California 2017-2018 Regular Session

California Assembly Bill AB1753 Compare Versions

OldNewDifferences
1-Assembly Bill No. 1753 CHAPTER 479 An act to amend Sections 11161.5, 11162.1, and 11165 of the Health and Safety Code, relating to controlled substances. [ Approved by Governor September 18, 2018. Filed with Secretary of State September 18, 2018. ] LEGISLATIVE COUNSEL'S DIGESTAB 1753, Low. Controlled substances: CURES database.Existing law classifies certain controlled substances into designated schedules. Existing law requires the Department of Justice to maintain the Controlled Substance Utilization Review and Evaluation System (CURES) for the electronic monitoring of the prescribing and dispensing of Schedule II, Schedule III, and Schedule IV controlled substances by a health care practitioner authorized to prescribe, order, administer, furnish, or dispense a Schedule II, Schedule III, or Schedule IV controlled substance. Existing law requires prescription forms for controlled substance prescriptions to be obtained from security printers approved by the department, as specified. Existing law requires a dispensing pharmacy, clinic, or other dispenser to report specified information to the department.This bill would authorize the department to reduce or limit the number of approved printers to 3, as specified. The bill would require prescription forms for controlled substance prescriptions to have a uniquely serialized number, in a manner prescribed by the department, and would require a printer to submit specified information to the department for all prescription forms delivered. The bill would require the information submitted by a dispensing pharmacy, clinic, or other dispenser to the department to include the serial number for the corresponding prescription form, if applicable.This bill would incorporate additional changes to Section 11165 of the Health and Safety Code proposed by AB 1751 to be operative only if this bill and AB 1751 are enacted and this bill is enacted last.Digest Key Vote: MAJORITY Appropriation: NO Fiscal Committee: YES Local Program: NO Bill TextThe people of the State of California do enact as follows:SECTION 1. The Legislature finds and declares the following:(a) The prevailing use of paper prescription pads to prescribe controlled substances leads to significant instances of theft and fraud each year, contributing to the prescription drug abuse crisis and fueling criminal enterprises engaged in drug diversion.(b) Prescribing controlled substances by means of electronic transmission prescription, or e-prescribing, has long been considered the most effective way to combat prescription pad theft and fraud.(c) Many states have begun to require that all controlled substances be prescribed electronically as a means of addressing the public health and public safety crises associated with prescription drug abuse and diversion.(d) Until mandatory e-prescribing is established in California, it is critical that tighter restrictions be placed on the manufacturing and tracking of prescription pads used within the state.SEC. 2. Section 11161.5 of the Health and Safety Code is amended to read:11161.5. (a) Prescription forms for controlled substance prescriptions shall be obtained from security printers approved by the Department of Justice.(b) The department may approve security printer applications after the applicant has provided the following information:(1) Name, address, and telephone number of the applicant.(2) Policies and procedures of the applicant for verifying the identity of the prescriber ordering controlled substance prescription forms.(3) Policies and procedures of the applicant for verifying delivery of controlled substance prescription forms to prescribers.(4) (A) The location, names, and titles of the applicants agent for service of process in this state; all principal corporate officers, if any; all managing general partners, if any; and any individual owner, partner, corporate officer, manager, agent, representative, employee, or subcontractor of the applicant who has direct access to, or management or control of, controlled substance prescription forms.(B) A report containing this information shall be made on an annual basis and within 30 days after any change of office, principal corporate officers, managing general partner, or of any person described in subparagraph (A).(5) (A) A signed statement indicating whether the applicant, any principal corporate officer, any managing general partner, or any individual owner, partner, corporate officer, manager, agent, representative, employee, or subcontractor of the applicant who has direct access to, or management or control of, controlled substance prescription forms, has ever been convicted of, or pled no contest to, a violation of any law of a foreign country, the United States, or any state, or of any local ordinance.(B) The department shall provide the applicant and any individual owner, partner, corporate officer, manager, agent, representative, employee, or subcontractor of the applicant who has direct access to, or management or control of, controlled substance prescription forms, with the means and direction to provide fingerprints and related information, in a manner specified by the department, for the purpose of completing state, federal, or foreign criminal background checks.(C) Any applicant described in subdivision (b) shall submit his or her fingerprint images and related information to the department, for the purpose of the department obtaining information as to the existence and nature of a record of state, federal, or foreign level convictions and state, federal, or foreign level arrests for which the department establishes that the applicant was released on bail or on his or her own recognizance pending trial, as described in subdivision (l) of Section 11105 of the Penal Code. Requests for federal level criminal offender record information received by the department pursuant to this section shall be forwarded to the Federal Bureau of Investigation by the department.(D) The department shall assess against each security printer applicant a fee determined by the department to be sufficient to cover all processing, maintenance, and investigative costs generated from or associated with completing state, federal, or foreign background checks and inspections of security printers pursuant to this section with respect to that applicant; the fee shall be paid by the applicant at the time he or she submits the security printer application, fingerprints, and related information to the department.(E) The department shall retain fingerprint impressions and related information for subsequent arrest notification pursuant to Section 11105.2 of the Penal Code for all applicants.(c) The department may, within 60 calendar days of receipt of the application from the applicant, deny the security printer application.(d) The department may deny a security printer application on any of the following grounds:(1) The applicant, any individual owner, partner, corporate officer, manager, agent, representative, employee, or subcontractor for the applicant, who has direct access, management, or control of controlled substance prescription forms, has been convicted of a crime. A conviction within the meaning of this paragraph means a plea or verdict of guilty or a conviction following a plea of nolo contendere. Any action which a board is permitted to take following the establishment of a conviction may be taken when the time for appeal has elapsed, the judgment of conviction has been affirmed on appeal, or when an order granting probation is made suspending the imposition of sentence, irrespective of a subsequent order under the provisions of Section 1203.4 of the Penal Code.(2) The applicant committed any act involving dishonesty, fraud, or deceit with the intent to substantially benefit himself, herself, or another, or substantially injure another.(3) The applicant committed any act that would constitute a violation of this division.(4) The applicant knowingly made a false statement of fact required to be revealed in the application to produce controlled substance prescription forms.(5) The department determines that the applicant failed to demonstrate adequate security procedures relating to the production and distribution of controlled substance prescription forms.(6) The department determines that the applicant has submitted an incomplete application.(7) As a condition for its approval as a security printer, an applicant shall authorize the Department of Justice to make any examination of the books and records of the applicant, or to visit and inspect the applicant during business hours, to the extent deemed necessary by the board or department to properly enforce this section.(e) An approved applicant shall submit an exemplar of a controlled substance prescription form, with all security features, to the Department of Justice within 30 days of initial production.(f) The department shall maintain a list of approved security printers and the department shall make this information available to prescribers and other appropriate government agencies, including the Board of Pharmacy.(g) Before printing any controlled substance prescription forms, a security printer shall verify with the appropriate licensing board that the prescriber possesses a license and current prescribing privileges which permits the prescribing of controlled substances with the federal Drug Enforcement Administration (DEA).(h) Controlled substance prescription forms shall be provided directly to the prescriber either in person, by certified mail, or by a means that requires a signature signifying receipt of the package and provision of that signature to the security printer. Controlled substance prescription forms provided in person shall be restricted to established customers. Security printers shall obtain a photo identification from the customer and maintain a log of this information. Controlled substance prescription forms shall be shipped only to the prescribers address on file and verified with the federal Drug Enforcement Administration or the Medical Board of California.(i) Security printers shall retain ordering and delivery records in a readily retrievable manner for individual prescribers for three years.(j) Security printers shall produce ordering and delivery records upon request by an authorized officer of the law as defined in Section 4017 of the Business and Professions Code.(k) Security printers shall report any theft or loss of controlled substance prescription forms to the Department of Justice via fax or email within 24 hours of the theft or loss.(l) (1) The department shall impose restrictions, sanctions, or penalties, subject to subdivisions (m) and (n), against security printers who are not in compliance with this division pursuant to regulations implemented pursuant to this division and shall revoke its approval of a security printer for a violation of this division or action that would permit a denial pursuant to subdivision (d) of this section.(2) When the department revokes its approval, it shall notify the appropriate licensing boards and remove the security printer from the list of approved security printers.(m) The following violations by security printers shall be punishable pursuant to subdivision (n):(1) Failure to comply with the Security Printer Guidelines established by the Security Printer Program as a condition of approval.(2) Failure to take reasonable precautions to prevent any dishonest act or illegal activity related to the access and control of security prescription forms.(3) Theft or fraudulent use of a prescribers identity in order to obtain security prescription forms.(n) A security printer approved pursuant to subdivision (b) shall be subject to the following penalties for actions leading to the denial of a security printer application specified in subdivision (d) or for a violation specified in subdivision (m):(1) For a first violation, a fine not to exceed one thousand dollars ($1,000).(2) For a second or subsequent violation, a fine not to exceed two thousand five hundred dollars ($2,500) for each violation.(3) For a third or subsequent violation, a filing of an administrative disciplinary action seeking to suspend or revoke security printer approval.(o) In order to facilitate the standardization of all prescription forms and the serialization of prescription forms with unique identifiers, the Department of Justice may cease issuing new approvals of security printers to the extent necessary to achieve these purposes. The department may, pursuant to regulation, reduce the number of currently approved security printers to no fewer than three vendors. The department shall ensure that any reduction or limitation of approved security printers does not impact the ability of vendors to meet demand for prescription forms.SEC. 3. Section 11162.1 of the Health and Safety Code is amended to read:11162.1. (a) The prescription forms for controlled substances shall be printed with the following features:(1) A latent, repetitive void pattern shall be printed across the entire front of the prescription blank; if a prescription is scanned or photocopied, the word void shall appear in a pattern across the entire front of the prescription.(2) A watermark shall be printed on the backside of the prescription blank; the watermark shall consist of the words California Security Prescription.(3) A chemical void protection that prevents alteration by chemical washing.(4) A feature printed in thermochromic ink.(5) An area of opaque writing so that the writing disappears if the prescription is lightened.(6) A description of the security features included on each prescription form.(7) (A) Six quantity check off boxes shall be printed on the form so that the prescriber may indicate the quantity by checking the applicable box where the following quantities shall appear:1242549507475100101150151 and over.(B) In conjunction with the quantity boxes, a space shall be provided to designate the units referenced in the quantity boxes when the drug is not in tablet or capsule form.(8) Prescription blanks shall contain a statement printed on the bottom of the prescription blank that the Prescription is void if the number of drugs prescribed is not noted.(9) The preprinted name, category of licensure, license number, federal controlled substance registration number, and address of the prescribing practitioner.(10) Check boxes shall be printed on the form so that the prescriber may indicate the number of refills ordered.(11) The date of origin of the prescription.(12) A check box indicating the prescribers order not to substitute.(13) An identifying number assigned to the approved security printer by the Department of Justice.(14) (A) A check box by the name of each prescriber when a prescription form lists multiple prescribers.(B) Each prescriber who signs the prescription form shall identify himself or herself as the prescriber by checking the box by his or her name.(15) A uniquely serialized number, in a manner prescribed by the Department of Justice.(b) Each batch of controlled substance prescription forms shall have the lot number printed on the form and each form within that batch shall be numbered sequentially beginning with the numeral one.(c) (1) A prescriber designated by a licensed health care facility, a clinic specified in Section 1200, or a clinic specified in subdivision (a) of Section 1206 that has 25 or more physicians or surgeons may order controlled substance prescription forms for use by prescribers when treating patients in that facility without the information required in paragraph (9) of subdivision (a) or paragraph (3) of this subdivision.(2) Forms ordered pursuant to this subdivision shall have the name, category of licensure, license number, and federal controlled substance registration number of the designated prescriber and the name, address, category of licensure, and license number of the licensed health care facility the clinic specified in Section 1200, or the clinic specified in Section 1206 that has 25 or more physicians or surgeons preprinted on the form. Licensed health care facilities or clinics exempt under Section 1206 are not required to preprint the category of licensure and license number of their facility or clinic.(3) Forms ordered pursuant to this section shall not be valid prescriptions without the name, category of licensure, license number, and federal controlled substance registration number of the prescriber on the form.(4) (A) Except as provided in subparagraph (B), the designated prescriber shall maintain a record of the prescribers to whom the controlled substance prescription forms are issued, that shall include the name, category of licensure, license number, federal controlled substance registration number, and quantity of controlled substance prescription forms issued to each prescriber. The record shall be maintained in the health facility for three years.(B) Forms ordered pursuant to this subdivision that are printed by a computerized prescription generation system shall not be subject to subparagraph (A) or paragraph (7) of subdivision (a). Forms printed pursuant to this subdivision that are printed by a computerized prescription generation system may contain the prescribers name, category of professional licensure, license number, federal controlled substance registration number, and the date of the prescription.(d) Within the next working day following delivery, a security printer shall submit via Web-based application, as specified by the Department of Justice, all of the following information for all prescription forms delivered:(1) Serial numbers of all prescription forms delivered.(2) All prescriber names and Drug Enforcement Administration Controlled Substance Registration Certificate numbers displayed on the prescription forms.(3) The delivery shipment recipient names.(4) The date of delivery.SEC. 4. Section 11165 of the Health and Safety Code is amended to read:11165. (a) To assist health care practitioners in their efforts to ensure appropriate prescribing, ordering, administering, furnishing, and dispensing of controlled substances, law enforcement and regulatory agencies in their efforts to control the diversion and resultant abuse of Schedule II, Schedule III, and Schedule IV controlled substances, and for statistical analysis, education, and research, the Department of Justice shall, contingent upon the availability of adequate funds in the CURES Fund, maintain the Controlled Substance Utilization Review and Evaluation System (CURES) for the electronic monitoring of, and Internet access to information regarding, the prescribing and dispensing of Schedule II, Schedule III, and Schedule IV controlled substances by all practitioners authorized to prescribe, order, administer, furnish, or dispense these controlled substances.(b) The Department of Justice may seek and use grant funds to pay the costs incurred by the operation and maintenance of CURES. The department shall annually report to the Legislature and make available to the public the amount and source of funds it receives for support of CURES.(c) (1) The operation of CURES shall comply with all applicable federal and state privacy and security laws and regulations.(2) (A) CURES shall operate under existing provisions of law to safeguard the privacy and confidentiality of patients. Data obtained from CURES shall only be provided to appropriate state, local, and federal public agencies for disciplinary, civil, or criminal purposes and to other agencies or entities, as determined by the Department of Justice, for the purpose of educating practitioners and others in lieu of disciplinary, civil, or criminal actions. Data may be provided to public or private entities, as approved by the Department of Justice, for educational, peer review, statistical, or research purposes, provided that patient information, including any information that may identify the patient, is not compromised. Further, data disclosed to any individual or agency as described in this subdivision shall not be disclosed, sold, or transferred to any third party, unless authorized by, or pursuant to, state and federal privacy and security laws and regulations. The Department of Justice shall establish policies, procedures, and regulations regarding the use, access, evaluation, management, implementation, operation, storage, disclosure, and security of the information within CURES, consistent with this subdivision.(B) Notwithstanding subparagraph (A), a regulatory board whose licensees do not prescribe, order, administer, furnish, or dispense controlled substances shall not be provided data obtained from CURES.(3) In accordance with federal and state privacy laws and regulations, a health care practitioner may provide a patient with a copy of the patients CURES patient activity report as long as no additional CURES data is provided and keep a copy of the report in the patients medical record in compliance with subdivision (d) of Section 11165.1.(d) For each prescription for a Schedule II, Schedule III, or Schedule IV controlled substance, as defined in the controlled substances schedules in federal law and regulations, specifically Sections 1308.12, 1308.13, and 1308.14, respectively, of Title 21 of the Code of Federal Regulations, the dispensing pharmacy, clinic, or other dispenser shall report the following information to the Department of Justice as soon as reasonably possible, but not more than seven days after the date a controlled substance is dispensed, in a format specified by the Department of Justice:(1) Full name, address, and, if available, telephone number of the ultimate user or research subject, or contact information as determined by the Secretary of the United States Department of Health and Human Services, and the gender, and date of birth of the ultimate user.(2) The prescribers category of licensure, license number, national provider identifier (NPI) number, if applicable, the federal controlled substance registration number, and the state medical license number of any prescriber using the federal controlled substance registration number of a government-exempt facility.(3) Pharmacy prescription number, license number, NPI number, and federal controlled substance registration number.(4) National Drug Code (NDC) number of the controlled substance dispensed.(5) Quantity of the controlled substance dispensed.(6) International Statistical Classification of Diseases, 9th revision (ICD-9) or 10th revision (ICD-10) Code, if available.(7) Number of refills ordered.(8) Whether the drug was dispensed as a refill of a prescription or as a first-time request.(9) Date of origin of the prescription.(10) Date of dispensing of the prescription.(11) The serial number for the corresponding prescription form, if applicable.(e) The Department of Justice may invite stakeholders to assist, advise, and make recommendations on the establishment of rules and regulations necessary to ensure the proper administration and enforcement of the CURES database. All prescriber and dispenser invitees shall be licensed by one of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, in active practice in California, and a regular user of CURES.(f) The Department of Justice shall, prior to upgrading CURES, consult with prescribers licensed by one of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, one or more of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, and any other stakeholder identified by the department, for the purpose of identifying desirable capabilities and upgrades to the CURES Prescription Drug Monitoring Program (PDMP).(g) The Department of Justice may establish a process to educate authorized subscribers of the CURES PDMP on how to access and use the CURES PDMP.SEC. 4.5. Section 11165 of the Health and Safety Code is amended to read:11165. (a) To assist health care practitioners in their efforts to ensure appropriate prescribing, ordering, administering, furnishing, and dispensing of controlled substances, law enforcement and regulatory agencies in their efforts to control the diversion and resultant abuse of Schedule II, Schedule III, and Schedule IV controlled substances, and for statistical analysis, education, and research, the Department of Justice shall, contingent upon the availability of adequate funds in the CURES Fund, maintain the Controlled Substance Utilization Review and Evaluation System (CURES) for the electronic monitoring of, and Internet access to information regarding, the prescribing and dispensing of Schedule II, Schedule III, and Schedule IV controlled substances by all practitioners authorized to prescribe, order, administer, furnish, or dispense these controlled substances.(b) The Department of Justice may seek and use grant funds to pay the costs incurred by the operation and maintenance of CURES. The department shall annually report to the Legislature and make available to the public the amount and source of funds it receives for support of CURES.(c) (1) The operation of CURES shall comply with all applicable federal and state privacy and security laws and regulations.(2) (A) CURES shall operate under existing provisions of law to safeguard the privacy and confidentiality of patients. Data obtained from CURES shall only be provided to appropriate state, local, and federal public agencies for disciplinary, civil, or criminal purposes and to other agencies or entities, as determined by the Department of Justice, for the purpose of educating practitioners and others in lieu of disciplinary, civil, or criminal actions. Data may be provided to public or private entities, as approved by the Department of Justice, for educational, peer review, statistical, or research purposes, if patient information, including any information that may identify the patient, is not compromised. Further, data disclosed to any individual or agency as described in this subdivision shall not be disclosed, sold, or transferred to any third party, unless authorized by, or pursuant to, state and federal privacy and security laws and regulations. The Department of Justice shall establish policies, procedures, and regulations regarding the use, access, evaluation, management, implementation, operation, storage, disclosure, and security of the information within CURES, consistent with this subdivision.(B) Notwithstanding subparagraph (A), a regulatory board whose licensees do not prescribe, order, administer, furnish, or dispense controlled substances shall not be provided data obtained from CURES.(3) The Department of Justice shall, no later than July 1, 2020, adopt regulations regarding the access and use of the information within CURES. The Department of Justice shall consult with all stakeholders identified by the department during the rulemaking process. The regulations shall, at a minimum, address all of the following in a manner consistent with this chapter:(A) The process for approving, denying, and disapproving individuals or entities seeking access to information in CURES.(B) The purposes for which a health care practitioner may access information in CURES.(C) The conditions under which a warrant, subpoena, or court order is required for a law enforcement agency to obtain information from CURES as part of a criminal investigation.(D) The process by which information in CURES may be provided for educational, peer review, statistical, or research purposes.(4) In accordance with federal and state privacy laws and regulations, a health care practitioner may provide a patient with a copy of the patients CURES patient activity report as long as no additional CURES data are provided and keep a copy of the report in the patients medical record in compliance with subdivision (d) of Section 11165.1.(d) For each prescription for a Schedule II, Schedule III, or Schedule IV controlled substance, as defined in the controlled substances schedules in federal law and regulations, specifically Sections 1308.12, 1308.13, and 1308.14, respectively, of Title 21 of the Code of Federal Regulations, the dispensing pharmacy, clinic, or other dispenser shall report the following information to the Department of Justice as soon as reasonably possible, but not more than seven days after the date a controlled substance is dispensed, in a format specified by the Department of Justice:(1) Full name, address, and, if available, telephone number of the ultimate user or research subject, or contact information as determined by the Secretary of the United States Department of Health and Human Services, and the gender, and date of birth of the ultimate user.(2) The prescribers category of licensure, license number, national provider identifier (NPI) number, the federal controlled substance registration number, and the state medical license number of any prescriber using the federal controlled substance registration number of a government-exempt facility, if provided.(3) Pharmacy prescription number, license number, NPI number, and federal controlled substance registration number.(4) National Drug Code (NDC) number of the controlled substance dispensed.(5) Quantity of the controlled substance dispensed.(6) International Statistical Classification of Diseases, 9th revision (ICD-9) or 10th revision (ICD-10) Code, if available.(7) Number of refills ordered.(8) Whether the drug was dispensed as a refill of a prescription or as a first-time request.(9) Date of origin of the prescription.(10) Date of dispensing of the prescription.(11) The serial number for the corresponding prescription form, if applicable.(e) The Department of Justice may invite stakeholders to assist, advise, and make recommendations on the establishment of rules and regulations necessary to ensure the proper administration and enforcement of the CURES database. All prescriber and dispenser invitees shall be licensed by one of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, in active practice in California, and a regular user of CURES.(f) The Department of Justice shall, prior to upgrading CURES, consult with prescribers licensed by one of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, one or more of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, and any other stakeholder identified by the department, for the purpose of identifying desirable capabilities and upgrades to the CURES Prescription Drug Monitoring Program (PDMP).(g) The Department of Justice may establish a process to educate authorized subscribers of the CURES PDMP on how to access and use the CURES PDMP.(h) (1) The Department of Justice may enter into an agreement with any entity operating an interstate data sharing hub, or any agency operating a prescription drug monitoring program in another state, for purposes of interstate data sharing of prescription drug monitoring program information.(2) Data obtained from CURES may be provided to authorized users of another states prescription drug monitoring program, as determined by the Department of Justice pursuant to subdivision (c), if the entity operating the interstate data sharing hub, and the prescription drug monitoring program of that state, as applicable, have entered into an agreement with the Department of Justice for interstate data sharing of prescription drug monitoring program information.(3) Any agreement entered into by the Department of Justice for purposes of interstate data sharing of prescription drug monitoring program information shall ensure that all access to data obtained from CURES and the handling of data contained within CURES comply with California law, including regulations, and meet the same patient privacy, audit, and data security standards employed and required for direct access to CURES.(4) For purposes of interstate data sharing of CURES information pursuant to this subdivision, an authorized user of another states prescription drug monitoring program shall not be required to register with CURES, if he or she is registered and in good standing with that states prescription drug monitoring program.(5) The Department of Justice shall not enter into an agreement pursuant to this subdivision until the department has issued final regulations regarding the access and use of the information within CURES as required by paragraph (3) of subdivision (c).SEC. 5. Section 4.5 of this bill incorporates amendments to Section 11165 of the Health and Safety Code proposed by both this bill and Assembly Bill 1751. That section of this bill shall only become operative if (1) both bills are enacted and become effective on or before January 1, 2019, (2) each bill amends Section 11165 of the Health and Safety Code, and (3) this bill is enacted after Assembly Bill 1751, in which case Section 4 of this bill shall not become operative.
