1. (1) As used in this section:

   1. (a) "Controlled substance" means any substance listed in Subsection 58-37-108(2)(b) through(2)(e).
   2. (b) "Dispense" means the same as that term is defined in Section 58-17b-102.

   3. (c) "EDS user":

      1. (i) means:

         1. (A) a prescriber;
         2. (B) a pharmacist;
         3. (C) a pharmacy intern;
         4. (D) a pharmacy technician; or
         5. (E) an individual granted access to the database under Subsection 58-37f-301(3)(c); and
      2. (ii) does not mean an individual whose access to the database has been revoked by the division in accordance with Subsection 58-37f-301(5)(c).

   4. (d) "Electronic data system" means a software product or an electronic service used by:

      1. (i) a prescriber to manage electronic health records; or

      2. (ii) a pharmacist, pharmacy intern, or pharmacy technician working under the general supervision of a licensed pharmacist, for the purpose of:

         1. (A) managing the dispensing of prescription drugs; or
         2. (B) providing pharmaceutical care as defined in Section 58-17b-102 to a patient.
   5. (e) "Pharmacist" means the same as that term is defined in Section 58-17b-102.
   6. (f) "Prescriber" means a practitioner, as that term is defined in Section 58-37-101, who is licensed under Section 58-37-105 to prescribe a controlled substance.
   7. (g) "Prescription drug" means the same as that term is defined in Section 58-17b-102.
2. (2) Subject to Subsections (3) through (6), no later than January 1, 2017, the division shall make controlled substance prescription information in the database available to an EDS user via the user's electronic data system.
3. (3) An electronic data system may be used to make controlled substance prescription information in the database available to an EDS user only if the electronic data system complies with rules the division makes in accordance with Subsection (4).

4. (4)

   1. (a) The division shall make rules, in accordance with Title 63G, Chapter 3, Utah Administrative Rulemaking Act, specifying:

      1. (i) an electronic data system's:

         1. (A) allowable access to and use of controlled substance prescription information in the database; and
         2. (B) minimum actions that shall be taken to ensure that controlled substance prescription information accessed from the database is protected from inappropriate disclosure or use; and

      2. (ii) an EDS user's:

         1. (A) allowable access to controlled substance prescription information in the database via an electronic data system; and
         2. (B) allowable use of the information.

   2. (b) The rules shall establish:

      1. (i) minimum user identification requirements that in substance are the same as the database identification requirements in Section 58-37f-301;
      2. (ii) user access restrictions that in substance are the same as the database identification requirements in Section 58-37f-301; and
      3. (iii) any other requirements necessary to ensure that in substance the provisions of Sections 58-37f-301 and 58-37f-302 apply to controlled substance prescription information in the database that has been made available to an EDS user via an electronic data system.

5. (5) The division may not make controlled substance prescription information in the database available to an EDS user via the user's electronic data system if:

   1. (a) the electronic data system does not comply with the rules the division makes in accordance with Subsection (4); or
   2. (b) the EDS user does not comply with the rules established by the division under Subsection (4).

6. (6)

   1. (a) The division shall periodically audit the use of controlled substance prescription information made available to an EDS user via the user's electronic data system.

   2. (b) The audit shall review compliance by:

      1. (i) the electronic data system with rules established by the division under Subsection (4); and
      2. (ii) the EDS user with rules established by the division under Subsection (4).

   3. (c)

      1. (i) If the division determines by audit or other means that an electronic data system is not in compliance with rules the division makes in accordance with Subsection (4), the division shall immediately suspend or revoke the electronic data system's access to controlled substance prescription information in the database.
      2. (ii) If the division determines by audit or other means that an EDS user is not in compliance with rules the division makes in accordance with Subsection (4), the division shall immediately suspend or revoke the EDS user's access to controlled substance prescription information in the database via an electronic data system.
      3. (iii) If the division suspends or revokes access to controlled substance prescription information in the database under Subsection (6)(c)(i) or (6)(c)(ii), the division shall also take any other appropriate corrective or disciplinary action this chapter or title authorizes.

Amended by Chapter 64, 2026 General Session