1. (a) A pharmacy benefit manager may not sell a list of patients that contains information through which the identity of an individual patient is disclosed.
2. (b) A pharmacy benefit manager shall maintain all data that identifies a patient in a confidential manner that prevents disclosure to a third party unless the disclosure is otherwise authorized by law or by the patient.

3. (c) This section does not prohibit:

   1. (1) general advertising about a specific pharmaceutical product or service; or

   2. (2) the request and receipt by a person of information regarding:

      1. (A) a specific pharmaceutical product or service;
      2. (B) the person's own records or claims; or
      3. (C) the person's dependent's records or claims.

Added by Acts 2003, 78th Leg., ch. 1274, Sec. 7, eff. April 1, 2005.