1+Enrolled September 04, 2018 Passed IN Senate August 29, 2018 Passed IN Assembly August 30, 2018 Amended IN Senate August 24, 2018 Amended IN Assembly April 18, 2018 CALIFORNIA LEGISLATURE 20172018 REGULAR SESSION Assembly Bill No. 1753Introduced by Assembly Member LowJanuary 03, 2018 An act to amend Sections 11161.5, 11162.1, and 11165 of the Health and Safety Code, relating to controlled substances. LEGISLATIVE COUNSEL'S DIGESTAB 1753, Low. Controlled substances: CURES database.Existing law classifies certain controlled substances into designated schedules. Existing law requires the Department of Justice to maintain the Controlled Substance Utilization Review and Evaluation System (CURES) for the electronic monitoring of the prescribing and dispensing of Schedule II, Schedule III, and Schedule IV controlled substances by a health care practitioner authorized to prescribe, order, administer, furnish, or dispense a Schedule II, Schedule III, or Schedule IV controlled substance. Existing law requires prescription forms for controlled substance prescriptions to be obtained from security printers approved by the department, as specified. Existing law requires a dispensing pharmacy, clinic, or other dispenser to report specified information to the department.This bill would authorize the department to reduce or limit the number of approved printers to 3, as specified. The bill would require prescription forms for controlled substance prescriptions to have a uniquely serialized number, in a manner prescribed by the department, and would require a printer to submit specified information to the department for all prescription forms delivered. The bill would require the information submitted by a dispensing pharmacy, clinic, or other dispenser to the department to include the serial number for the corresponding prescription form, if applicable.This bill would incorporate additional changes to Section 11165 of the Health and Safety Code proposed by AB 1751 to be operative only if this bill and AB 1751 are enacted and this bill is enacted last.Digest Key Vote: MAJORITY Appropriation: NO Fiscal Committee: YES Local Program: NO Bill TextThe people of the State of California do enact as follows:SECTION 1. The Legislature finds and declares the following:(a) The prevailing use of paper prescription pads to prescribe controlled substances leads to significant instances of theft and fraud each year, contributing to the prescription drug abuse crisis and fueling criminal enterprises engaged in drug diversion.(b) Prescribing controlled substances by means of electronic transmission prescription, or e-prescribing, has long been considered the most effective way to combat prescription pad theft and fraud.(c) Many states have begun to require that all controlled substances be prescribed electronically as a means of addressing the public health and public safety crises associated with prescription drug abuse and diversion.(d) Until mandatory e-prescribing is established in California, it is critical that tighter restrictions be placed on the manufacturing and tracking of prescription pads used within the state.SEC. 2. Section 11161.5 of the Health and Safety Code is amended to read:11161.5. (a) Prescription forms for controlled substance prescriptions shall be obtained from security printers approved by the Department of Justice.(b) The department may approve security printer applications after the applicant has provided the following information:(1) Name, address, and telephone number of the applicant.(2) Policies and procedures of the applicant for verifying the identity of the prescriber ordering controlled substance prescription forms.(3) Policies and procedures of the applicant for verifying delivery of controlled substance prescription forms to prescribers.(4) (A) The location, names, and titles of the applicants agent for service of process in this state; all principal corporate officers, if any; all managing general partners, if any; and any individual owner, partner, corporate officer, manager, agent, representative, employee, or subcontractor of the applicant who has direct access to, or management or control of, controlled substance prescription forms.(B) A report containing this information shall be made on an annual basis and within 30 days after any change of office, principal corporate officers, managing general partner, or of any person described in subparagraph (A).(5) (A) A signed statement indicating whether the applicant, any principal corporate officer, any managing general partner, or any individual owner, partner, corporate officer, manager, agent, representative, employee, or subcontractor of the applicant who has direct access to, or management or control of, controlled substance prescription forms, has ever been convicted of, or pled no contest to, a violation of any law of a foreign country, the United States, or any state, or of any local ordinance.(B) The department shall provide the applicant and any individual owner, partner, corporate officer, manager, agent, representative, employee, or subcontractor of the applicant who has direct access to, or management or control of, controlled substance prescription forms, with the means and direction to provide fingerprints and related information, in a manner specified by the department, for the purpose of completing state, federal, or foreign criminal background checks.(C) Any applicant described in subdivision (b) shall submit his or her fingerprint images and related information to the department, for the purpose of the department obtaining information as to the existence and nature of a record of state, federal, or foreign level convictions and state, federal, or foreign level arrests for which the department establishes that the applicant was released on bail or on his or her own recognizance pending trial, as described in subdivision (l) of Section 11105 of the Penal Code. Requests for federal level criminal offender record information received by the department pursuant to this section shall be forwarded to the Federal Bureau of Investigation by the department.(D) The department shall assess against each security printer applicant a fee determined by the department to be sufficient to cover all processing, maintenance, and investigative costs generated from or associated with completing state, federal, or foreign background checks and inspections of security printers pursuant to this section with respect to that applicant; the fee shall be paid by the applicant at the time he or she submits the security printer application, fingerprints, and related information to the department.(E) The department shall retain fingerprint impressions and related information for subsequent arrest notification pursuant to Section 11105.2 of the Penal Code for all applicants.(c) The department may, within 60 calendar days of receipt of the application from the applicant, deny the security printer application.(d) The department may deny a security printer application on any of the following grounds:(1) The applicant, any individual owner, partner, corporate officer, manager, agent, representative, employee, or subcontractor for the applicant, who has direct access, management, or control of controlled substance prescription forms, has been convicted of a crime. A conviction within the meaning of this paragraph means a plea or verdict of guilty or a conviction following a plea of nolo contendere. Any action which a board is permitted to take following the establishment of a conviction may be taken when the time for appeal has elapsed, the judgment of conviction has been affirmed on appeal, or when an order granting probation is made suspending the imposition of sentence, irrespective of a subsequent order under the provisions of Section 1203.4 of the Penal Code.(2) The applicant committed any act involving dishonesty, fraud, or deceit with the intent to substantially benefit himself, herself, or another, or substantially injure another.(3) The applicant committed any act that would constitute a violation of this division.(4) The applicant knowingly made a false statement of fact required to be revealed in the application to produce controlled substance prescription forms.(5) The department determines that the applicant failed to demonstrate adequate security procedures relating to the production and distribution of controlled substance prescription forms.(6) The department determines that the applicant has submitted an incomplete application.(7) As a condition for its approval as a security printer, an applicant shall authorize the Department of Justice to make any examination of the books and records of the applicant, or to visit and inspect the applicant during business hours, to the extent deemed necessary by the board or department to properly enforce this section.(e) An approved applicant shall submit an exemplar of a controlled substance prescription form, with all security features, to the Department of Justice within 30 days of initial production.(f) The department shall maintain a list of approved security printers and the department shall make this information available to prescribers and other appropriate government agencies, including the Board of Pharmacy.(g) Before printing any controlled substance prescription forms, a security printer shall verify with the appropriate licensing board that the prescriber possesses a license and current prescribing privileges which permits the prescribing of controlled substances with the federal Drug Enforcement Administration (DEA).(h) Controlled substance prescription forms shall be provided directly to the prescriber either in person, by certified mail, or by a means that requires a signature signifying receipt of the package and provision of that signature to the security printer. Controlled substance prescription forms provided in person shall be restricted to established customers. Security printers shall obtain a photo identification from the customer and maintain a log of this information. Controlled substance prescription forms shall be shipped only to the prescribers address on file and verified with the federal Drug Enforcement Administration or the Medical Board of California.(i) Security printers shall retain ordering and delivery records in a readily retrievable manner for individual prescribers for three years.(j) Security printers shall produce ordering and delivery records upon request by an authorized officer of the law as defined in Section 4017 of the Business and Professions Code.(k) Security printers shall report any theft or loss of controlled substance prescription forms to the Department of Justice via fax or email within 24 hours of the theft or loss.(l) (1) The department shall impose restrictions, sanctions, or penalties, subject to subdivisions (m) and (n), against security printers who are not in compliance with this division pursuant to regulations implemented pursuant to this division and shall revoke its approval of a security printer for a violation of this division or action that would permit a denial pursuant to subdivision (d) of this section.(2) When the department revokes its approval, it shall notify the appropriate licensing boards and remove the security printer from the list of approved security printers.(m) The following violations by security printers shall be punishable pursuant to subdivision (n):(1) Failure to comply with the Security Printer Guidelines established by the Security Printer Program as a condition of approval.(2) Failure to take reasonable precautions to prevent any dishonest act or illegal activity related to the access and control of security prescription forms.(3) Theft or fraudulent use of a prescribers identity in order to obtain security prescription forms.(n) A security printer approved pursuant to subdivision (b) shall be subject to the following penalties for actions leading to the denial of a security printer application specified in subdivision (d) or for a violation specified in subdivision (m):(1) For a first violation, a fine not to exceed one thousand dollars ($1,000).(2) For a second or subsequent violation, a fine not to exceed two thousand five hundred dollars ($2,500) for each violation.(3) For a third or subsequent violation, a filing of an administrative disciplinary action seeking to suspend or revoke security printer approval.(o) In order to facilitate the standardization of all prescription forms and the serialization of prescription forms with unique identifiers, the Department of Justice may cease issuing new approvals of security printers to the extent necessary to achieve these purposes. The department may, pursuant to regulation, reduce the number of currently approved security printers to no fewer than three vendors. The department shall ensure that any reduction or limitation of approved security printers does not impact the ability of vendors to meet demand for prescription forms.SEC. 3. Section 11162.1 of the Health and Safety Code is amended to read:11162.1. (a) The prescription forms for controlled substances shall be printed with the following features:(1) A latent, repetitive void pattern shall be printed across the entire front of the prescription blank; if a prescription is scanned or photocopied, the word void shall appear in a pattern across the entire front of the prescription.(2) A watermark shall be printed on the backside of the prescription blank; the watermark shall consist of the words California Security Prescription.(3) A chemical void protection that prevents alteration by chemical washing.(4) A feature printed in thermochromic ink.(5) An area of opaque writing so that the writing disappears if the prescription is lightened.(6) A description of the security features included on each prescription form.(7) (A) Six quantity check off boxes shall be printed on the form so that the prescriber may indicate the quantity by checking the applicable box where the following quantities shall appear:1242549507475100101150151 and over.(B) In conjunction with the quantity boxes, a space shall be provided to designate the units referenced in the quantity boxes when the drug is not in tablet or capsule form.(8) Prescription blanks shall contain a statement printed on the bottom of the prescription blank that the Prescription is void if the number of drugs prescribed is not noted.(9) The preprinted name, category of licensure, license number, federal controlled substance registration number, and address of the prescribing practitioner.(10) Check boxes shall be printed on the form so that the prescriber may indicate the number of refills ordered.(11) The date of origin of the prescription.(12) A check box indicating the prescribers order not to substitute.(13) An identifying number assigned to the approved security printer by the Department of Justice.(14) (A) A check box by the name of each prescriber when a prescription form lists multiple prescribers.(B) Each prescriber who signs the prescription form shall identify himself or herself as the prescriber by checking the box by his or her name.(15) A uniquely serialized number, in a manner prescribed by the Department of Justice.(b) Each batch of controlled substance prescription forms shall have the lot number printed on the form and each form within that batch shall be numbered sequentially beginning with the numeral one.(c) (1) A prescriber designated by a licensed health care facility, a clinic specified in Section 1200, or a clinic specified in subdivision (a) of Section 1206 that has 25 or more physicians or surgeons may order controlled substance prescription forms for use by prescribers when treating patients in that facility without the information required in paragraph (9) of subdivision (a) or paragraph (3) of this subdivision.(2) Forms ordered pursuant to this subdivision shall have the name, category of licensure, license number, and federal controlled substance registration number of the designated prescriber and the name, address, category of licensure, and license number of the licensed health care facility the clinic specified in Section 1200, or the clinic specified in Section 1206 that has 25 or more physicians or surgeons preprinted on the form. Licensed health care facilities or clinics exempt under Section 1206 are not required to preprint the category of licensure and license number of their facility or clinic.(3) Forms ordered pursuant to this section shall not be valid prescriptions without the name, category of licensure, license number, and federal controlled substance registration number of the prescriber on the form.(4) (A) Except as provided in subparagraph (B), the designated prescriber shall maintain a record of the prescribers to whom the controlled substance prescription forms are issued, that shall include the name, category of licensure, license number, federal controlled substance registration number, and quantity of controlled substance prescription forms issued to each prescriber. The record shall be maintained in the health facility for three years.(B) Forms ordered pursuant to this subdivision that are printed by a computerized prescription generation system shall not be subject to subparagraph (A) or paragraph (7) of subdivision (a). Forms printed pursuant to this subdivision that are printed by a computerized prescription generation system may contain the prescribers name, category of professional licensure, license number, federal controlled substance registration number, and the date of the prescription.(d) Within the next working day following delivery, a security printer shall submit via Web-based application, as specified by the Department of Justice, all of the following information for all prescription forms delivered:(1) Serial numbers of all prescription forms delivered.(2) All prescriber names and Drug Enforcement Administration Controlled Substance Registration Certificate numbers displayed on the prescription forms.(3) The delivery shipment recipient names.(4) The date of delivery.SEC. 4. Section 11165 of the Health and Safety Code is amended to read:11165. (a) To assist health care practitioners in their efforts to ensure appropriate prescribing, ordering, administering, furnishing, and dispensing of controlled substances, law enforcement and regulatory agencies in their efforts to control the diversion and resultant abuse of Schedule II, Schedule III, and Schedule IV controlled substances, and for statistical analysis, education, and research, the Department of Justice shall, contingent upon the availability of adequate funds in the CURES Fund, maintain the Controlled Substance Utilization Review and Evaluation System (CURES) for the electronic monitoring of, and Internet access to information regarding, the prescribing and dispensing of Schedule II, Schedule III, and Schedule IV controlled substances by all practitioners authorized to prescribe, order, administer, furnish, or dispense these controlled substances.(b) The Department of Justice may seek and use grant funds to pay the costs incurred by the operation and maintenance of CURES. The department shall annually report to the Legislature and make available to the public the amount and source of funds it receives for support of CURES.(c) (1) The operation of CURES shall comply with all applicable federal and state privacy and security laws and regulations.(2) (A) CURES shall operate under existing provisions of law to safeguard the privacy and confidentiality of patients. Data obtained from CURES shall only be provided to appropriate state, local, and federal public agencies for disciplinary, civil, or criminal purposes and to other agencies or entities, as determined by the Department of Justice, for the purpose of educating practitioners and others in lieu of disciplinary, civil, or criminal actions. Data may be provided to public or private entities, as approved by the Department of Justice, for educational, peer review, statistical, or research purposes, provided that patient information, including any information that may identify the patient, is not compromised. Further, data disclosed to any individual or agency as described in this subdivision shall not be disclosed, sold, or transferred to any third party, unless authorized by, or pursuant to, state and federal privacy and security laws and regulations. The Department of Justice shall establish policies, procedures, and regulations regarding the use, access, evaluation, management, implementation, operation, storage, disclosure, and security of the information within CURES, consistent with this subdivision.(B) Notwithstanding subparagraph (A), a regulatory board whose licensees do not prescribe, order, administer, furnish, or dispense controlled substances shall not be provided data obtained from CURES.(3) In accordance with federal and state privacy laws and regulations, a health care practitioner may provide a patient with a copy of the patients CURES patient activity report as long as no additional CURES data is provided and keep a copy of the report in the patients medical record in compliance with subdivision (d) of Section 11165.1.(d) For each prescription for a Schedule II, Schedule III, or Schedule IV controlled substance, as defined in the controlled substances schedules in federal law and regulations, specifically Sections 1308.12, 1308.13, and 1308.14, respectively, of Title 21 of the Code of Federal Regulations, the dispensing pharmacy, clinic, or other dispenser shall report the following information to the Department of Justice as soon as reasonably possible, but not more than seven days after the date a controlled substance is dispensed, in a format specified by the Department of Justice:(1) Full name, address, and, if available, telephone number of the ultimate user or research subject, or contact information as determined by the Secretary of the United States Department of Health and Human Services, and the gender, and date of birth of the ultimate user.(2) The prescribers category of licensure, license number, national provider identifier (NPI) number, if applicable, the federal controlled substance registration number, and the state medical license number of any prescriber using the federal controlled substance registration number of a government-exempt facility.(3) Pharmacy prescription number, license number, NPI number, and federal controlled substance registration number.(4) National Drug Code (NDC) number of the controlled substance dispensed.(5) Quantity of the controlled substance dispensed.(6) International Statistical Classification of Diseases, 9th revision (ICD-9) or 10th revision (ICD-10) Code, if available.(7) Number of refills ordered.(8) Whether the drug was dispensed as a refill of a prescription or as a first-time request.(9) Date of origin of the prescription.(10) Date of dispensing of the prescription.(11) The serial number for the corresponding prescription form, if applicable.(e) The Department of Justice may invite stakeholders to assist, advise, and make recommendations on the establishment of rules and regulations necessary to ensure the proper administration and enforcement of the CURES database. All prescriber and dispenser invitees shall be licensed by one of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, in active practice in California, and a regular user of CURES.(f) The Department of Justice shall, prior to upgrading CURES, consult with prescribers licensed by one of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, one or more of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, and any other stakeholder identified by the department, for the purpose of identifying desirable capabilities and upgrades to the CURES Prescription Drug Monitoring Program (PDMP).(g) The Department of Justice may establish a process to educate authorized subscribers of the CURES PDMP on how to access and use the CURES PDMP.SEC. 4.5. Section 11165 of the Health and Safety Code is amended to read:11165. (a) To assist health care practitioners in their efforts to ensure appropriate prescribing, ordering, administering, furnishing, and dispensing of controlled substances, law enforcement and regulatory agencies in their efforts to control the diversion and resultant abuse of Schedule II, Schedule III, and Schedule IV controlled substances, and for statistical analysis, education, and research, the Department of Justice shall, contingent upon the availability of adequate funds in the CURES Fund, maintain the Controlled Substance Utilization Review and Evaluation System (CURES) for the electronic monitoring of, and Internet access to information regarding, the prescribing and dispensing of Schedule II, Schedule III, and Schedule IV controlled substances by all practitioners authorized to prescribe, order, administer, furnish, or dispense these controlled substances.(b) The Department of Justice may seek and use grant funds to pay the costs incurred by the operation and maintenance of CURES. The department shall annually report to the Legislature and make available to the public the amount and source of funds it receives for support of CURES.(c) (1) The operation of CURES shall comply with all applicable federal and state privacy and security laws and regulations.(2) (A) CURES shall operate under existing provisions of law to safeguard the privacy and confidentiality of patients. Data obtained from CURES shall only be provided to appropriate state, local, and federal public agencies for disciplinary, civil, or criminal purposes and to other agencies or entities, as determined by the Department of Justice, for the purpose of educating practitioners and others in lieu of disciplinary, civil, or criminal actions. Data may be provided to public or private entities, as approved by the Department of Justice, for educational, peer review, statistical, or research purposes, if patient information, including any information that may identify the patient, is not compromised. Further, data disclosed to any individual or agency as described in this subdivision shall not be disclosed, sold, or transferred to any third party, unless authorized by, or pursuant to, state and federal privacy and security laws and regulations. The Department of Justice shall establish policies, procedures, and regulations regarding the use, access, evaluation, management, implementation, operation, storage, disclosure, and security of the information within CURES, consistent with this subdivision.(B) Notwithstanding subparagraph (A), a regulatory board whose licensees do not prescribe, order, administer, furnish, or dispense controlled substances shall not be provided data obtained from CURES.(3) The Department of Justice shall, no later than July 1, 2020, adopt regulations regarding the access and use of the information within CURES. The Department of Justice shall consult with all stakeholders identified by the department during the rulemaking process. The regulations shall, at a minimum, address all of the following in a manner consistent with this chapter:(A) The process for approving, denying, and disapproving individuals or entities seeking access to information in CURES.(B) The purposes for which a health care practitioner may access information in CURES.(C) The conditions under which a warrant, subpoena, or court order is required for a law enforcement agency to obtain information from CURES as part of a criminal investigation.(D) The process by which information in CURES may be provided for educational, peer review, statistical, or research purposes.(4) In accordance with federal and state privacy laws and regulations, a health care practitioner may provide a patient with a copy of the patients CURES patient activity report as long as no additional CURES data are provided and keep a copy of the report in the patients medical record in compliance with subdivision (d) of Section 11165.1.(d) For each prescription for a Schedule II, Schedule III, or Schedule IV controlled substance, as defined in the controlled substances schedules in federal law and regulations, specifically Sections 1308.12, 1308.13, and 1308.14, respectively, of Title 21 of the Code of Federal Regulations, the dispensing pharmacy, clinic, or other dispenser shall report the following information to the Department of Justice as soon as reasonably possible, but not more than seven days after the date a controlled substance is dispensed, in a format specified by the Department of Justice:(1) Full name, address, and, if available, telephone number of the ultimate user or research subject, or contact information as determined by the Secretary of the United States Department of Health and Human Services, and the gender, and date of birth of the ultimate user.(2) The prescribers category of licensure, license number, national provider identifier (NPI) number, the federal controlled substance registration number, and the state medical license number of any prescriber using the federal controlled substance registration number of a government-exempt facility, if provided.(3) Pharmacy prescription number, license number, NPI number, and federal controlled substance registration number.(4) National Drug Code (NDC) number of the controlled substance dispensed.(5) Quantity of the controlled substance dispensed.(6) International Statistical Classification of Diseases, 9th revision (ICD-9) or 10th revision (ICD-10) Code, if available.(7) Number of refills ordered.(8) Whether the drug was dispensed as a refill of a prescription or as a first-time request.(9) Date of origin of the prescription.(10) Date of dispensing of the prescription.(11) The serial number for the corresponding prescription form, if applicable.(e) The Department of Justice may invite stakeholders to assist, advise, and make recommendations on the establishment of rules and regulations necessary to ensure the proper administration and enforcement of the CURES database. All prescriber and dispenser invitees shall be licensed by one of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, in active practice in California, and a regular user of CURES.(f) The Department of Justice shall, prior to upgrading CURES, consult with prescribers licensed by one of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, one or more of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, and any other stakeholder identified by the department, for the purpose of identifying desirable capabilities and upgrades to the CURES Prescription Drug Monitoring Program (PDMP).(g) The Department of Justice may establish a process to educate authorized subscribers of the CURES PDMP on how to access and use the CURES PDMP.(h) (1) The Department of Justice may enter into an agreement with any entity operating an interstate data sharing hub, or any agency operating a prescription drug monitoring program in another state, for purposes of interstate data sharing of prescription drug monitoring program information.(2) Data obtained from CURES may be provided to authorized users of another states prescription drug monitoring program, as determined by the Department of Justice pursuant to subdivision (c), if the entity operating the interstate data sharing hub, and the prescription drug monitoring program of that state, as applicable, have entered into an agreement with the Department of Justice for interstate data sharing of prescription drug monitoring program information.(3) Any agreement entered into by the Department of Justice for purposes of interstate data sharing of prescription drug monitoring program information shall ensure that all access to data obtained from CURES and the handling of data contained within CURES comply with California law, including regulations, and meet the same patient privacy, audit, and data security standards employed and required for direct access to CURES.(4) For purposes of interstate data sharing of CURES information pursuant to this subdivision, an authorized user of another states prescription drug monitoring program shall not be required to register with CURES, if he or she is registered and in good standing with that states prescription drug monitoring program.(5) The Department of Justice shall not enter into an agreement pursuant to this subdivision until the department has issued final regulations regarding the access and use of the information within CURES as required by paragraph (3) of subdivision (c).SEC. 5. Section 4.5 of this bill incorporates amendments to Section 11165 of the Health and Safety Code proposed by both this bill and Assembly Bill 1751. That section of this bill shall only become operative if (1) both bills are enacted and become effective on or before January 1, 2019, (2) each bill amends Section 11165 of the Health and Safety Code, and (3) this bill is enacted after Assembly Bill 1751, in which case Section 4 of this bill shall not become operative.
