 217, §1 (NEW).]

2. 2. Restrictions on prescription data Prescription data obtained by a member state pursuant to this compact has the following restrictions.

   1. A. It must be used solely for purposes of providing the prescription data to a requestor.

      [PL 2011, c. 217, §1 (NEW).]

   2. B. It may not be stored in the member state's prescription monitoring program database, except for stored images, nor in any other database.

      [PL 2011, c. 217, §1 (NEW).]

   [PL 2011, c. 217, §1 (NEW).]

3. 3. Limit on categories of requestors A member state may limit the categories of requestors of another member state that will receive prescription data.

   [PL 2011, c. 217, §1 (NEW).]

4. 4. Requestor authentication The commission shall promulgate rules establishing standards for requestor authentication.

   1. A. Every member state shall authenticate requestors according to the rules established by the commission.

      [PL 2011, c. 217, §1 (NEW).]

   2. B. A member state may authorize its requestors to request prescription data from another member state only after such requestor has been authenticated.

      [PL 2011, c. 217, §1 (NEW).]

   3. C. A member state that becomes aware of a requestor who violated the laws or rules governing the appropriate use of prescription data shall notify the state that transmitted the prescription data.

      [PL 2011, c. 217, §1 (NEW).]

   [PL 2011, c. 217, §1 (NEW).]

PL 2011, c. 217, §1 (NEW).