22
3- Assembly Bill No. 1753 CHAPTER 479 An act to amend Sections 11161.5, 11162.1, and 11165 of the Health and Safety Code, relating to controlled substances. [ Approved by Governor September 18, 2018. Filed with Secretary of State September 18, 2018. ] LEGISLATIVE COUNSEL'S DIGESTAB 1753, Low. Controlled substances: CURES database.Existing law classifies certain controlled substances into designated schedules. Existing law requires the Department of Justice to maintain the Controlled Substance Utilization Review and Evaluation System (CURES) for the electronic monitoring of the prescribing and dispensing of Schedule II, Schedule III, and Schedule IV controlled substances by a health care practitioner authorized to prescribe, order, administer, furnish, or dispense a Schedule II, Schedule III, or Schedule IV controlled substance. Existing law requires prescription forms for controlled substance prescriptions to be obtained from security printers approved by the department, as specified. Existing law requires a dispensing pharmacy, clinic, or other dispenser to report specified information to the department.This bill would authorize the department to reduce or limit the number of approved printers to 3, as specified. The bill would require prescription forms for controlled substance prescriptions to have a uniquely serialized number, in a manner prescribed by the department, and would require a printer to submit specified information to the department for all prescription forms delivered. The bill would require the information submitted by a dispensing pharmacy, clinic, or other dispenser to the department to include the serial number for the corresponding prescription form, if applicable.This bill would incorporate additional changes to Section 11165 of the Health and Safety Code proposed by AB 1751 to be operative only if this bill and AB 1751 are enacted and this bill is enacted last.Digest Key Vote: MAJORITY Appropriation: NO Fiscal Committee: YES Local Program: NO
3+ Enrolled September 04, 2018 Passed IN Senate August 29, 2018 Passed IN Assembly August 30, 2018 Amended IN Senate August 24, 2018 Amended IN Assembly April 18, 2018 CALIFORNIA LEGISLATURE 20172018 REGULAR SESSION Assembly Bill No. 1753Introduced by Assembly Member LowJanuary 03, 2018 An act to amend Sections 11161.5, 11162.1, and 11165 of the Health and Safety Code, relating to controlled substances. LEGISLATIVE COUNSEL'S DIGESTAB 1753, Low. Controlled substances: CURES database.Existing law classifies certain controlled substances into designated schedules. Existing law requires the Department of Justice to maintain the Controlled Substance Utilization Review and Evaluation System (CURES) for the electronic monitoring of the prescribing and dispensing of Schedule II, Schedule III, and Schedule IV controlled substances by a health care practitioner authorized to prescribe, order, administer, furnish, or dispense a Schedule II, Schedule III, or Schedule IV controlled substance. Existing law requires prescription forms for controlled substance prescriptions to be obtained from security printers approved by the department, as specified. Existing law requires a dispensing pharmacy, clinic, or other dispenser to report specified information to the department.This bill would authorize the department to reduce or limit the number of approved printers to 3, as specified. The bill would require prescription forms for controlled substance prescriptions to have a uniquely serialized number, in a manner prescribed by the department, and would require a printer to submit specified information to the department for all prescription forms delivered. The bill would require the information submitted by a dispensing pharmacy, clinic, or other dispenser to the department to include the serial number for the corresponding prescription form, if applicable.This bill would incorporate additional changes to Section 11165 of the Health and Safety Code proposed by AB 1751 to be operative only if this bill and AB 1751 are enacted and this bill is enacted last.Digest Key Vote: MAJORITY Appropriation: NO Fiscal Committee: YES Local Program: NO
4+
5+ Enrolled September 04, 2018 Passed IN Senate August 29, 2018 Passed IN Assembly August 30, 2018 Amended IN Senate August 24, 2018 Amended IN Assembly April 18, 2018
6+
7+Enrolled September 04, 2018
8+Passed IN Senate August 29, 2018
9+Passed IN Assembly August 30, 2018
10+Amended IN Senate August 24, 2018
11+Amended IN Assembly April 18, 2018
12+
13+ CALIFORNIA LEGISLATURE 20172018 REGULAR SESSION
414
515 Assembly Bill No. 1753
6-CHAPTER 479
16+
17+Introduced by Assembly Member LowJanuary 03, 2018
18+
19+Introduced by Assembly Member Low
20+January 03, 2018
721
822 An act to amend Sections 11161.5, 11162.1, and 11165 of the Health and Safety Code, relating to controlled substances.
9-
10- [ Approved by Governor September 18, 2018. Filed with Secretary of State September 18, 2018. ]
1123
1224 LEGISLATIVE COUNSEL'S DIGEST
1325
1426 ## LEGISLATIVE COUNSEL'S DIGEST
1527
1628 AB 1753, Low. Controlled substances: CURES database.
1729
1830 Existing law classifies certain controlled substances into designated schedules. Existing law requires the Department of Justice to maintain the Controlled Substance Utilization Review and Evaluation System (CURES) for the electronic monitoring of the prescribing and dispensing of Schedule II, Schedule III, and Schedule IV controlled substances by a health care practitioner authorized to prescribe, order, administer, furnish, or dispense a Schedule II, Schedule III, or Schedule IV controlled substance. Existing law requires prescription forms for controlled substance prescriptions to be obtained from security printers approved by the department, as specified. Existing law requires a dispensing pharmacy, clinic, or other dispenser to report specified information to the department.This bill would authorize the department to reduce or limit the number of approved printers to 3, as specified. The bill would require prescription forms for controlled substance prescriptions to have a uniquely serialized number, in a manner prescribed by the department, and would require a printer to submit specified information to the department for all prescription forms delivered. The bill would require the information submitted by a dispensing pharmacy, clinic, or other dispenser to the department to include the serial number for the corresponding prescription form, if applicable.This bill would incorporate additional changes to Section 11165 of the Health and Safety Code proposed by AB 1751 to be operative only if this bill and AB 1751 are enacted and this bill is enacted last.
1931
2032 Existing law classifies certain controlled substances into designated schedules. Existing law requires the Department of Justice to maintain the Controlled Substance Utilization Review and Evaluation System (CURES) for the electronic monitoring of the prescribing and dispensing of Schedule II, Schedule III, and Schedule IV controlled substances by a health care practitioner authorized to prescribe, order, administer, furnish, or dispense a Schedule II, Schedule III, or Schedule IV controlled substance. Existing law requires prescription forms for controlled substance prescriptions to be obtained from security printers approved by the department, as specified. Existing law requires a dispensing pharmacy, clinic, or other dispenser to report specified information to the department.
2133
2234 This bill would authorize the department to reduce or limit the number of approved printers to 3, as specified. The bill would require prescription forms for controlled substance prescriptions to have a uniquely serialized number, in a manner prescribed by the department, and would require a printer to submit specified information to the department for all prescription forms delivered. The bill would require the information submitted by a dispensing pharmacy, clinic, or other dispenser to the department to include the serial number for the corresponding prescription form, if applicable.
2335
2436 This bill would incorporate additional changes to Section 11165 of the Health and Safety Code proposed by AB 1751 to be operative only if this bill and AB 1751 are enacted and this bill is enacted last.
2537
2638 ## Digest Key
2739
2840 ## Bill Text
2941
3042 The people of the State of California do enact as follows:SECTION 1. The Legislature finds and declares the following:(a) The prevailing use of paper prescription pads to prescribe controlled substances leads to significant instances of theft and fraud each year, contributing to the prescription drug abuse crisis and fueling criminal enterprises engaged in drug diversion.(b) Prescribing controlled substances by means of electronic transmission prescription, or e-prescribing, has long been considered the most effective way to combat prescription pad theft and fraud.(c) Many states have begun to require that all controlled substances be prescribed electronically as a means of addressing the public health and public safety crises associated with prescription drug abuse and diversion.(d) Until mandatory e-prescribing is established in California, it is critical that tighter restrictions be placed on the manufacturing and tracking of prescription pads used within the state.SEC. 2. Section 11161.5 of the Health and Safety Code is amended to read:11161.5. (a) Prescription forms for controlled substance prescriptions shall be obtained from security printers approved by the Department of Justice.(b) The department may approve security printer applications after the applicant has provided the following information:(1) Name, address, and telephone number of the applicant.(2) Policies and procedures of the applicant for verifying the identity of the prescriber ordering controlled substance prescription forms.(3) Policies and procedures of the applicant for verifying delivery of controlled substance prescription forms to prescribers.(4) (A) The location, names, and titles of the applicants agent for service of process in this state; all principal corporate officers, if any; all managing general partners, if any; and any individual owner, partner, corporate officer, manager, agent, representative, employee, or subcontractor of the applicant who has direct access to, or management or control of, controlled substance prescription forms.(B) A report containing this information shall be made on an annual basis and within 30 days after any change of office, principal corporate officers, managing general partner, or of any person described in subparagraph (A).(5) (A) A signed statement indicating whether the applicant, any principal corporate officer, any managing general partner, or any individual owner, partner, corporate officer, manager, agent, representative, employee, or subcontractor of the applicant who has direct access to, or management or control of, controlled substance prescription forms, has ever been convicted of, or pled no contest to, a violation of any law of a foreign country, the United States, or any state, or of any local ordinance.(B) The department shall provide the applicant and any individual owner, partner, corporate officer, manager, agent, representative, employee, or subcontractor of the applicant who has direct access to, or management or control of, controlled substance prescription forms, with the means and direction to provide fingerprints and related information, in a manner specified by the department, for the purpose of completing state, federal, or foreign criminal background checks.(C) Any applicant described in subdivision (b) shall submit his or her fingerprint images and related information to the department, for the purpose of the department obtaining information as to the existence and nature of a record of state, federal, or foreign level convictions and state, federal, or foreign level arrests for which the department establishes that the applicant was released on bail or on his or her own recognizance pending trial, as described in subdivision (l) of Section 11105 of the Penal Code. Requests for federal level criminal offender record information received by the department pursuant to this section shall be forwarded to the Federal Bureau of Investigation by the department.(D) The department shall assess against each security printer applicant a fee determined by the department to be sufficient to cover all processing, maintenance, and investigative costs generated from or associated with completing state, federal, or foreign background checks and inspections of security printers pursuant to this section with respect to that applicant; the fee shall be paid by the applicant at the time he or she submits the security printer application, fingerprints, and related information to the department.(E) The department shall retain fingerprint impressions and related information for subsequent arrest notification pursuant to Section 11105.2 of the Penal Code for all applicants.(c) The department may, within 60 calendar days of receipt of the application from the applicant, deny the security printer application.(d) The department may deny a security printer application on any of the following grounds:(1) The applicant, any individual owner, partner, corporate officer, manager, agent, representative, employee, or subcontractor for the applicant, who has direct access, management, or control of controlled substance prescription forms, has been convicted of a crime. A conviction within the meaning of this paragraph means a plea or verdict of guilty or a conviction following a plea of nolo contendere. Any action which a board is permitted to take following the establishment of a conviction may be taken when the time for appeal has elapsed, the judgment of conviction has been affirmed on appeal, or when an order granting probation is made suspending the imposition of sentence, irrespective of a subsequent order under the provisions of Section 1203.4 of the Penal Code.(2) The applicant committed any act involving dishonesty, fraud, or deceit with the intent to substantially benefit himself, herself, or another, or substantially injure another.(3) The applicant committed any act that would constitute a violation of this division.(4) The applicant knowingly made a false statement of fact required to be revealed in the application to produce controlled substance prescription forms.(5) The department determines that the applicant failed to demonstrate adequate security procedures relating to the production and distribution of controlled substance prescription forms.(6) The department determines that the applicant has submitted an incomplete application.(7) As a condition for its approval as a security printer, an applicant shall authorize the Department of Justice to make any examination of the books and records of the applicant, or to visit and inspect the applicant during business hours, to the extent deemed necessary by the board or department to properly enforce this section.(e) An approved applicant shall submit an exemplar of a controlled substance prescription form, with all security features, to the Department of Justice within 30 days of initial production.(f) The department shall maintain a list of approved security printers and the department shall make this information available to prescribers and other appropriate government agencies, including the Board of Pharmacy.(g) Before printing any controlled substance prescription forms, a security printer shall verify with the appropriate licensing board that the prescriber possesses a license and current prescribing privileges which permits the prescribing of controlled substances with the federal Drug Enforcement Administration (DEA).(h) Controlled substance prescription forms shall be provided directly to the prescriber either in person, by certified mail, or by a means that requires a signature signifying receipt of the package and provision of that signature to the security printer. Controlled substance prescription forms provided in person shall be restricted to established customers. Security printers shall obtain a photo identification from the customer and maintain a log of this information. Controlled substance prescription forms shall be shipped only to the prescribers address on file and verified with the federal Drug Enforcement Administration or the Medical Board of California.(i) Security printers shall retain ordering and delivery records in a readily retrievable manner for individual prescribers for three years.(j) Security printers shall produce ordering and delivery records upon request by an authorized officer of the law as defined in Section 4017 of the Business and Professions Code.(k) Security printers shall report any theft or loss of controlled substance prescription forms to the Department of Justice via fax or email within 24 hours of the theft or loss.(l) (1) The department shall impose restrictions, sanctions, or penalties, subject to subdivisions (m) and (n), against security printers who are not in compliance with this division pursuant to regulations implemented pursuant to this division and shall revoke its approval of a security printer for a violation of this division or action that would permit a denial pursuant to subdivision (d) of this section.(2) When the department revokes its approval, it shall notify the appropriate licensing boards and remove the security printer from the list of approved security printers.(m) The following violations by security printers shall be punishable pursuant to subdivision (n):(1) Failure to comply with the Security Printer Guidelines established by the Security Printer Program as a condition of approval.(2) Failure to take reasonable precautions to prevent any dishonest act or illegal activity related to the access and control of security prescription forms.(3) Theft or fraudulent use of a prescribers identity in order to obtain security prescription forms.(n) A security printer approved pursuant to subdivision (b) shall be subject to the following penalties for actions leading to the denial of a security printer application specified in subdivision (d) or for a violation specified in subdivision (m):(1) For a first violation, a fine not to exceed one thousand dollars ($1,000).(2) For a second or subsequent violation, a fine not to exceed two thousand five hundred dollars ($2,500) for each violation.(3) For a third or subsequent violation, a filing of an administrative disciplinary action seeking to suspend or revoke security printer approval.(o) In order to facilitate the standardization of all prescription forms and the serialization of prescription forms with unique identifiers, the Department of Justice may cease issuing new approvals of security printers to the extent necessary to achieve these purposes. The department may, pursuant to regulation, reduce the number of currently approved security printers to no fewer than three vendors. The department shall ensure that any reduction or limitation of approved security printers does not impact the ability of vendors to meet demand for prescription forms.SEC. 3. Section 11162.1 of the Health and Safety Code is amended to read:11162.1. (a) The prescription forms for controlled substances shall be printed with the following features:(1) A latent, repetitive void pattern shall be printed across the entire front of the prescription blank; if a prescription is scanned or photocopied, the word void shall appear in a pattern across the entire front of the prescription.(2) A watermark shall be printed on the backside of the prescription blank; the watermark shall consist of the words California Security Prescription.(3) A chemical void protection that prevents alteration by chemical washing.(4) A feature printed in thermochromic ink.(5) An area of opaque writing so that the writing disappears if the prescription is lightened.(6) A description of the security features included on each prescription form.(7) (A) Six quantity check off boxes shall be printed on the form so that the prescriber may indicate the quantity by checking the applicable box where the following quantities shall appear:1242549507475100101150151 and over.(B) In conjunction with the quantity boxes, a space shall be provided to designate the units referenced in the quantity boxes when the drug is not in tablet or capsule form.(8) Prescription blanks shall contain a statement printed on the bottom of the prescription blank that the Prescription is void if the number of drugs prescribed is not noted.(9) The preprinted name, category of licensure, license number, federal controlled substance registration number, and address of the prescribing practitioner.(10) Check boxes shall be printed on the form so that the prescriber may indicate the number of refills ordered.(11) The date of origin of the prescription.(12) A check box indicating the prescribers order not to substitute.(13) An identifying number assigned to the approved security printer by the Department of Justice.(14) (A) A check box by the name of each prescriber when a prescription form lists multiple prescribers.(B) Each prescriber who signs the prescription form shall identify himself or herself as the prescriber by checking the box by his or her name.(15) A uniquely serialized number, in a manner prescribed by the Department of Justice.(b) Each batch of controlled substance prescription forms shall have the lot number printed on the form and each form within that batch shall be numbered sequentially beginning with the numeral one.(c) (1) A prescriber designated by a licensed health care facility, a clinic specified in Section 1200, or a clinic specified in subdivision (a) of Section 1206 that has 25 or more physicians or surgeons may order controlled substance prescription forms for use by prescribers when treating patients in that facility without the information required in paragraph (9) of subdivision (a) or paragraph (3) of this subdivision.(2) Forms ordered pursuant to this subdivision shall have the name, category of licensure, license number, and federal controlled substance registration number of the designated prescriber and the name, address, category of licensure, and license number of the licensed health care facility the clinic specified in Section 1200, or the clinic specified in Section 1206 that has 25 or more physicians or surgeons preprinted on the form. Licensed health care facilities or clinics exempt under Section 1206 are not required to preprint the category of licensure and license number of their facility or clinic.(3) Forms ordered pursuant to this section shall not be valid prescriptions without the name, category of licensure, license number, and federal controlled substance registration number of the prescriber on the form.(4) (A) Except as provided in subparagraph (B), the designated prescriber shall maintain a record of the prescribers to whom the controlled substance prescription forms are issued, that shall include the name, category of licensure, license number, federal controlled substance registration number, and quantity of controlled substance prescription forms issued to each prescriber. The record shall be maintained in the health facility for three years.(B) Forms ordered pursuant to this subdivision that are printed by a computerized prescription generation system shall not be subject to subparagraph (A) or paragraph (7) of subdivision (a). Forms printed pursuant to this subdivision that are printed by a computerized prescription generation system may contain the prescribers name, category of professional licensure, license number, federal controlled substance registration number, and the date of the prescription.(d) Within the next working day following delivery, a security printer shall submit via Web-based application, as specified by the Department of Justice, all of the following information for all prescription forms delivered:(1) Serial numbers of all prescription forms delivered.(2) All prescriber names and Drug Enforcement Administration Controlled Substance Registration Certificate numbers displayed on the prescription forms.(3) The delivery shipment recipient names.(4) The date of delivery.SEC. 4. Section 11165 of the Health and Safety Code is amended to read:11165. (a) To assist health care practitioners in their efforts to ensure appropriate prescribing, ordering, administering, furnishing, and dispensing of controlled substances, law enforcement and regulatory agencies in their efforts to control the diversion and resultant abuse of Schedule II, Schedule III, and Schedule IV controlled substances, and for statistical analysis, education, and research, the Department of Justice shall, contingent upon the availability of adequate funds in the CURES Fund, maintain the Controlled Substance Utilization Review and Evaluation System (CURES) for the electronic monitoring of, and Internet access to information regarding, the prescribing and dispensing of Schedule II, Schedule III, and Schedule IV controlled substances by all practitioners authorized to prescribe, order, administer, furnish, or dispense these controlled substances.(b) The Department of Justice may seek and use grant funds to pay the costs incurred by the operation and maintenance of CURES. The department shall annually report to the Legislature and make available to the public the amount and source of funds it receives for support of CURES.(c) (1) The operation of CURES shall comply with all applicable federal and state privacy and security laws and regulations.(2) (A) CURES shall operate under existing provisions of law to safeguard the privacy and confidentiality of patients. Data obtained from CURES shall only be provided to appropriate state, local, and federal public agencies for disciplinary, civil, or criminal purposes and to other agencies or entities, as determined by the Department of Justice, for the purpose of educating practitioners and others in lieu of disciplinary, civil, or criminal actions. Data may be provided to public or private entities, as approved by the Department of Justice, for educational, peer review, statistical, or research purposes, provided that patient information, including any information that may identify the patient, is not compromised. Further, data disclosed to any individual or agency as described in this subdivision shall not be disclosed, sold, or transferred to any third party, unless authorized by, or pursuant to, state and federal privacy and security laws and regulations. The Department of Justice shall establish policies, procedures, and regulations regarding the use, access, evaluation, management, implementation, operation, storage, disclosure, and security of the information within CURES, consistent with this subdivision.(B) Notwithstanding subparagraph (A), a regulatory board whose licensees do not prescribe, order, administer, furnish, or dispense controlled substances shall not be provided data obtained from CURES.(3) In accordance with federal and state privacy laws and regulations, a health care practitioner may provide a patient with a copy of the patients CURES patient activity report as long as no additional CURES data is provided and keep a copy of the report in the patients medical record in compliance with subdivision (d) of Section 11165.1.(d) For each prescription for a Schedule II, Schedule III, or Schedule IV controlled substance, as defined in the controlled substances schedules in federal law and regulations, specifically Sections 1308.12, 1308.13, and 1308.14, respectively, of Title 21 of the Code of Federal Regulations, the dispensing pharmacy, clinic, or other dispenser shall report the following information to the Department of Justice as soon as reasonably possible, but not more than seven days after the date a controlled substance is dispensed, in a format specified by the Department of Justice:(1) Full name, address, and, if available, telephone number of the ultimate user or research subject, or contact information as determined by the Secretary of the United States Department of Health and Human Services, and the gender, and date of birth of the ultimate user.(2) The prescribers category of licensure, license number, national provider identifier (NPI) number, if applicable, the federal controlled substance registration number, and the state medical license number of any prescriber using the federal controlled substance registration number of a government-exempt facility.(3) Pharmacy prescription number, license number, NPI number, and federal controlled substance registration number.(4) National Drug Code (NDC) number of the controlled substance dispensed.(5) Quantity of the controlled substance dispensed.(6) International Statistical Classification of Diseases, 9th revision (ICD-9) or 10th revision (ICD-10) Code, if available.(7) Number of refills ordered.(8) Whether the drug was dispensed as a refill of a prescription or as a first-time request.(9) Date of origin of the prescription.(10) Date of dispensing of the prescription.(11) The serial number for the corresponding prescription form, if applicable.(e) The Department of Justice may invite stakeholders to assist, advise, and make recommendations on the establishment of rules and regulations necessary to ensure the proper administration and enforcement of the CURES database. All prescriber and dispenser invitees shall be licensed by one of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, in active practice in California, and a regular user of CURES.(f) The Department of Justice shall, prior to upgrading CURES, consult with prescribers licensed by one of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, one or more of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, and any other stakeholder identified by the department, for the purpose of identifying desirable capabilities and upgrades to the CURES Prescription Drug Monitoring Program (PDMP).(g) The Department of Justice may establish a process to educate authorized subscribers of the CURES PDMP on how to access and use the CURES PDMP.SEC. 4.5. Section 11165 of the Health and Safety Code is amended to read:11165. (a) To assist health care practitioners in their efforts to ensure appropriate prescribing, ordering, administering, furnishing, and dispensing of controlled substances, law enforcement and regulatory agencies in their efforts to control the diversion and resultant abuse of Schedule II, Schedule III, and Schedule IV controlled substances, and for statistical analysis, education, and research, the Department of Justice shall, contingent upon the availability of adequate funds in the CURES Fund, maintain the Controlled Substance Utilization Review and Evaluation System (CURES) for the electronic monitoring of, and Internet access to information regarding, the prescribing and dispensing of Schedule II, Schedule III, and Schedule IV controlled substances by all practitioners authorized to prescribe, order, administer, furnish, or dispense these controlled substances.(b) The Department of Justice may seek and use grant funds to pay the costs incurred by the operation and maintenance of CURES. The department shall annually report to the Legislature and make available to the public the amount and source of funds it receives for support of CURES.(c) (1) The operation of CURES shall comply with all applicable federal and state privacy and security laws and regulations.(2) (A) CURES shall operate under existing provisions of law to safeguard the privacy and confidentiality of patients. Data obtained from CURES shall only be provided to appropriate state, local, and federal public agencies for disciplinary, civil, or criminal purposes and to other agencies or entities, as determined by the Department of Justice, for the purpose of educating practitioners and others in lieu of disciplinary, civil, or criminal actions. Data may be provided to public or private entities, as approved by the Department of Justice, for educational, peer review, statistical, or research purposes, if patient information, including any information that may identify the patient, is not compromised. Further, data disclosed to any individual or agency as described in this subdivision shall not be disclosed, sold, or transferred to any third party, unless authorized by, or pursuant to, state and federal privacy and security laws and regulations. The Department of Justice shall establish policies, procedures, and regulations regarding the use, access, evaluation, management, implementation, operation, storage, disclosure, and security of the information within CURES, consistent with this subdivision.(B) Notwithstanding subparagraph (A), a regulatory board whose licensees do not prescribe, order, administer, furnish, or dispense controlled substances shall not be provided data obtained from CURES.(3) The Department of Justice shall, no later than July 1, 2020, adopt regulations regarding the access and use of the information within CURES. The Department of Justice shall consult with all stakeholders identified by the department during the rulemaking process. The regulations shall, at a minimum, address all of the following in a manner consistent with this chapter:(A) The process for approving, denying, and disapproving individuals or entities seeking access to information in CURES.(B) The purposes for which a health care practitioner may access information in CURES.(C) The conditions under which a warrant, subpoena, or court order is required for a law enforcement agency to obtain information from CURES as part of a criminal investigation.(D) The process by which information in CURES may be provided for educational, peer review, statistical, or research purposes.(4) In accordance with federal and state privacy laws and regulations, a health care practitioner may provide a patient with a copy of the patients CURES patient activity report as long as no additional CURES data are provided and keep a copy of the report in the patients medical record in compliance with subdivision (d) of Section 11165.1.(d) For each prescription for a Schedule II, Schedule III, or Schedule IV controlled substance, as defined in the controlled substances schedules in federal law and regulations, specifically Sections 1308.12, 1308.13, and 1308.14, respectively, of Title 21 of the Code of Federal Regulations, the dispensing pharmacy, clinic, or other dispenser shall report the following information to the Department of Justice as soon as reasonably possible, but not more than seven days after the date a controlled substance is dispensed, in a format specified by the Department of Justice:(1) Full name, address, and, if available, telephone number of the ultimate user or research subject, or contact information as determined by the Secretary of the United States Department of Health and Human Services, and the gender, and date of birth of the ultimate user.(2) The prescribers category of licensure, license number, national provider identifier (NPI) number, the federal controlled substance registration number, and the state medical license number of any prescriber using the federal controlled substance registration number of a government-exempt facility, if provided.(3) Pharmacy prescription number, license number, NPI number, and federal controlled substance registration number.(4) National Drug Code (NDC) number of the controlled substance dispensed.(5) Quantity of the controlled substance dispensed.(6) International Statistical Classification of Diseases, 9th revision (ICD-9) or 10th revision (ICD-10) Code, if available.(7) Number of refills ordered.(8) Whether the drug was dispensed as a refill of a prescription or as a first-time request.(9) Date of origin of the prescription.(10) Date of dispensing of the prescription.(11) The serial number for the corresponding prescription form, if applicable.(e) The Department of Justice may invite stakeholders to assist, advise, and make recommendations on the establishment of rules and regulations necessary to ensure the proper administration and enforcement of the CURES database. All prescriber and dispenser invitees shall be licensed by one of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, in active practice in California, and a regular user of CURES.(f) The Department of Justice shall, prior to upgrading CURES, consult with prescribers licensed by one of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, one or more of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, and any other stakeholder identified by the department, for the purpose of identifying desirable capabilities and upgrades to the CURES Prescription Drug Monitoring Program (PDMP).(g) The Department of Justice may establish a process to educate authorized subscribers of the CURES PDMP on how to access and use the CURES PDMP.(h) (1) The Department of Justice may enter into an agreement with any entity operating an interstate data sharing hub, or any agency operating a prescription drug monitoring program in another state, for purposes of interstate data sharing of prescription drug monitoring program information.(2) Data obtained from CURES may be provided to authorized users of another states prescription drug monitoring program, as determined by the Department of Justice pursuant to subdivision (c), if the entity operating the interstate data sharing hub, and the prescription drug monitoring program of that state, as applicable, have entered into an agreement with the Department of Justice for interstate data sharing of prescription drug monitoring program information.(3) Any agreement entered into by the Department of Justice for purposes of interstate data sharing of prescription drug monitoring program information shall ensure that all access to data obtained from CURES and the handling of data contained within CURES comply with California law, including regulations, and meet the same patient privacy, audit, and data security standards employed and required for direct access to CURES.(4) For purposes of interstate data sharing of CURES information pursuant to this subdivision, an authorized user of another states prescription drug monitoring program shall not be required to register with CURES, if he or she is registered and in good standing with that states prescription drug monitoring program.(5) The Department of Justice shall not enter into an agreement pursuant to this subdivision until the department has issued final regulations regarding the access and use of the information within CURES as required by paragraph (3) of subdivision (c).SEC. 5. Section 4.5 of this bill incorporates amendments to Section 11165 of the Health and Safety Code proposed by both this bill and Assembly Bill 1751. That section of this bill shall only become operative if (1) both bills are enacted and become effective on or before January 1, 2019, (2) each bill amends Section 11165 of the Health and Safety Code, and (3) this bill is enacted after Assembly Bill 1751, in which case Section 4 of this bill shall not become operative.
3143
3244 The people of the State of California do enact as follows:
3345
3446 ## The people of the State of California do enact as follows:
3547
3648 SECTION 1. The Legislature finds and declares the following:(a) The prevailing use of paper prescription pads to prescribe controlled substances leads to significant instances of theft and fraud each year, contributing to the prescription drug abuse crisis and fueling criminal enterprises engaged in drug diversion.(b) Prescribing controlled substances by means of electronic transmission prescription, or e-prescribing, has long been considered the most effective way to combat prescription pad theft and fraud.(c) Many states have begun to require that all controlled substances be prescribed electronically as a means of addressing the public health and public safety crises associated with prescription drug abuse and diversion.(d) Until mandatory e-prescribing is established in California, it is critical that tighter restrictions be placed on the manufacturing and tracking of prescription pads used within the state.
3749
3850 SECTION 1. The Legislature finds and declares the following:(a) The prevailing use of paper prescription pads to prescribe controlled substances leads to significant instances of theft and fraud each year, contributing to the prescription drug abuse crisis and fueling criminal enterprises engaged in drug diversion.(b) Prescribing controlled substances by means of electronic transmission prescription, or e-prescribing, has long been considered the most effective way to combat prescription pad theft and fraud.(c) Many states have begun to require that all controlled substances be prescribed electronically as a means of addressing the public health and public safety crises associated with prescription drug abuse and diversion.(d) Until mandatory e-prescribing is established in California, it is critical that tighter restrictions be placed on the manufacturing and tracking of prescription pads used within the state.
3951
4052 SECTION 1. The Legislature finds and declares the following:
4153
4254 ### SECTION 1.
4355
4456 (a) The prevailing use of paper prescription pads to prescribe controlled substances leads to significant instances of theft and fraud each year, contributing to the prescription drug abuse crisis and fueling criminal enterprises engaged in drug diversion.
4557
4658 (b) Prescribing controlled substances by means of electronic transmission prescription, or e-prescribing, has long been considered the most effective way to combat prescription pad theft and fraud.
4759
4860 (c) Many states have begun to require that all controlled substances be prescribed electronically as a means of addressing the public health and public safety crises associated with prescription drug abuse and diversion.
4961
5062 (d) Until mandatory e-prescribing is established in California, it is critical that tighter restrictions be placed on the manufacturing and tracking of prescription pads used within the state.
5163
5264 SEC. 2. Section 11161.5 of the Health and Safety Code is amended to read:11161.5. (a) Prescription forms for controlled substance prescriptions shall be obtained from security printers approved by the Department of Justice.(b) The department may approve security printer applications after the applicant has provided the following information:(1) Name, address, and telephone number of the applicant.(2) Policies and procedures of the applicant for verifying the identity of the prescriber ordering controlled substance prescription forms.(3) Policies and procedures of the applicant for verifying delivery of controlled substance prescription forms to prescribers.(4) (A) The location, names, and titles of the applicants agent for service of process in this state; all principal corporate officers, if any; all managing general partners, if any; and any individual owner, partner, corporate officer, manager, agent, representative, employee, or subcontractor of the applicant who has direct access to, or management or control of, controlled substance prescription forms.(B) A report containing this information shall be made on an annual basis and within 30 days after any change of office, principal corporate officers, managing general partner, or of any person described in subparagraph (A).(5) (A) A signed statement indicating whether the applicant, any principal corporate officer, any managing general partner, or any individual owner, partner, corporate officer, manager, agent, representative, employee, or subcontractor of the applicant who has direct access to, or management or control of, controlled substance prescription forms, has ever been convicted of, or pled no contest to, a violation of any law of a foreign country, the United States, or any state, or of any local ordinance.(B) The department shall provide the applicant and any individual owner, partner, corporate officer, manager, agent, representative, employee, or subcontractor of the applicant who has direct access to, or management or control of, controlled substance prescription forms, with the means and direction to provide fingerprints and related information, in a manner specified by the department, for the purpose of completing state, federal, or foreign criminal background checks.(C) Any applicant described in subdivision (b) shall submit his or her fingerprint images and related information to the department, for the purpose of the department obtaining information as to the existence and nature of a record of state, federal, or foreign level convictions and state, federal, or foreign level arrests for which the department establishes that the applicant was released on bail or on his or her own recognizance pending trial, as described in subdivision (l) of Section 11105 of the Penal Code. Requests for federal level criminal offender record information received by the department pursuant to this section shall be forwarded to the Federal Bureau of Investigation by the department.(D) The department shall assess against each security printer applicant a fee determined by the department to be sufficient to cover all processing, maintenance, and investigative costs generated from or associated with completing state, federal, or foreign background checks and inspections of security printers pursuant to this section with respect to that applicant; the fee shall be paid by the applicant at the time he or she submits the security printer application, fingerprints, and related information to the department.(E) The department shall retain fingerprint impressions and related information for subsequent arrest notification pursuant to Section 11105.2 of the Penal Code for all applicants.(c) The department may, within 60 calendar days of receipt of the application from the applicant, deny the security printer application.(d) The department may deny a security printer application on any of the following grounds:(1) The applicant, any individual owner, partner, corporate officer, manager, agent, representative, employee, or subcontractor for the applicant, who has direct access, management, or control of controlled substance prescription forms, has been convicted of a crime. A conviction within the meaning of this paragraph means a plea or verdict of guilty or a conviction following a plea of nolo contendere. Any action which a board is permitted to take following the establishment of a conviction may be taken when the time for appeal has elapsed, the judgment of conviction has been affirmed on appeal, or when an order granting probation is made suspending the imposition of sentence, irrespective of a subsequent order under the provisions of Section 1203.4 of the Penal Code.(2) The applicant committed any act involving dishonesty, fraud, or deceit with the intent to substantially benefit himself, herself, or another, or substantially injure another.(3) The applicant committed any act that would constitute a violation of this division.(4) The applicant knowingly made a false statement of fact required to be revealed in the application to produce controlled substance prescription forms.(5) The department determines that the applicant failed to demonstrate adequate security procedures relating to the production and distribution of controlled substance prescription forms.(6) The department determines that the applicant has submitted an incomplete application.(7) As a condition for its approval as a security printer, an applicant shall authorize the Department of Justice to make any examination of the books and records of the applicant, or to visit and inspect the applicant during business hours, to the extent deemed necessary by the board or department to properly enforce this section.(e) An approved applicant shall submit an exemplar of a controlled substance prescription form, with all security features, to the Department of Justice within 30 days of initial production.(f) The department shall maintain a list of approved security printers and the department shall make this information available to prescribers and other appropriate government agencies, including the Board of Pharmacy.(g) Before printing any controlled substance prescription forms, a security printer shall verify with the appropriate licensing board that the prescriber possesses a license and current prescribing privileges which permits the prescribing of controlled substances with the federal Drug Enforcement Administration (DEA).(h) Controlled substance prescription forms shall be provided directly to the prescriber either in person, by certified mail, or by a means that requires a signature signifying receipt of the package and provision of that signature to the security printer. Controlled substance prescription forms provided in person shall be restricted to established customers. Security printers shall obtain a photo identification from the customer and maintain a log of this information. Controlled substance prescription forms shall be shipped only to the prescribers address on file and verified with the federal Drug Enforcement Administration or the Medical Board of California.(i) Security printers shall retain ordering and delivery records in a readily retrievable manner for individual prescribers for three years.(j) Security printers shall produce ordering and delivery records upon request by an authorized officer of the law as defined in Section 4017 of the Business and Professions Code.(k) Security printers shall report any theft or loss of controlled substance prescription forms to the Department of Justice via fax or email within 24 hours of the theft or loss.(l) (1) The department shall impose restrictions, sanctions, or penalties, subject to subdivisions (m) and (n), against security printers who are not in compliance with this division pursuant to regulations implemented pursuant to this division and shall revoke its approval of a security printer for a violation of this division or action that would permit a denial pursuant to subdivision (d) of this section.(2) When the department revokes its approval, it shall notify the appropriate licensing boards and remove the security printer from the list of approved security printers.(m) The following violations by security printers shall be punishable pursuant to subdivision (n):(1) Failure to comply with the Security Printer Guidelines established by the Security Printer Program as a condition of approval.(2) Failure to take reasonable precautions to prevent any dishonest act or illegal activity related to the access and control of security prescription forms.(3) Theft or fraudulent use of a prescribers identity in order to obtain security prescription forms.(n) A security printer approved pursuant to subdivision (b) shall be subject to the following penalties for actions leading to the denial of a security printer application specified in subdivision (d) or for a violation specified in subdivision (m):(1) For a first violation, a fine not to exceed one thousand dollars ($1,000).(2) For a second or subsequent violation, a fine not to exceed two thousand five hundred dollars ($2,500) for each violation.(3) For a third or subsequent violation, a filing of an administrative disciplinary action seeking to suspend or revoke security printer approval.(o) In order to facilitate the standardization of all prescription forms and the serialization of prescription forms with unique identifiers, the Department of Justice may cease issuing new approvals of security printers to the extent necessary to achieve these purposes. The department may, pursuant to regulation, reduce the number of currently approved security printers to no fewer than three vendors. The department shall ensure that any reduction or limitation of approved security printers does not impact the ability of vendors to meet demand for prescription forms.
5365
5466 SEC. 2. Section 11161.5 of the Health and Safety Code is amended to read:
5567
5668 ### SEC. 2.
5769
5870 11161.5. (a) Prescription forms for controlled substance prescriptions shall be obtained from security printers approved by the Department of Justice.(b) The department may approve security printer applications after the applicant has provided the following information:(1) Name, address, and telephone number of the applicant.(2) Policies and procedures of the applicant for verifying the identity of the prescriber ordering controlled substance prescription forms.(3) Policies and procedures of the applicant for verifying delivery of controlled substance prescription forms to prescribers.(4) (A) The location, names, and titles of the applicants agent for service of process in this state; all principal corporate officers, if any; all managing general partners, if any; and any individual owner, partner, corporate officer, manager, agent, representative, employee, or subcontractor of the applicant who has direct access to, or management or control of, controlled substance prescription forms.(B) A report containing this information shall be made on an annual basis and within 30 days after any change of office, principal corporate officers, managing general partner, or of any person described in subparagraph (A).(5) (A) A signed statement indicating whether the applicant, any principal corporate officer, any managing general partner, or any individual owner, partner, corporate officer, manager, agent, representative, employee, or subcontractor of the applicant who has direct access to, or management or control of, controlled substance prescription forms, has ever been convicted of, or pled no contest to, a violation of any law of a foreign country, the United States, or any state, or of any local ordinance.(B) The department shall provide the applicant and any individual owner, partner, corporate officer, manager, agent, representative, employee, or subcontractor of the applicant who has direct access to, or management or control of, controlled substance prescription forms, with the means and direction to provide fingerprints and related information, in a manner specified by the department, for the purpose of completing state, federal, or foreign criminal background checks.(C) Any applicant described in subdivision (b) shall submit his or her fingerprint images and related information to the department, for the purpose of the department obtaining information as to the existence and nature of a record of state, federal, or foreign level convictions and state, federal, or foreign level arrests for which the department establishes that the applicant was released on bail or on his or her own recognizance pending trial, as described in subdivision (l) of Section 11105 of the Penal Code. Requests for federal level criminal offender record information received by the department pursuant to this section shall be forwarded to the Federal Bureau of Investigation by the department.(D) The department shall assess against each security printer applicant a fee determined by the department to be sufficient to cover all processing, maintenance, and investigative costs generated from or associated with completing state, federal, or foreign background checks and inspections of security printers pursuant to this section with respect to that applicant; the fee shall be paid by the applicant at the time he or she submits the security printer application, fingerprints, and related information to the department.(E) The department shall retain fingerprint impressions and related information for subsequent arrest notification pursuant to Section 11105.2 of the Penal Code for all applicants.(c) The department may, within 60 calendar days of receipt of the application from the applicant, deny the security printer application.(d) The department may deny a security printer application on any of the following grounds:(1) The applicant, any individual owner, partner, corporate officer, manager, agent, representative, employee, or subcontractor for the applicant, who has direct access, management, or control of controlled substance prescription forms, has been convicted of a crime. A conviction within the meaning of this paragraph means a plea or verdict of guilty or a conviction following a plea of nolo contendere. Any action which a board is permitted to take following the establishment of a conviction may be taken when the time for appeal has elapsed, the judgment of conviction has been affirmed on appeal, or when an order granting probation is made suspending the imposition of sentence, irrespective of a subsequent order under the provisions of Section 1203.4 of the Penal Code.(2) The applicant committed any act involving dishonesty, fraud, or deceit with the intent to substantially benefit himself, herself, or another, or substantially injure another.(3) The applicant committed any act that would constitute a violation of this division.(4) The applicant knowingly made a false statement of fact required to be revealed in the application to produce controlled substance prescription forms.(5) The department determines that the applicant failed to demonstrate adequate security procedures relating to the production and distribution of controlled substance prescription forms.(6) The department determines that the applicant has submitted an incomplete application.(7) As a condition for its approval as a security printer, an applicant shall authorize the Department of Justice to make any examination of the books and records of the applicant, or to visit and inspect the applicant during business hours, to the extent deemed necessary by the board or department to properly enforce this section.(e) An approved applicant shall submit an exemplar of a controlled substance prescription form, with all security features, to the Department of Justice within 30 days of initial production.(f) The department shall maintain a list of approved security printers and the department shall make this information available to prescribers and other appropriate government agencies, including the Board of Pharmacy.(g) Before printing any controlled substance prescription forms, a security printer shall verify with the appropriate licensing board that the prescriber possesses a license and current prescribing privileges which permits the prescribing of controlled substances with the federal Drug Enforcement Administration (DEA).(h) Controlled substance prescription forms shall be provided directly to the prescriber either in person, by certified mail, or by a means that requires a signature signifying receipt of the package and provision of that signature to the security printer. Controlled substance prescription forms provided in person shall be restricted to established customers. Security printers shall obtain a photo identification from the customer and maintain a log of this information. Controlled substance prescription forms shall be shipped only to the prescribers address on file and verified with the federal Drug Enforcement Administration or the Medical Board of California.(i) Security printers shall retain ordering and delivery records in a readily retrievable manner for individual prescribers for three years.(j) Security printers shall produce ordering and delivery records upon request by an authorized officer of the law as defined in Section 4017 of the Business and Professions Code.(k) Security printers shall report any theft or loss of controlled substance prescription forms to the Department of Justice via fax or email within 24 hours of the theft or loss.(l) (1) The department shall impose restrictions, sanctions, or penalties, subject to subdivisions (m) and (n), against security printers who are not in compliance with this division pursuant to regulations implemented pursuant to this division and shall revoke its approval of a security printer for a violation of this division or action that would permit a denial pursuant to subdivision (d) of this section.(2) When the department revokes its approval, it shall notify the appropriate licensing boards and remove the security printer from the list of approved security printers.(m) The following violations by security printers shall be punishable pursuant to subdivision (n):(1) Failure to comply with the Security Printer Guidelines established by the Security Printer Program as a condition of approval.(2) Failure to take reasonable precautions to prevent any dishonest act or illegal activity related to the access and control of security prescription forms.(3) Theft or fraudulent use of a prescribers identity in order to obtain security prescription forms.(n) A security printer approved pursuant to subdivision (b) shall be subject to the following penalties for actions leading to the denial of a security printer application specified in subdivision (d) or for a violation specified in subdivision (m):(1) For a first violation, a fine not to exceed one thousand dollars ($1,000).(2) For a second or subsequent violation, a fine not to exceed two thousand five hundred dollars ($2,500) for each violation.(3) For a third or subsequent violation, a filing of an administrative disciplinary action seeking to suspend or revoke security printer approval.(o) In order to facilitate the standardization of all prescription forms and the serialization of prescription forms with unique identifiers, the Department of Justice may cease issuing new approvals of security printers to the extent necessary to achieve these purposes. The department may, pursuant to regulation, reduce the number of currently approved security printers to no fewer than three vendors. The department shall ensure that any reduction or limitation of approved security printers does not impact the ability of vendors to meet demand for prescription forms.
5971
6072 11161.5. (a) Prescription forms for controlled substance prescriptions shall be obtained from security printers approved by the Department of Justice.(b) The department may approve security printer applications after the applicant has provided the following information:(1) Name, address, and telephone number of the applicant.(2) Policies and procedures of the applicant for verifying the identity of the prescriber ordering controlled substance prescription forms.(3) Policies and procedures of the applicant for verifying delivery of controlled substance prescription forms to prescribers.(4) (A) The location, names, and titles of the applicants agent for service of process in this state; all principal corporate officers, if any; all managing general partners, if any; and any individual owner, partner, corporate officer, manager, agent, representative, employee, or subcontractor of the applicant who has direct access to, or management or control of, controlled substance prescription forms.(B) A report containing this information shall be made on an annual basis and within 30 days after any change of office, principal corporate officers, managing general partner, or of any person described in subparagraph (A).(5) (A) A signed statement indicating whether the applicant, any principal corporate officer, any managing general partner, or any individual owner, partner, corporate officer, manager, agent, representative, employee, or subcontractor of the applicant who has direct access to, or management or control of, controlled substance prescription forms, has ever been convicted of, or pled no contest to, a violation of any law of a foreign country, the United States, or any state, or of any local ordinance.(B) The department shall provide the applicant and any individual owner, partner, corporate officer, manager, agent, representative, employee, or subcontractor of the applicant who has direct access to, or management or control of, controlled substance prescription forms, with the means and direction to provide fingerprints and related information, in a manner specified by the department, for the purpose of completing state, federal, or foreign criminal background checks.(C) Any applicant described in subdivision (b) shall submit his or her fingerprint images and related information to the department, for the purpose of the department obtaining information as to the existence and nature of a record of state, federal, or foreign level convictions and state, federal, or foreign level arrests for which the department establishes that the applicant was released on bail or on his or her own recognizance pending trial, as described in subdivision (l) of Section 11105 of the Penal Code. Requests for federal level criminal offender record information received by the department pursuant to this section shall be forwarded to the Federal Bureau of Investigation by the department.(D) The department shall assess against each security printer applicant a fee determined by the department to be sufficient to cover all processing, maintenance, and investigative costs generated from or associated with completing state, federal, or foreign background checks and inspections of security printers pursuant to this section with respect to that applicant; the fee shall be paid by the applicant at the time he or she submits the security printer application, fingerprints, and related information to the department.(E) The department shall retain fingerprint impressions and related information for subsequent arrest notification pursuant to Section 11105.2 of the Penal Code for all applicants.(c) The department may, within 60 calendar days of receipt of the application from the applicant, deny the security printer application.(d) The department may deny a security printer application on any of the following grounds:(1) The applicant, any individual owner, partner, corporate officer, manager, agent, representative, employee, or subcontractor for the applicant, who has direct access, management, or control of controlled substance prescription forms, has been convicted of a crime. A conviction within the meaning of this paragraph means a plea or verdict of guilty or a conviction following a plea of nolo contendere. Any action which a board is permitted to take following the establishment of a conviction may be taken when the time for appeal has elapsed, the judgment of conviction has been affirmed on appeal, or when an order granting probation is made suspending the imposition of sentence, irrespective of a subsequent order under the provisions of Section 1203.4 of the Penal Code.(2) The applicant committed any act involving dishonesty, fraud, or deceit with the intent to substantially benefit himself, herself, or another, or substantially injure another.(3) The applicant committed any act that would constitute a violation of this division.(4) The applicant knowingly made a false statement of fact required to be revealed in the application to produce controlled substance prescription forms.(5) The department determines that the applicant failed to demonstrate adequate security procedures relating to the production and distribution of controlled substance prescription forms.(6) The department determines that the applicant has submitted an incomplete application.(7) As a condition for its approval as a security printer, an applicant shall authorize the Department of Justice to make any examination of the books and records of the applicant, or to visit and inspect the applicant during business hours, to the extent deemed necessary by the board or department to properly enforce this section.(e) An approved applicant shall submit an exemplar of a controlled substance prescription form, with all security features, to the Department of Justice within 30 days of initial production.(f) The department shall maintain a list of approved security printers and the department shall make this information available to prescribers and other appropriate government agencies, including the Board of Pharmacy.(g) Before printing any controlled substance prescription forms, a security printer shall verify with the appropriate licensing board that the prescriber possesses a license and current prescribing privileges which permits the prescribing of controlled substances with the federal Drug Enforcement Administration (DEA).(h) Controlled substance prescription forms shall be provided directly to the prescriber either in person, by certified mail, or by a means that requires a signature signifying receipt of the package and provision of that signature to the security printer. Controlled substance prescription forms provided in person shall be restricted to established customers. Security printers shall obtain a photo identification from the customer and maintain a log of this information. Controlled substance prescription forms shall be shipped only to the prescribers address on file and verified with the federal Drug Enforcement Administration or the Medical Board of California.(i) Security printers shall retain ordering and delivery records in a readily retrievable manner for individual prescribers for three years.(j) Security printers shall produce ordering and delivery records upon request by an authorized officer of the law as defined in Section 4017 of the Business and Professions Code.(k) Security printers shall report any theft or loss of controlled substance prescription forms to the Department of Justice via fax or email within 24 hours of the theft or loss.(l) (1) The department shall impose restrictions, sanctions, or penalties, subject to subdivisions (m) and (n), against security printers who are not in compliance with this division pursuant to regulations implemented pursuant to this division and shall revoke its approval of a security printer for a violation of this division or action that would permit a denial pursuant to subdivision (d) of this section.(2) When the department revokes its approval, it shall notify the appropriate licensing boards and remove the security printer from the list of approved security printers.(m) The following violations by security printers shall be punishable pursuant to subdivision (n):(1) Failure to comply with the Security Printer Guidelines established by the Security Printer Program as a condition of approval.(2) Failure to take reasonable precautions to prevent any dishonest act or illegal activity related to the access and control of security prescription forms.(3) Theft or fraudulent use of a prescribers identity in order to obtain security prescription forms.(n) A security printer approved pursuant to subdivision (b) shall be subject to the following penalties for actions leading to the denial of a security printer application specified in subdivision (d) or for a violation specified in subdivision (m):(1) For a first violation, a fine not to exceed one thousand dollars ($1,000).(2) For a second or subsequent violation, a fine not to exceed two thousand five hundred dollars ($2,500) for each violation.(3) For a third or subsequent violation, a filing of an administrative disciplinary action seeking to suspend or revoke security printer approval.(o) In order to facilitate the standardization of all prescription forms and the serialization of prescription forms with unique identifiers, the Department of Justice may cease issuing new approvals of security printers to the extent necessary to achieve these purposes. The department may, pursuant to regulation, reduce the number of currently approved security printers to no fewer than three vendors. The department shall ensure that any reduction or limitation of approved security printers does not impact the ability of vendors to meet demand for prescription forms.
6173
6274 11161.5. (a) Prescription forms for controlled substance prescriptions shall be obtained from security printers approved by the Department of Justice.(b) The department may approve security printer applications after the applicant has provided the following information:(1) Name, address, and telephone number of the applicant.(2) Policies and procedures of the applicant for verifying the identity of the prescriber ordering controlled substance prescription forms.(3) Policies and procedures of the applicant for verifying delivery of controlled substance prescription forms to prescribers.(4) (A) The location, names, and titles of the applicants agent for service of process in this state; all principal corporate officers, if any; all managing general partners, if any; and any individual owner, partner, corporate officer, manager, agent, representative, employee, or subcontractor of the applicant who has direct access to, or management or control of, controlled substance prescription forms.(B) A report containing this information shall be made on an annual basis and within 30 days after any change of office, principal corporate officers, managing general partner, or of any person described in subparagraph (A).(5) (A) A signed statement indicating whether the applicant, any principal corporate officer, any managing general partner, or any individual owner, partner, corporate officer, manager, agent, representative, employee, or subcontractor of the applicant who has direct access to, or management or control of, controlled substance prescription forms, has ever been convicted of, or pled no contest to, a violation of any law of a foreign country, the United States, or any state, or of any local ordinance.(B) The department shall provide the applicant and any individual owner, partner, corporate officer, manager, agent, representative, employee, or subcontractor of the applicant who has direct access to, or management or control of, controlled substance prescription forms, with the means and direction to provide fingerprints and related information, in a manner specified by the department, for the purpose of completing state, federal, or foreign criminal background checks.(C) Any applicant described in subdivision (b) shall submit his or her fingerprint images and related information to the department, for the purpose of the department obtaining information as to the existence and nature of a record of state, federal, or foreign level convictions and state, federal, or foreign level arrests for which the department establishes that the applicant was released on bail or on his or her own recognizance pending trial, as described in subdivision (l) of Section 11105 of the Penal Code. Requests for federal level criminal offender record information received by the department pursuant to this section shall be forwarded to the Federal Bureau of Investigation by the department.(D) The department shall assess against each security printer applicant a fee determined by the department to be sufficient to cover all processing, maintenance, and investigative costs generated from or associated with completing state, federal, or foreign background checks and inspections of security printers pursuant to this section with respect to that applicant; the fee shall be paid by the applicant at the time he or she submits the security printer application, fingerprints, and related information to the department.(E) The department shall retain fingerprint impressions and related information for subsequent arrest notification pursuant to Section 11105.2 of the Penal Code for all applicants.(c) The department may, within 60 calendar days of receipt of the application from the applicant, deny the security printer application.(d) The department may deny a security printer application on any of the following grounds:(1) The applicant, any individual owner, partner, corporate officer, manager, agent, representative, employee, or subcontractor for the applicant, who has direct access, management, or control of controlled substance prescription forms, has been convicted of a crime. A conviction within the meaning of this paragraph means a plea or verdict of guilty or a conviction following a plea of nolo contendere. Any action which a board is permitted to take following the establishment of a conviction may be taken when the time for appeal has elapsed, the judgment of conviction has been affirmed on appeal, or when an order granting probation is made suspending the imposition of sentence, irrespective of a subsequent order under the provisions of Section 1203.4 of the Penal Code.(2) The applicant committed any act involving dishonesty, fraud, or deceit with the intent to substantially benefit himself, herself, or another, or substantially injure another.(3) The applicant committed any act that would constitute a violation of this division.(4) The applicant knowingly made a false statement of fact required to be revealed in the application to produce controlled substance prescription forms.(5) The department determines that the applicant failed to demonstrate adequate security procedures relating to the production and distribution of controlled substance prescription forms.(6) The department determines that the applicant has submitted an incomplete application.(7) As a condition for its approval as a security printer, an applicant shall authorize the Department of Justice to make any examination of the books and records of the applicant, or to visit and inspect the applicant during business hours, to the extent deemed necessary by the board or department to properly enforce this section.(e) An approved applicant shall submit an exemplar of a controlled substance prescription form, with all security features, to the Department of Justice within 30 days of initial production.(f) The department shall maintain a list of approved security printers and the department shall make this information available to prescribers and other appropriate government agencies, including the Board of Pharmacy.(g) Before printing any controlled substance prescription forms, a security printer shall verify with the appropriate licensing board that the prescriber possesses a license and current prescribing privileges which permits the prescribing of controlled substances with the federal Drug Enforcement Administration (DEA).(h) Controlled substance prescription forms shall be provided directly to the prescriber either in person, by certified mail, or by a means that requires a signature signifying receipt of the package and provision of that signature to the security printer. Controlled substance prescription forms provided in person shall be restricted to established customers. Security printers shall obtain a photo identification from the customer and maintain a log of this information. Controlled substance prescription forms shall be shipped only to the prescribers address on file and verified with the federal Drug Enforcement Administration or the Medical Board of California.(i) Security printers shall retain ordering and delivery records in a readily retrievable manner for individual prescribers for three years.(j) Security printers shall produce ordering and delivery records upon request by an authorized officer of the law as defined in Section 4017 of the Business and Professions Code.(k) Security printers shall report any theft or loss of controlled substance prescription forms to the Department of Justice via fax or email within 24 hours of the theft or loss.(l) (1) The department shall impose restrictions, sanctions, or penalties, subject to subdivisions (m) and (n), against security printers who are not in compliance with this division pursuant to regulations implemented pursuant to this division and shall revoke its approval of a security printer for a violation of this division or action that would permit a denial pursuant to subdivision (d) of this section.(2) When the department revokes its approval, it shall notify the appropriate licensing boards and remove the security printer from the list of approved security printers.(m) The following violations by security printers shall be punishable pursuant to subdivision (n):(1) Failure to comply with the Security Printer Guidelines established by the Security Printer Program as a condition of approval.(2) Failure to take reasonable precautions to prevent any dishonest act or illegal activity related to the access and control of security prescription forms.(3) Theft or fraudulent use of a prescribers identity in order to obtain security prescription forms.(n) A security printer approved pursuant to subdivision (b) shall be subject to the following penalties for actions leading to the denial of a security printer application specified in subdivision (d) or for a violation specified in subdivision (m):(1) For a first violation, a fine not to exceed one thousand dollars ($1,000).(2) For a second or subsequent violation, a fine not to exceed two thousand five hundred dollars ($2,500) for each violation.(3) For a third or subsequent violation, a filing of an administrative disciplinary action seeking to suspend or revoke security printer approval.(o) In order to facilitate the standardization of all prescription forms and the serialization of prescription forms with unique identifiers, the Department of Justice may cease issuing new approvals of security printers to the extent necessary to achieve these purposes. The department may, pursuant to regulation, reduce the number of currently approved security printers to no fewer than three vendors. The department shall ensure that any reduction or limitation of approved security printers does not impact the ability of vendors to meet demand for prescription forms.
6375
6476
6577
6678 11161.5. (a) Prescription forms for controlled substance prescriptions shall be obtained from security printers approved by the Department of Justice.
6779
6880 (b) The department may approve security printer applications after the applicant has provided the following information:
6981
7082 (1) Name, address, and telephone number of the applicant.
7183
7284 (2) Policies and procedures of the applicant for verifying the identity of the prescriber ordering controlled substance prescription forms.
7385
7486 (3) Policies and procedures of the applicant for verifying delivery of controlled substance prescription forms to prescribers.
7587
7688 (4) (A) The location, names, and titles of the applicants agent for service of process in this state; all principal corporate officers, if any; all managing general partners, if any; and any individual owner, partner, corporate officer, manager, agent, representative, employee, or subcontractor of the applicant who has direct access to, or management or control of, controlled substance prescription forms.
7789
7890 (B) A report containing this information shall be made on an annual basis and within 30 days after any change of office, principal corporate officers, managing general partner, or of any person described in subparagraph (A).
7991
8092 (5) (A) A signed statement indicating whether the applicant, any principal corporate officer, any managing general partner, or any individual owner, partner, corporate officer, manager, agent, representative, employee, or subcontractor of the applicant who has direct access to, or management or control of, controlled substance prescription forms, has ever been convicted of, or pled no contest to, a violation of any law of a foreign country, the United States, or any state, or of any local ordinance.
8193
8294 (B) The department shall provide the applicant and any individual owner, partner, corporate officer, manager, agent, representative, employee, or subcontractor of the applicant who has direct access to, or management or control of, controlled substance prescription forms, with the means and direction to provide fingerprints and related information, in a manner specified by the department, for the purpose of completing state, federal, or foreign criminal background checks.
8395
8496 (C) Any applicant described in subdivision (b) shall submit his or her fingerprint images and related information to the department, for the purpose of the department obtaining information as to the existence and nature of a record of state, federal, or foreign level convictions and state, federal, or foreign level arrests for which the department establishes that the applicant was released on bail or on his or her own recognizance pending trial, as described in subdivision (l) of Section 11105 of the Penal Code. Requests for federal level criminal offender record information received by the department pursuant to this section shall be forwarded to the Federal Bureau of Investigation by the department.
8597
8698 (D) The department shall assess against each security printer applicant a fee determined by the department to be sufficient to cover all processing, maintenance, and investigative costs generated from or associated with completing state, federal, or foreign background checks and inspections of security printers pursuant to this section with respect to that applicant; the fee shall be paid by the applicant at the time he or she submits the security printer application, fingerprints, and related information to the department.
8799
88100 (E) The department shall retain fingerprint impressions and related information for subsequent arrest notification pursuant to Section 11105.2 of the Penal Code for all applicants.
89101
90102 (c) The department may, within 60 calendar days of receipt of the application from the applicant, deny the security printer application.
91103
92104 (d) The department may deny a security printer application on any of the following grounds:
93105
94106 (1) The applicant, any individual owner, partner, corporate officer, manager, agent, representative, employee, or subcontractor for the applicant, who has direct access, management, or control of controlled substance prescription forms, has been convicted of a crime. A conviction within the meaning of this paragraph means a plea or verdict of guilty or a conviction following a plea of nolo contendere. Any action which a board is permitted to take following the establishment of a conviction may be taken when the time for appeal has elapsed, the judgment of conviction has been affirmed on appeal, or when an order granting probation is made suspending the imposition of sentence, irrespective of a subsequent order under the provisions of Section 1203.4 of the Penal Code.
95107
96108 (2) The applicant committed any act involving dishonesty, fraud, or deceit with the intent to substantially benefit himself, herself, or another, or substantially injure another.
97109
98110 (3) The applicant committed any act that would constitute a violation of this division.
99111
100112 (4) The applicant knowingly made a false statement of fact required to be revealed in the application to produce controlled substance prescription forms.
101113
102114 (5) The department determines that the applicant failed to demonstrate adequate security procedures relating to the production and distribution of controlled substance prescription forms.
103115
104116 (6) The department determines that the applicant has submitted an incomplete application.
105117
106118 (7) As a condition for its approval as a security printer, an applicant shall authorize the Department of Justice to make any examination of the books and records of the applicant, or to visit and inspect the applicant during business hours, to the extent deemed necessary by the board or department to properly enforce this section.
107119
108120 (e) An approved applicant shall submit an exemplar of a controlled substance prescription form, with all security features, to the Department of Justice within 30 days of initial production.
109121
110122 (f) The department shall maintain a list of approved security printers and the department shall make this information available to prescribers and other appropriate government agencies, including the Board of Pharmacy.
111123
112124 (g) Before printing any controlled substance prescription forms, a security printer shall verify with the appropriate licensing board that the prescriber possesses a license and current prescribing privileges which permits the prescribing of controlled substances with the federal Drug Enforcement Administration (DEA).
113125
114126 (h) Controlled substance prescription forms shall be provided directly to the prescriber either in person, by certified mail, or by a means that requires a signature signifying receipt of the package and provision of that signature to the security printer. Controlled substance prescription forms provided in person shall be restricted to established customers. Security printers shall obtain a photo identification from the customer and maintain a log of this information. Controlled substance prescription forms shall be shipped only to the prescribers address on file and verified with the federal Drug Enforcement Administration or the Medical Board of California.
115127
116128 (i) Security printers shall retain ordering and delivery records in a readily retrievable manner for individual prescribers for three years.
117129
118130 (j) Security printers shall produce ordering and delivery records upon request by an authorized officer of the law as defined in Section 4017 of the Business and Professions Code.
119131
120132 (k) Security printers shall report any theft or loss of controlled substance prescription forms to the Department of Justice via fax or email within 24 hours of the theft or loss.
121133
122134 (l) (1) The department shall impose restrictions, sanctions, or penalties, subject to subdivisions (m) and (n), against security printers who are not in compliance with this division pursuant to regulations implemented pursuant to this division and shall revoke its approval of a security printer for a violation of this division or action that would permit a denial pursuant to subdivision (d) of this section.
123135
124136 (2) When the department revokes its approval, it shall notify the appropriate licensing boards and remove the security printer from the list of approved security printers.
125137
126138 (m) The following violations by security printers shall be punishable pursuant to subdivision (n):
127139
128140 (1) Failure to comply with the Security Printer Guidelines established by the Security Printer Program as a condition of approval.
129141
130142 (2) Failure to take reasonable precautions to prevent any dishonest act or illegal activity related to the access and control of security prescription forms.
131143
132144 (3) Theft or fraudulent use of a prescribers identity in order to obtain security prescription forms.
133145
134146 (n) A security printer approved pursuant to subdivision (b) shall be subject to the following penalties for actions leading to the denial of a security printer application specified in subdivision (d) or for a violation specified in subdivision (m):
135147
136148 (1) For a first violation, a fine not to exceed one thousand dollars ($1,000).
137149
138150 (2) For a second or subsequent violation, a fine not to exceed two thousand five hundred dollars ($2,500) for each violation.
139151
140152 (3) For a third or subsequent violation, a filing of an administrative disciplinary action seeking to suspend or revoke security printer approval.
141153
142154 (o) In order to facilitate the standardization of all prescription forms and the serialization of prescription forms with unique identifiers, the Department of Justice may cease issuing new approvals of security printers to the extent necessary to achieve these purposes. The department may, pursuant to regulation, reduce the number of currently approved security printers to no fewer than three vendors. The department shall ensure that any reduction or limitation of approved security printers does not impact the ability of vendors to meet demand for prescription forms.
143155
144156 SEC. 3. Section 11162.1 of the Health and Safety Code is amended to read:11162.1. (a) The prescription forms for controlled substances shall be printed with the following features:(1) A latent, repetitive void pattern shall be printed across the entire front of the prescription blank; if a prescription is scanned or photocopied, the word void shall appear in a pattern across the entire front of the prescription.(2) A watermark shall be printed on the backside of the prescription blank; the watermark shall consist of the words California Security Prescription.(3) A chemical void protection that prevents alteration by chemical washing.(4) A feature printed in thermochromic ink.(5) An area of opaque writing so that the writing disappears if the prescription is lightened.(6) A description of the security features included on each prescription form.(7) (A) Six quantity check off boxes shall be printed on the form so that the prescriber may indicate the quantity by checking the applicable box where the following quantities shall appear:1242549507475100101150151 and over.(B) In conjunction with the quantity boxes, a space shall be provided to designate the units referenced in the quantity boxes when the drug is not in tablet or capsule form.(8) Prescription blanks shall contain a statement printed on the bottom of the prescription blank that the Prescription is void if the number of drugs prescribed is not noted.(9) The preprinted name, category of licensure, license number, federal controlled substance registration number, and address of the prescribing practitioner.(10) Check boxes shall be printed on the form so that the prescriber may indicate the number of refills ordered.(11) The date of origin of the prescription.(12) A check box indicating the prescribers order not to substitute.(13) An identifying number assigned to the approved security printer by the Department of Justice.(14) (A) A check box by the name of each prescriber when a prescription form lists multiple prescribers.(B) Each prescriber who signs the prescription form shall identify himself or herself as the prescriber by checking the box by his or her name.(15) A uniquely serialized number, in a manner prescribed by the Department of Justice.(b) Each batch of controlled substance prescription forms shall have the lot number printed on the form and each form within that batch shall be numbered sequentially beginning with the numeral one.(c) (1) A prescriber designated by a licensed health care facility, a clinic specified in Section 1200, or a clinic specified in subdivision (a) of Section 1206 that has 25 or more physicians or surgeons may order controlled substance prescription forms for use by prescribers when treating patients in that facility without the information required in paragraph (9) of subdivision (a) or paragraph (3) of this subdivision.(2) Forms ordered pursuant to this subdivision shall have the name, category of licensure, license number, and federal controlled substance registration number of the designated prescriber and the name, address, category of licensure, and license number of the licensed health care facility the clinic specified in Section 1200, or the clinic specified in Section 1206 that has 25 or more physicians or surgeons preprinted on the form. Licensed health care facilities or clinics exempt under Section 1206 are not required to preprint the category of licensure and license number of their facility or clinic.(3) Forms ordered pursuant to this section shall not be valid prescriptions without the name, category of licensure, license number, and federal controlled substance registration number of the prescriber on the form.(4) (A) Except as provided in subparagraph (B), the designated prescriber shall maintain a record of the prescribers to whom the controlled substance prescription forms are issued, that shall include the name, category of licensure, license number, federal controlled substance registration number, and quantity of controlled substance prescription forms issued to each prescriber. The record shall be maintained in the health facility for three years.(B) Forms ordered pursuant to this subdivision that are printed by a computerized prescription generation system shall not be subject to subparagraph (A) or paragraph (7) of subdivision (a). Forms printed pursuant to this subdivision that are printed by a computerized prescription generation system may contain the prescribers name, category of professional licensure, license number, federal controlled substance registration number, and the date of the prescription.(d) Within the next working day following delivery, a security printer shall submit via Web-based application, as specified by the Department of Justice, all of the following information for all prescription forms delivered:(1) Serial numbers of all prescription forms delivered.(2) All prescriber names and Drug Enforcement Administration Controlled Substance Registration Certificate numbers displayed on the prescription forms.(3) The delivery shipment recipient names.(4) The date of delivery.
145157
146158 SEC. 3. Section 11162.1 of the Health and Safety Code is amended to read:
147159
148160 ### SEC. 3.
149161
150162 11162.1. (a) The prescription forms for controlled substances shall be printed with the following features:(1) A latent, repetitive void pattern shall be printed across the entire front of the prescription blank; if a prescription is scanned or photocopied, the word void shall appear in a pattern across the entire front of the prescription.(2) A watermark shall be printed on the backside of the prescription blank; the watermark shall consist of the words California Security Prescription.(3) A chemical void protection that prevents alteration by chemical washing.(4) A feature printed in thermochromic ink.(5) An area of opaque writing so that the writing disappears if the prescription is lightened.(6) A description of the security features included on each prescription form.(7) (A) Six quantity check off boxes shall be printed on the form so that the prescriber may indicate the quantity by checking the applicable box where the following quantities shall appear:1242549507475100101150151 and over.(B) In conjunction with the quantity boxes, a space shall be provided to designate the units referenced in the quantity boxes when the drug is not in tablet or capsule form.(8) Prescription blanks shall contain a statement printed on the bottom of the prescription blank that the Prescription is void if the number of drugs prescribed is not noted.(9) The preprinted name, category of licensure, license number, federal controlled substance registration number, and address of the prescribing practitioner.(10) Check boxes shall be printed on the form so that the prescriber may indicate the number of refills ordered.(11) The date of origin of the prescription.(12) A check box indicating the prescribers order not to substitute.(13) An identifying number assigned to the approved security printer by the Department of Justice.(14) (A) A check box by the name of each prescriber when a prescription form lists multiple prescribers.(B) Each prescriber who signs the prescription form shall identify himself or herself as the prescriber by checking the box by his or her name.(15) A uniquely serialized number, in a manner prescribed by the Department of Justice.(b) Each batch of controlled substance prescription forms shall have the lot number printed on the form and each form within that batch shall be numbered sequentially beginning with the numeral one.(c) (1) A prescriber designated by a licensed health care facility, a clinic specified in Section 1200, or a clinic specified in subdivision (a) of Section 1206 that has 25 or more physicians or surgeons may order controlled substance prescription forms for use by prescribers when treating patients in that facility without the information required in paragraph (9) of subdivision (a) or paragraph (3) of this subdivision.(2) Forms ordered pursuant to this subdivision shall have the name, category of licensure, license number, and federal controlled substance registration number of the designated prescriber and the name, address, category of licensure, and license number of the licensed health care facility the clinic specified in Section 1200, or the clinic specified in Section 1206 that has 25 or more physicians or surgeons preprinted on the form. Licensed health care facilities or clinics exempt under Section 1206 are not required to preprint the category of licensure and license number of their facility or clinic.(3) Forms ordered pursuant to this section shall not be valid prescriptions without the name, category of licensure, license number, and federal controlled substance registration number of the prescriber on the form.(4) (A) Except as provided in subparagraph (B), the designated prescriber shall maintain a record of the prescribers to whom the controlled substance prescription forms are issued, that shall include the name, category of licensure, license number, federal controlled substance registration number, and quantity of controlled substance prescription forms issued to each prescriber. The record shall be maintained in the health facility for three years.(B) Forms ordered pursuant to this subdivision that are printed by a computerized prescription generation system shall not be subject to subparagraph (A) or paragraph (7) of subdivision (a). Forms printed pursuant to this subdivision that are printed by a computerized prescription generation system may contain the prescribers name, category of professional licensure, license number, federal controlled substance registration number, and the date of the prescription.(d) Within the next working day following delivery, a security printer shall submit via Web-based application, as specified by the Department of Justice, all of the following information for all prescription forms delivered:(1) Serial numbers of all prescription forms delivered.(2) All prescriber names and Drug Enforcement Administration Controlled Substance Registration Certificate numbers displayed on the prescription forms.(3) The delivery shipment recipient names.(4) The date of delivery.
151163
152164 11162.1. (a) The prescription forms for controlled substances shall be printed with the following features:(1) A latent, repetitive void pattern shall be printed across the entire front of the prescription blank; if a prescription is scanned or photocopied, the word void shall appear in a pattern across the entire front of the prescription.(2) A watermark shall be printed on the backside of the prescription blank; the watermark shall consist of the words California Security Prescription.(3) A chemical void protection that prevents alteration by chemical washing.(4) A feature printed in thermochromic ink.(5) An area of opaque writing so that the writing disappears if the prescription is lightened.(6) A description of the security features included on each prescription form.(7) (A) Six quantity check off boxes shall be printed on the form so that the prescriber may indicate the quantity by checking the applicable box where the following quantities shall appear:1242549507475100101150151 and over.(B) In conjunction with the quantity boxes, a space shall be provided to designate the units referenced in the quantity boxes when the drug is not in tablet or capsule form.(8) Prescription blanks shall contain a statement printed on the bottom of the prescription blank that the Prescription is void if the number of drugs prescribed is not noted.(9) The preprinted name, category of licensure, license number, federal controlled substance registration number, and address of the prescribing practitioner.(10) Check boxes shall be printed on the form so that the prescriber may indicate the number of refills ordered.(11) The date of origin of the prescription.(12) A check box indicating the prescribers order not to substitute.(13) An identifying number assigned to the approved security printer by the Department of Justice.(14) (A) A check box by the name of each prescriber when a prescription form lists multiple prescribers.(B) Each prescriber who signs the prescription form shall identify himself or herself as the prescriber by checking the box by his or her name.(15) A uniquely serialized number, in a manner prescribed by the Department of Justice.(b) Each batch of controlled substance prescription forms shall have the lot number printed on the form and each form within that batch shall be numbered sequentially beginning with the numeral one.(c) (1) A prescriber designated by a licensed health care facility, a clinic specified in Section 1200, or a clinic specified in subdivision (a) of Section 1206 that has 25 or more physicians or surgeons may order controlled substance prescription forms for use by prescribers when treating patients in that facility without the information required in paragraph (9) of subdivision (a) or paragraph (3) of this subdivision.(2) Forms ordered pursuant to this subdivision shall have the name, category of licensure, license number, and federal controlled substance registration number of the designated prescriber and the name, address, category of licensure, and license number of the licensed health care facility the clinic specified in Section 1200, or the clinic specified in Section 1206 that has 25 or more physicians or surgeons preprinted on the form. Licensed health care facilities or clinics exempt under Section 1206 are not required to preprint the category of licensure and license number of their facility or clinic.(3) Forms ordered pursuant to this section shall not be valid prescriptions without the name, category of licensure, license number, and federal controlled substance registration number of the prescriber on the form.(4) (A) Except as provided in subparagraph (B), the designated prescriber shall maintain a record of the prescribers to whom the controlled substance prescription forms are issued, that shall include the name, category of licensure, license number, federal controlled substance registration number, and quantity of controlled substance prescription forms issued to each prescriber. The record shall be maintained in the health facility for three years.(B) Forms ordered pursuant to this subdivision that are printed by a computerized prescription generation system shall not be subject to subparagraph (A) or paragraph (7) of subdivision (a). Forms printed pursuant to this subdivision that are printed by a computerized prescription generation system may contain the prescribers name, category of professional licensure, license number, federal controlled substance registration number, and the date of the prescription.(d) Within the next working day following delivery, a security printer shall submit via Web-based application, as specified by the Department of Justice, all of the following information for all prescription forms delivered:(1) Serial numbers of all prescription forms delivered.(2) All prescriber names and Drug Enforcement Administration Controlled Substance Registration Certificate numbers displayed on the prescription forms.(3) The delivery shipment recipient names.(4) The date of delivery.
153165
154166 11162.1. (a) The prescription forms for controlled substances shall be printed with the following features:(1) A latent, repetitive void pattern shall be printed across the entire front of the prescription blank; if a prescription is scanned or photocopied, the word void shall appear in a pattern across the entire front of the prescription.(2) A watermark shall be printed on the backside of the prescription blank; the watermark shall consist of the words California Security Prescription.(3) A chemical void protection that prevents alteration by chemical washing.(4) A feature printed in thermochromic ink.(5) An area of opaque writing so that the writing disappears if the prescription is lightened.(6) A description of the security features included on each prescription form.(7) (A) Six quantity check off boxes shall be printed on the form so that the prescriber may indicate the quantity by checking the applicable box where the following quantities shall appear:1242549507475100101150151 and over.(B) In conjunction with the quantity boxes, a space shall be provided to designate the units referenced in the quantity boxes when the drug is not in tablet or capsule form.(8) Prescription blanks shall contain a statement printed on the bottom of the prescription blank that the Prescription is void if the number of drugs prescribed is not noted.(9) The preprinted name, category of licensure, license number, federal controlled substance registration number, and address of the prescribing practitioner.(10) Check boxes shall be printed on the form so that the prescriber may indicate the number of refills ordered.(11) The date of origin of the prescription.(12) A check box indicating the prescribers order not to substitute.(13) An identifying number assigned to the approved security printer by the Department of Justice.(14) (A) A check box by the name of each prescriber when a prescription form lists multiple prescribers.(B) Each prescriber who signs the prescription form shall identify himself or herself as the prescriber by checking the box by his or her name.(15) A uniquely serialized number, in a manner prescribed by the Department of Justice.(b) Each batch of controlled substance prescription forms shall have the lot number printed on the form and each form within that batch shall be numbered sequentially beginning with the numeral one.(c) (1) A prescriber designated by a licensed health care facility, a clinic specified in Section 1200, or a clinic specified in subdivision (a) of Section 1206 that has 25 or more physicians or surgeons may order controlled substance prescription forms for use by prescribers when treating patients in that facility without the information required in paragraph (9) of subdivision (a) or paragraph (3) of this subdivision.(2) Forms ordered pursuant to this subdivision shall have the name, category of licensure, license number, and federal controlled substance registration number of the designated prescriber and the name, address, category of licensure, and license number of the licensed health care facility the clinic specified in Section 1200, or the clinic specified in Section 1206 that has 25 or more physicians or surgeons preprinted on the form. Licensed health care facilities or clinics exempt under Section 1206 are not required to preprint the category of licensure and license number of their facility or clinic.(3) Forms ordered pursuant to this section shall not be valid prescriptions without the name, category of licensure, license number, and federal controlled substance registration number of the prescriber on the form.(4) (A) Except as provided in subparagraph (B), the designated prescriber shall maintain a record of the prescribers to whom the controlled substance prescription forms are issued, that shall include the name, category of licensure, license number, federal controlled substance registration number, and quantity of controlled substance prescription forms issued to each prescriber. The record shall be maintained in the health facility for three years.(B) Forms ordered pursuant to this subdivision that are printed by a computerized prescription generation system shall not be subject to subparagraph (A) or paragraph (7) of subdivision (a). Forms printed pursuant to this subdivision that are printed by a computerized prescription generation system may contain the prescribers name, category of professional licensure, license number, federal controlled substance registration number, and the date of the prescription.(d) Within the next working day following delivery, a security printer shall submit via Web-based application, as specified by the Department of Justice, all of the following information for all prescription forms delivered:(1) Serial numbers of all prescription forms delivered.(2) All prescriber names and Drug Enforcement Administration Controlled Substance Registration Certificate numbers displayed on the prescription forms.(3) The delivery shipment recipient names.(4) The date of delivery.
155167
156168
157169
158170 11162.1. (a) The prescription forms for controlled substances shall be printed with the following features:
159171
160172 (1) A latent, repetitive void pattern shall be printed across the entire front of the prescription blank; if a prescription is scanned or photocopied, the word void shall appear in a pattern across the entire front of the prescription.
161173
162174 (2) A watermark shall be printed on the backside of the prescription blank; the watermark shall consist of the words California Security Prescription.
163175
164176 (3) A chemical void protection that prevents alteration by chemical washing.
165177
166178 (4) A feature printed in thermochromic ink.
167179
168180 (5) An area of opaque writing so that the writing disappears if the prescription is lightened.
169181
170182 (6) A description of the security features included on each prescription form.
171183
172184 (7) (A) Six quantity check off boxes shall be printed on the form so that the prescriber may indicate the quantity by checking the applicable box where the following quantities shall appear:
173185
174186 124
175187
176188 2549
177189
178190 5074
179191
180192 75100
181193
182194 101150
183195
184196 151 and over.
185197
186198 (B) In conjunction with the quantity boxes, a space shall be provided to designate the units referenced in the quantity boxes when the drug is not in tablet or capsule form.
187199
188200 (8) Prescription blanks shall contain a statement printed on the bottom of the prescription blank that the Prescription is void if the number of drugs prescribed is not noted.
189201
190202 (9) The preprinted name, category of licensure, license number, federal controlled substance registration number, and address of the prescribing practitioner.
191203
192204 (10) Check boxes shall be printed on the form so that the prescriber may indicate the number of refills ordered.
193205
194206 (11) The date of origin of the prescription.
195207
196208 (12) A check box indicating the prescribers order not to substitute.
197209
198210 (13) An identifying number assigned to the approved security printer by the Department of Justice.
199211
200212 (14) (A) A check box by the name of each prescriber when a prescription form lists multiple prescribers.
201213
202214 (B) Each prescriber who signs the prescription form shall identify himself or herself as the prescriber by checking the box by his or her name.
203215
204216 (15) A uniquely serialized number, in a manner prescribed by the Department of Justice.
205217
206218 (b) Each batch of controlled substance prescription forms shall have the lot number printed on the form and each form within that batch shall be numbered sequentially beginning with the numeral one.
207219
208220 (c) (1) A prescriber designated by a licensed health care facility, a clinic specified in Section 1200, or a clinic specified in subdivision (a) of Section 1206 that has 25 or more physicians or surgeons may order controlled substance prescription forms for use by prescribers when treating patients in that facility without the information required in paragraph (9) of subdivision (a) or paragraph (3) of this subdivision.
209221
210222 (2) Forms ordered pursuant to this subdivision shall have the name, category of licensure, license number, and federal controlled substance registration number of the designated prescriber and the name, address, category of licensure, and license number of the licensed health care facility the clinic specified in Section 1200, or the clinic specified in Section 1206 that has 25 or more physicians or surgeons preprinted on the form. Licensed health care facilities or clinics exempt under Section 1206 are not required to preprint the category of licensure and license number of their facility or clinic.
211223
212224 (3) Forms ordered pursuant to this section shall not be valid prescriptions without the name, category of licensure, license number, and federal controlled substance registration number of the prescriber on the form.
213225
214226 (4) (A) Except as provided in subparagraph (B), the designated prescriber shall maintain a record of the prescribers to whom the controlled substance prescription forms are issued, that shall include the name, category of licensure, license number, federal controlled substance registration number, and quantity of controlled substance prescription forms issued to each prescriber. The record shall be maintained in the health facility for three years.
215227
216228 (B) Forms ordered pursuant to this subdivision that are printed by a computerized prescription generation system shall not be subject to subparagraph (A) or paragraph (7) of subdivision (a). Forms printed pursuant to this subdivision that are printed by a computerized prescription generation system may contain the prescribers name, category of professional licensure, license number, federal controlled substance registration number, and the date of the prescription.
217229
218230 (d) Within the next working day following delivery, a security printer shall submit via Web-based application, as specified by the Department of Justice, all of the following information for all prescription forms delivered:
219231
220232 (1) Serial numbers of all prescription forms delivered.
221233
222234 (2) All prescriber names and Drug Enforcement Administration Controlled Substance Registration Certificate numbers displayed on the prescription forms.
223235
224236 (3) The delivery shipment recipient names.
225237
226238 (4) The date of delivery.
227239
228240 SEC. 4. Section 11165 of the Health and Safety Code is amended to read:11165. (a) To assist health care practitioners in their efforts to ensure appropriate prescribing, ordering, administering, furnishing, and dispensing of controlled substances, law enforcement and regulatory agencies in their efforts to control the diversion and resultant abuse of Schedule II, Schedule III, and Schedule IV controlled substances, and for statistical analysis, education, and research, the Department of Justice shall, contingent upon the availability of adequate funds in the CURES Fund, maintain the Controlled Substance Utilization Review and Evaluation System (CURES) for the electronic monitoring of, and Internet access to information regarding, the prescribing and dispensing of Schedule II, Schedule III, and Schedule IV controlled substances by all practitioners authorized to prescribe, order, administer, furnish, or dispense these controlled substances.(b) The Department of Justice may seek and use grant funds to pay the costs incurred by the operation and maintenance of CURES. The department shall annually report to the Legislature and make available to the public the amount and source of funds it receives for support of CURES.(c) (1) The operation of CURES shall comply with all applicable federal and state privacy and security laws and regulations.(2) (A) CURES shall operate under existing provisions of law to safeguard the privacy and confidentiality of patients. Data obtained from CURES shall only be provided to appropriate state, local, and federal public agencies for disciplinary, civil, or criminal purposes and to other agencies or entities, as determined by the Department of Justice, for the purpose of educating practitioners and others in lieu of disciplinary, civil, or criminal actions. Data may be provided to public or private entities, as approved by the Department of Justice, for educational, peer review, statistical, or research purposes, provided that patient information, including any information that may identify the patient, is not compromised. Further, data disclosed to any individual or agency as described in this subdivision shall not be disclosed, sold, or transferred to any third party, unless authorized by, or pursuant to, state and federal privacy and security laws and regulations. The Department of Justice shall establish policies, procedures, and regulations regarding the use, access, evaluation, management, implementation, operation, storage, disclosure, and security of the information within CURES, consistent with this subdivision.(B) Notwithstanding subparagraph (A), a regulatory board whose licensees do not prescribe, order, administer, furnish, or dispense controlled substances shall not be provided data obtained from CURES.(3) In accordance with federal and state privacy laws and regulations, a health care practitioner may provide a patient with a copy of the patients CURES patient activity report as long as no additional CURES data is provided and keep a copy of the report in the patients medical record in compliance with subdivision (d) of Section 11165.1.(d) For each prescription for a Schedule II, Schedule III, or Schedule IV controlled substance, as defined in the controlled substances schedules in federal law and regulations, specifically Sections 1308.12, 1308.13, and 1308.14, respectively, of Title 21 of the Code of Federal Regulations, the dispensing pharmacy, clinic, or other dispenser shall report the following information to the Department of Justice as soon as reasonably possible, but not more than seven days after the date a controlled substance is dispensed, in a format specified by the Department of Justice:(1) Full name, address, and, if available, telephone number of the ultimate user or research subject, or contact information as determined by the Secretary of the United States Department of Health and Human Services, and the gender, and date of birth of the ultimate user.(2) The prescribers category of licensure, license number, national provider identifier (NPI) number, if applicable, the federal controlled substance registration number, and the state medical license number of any prescriber using the federal controlled substance registration number of a government-exempt facility.(3) Pharmacy prescription number, license number, NPI number, and federal controlled substance registration number.(4) National Drug Code (NDC) number of the controlled substance dispensed.(5) Quantity of the controlled substance dispensed.(6) International Statistical Classification of Diseases, 9th revision (ICD-9) or 10th revision (ICD-10) Code, if available.(7) Number of refills ordered.(8) Whether the drug was dispensed as a refill of a prescription or as a first-time request.(9) Date of origin of the prescription.(10) Date of dispensing of the prescription.(11) The serial number for the corresponding prescription form, if applicable.(e) The Department of Justice may invite stakeholders to assist, advise, and make recommendations on the establishment of rules and regulations necessary to ensure the proper administration and enforcement of the CURES database. All prescriber and dispenser invitees shall be licensed by one of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, in active practice in California, and a regular user of CURES.(f) The Department of Justice shall, prior to upgrading CURES, consult with prescribers licensed by one of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, one or more of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, and any other stakeholder identified by the department, for the purpose of identifying desirable capabilities and upgrades to the CURES Prescription Drug Monitoring Program (PDMP).(g) The Department of Justice may establish a process to educate authorized subscribers of the CURES PDMP on how to access and use the CURES PDMP.
229241
230242 SEC. 4. Section 11165 of the Health and Safety Code is amended to read:
231243
232244 ### SEC. 4.
233245
234246 11165. (a) To assist health care practitioners in their efforts to ensure appropriate prescribing, ordering, administering, furnishing, and dispensing of controlled substances, law enforcement and regulatory agencies in their efforts to control the diversion and resultant abuse of Schedule II, Schedule III, and Schedule IV controlled substances, and for statistical analysis, education, and research, the Department of Justice shall, contingent upon the availability of adequate funds in the CURES Fund, maintain the Controlled Substance Utilization Review and Evaluation System (CURES) for the electronic monitoring of, and Internet access to information regarding, the prescribing and dispensing of Schedule II, Schedule III, and Schedule IV controlled substances by all practitioners authorized to prescribe, order, administer, furnish, or dispense these controlled substances.(b) The Department of Justice may seek and use grant funds to pay the costs incurred by the operation and maintenance of CURES. The department shall annually report to the Legislature and make available to the public the amount and source of funds it receives for support of CURES.(c) (1) The operation of CURES shall comply with all applicable federal and state privacy and security laws and regulations.(2) (A) CURES shall operate under existing provisions of law to safeguard the privacy and confidentiality of patients. Data obtained from CURES shall only be provided to appropriate state, local, and federal public agencies for disciplinary, civil, or criminal purposes and to other agencies or entities, as determined by the Department of Justice, for the purpose of educating practitioners and others in lieu of disciplinary, civil, or criminal actions. Data may be provided to public or private entities, as approved by the Department of Justice, for educational, peer review, statistical, or research purposes, provided that patient information, including any information that may identify the patient, is not compromised. Further, data disclosed to any individual or agency as described in this subdivision shall not be disclosed, sold, or transferred to any third party, unless authorized by, or pursuant to, state and federal privacy and security laws and regulations. The Department of Justice shall establish policies, procedures, and regulations regarding the use, access, evaluation, management, implementation, operation, storage, disclosure, and security of the information within CURES, consistent with this subdivision.(B) Notwithstanding subparagraph (A), a regulatory board whose licensees do not prescribe, order, administer, furnish, or dispense controlled substances shall not be provided data obtained from CURES.(3) In accordance with federal and state privacy laws and regulations, a health care practitioner may provide a patient with a copy of the patients CURES patient activity report as long as no additional CURES data is provided and keep a copy of the report in the patients medical record in compliance with subdivision (d) of Section 11165.1.(d) For each prescription for a Schedule II, Schedule III, or Schedule IV controlled substance, as defined in the controlled substances schedules in federal law and regulations, specifically Sections 1308.12, 1308.13, and 1308.14, respectively, of Title 21 of the Code of Federal Regulations, the dispensing pharmacy, clinic, or other dispenser shall report the following information to the Department of Justice as soon as reasonably possible, but not more than seven days after the date a controlled substance is dispensed, in a format specified by the Department of Justice:(1) Full name, address, and, if available, telephone number of the ultimate user or research subject, or contact information as determined by the Secretary of the United States Department of Health and Human Services, and the gender, and date of birth of the ultimate user.(2) The prescribers category of licensure, license number, national provider identifier (NPI) number, if applicable, the federal controlled substance registration number, and the state medical license number of any prescriber using the federal controlled substance registration number of a government-exempt facility.(3) Pharmacy prescription number, license number, NPI number, and federal controlled substance registration number.(4) National Drug Code (NDC) number of the controlled substance dispensed.(5) Quantity of the controlled substance dispensed.(6) International Statistical Classification of Diseases, 9th revision (ICD-9) or 10th revision (ICD-10) Code, if available.(7) Number of refills ordered.(8) Whether the drug was dispensed as a refill of a prescription or as a first-time request.(9) Date of origin of the prescription.(10) Date of dispensing of the prescription.(11) The serial number for the corresponding prescription form, if applicable.(e) The Department of Justice may invite stakeholders to assist, advise, and make recommendations on the establishment of rules and regulations necessary to ensure the proper administration and enforcement of the CURES database. All prescriber and dispenser invitees shall be licensed by one of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, in active practice in California, and a regular user of CURES.(f) The Department of Justice shall, prior to upgrading CURES, consult with prescribers licensed by one of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, one or more of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, and any other stakeholder identified by the department, for the purpose of identifying desirable capabilities and upgrades to the CURES Prescription Drug Monitoring Program (PDMP).(g) The Department of Justice may establish a process to educate authorized subscribers of the CURES PDMP on how to access and use the CURES PDMP.
235247
236248 11165. (a) To assist health care practitioners in their efforts to ensure appropriate prescribing, ordering, administering, furnishing, and dispensing of controlled substances, law enforcement and regulatory agencies in their efforts to control the diversion and resultant abuse of Schedule II, Schedule III, and Schedule IV controlled substances, and for statistical analysis, education, and research, the Department of Justice shall, contingent upon the availability of adequate funds in the CURES Fund, maintain the Controlled Substance Utilization Review and Evaluation System (CURES) for the electronic monitoring of, and Internet access to information regarding, the prescribing and dispensing of Schedule II, Schedule III, and Schedule IV controlled substances by all practitioners authorized to prescribe, order, administer, furnish, or dispense these controlled substances.(b) The Department of Justice may seek and use grant funds to pay the costs incurred by the operation and maintenance of CURES. The department shall annually report to the Legislature and make available to the public the amount and source of funds it receives for support of CURES.(c) (1) The operation of CURES shall comply with all applicable federal and state privacy and security laws and regulations.(2) (A) CURES shall operate under existing provisions of law to safeguard the privacy and confidentiality of patients. Data obtained from CURES shall only be provided to appropriate state, local, and federal public agencies for disciplinary, civil, or criminal purposes and to other agencies or entities, as determined by the Department of Justice, for the purpose of educating practitioners and others in lieu of disciplinary, civil, or criminal actions. Data may be provided to public or private entities, as approved by the Department of Justice, for educational, peer review, statistical, or research purposes, provided that patient information, including any information that may identify the patient, is not compromised. Further, data disclosed to any individual or agency as described in this subdivision shall not be disclosed, sold, or transferred to any third party, unless authorized by, or pursuant to, state and federal privacy and security laws and regulations. The Department of Justice shall establish policies, procedures, and regulations regarding the use, access, evaluation, management, implementation, operation, storage, disclosure, and security of the information within CURES, consistent with this subdivision.(B) Notwithstanding subparagraph (A), a regulatory board whose licensees do not prescribe, order, administer, furnish, or dispense controlled substances shall not be provided data obtained from CURES.(3) In accordance with federal and state privacy laws and regulations, a health care practitioner may provide a patient with a copy of the patients CURES patient activity report as long as no additional CURES data is provided and keep a copy of the report in the patients medical record in compliance with subdivision (d) of Section 11165.1.(d) For each prescription for a Schedule II, Schedule III, or Schedule IV controlled substance, as defined in the controlled substances schedules in federal law and regulations, specifically Sections 1308.12, 1308.13, and 1308.14, respectively, of Title 21 of the Code of Federal Regulations, the dispensing pharmacy, clinic, or other dispenser shall report the following information to the Department of Justice as soon as reasonably possible, but not more than seven days after the date a controlled substance is dispensed, in a format specified by the Department of Justice:(1) Full name, address, and, if available, telephone number of the ultimate user or research subject, or contact information as determined by the Secretary of the United States Department of Health and Human Services, and the gender, and date of birth of the ultimate user.(2) The prescribers category of licensure, license number, national provider identifier (NPI) number, if applicable, the federal controlled substance registration number, and the state medical license number of any prescriber using the federal controlled substance registration number of a government-exempt facility.(3) Pharmacy prescription number, license number, NPI number, and federal controlled substance registration number.(4) National Drug Code (NDC) number of the controlled substance dispensed.(5) Quantity of the controlled substance dispensed.(6) International Statistical Classification of Diseases, 9th revision (ICD-9) or 10th revision (ICD-10) Code, if available.(7) Number of refills ordered.(8) Whether the drug was dispensed as a refill of a prescription or as a first-time request.(9) Date of origin of the prescription.(10) Date of dispensing of the prescription.(11) The serial number for the corresponding prescription form, if applicable.(e) The Department of Justice may invite stakeholders to assist, advise, and make recommendations on the establishment of rules and regulations necessary to ensure the proper administration and enforcement of the CURES database. All prescriber and dispenser invitees shall be licensed by one of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, in active practice in California, and a regular user of CURES.(f) The Department of Justice shall, prior to upgrading CURES, consult with prescribers licensed by one of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, one or more of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, and any other stakeholder identified by the department, for the purpose of identifying desirable capabilities and upgrades to the CURES Prescription Drug Monitoring Program (PDMP).(g) The Department of Justice may establish a process to educate authorized subscribers of the CURES PDMP on how to access and use the CURES PDMP.
237249
238250 11165. (a) To assist health care practitioners in their efforts to ensure appropriate prescribing, ordering, administering, furnishing, and dispensing of controlled substances, law enforcement and regulatory agencies in their efforts to control the diversion and resultant abuse of Schedule II, Schedule III, and Schedule IV controlled substances, and for statistical analysis, education, and research, the Department of Justice shall, contingent upon the availability of adequate funds in the CURES Fund, maintain the Controlled Substance Utilization Review and Evaluation System (CURES) for the electronic monitoring of, and Internet access to information regarding, the prescribing and dispensing of Schedule II, Schedule III, and Schedule IV controlled substances by all practitioners authorized to prescribe, order, administer, furnish, or dispense these controlled substances.(b) The Department of Justice may seek and use grant funds to pay the costs incurred by the operation and maintenance of CURES. The department shall annually report to the Legislature and make available to the public the amount and source of funds it receives for support of CURES.(c) (1) The operation of CURES shall comply with all applicable federal and state privacy and security laws and regulations.(2) (A) CURES shall operate under existing provisions of law to safeguard the privacy and confidentiality of patients. Data obtained from CURES shall only be provided to appropriate state, local, and federal public agencies for disciplinary, civil, or criminal purposes and to other agencies or entities, as determined by the Department of Justice, for the purpose of educating practitioners and others in lieu of disciplinary, civil, or criminal actions. Data may be provided to public or private entities, as approved by the Department of Justice, for educational, peer review, statistical, or research purposes, provided that patient information, including any information that may identify the patient, is not compromised. Further, data disclosed to any individual or agency as described in this subdivision shall not be disclosed, sold, or transferred to any third party, unless authorized by, or pursuant to, state and federal privacy and security laws and regulations. The Department of Justice shall establish policies, procedures, and regulations regarding the use, access, evaluation, management, implementation, operation, storage, disclosure, and security of the information within CURES, consistent with this subdivision.(B) Notwithstanding subparagraph (A), a regulatory board whose licensees do not prescribe, order, administer, furnish, or dispense controlled substances shall not be provided data obtained from CURES.(3) In accordance with federal and state privacy laws and regulations, a health care practitioner may provide a patient with a copy of the patients CURES patient activity report as long as no additional CURES data is provided and keep a copy of the report in the patients medical record in compliance with subdivision (d) of Section 11165.1.(d) For each prescription for a Schedule II, Schedule III, or Schedule IV controlled substance, as defined in the controlled substances schedules in federal law and regulations, specifically Sections 1308.12, 1308.13, and 1308.14, respectively, of Title 21 of the Code of Federal Regulations, the dispensing pharmacy, clinic, or other dispenser shall report the following information to the Department of Justice as soon as reasonably possible, but not more than seven days after the date a controlled substance is dispensed, in a format specified by the Department of Justice:(1) Full name, address, and, if available, telephone number of the ultimate user or research subject, or contact information as determined by the Secretary of the United States Department of Health and Human Services, and the gender, and date of birth of the ultimate user.(2) The prescribers category of licensure, license number, national provider identifier (NPI) number, if applicable, the federal controlled substance registration number, and the state medical license number of any prescriber using the federal controlled substance registration number of a government-exempt facility.(3) Pharmacy prescription number, license number, NPI number, and federal controlled substance registration number.(4) National Drug Code (NDC) number of the controlled substance dispensed.(5) Quantity of the controlled substance dispensed.(6) International Statistical Classification of Diseases, 9th revision (ICD-9) or 10th revision (ICD-10) Code, if available.(7) Number of refills ordered.(8) Whether the drug was dispensed as a refill of a prescription or as a first-time request.(9) Date of origin of the prescription.(10) Date of dispensing of the prescription.(11) The serial number for the corresponding prescription form, if applicable.(e) The Department of Justice may invite stakeholders to assist, advise, and make recommendations on the establishment of rules and regulations necessary to ensure the proper administration and enforcement of the CURES database. All prescriber and dispenser invitees shall be licensed by one of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, in active practice in California, and a regular user of CURES.(f) The Department of Justice shall, prior to upgrading CURES, consult with prescribers licensed by one of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, one or more of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, and any other stakeholder identified by the department, for the purpose of identifying desirable capabilities and upgrades to the CURES Prescription Drug Monitoring Program (PDMP).(g) The Department of Justice may establish a process to educate authorized subscribers of the CURES PDMP on how to access and use the CURES PDMP.
239251
240252
241253
242254 11165. (a) To assist health care practitioners in their efforts to ensure appropriate prescribing, ordering, administering, furnishing, and dispensing of controlled substances, law enforcement and regulatory agencies in their efforts to control the diversion and resultant abuse of Schedule II, Schedule III, and Schedule IV controlled substances, and for statistical analysis, education, and research, the Department of Justice shall, contingent upon the availability of adequate funds in the CURES Fund, maintain the Controlled Substance Utilization Review and Evaluation System (CURES) for the electronic monitoring of, and Internet access to information regarding, the prescribing and dispensing of Schedule II, Schedule III, and Schedule IV controlled substances by all practitioners authorized to prescribe, order, administer, furnish, or dispense these controlled substances.
243255
244256 (b) The Department of Justice may seek and use grant funds to pay the costs incurred by the operation and maintenance of CURES. The department shall annually report to the Legislature and make available to the public the amount and source of funds it receives for support of CURES.
245257
246258 (c) (1) The operation of CURES shall comply with all applicable federal and state privacy and security laws and regulations.
247259
248260 (2) (A) CURES shall operate under existing provisions of law to safeguard the privacy and confidentiality of patients. Data obtained from CURES shall only be provided to appropriate state, local, and federal public agencies for disciplinary, civil, or criminal purposes and to other agencies or entities, as determined by the Department of Justice, for the purpose of educating practitioners and others in lieu of disciplinary, civil, or criminal actions. Data may be provided to public or private entities, as approved by the Department of Justice, for educational, peer review, statistical, or research purposes, provided that patient information, including any information that may identify the patient, is not compromised. Further, data disclosed to any individual or agency as described in this subdivision shall not be disclosed, sold, or transferred to any third party, unless authorized by, or pursuant to, state and federal privacy and security laws and regulations. The Department of Justice shall establish policies, procedures, and regulations regarding the use, access, evaluation, management, implementation, operation, storage, disclosure, and security of the information within CURES, consistent with this subdivision.
249261
250262 (B) Notwithstanding subparagraph (A), a regulatory board whose licensees do not prescribe, order, administer, furnish, or dispense controlled substances shall not be provided data obtained from CURES.
251263
252264 (3) In accordance with federal and state privacy laws and regulations, a health care practitioner may provide a patient with a copy of the patients CURES patient activity report as long as no additional CURES data is provided and keep a copy of the report in the patients medical record in compliance with subdivision (d) of Section 11165.1.
253265
254266 (d) For each prescription for a Schedule II, Schedule III, or Schedule IV controlled substance, as defined in the controlled substances schedules in federal law and regulations, specifically Sections 1308.12, 1308.13, and 1308.14, respectively, of Title 21 of the Code of Federal Regulations, the dispensing pharmacy, clinic, or other dispenser shall report the following information to the Department of Justice as soon as reasonably possible, but not more than seven days after the date a controlled substance is dispensed, in a format specified by the Department of Justice:
255267
256268 (1) Full name, address, and, if available, telephone number of the ultimate user or research subject, or contact information as determined by the Secretary of the United States Department of Health and Human Services, and the gender, and date of birth of the ultimate user.
257269
258270 (2) The prescribers category of licensure, license number, national provider identifier (NPI) number, if applicable, the federal controlled substance registration number, and the state medical license number of any prescriber using the federal controlled substance registration number of a government-exempt facility.
259271
260272 (3) Pharmacy prescription number, license number, NPI number, and federal controlled substance registration number.
261273
262274 (4) National Drug Code (NDC) number of the controlled substance dispensed.
263275
264276 (5) Quantity of the controlled substance dispensed.
265277
266278 (6) International Statistical Classification of Diseases, 9th revision (ICD-9) or 10th revision (ICD-10) Code, if available.
267279
268280 (7) Number of refills ordered.
269281
270282 (8) Whether the drug was dispensed as a refill of a prescription or as a first-time request.
271283
272284 (9) Date of origin of the prescription.
273285
274286 (10) Date of dispensing of the prescription.
275287
276288 (11) The serial number for the corresponding prescription form, if applicable.
277289
278290 (e) The Department of Justice may invite stakeholders to assist, advise, and make recommendations on the establishment of rules and regulations necessary to ensure the proper administration and enforcement of the CURES database. All prescriber and dispenser invitees shall be licensed by one of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, in active practice in California, and a regular user of CURES.
279291
280292 (f) The Department of Justice shall, prior to upgrading CURES, consult with prescribers licensed by one of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, one or more of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, and any other stakeholder identified by the department, for the purpose of identifying desirable capabilities and upgrades to the CURES Prescription Drug Monitoring Program (PDMP).
281293
282294 (g) The Department of Justice may establish a process to educate authorized subscribers of the CURES PDMP on how to access and use the CURES PDMP.
283295
284296 SEC. 4.5. Section 11165 of the Health and Safety Code is amended to read:11165. (a) To assist health care practitioners in their efforts to ensure appropriate prescribing, ordering, administering, furnishing, and dispensing of controlled substances, law enforcement and regulatory agencies in their efforts to control the diversion and resultant abuse of Schedule II, Schedule III, and Schedule IV controlled substances, and for statistical analysis, education, and research, the Department of Justice shall, contingent upon the availability of adequate funds in the CURES Fund, maintain the Controlled Substance Utilization Review and Evaluation System (CURES) for the electronic monitoring of, and Internet access to information regarding, the prescribing and dispensing of Schedule II, Schedule III, and Schedule IV controlled substances by all practitioners authorized to prescribe, order, administer, furnish, or dispense these controlled substances.(b) The Department of Justice may seek and use grant funds to pay the costs incurred by the operation and maintenance of CURES. The department shall annually report to the Legislature and make available to the public the amount and source of funds it receives for support of CURES.(c) (1) The operation of CURES shall comply with all applicable federal and state privacy and security laws and regulations.(2) (A) CURES shall operate under existing provisions of law to safeguard the privacy and confidentiality of patients. Data obtained from CURES shall only be provided to appropriate state, local, and federal public agencies for disciplinary, civil, or criminal purposes and to other agencies or entities, as determined by the Department of Justice, for the purpose of educating practitioners and others in lieu of disciplinary, civil, or criminal actions. Data may be provided to public or private entities, as approved by the Department of Justice, for educational, peer review, statistical, or research purposes, if patient information, including any information that may identify the patient, is not compromised. Further, data disclosed to any individual or agency as described in this subdivision shall not be disclosed, sold, or transferred to any third party, unless authorized by, or pursuant to, state and federal privacy and security laws and regulations. The Department of Justice shall establish policies, procedures, and regulations regarding the use, access, evaluation, management, implementation, operation, storage, disclosure, and security of the information within CURES, consistent with this subdivision.(B) Notwithstanding subparagraph (A), a regulatory board whose licensees do not prescribe, order, administer, furnish, or dispense controlled substances shall not be provided data obtained from CURES.(3) The Department of Justice shall, no later than July 1, 2020, adopt regulations regarding the access and use of the information within CURES. The Department of Justice shall consult with all stakeholders identified by the department during the rulemaking process. The regulations shall, at a minimum, address all of the following in a manner consistent with this chapter:(A) The process for approving, denying, and disapproving individuals or entities seeking access to information in CURES.(B) The purposes for which a health care practitioner may access information in CURES.(C) The conditions under which a warrant, subpoena, or court order is required for a law enforcement agency to obtain information from CURES as part of a criminal investigation.(D) The process by which information in CURES may be provided for educational, peer review, statistical, or research purposes.(4) In accordance with federal and state privacy laws and regulations, a health care practitioner may provide a patient with a copy of the patients CURES patient activity report as long as no additional CURES data are provided and keep a copy of the report in the patients medical record in compliance with subdivision (d) of Section 11165.1.(d) For each prescription for a Schedule II, Schedule III, or Schedule IV controlled substance, as defined in the controlled substances schedules in federal law and regulations, specifically Sections 1308.12, 1308.13, and 1308.14, respectively, of Title 21 of the Code of Federal Regulations, the dispensing pharmacy, clinic, or other dispenser shall report the following information to the Department of Justice as soon as reasonably possible, but not more than seven days after the date a controlled substance is dispensed, in a format specified by the Department of Justice:(1) Full name, address, and, if available, telephone number of the ultimate user or research subject, or contact information as determined by the Secretary of the United States Department of Health and Human Services, and the gender, and date of birth of the ultimate user.(2) The prescribers category of licensure, license number, national provider identifier (NPI) number, the federal controlled substance registration number, and the state medical license number of any prescriber using the federal controlled substance registration number of a government-exempt facility, if provided.(3) Pharmacy prescription number, license number, NPI number, and federal controlled substance registration number.(4) National Drug Code (NDC) number of the controlled substance dispensed.(5) Quantity of the controlled substance dispensed.(6) International Statistical Classification of Diseases, 9th revision (ICD-9) or 10th revision (ICD-10) Code, if available.(7) Number of refills ordered.(8) Whether the drug was dispensed as a refill of a prescription or as a first-time request.(9) Date of origin of the prescription.(10) Date of dispensing of the prescription.(11) The serial number for the corresponding prescription form, if applicable.(e) The Department of Justice may invite stakeholders to assist, advise, and make recommendations on the establishment of rules and regulations necessary to ensure the proper administration and enforcement of the CURES database. All prescriber and dispenser invitees shall be licensed by one of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, in active practice in California, and a regular user of CURES.(f) The Department of Justice shall, prior to upgrading CURES, consult with prescribers licensed by one of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, one or more of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, and any other stakeholder identified by the department, for the purpose of identifying desirable capabilities and upgrades to the CURES Prescription Drug Monitoring Program (PDMP).(g) The Department of Justice may establish a process to educate authorized subscribers of the CURES PDMP on how to access and use the CURES PDMP.(h) (1) The Department of Justice may enter into an agreement with any entity operating an interstate data sharing hub, or any agency operating a prescription drug monitoring program in another state, for purposes of interstate data sharing of prescription drug monitoring program information.(2) Data obtained from CURES may be provided to authorized users of another states prescription drug monitoring program, as determined by the Department of Justice pursuant to subdivision (c), if the entity operating the interstate data sharing hub, and the prescription drug monitoring program of that state, as applicable, have entered into an agreement with the Department of Justice for interstate data sharing of prescription drug monitoring program information.(3) Any agreement entered into by the Department of Justice for purposes of interstate data sharing of prescription drug monitoring program information shall ensure that all access to data obtained from CURES and the handling of data contained within CURES comply with California law, including regulations, and meet the same patient privacy, audit, and data security standards employed and required for direct access to CURES.(4) For purposes of interstate data sharing of CURES information pursuant to this subdivision, an authorized user of another states prescription drug monitoring program shall not be required to register with CURES, if he or she is registered and in good standing with that states prescription drug monitoring program.(5) The Department of Justice shall not enter into an agreement pursuant to this subdivision until the department has issued final regulations regarding the access and use of the information within CURES as required by paragraph (3) of subdivision (c).
285297
286298 SEC. 4.5. Section 11165 of the Health and Safety Code is amended to read:
287299
288300 ### SEC. 4.5.
289301
290302 11165. (a) To assist health care practitioners in their efforts to ensure appropriate prescribing, ordering, administering, furnishing, and dispensing of controlled substances, law enforcement and regulatory agencies in their efforts to control the diversion and resultant abuse of Schedule II, Schedule III, and Schedule IV controlled substances, and for statistical analysis, education, and research, the Department of Justice shall, contingent upon the availability of adequate funds in the CURES Fund, maintain the Controlled Substance Utilization Review and Evaluation System (CURES) for the electronic monitoring of, and Internet access to information regarding, the prescribing and dispensing of Schedule II, Schedule III, and Schedule IV controlled substances by all practitioners authorized to prescribe, order, administer, furnish, or dispense these controlled substances.(b) The Department of Justice may seek and use grant funds to pay the costs incurred by the operation and maintenance of CURES. The department shall annually report to the Legislature and make available to the public the amount and source of funds it receives for support of CURES.(c) (1) The operation of CURES shall comply with all applicable federal and state privacy and security laws and regulations.(2) (A) CURES shall operate under existing provisions of law to safeguard the privacy and confidentiality of patients. Data obtained from CURES shall only be provided to appropriate state, local, and federal public agencies for disciplinary, civil, or criminal purposes and to other agencies or entities, as determined by the Department of Justice, for the purpose of educating practitioners and others in lieu of disciplinary, civil, or criminal actions. Data may be provided to public or private entities, as approved by the Department of Justice, for educational, peer review, statistical, or research purposes, if patient information, including any information that may identify the patient, is not compromised. Further, data disclosed to any individual or agency as described in this subdivision shall not be disclosed, sold, or transferred to any third party, unless authorized by, or pursuant to, state and federal privacy and security laws and regulations. The Department of Justice shall establish policies, procedures, and regulations regarding the use, access, evaluation, management, implementation, operation, storage, disclosure, and security of the information within CURES, consistent with this subdivision.(B) Notwithstanding subparagraph (A), a regulatory board whose licensees do not prescribe, order, administer, furnish, or dispense controlled substances shall not be provided data obtained from CURES.(3) The Department of Justice shall, no later than July 1, 2020, adopt regulations regarding the access and use of the information within CURES. The Department of Justice shall consult with all stakeholders identified by the department during the rulemaking process. The regulations shall, at a minimum, address all of the following in a manner consistent with this chapter:(A) The process for approving, denying, and disapproving individuals or entities seeking access to information in CURES.(B) The purposes for which a health care practitioner may access information in CURES.(C) The conditions under which a warrant, subpoena, or court order is required for a law enforcement agency to obtain information from CURES as part of a criminal investigation.(D) The process by which information in CURES may be provided for educational, peer review, statistical, or research purposes.(4) In accordance with federal and state privacy laws and regulations, a health care practitioner may provide a patient with a copy of the patients CURES patient activity report as long as no additional CURES data are provided and keep a copy of the report in the patients medical record in compliance with subdivision (d) of Section 11165.1.(d) For each prescription for a Schedule II, Schedule III, or Schedule IV controlled substance, as defined in the controlled substances schedules in federal law and regulations, specifically Sections 1308.12, 1308.13, and 1308.14, respectively, of Title 21 of the Code of Federal Regulations, the dispensing pharmacy, clinic, or other dispenser shall report the following information to the Department of Justice as soon as reasonably possible, but not more than seven days after the date a controlled substance is dispensed, in a format specified by the Department of Justice:(1) Full name, address, and, if available, telephone number of the ultimate user or research subject, or contact information as determined by the Secretary of the United States Department of Health and Human Services, and the gender, and date of birth of the ultimate user.(2) The prescribers category of licensure, license number, national provider identifier (NPI) number, the federal controlled substance registration number, and the state medical license number of any prescriber using the federal controlled substance registration number of a government-exempt facility, if provided.(3) Pharmacy prescription number, license number, NPI number, and federal controlled substance registration number.(4) National Drug Code (NDC) number of the controlled substance dispensed.(5) Quantity of the controlled substance dispensed.(6) International Statistical Classification of Diseases, 9th revision (ICD-9) or 10th revision (ICD-10) Code, if available.(7) Number of refills ordered.(8) Whether the drug was dispensed as a refill of a prescription or as a first-time request.(9) Date of origin of the prescription.(10) Date of dispensing of the prescription.(11) The serial number for the corresponding prescription form, if applicable.(e) The Department of Justice may invite stakeholders to assist, advise, and make recommendations on the establishment of rules and regulations necessary to ensure the proper administration and enforcement of the CURES database. All prescriber and dispenser invitees shall be licensed by one of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, in active practice in California, and a regular user of CURES.(f) The Department of Justice shall, prior to upgrading CURES, consult with prescribers licensed by one of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, one or more of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, and any other stakeholder identified by the department, for the purpose of identifying desirable capabilities and upgrades to the CURES Prescription Drug Monitoring Program (PDMP).(g) The Department of Justice may establish a process to educate authorized subscribers of the CURES PDMP on how to access and use the CURES PDMP.(h) (1) The Department of Justice may enter into an agreement with any entity operating an interstate data sharing hub, or any agency operating a prescription drug monitoring program in another state, for purposes of interstate data sharing of prescription drug monitoring program information.(2) Data obtained from CURES may be provided to authorized users of another states prescription drug monitoring program, as determined by the Department of Justice pursuant to subdivision (c), if the entity operating the interstate data sharing hub, and the prescription drug monitoring program of that state, as applicable, have entered into an agreement with the Department of Justice for interstate data sharing of prescription drug monitoring program information.(3) Any agreement entered into by the Department of Justice for purposes of interstate data sharing of prescription drug monitoring program information shall ensure that all access to data obtained from CURES and the handling of data contained within CURES comply with California law, including regulations, and meet the same patient privacy, audit, and data security standards employed and required for direct access to CURES.(4) For purposes of interstate data sharing of CURES information pursuant to this subdivision, an authorized user of another states prescription drug monitoring program shall not be required to register with CURES, if he or she is registered and in good standing with that states prescription drug monitoring program.(5) The Department of Justice shall not enter into an agreement pursuant to this subdivision until the department has issued final regulations regarding the access and use of the information within CURES as required by paragraph (3) of subdivision (c).
291303
292304 11165. (a) To assist health care practitioners in their efforts to ensure appropriate prescribing, ordering, administering, furnishing, and dispensing of controlled substances, law enforcement and regulatory agencies in their efforts to control the diversion and resultant abuse of Schedule II, Schedule III, and Schedule IV controlled substances, and for statistical analysis, education, and research, the Department of Justice shall, contingent upon the availability of adequate funds in the CURES Fund, maintain the Controlled Substance Utilization Review and Evaluation System (CURES) for the electronic monitoring of, and Internet access to information regarding, the prescribing and dispensing of Schedule II, Schedule III, and Schedule IV controlled substances by all practitioners authorized to prescribe, order, administer, furnish, or dispense these controlled substances.(b) The Department of Justice may seek and use grant funds to pay the costs incurred by the operation and maintenance of CURES. The department shall annually report to the Legislature and make available to the public the amount and source of funds it receives for support of CURES.(c) (1) The operation of CURES shall comply with all applicable federal and state privacy and security laws and regulations.(2) (A) CURES shall operate under existing provisions of law to safeguard the privacy and confidentiality of patients. Data obtained from CURES shall only be provided to appropriate state, local, and federal public agencies for disciplinary, civil, or criminal purposes and to other agencies or entities, as determined by the Department of Justice, for the purpose of educating practitioners and others in lieu of disciplinary, civil, or criminal actions. Data may be provided to public or private entities, as approved by the Department of Justice, for educational, peer review, statistical, or research purposes, if patient information, including any information that may identify the patient, is not compromised. Further, data disclosed to any individual or agency as described in this subdivision shall not be disclosed, sold, or transferred to any third party, unless authorized by, or pursuant to, state and federal privacy and security laws and regulations. The Department of Justice shall establish policies, procedures, and regulations regarding the use, access, evaluation, management, implementation, operation, storage, disclosure, and security of the information within CURES, consistent with this subdivision.(B) Notwithstanding subparagraph (A), a regulatory board whose licensees do not prescribe, order, administer, furnish, or dispense controlled substances shall not be provided data obtained from CURES.(3) The Department of Justice shall, no later than July 1, 2020, adopt regulations regarding the access and use of the information within CURES. The Department of Justice shall consult with all stakeholders identified by the department during the rulemaking process. The regulations shall, at a minimum, address all of the following in a manner consistent with this chapter:(A) The process for approving, denying, and disapproving individuals or entities seeking access to information in CURES.(B) The purposes for which a health care practitioner may access information in CURES.(C) The conditions under which a warrant, subpoena, or court order is required for a law enforcement agency to obtain information from CURES as part of a criminal investigation.(D) The process by which information in CURES may be provided for educational, peer review, statistical, or research purposes.(4) In accordance with federal and state privacy laws and regulations, a health care practitioner may provide a patient with a copy of the patients CURES patient activity report as long as no additional CURES data are provided and keep a copy of the report in the patients medical record in compliance with subdivision (d) of Section 11165.1.(d) For each prescription for a Schedule II, Schedule III, or Schedule IV controlled substance, as defined in the controlled substances schedules in federal law and regulations, specifically Sections 1308.12, 1308.13, and 1308.14, respectively, of Title 21 of the Code of Federal Regulations, the dispensing pharmacy, clinic, or other dispenser shall report the following information to the Department of Justice as soon as reasonably possible, but not more than seven days after the date a controlled substance is dispensed, in a format specified by the Department of Justice:(1) Full name, address, and, if available, telephone number of the ultimate user or research subject, or contact information as determined by the Secretary of the United States Department of Health and Human Services, and the gender, and date of birth of the ultimate user.(2) The prescribers category of licensure, license number, national provider identifier (NPI) number, the federal controlled substance registration number, and the state medical license number of any prescriber using the federal controlled substance registration number of a government-exempt facility, if provided.(3) Pharmacy prescription number, license number, NPI number, and federal controlled substance registration number.(4) National Drug Code (NDC) number of the controlled substance dispensed.(5) Quantity of the controlled substance dispensed.(6) International Statistical Classification of Diseases, 9th revision (ICD-9) or 10th revision (ICD-10) Code, if available.(7) Number of refills ordered.(8) Whether the drug was dispensed as a refill of a prescription or as a first-time request.(9) Date of origin of the prescription.(10) Date of dispensing of the prescription.(11) The serial number for the corresponding prescription form, if applicable.(e) The Department of Justice may invite stakeholders to assist, advise, and make recommendations on the establishment of rules and regulations necessary to ensure the proper administration and enforcement of the CURES database. All prescriber and dispenser invitees shall be licensed by one of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, in active practice in California, and a regular user of CURES.(f) The Department of Justice shall, prior to upgrading CURES, consult with prescribers licensed by one of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, one or more of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, and any other stakeholder identified by the department, for the purpose of identifying desirable capabilities and upgrades to the CURES Prescription Drug Monitoring Program (PDMP).(g) The Department of Justice may establish a process to educate authorized subscribers of the CURES PDMP on how to access and use the CURES PDMP.(h) (1) The Department of Justice may enter into an agreement with any entity operating an interstate data sharing hub, or any agency operating a prescription drug monitoring program in another state, for purposes of interstate data sharing of prescription drug monitoring program information.(2) Data obtained from CURES may be provided to authorized users of another states prescription drug monitoring program, as determined by the Department of Justice pursuant to subdivision (c), if the entity operating the interstate data sharing hub, and the prescription drug monitoring program of that state, as applicable, have entered into an agreement with the Department of Justice for interstate data sharing of prescription drug monitoring program information.(3) Any agreement entered into by the Department of Justice for purposes of interstate data sharing of prescription drug monitoring program information shall ensure that all access to data obtained from CURES and the handling of data contained within CURES comply with California law, including regulations, and meet the same patient privacy, audit, and data security standards employed and required for direct access to CURES.(4) For purposes of interstate data sharing of CURES information pursuant to this subdivision, an authorized user of another states prescription drug monitoring program shall not be required to register with CURES, if he or she is registered and in good standing with that states prescription drug monitoring program.(5) The Department of Justice shall not enter into an agreement pursuant to this subdivision until the department has issued final regulations regarding the access and use of the information within CURES as required by paragraph (3) of subdivision (c).
293305
294306 11165. (a) To assist health care practitioners in their efforts to ensure appropriate prescribing, ordering, administering, furnishing, and dispensing of controlled substances, law enforcement and regulatory agencies in their efforts to control the diversion and resultant abuse of Schedule II, Schedule III, and Schedule IV controlled substances, and for statistical analysis, education, and research, the Department of Justice shall, contingent upon the availability of adequate funds in the CURES Fund, maintain the Controlled Substance Utilization Review and Evaluation System (CURES) for the electronic monitoring of, and Internet access to information regarding, the prescribing and dispensing of Schedule II, Schedule III, and Schedule IV controlled substances by all practitioners authorized to prescribe, order, administer, furnish, or dispense these controlled substances.(b) The Department of Justice may seek and use grant funds to pay the costs incurred by the operation and maintenance of CURES. The department shall annually report to the Legislature and make available to the public the amount and source of funds it receives for support of CURES.(c) (1) The operation of CURES shall comply with all applicable federal and state privacy and security laws and regulations.(2) (A) CURES shall operate under existing provisions of law to safeguard the privacy and confidentiality of patients. Data obtained from CURES shall only be provided to appropriate state, local, and federal public agencies for disciplinary, civil, or criminal purposes and to other agencies or entities, as determined by the Department of Justice, for the purpose of educating practitioners and others in lieu of disciplinary, civil, or criminal actions. Data may be provided to public or private entities, as approved by the Department of Justice, for educational, peer review, statistical, or research purposes, if patient information, including any information that may identify the patient, is not compromised. Further, data disclosed to any individual or agency as described in this subdivision shall not be disclosed, sold, or transferred to any third party, unless authorized by, or pursuant to, state and federal privacy and security laws and regulations. The Department of Justice shall establish policies, procedures, and regulations regarding the use, access, evaluation, management, implementation, operation, storage, disclosure, and security of the information within CURES, consistent with this subdivision.(B) Notwithstanding subparagraph (A), a regulatory board whose licensees do not prescribe, order, administer, furnish, or dispense controlled substances shall not be provided data obtained from CURES.(3) The Department of Justice shall, no later than July 1, 2020, adopt regulations regarding the access and use of the information within CURES. The Department of Justice shall consult with all stakeholders identified by the department during the rulemaking process. The regulations shall, at a minimum, address all of the following in a manner consistent with this chapter:(A) The process for approving, denying, and disapproving individuals or entities seeking access to information in CURES.(B) The purposes for which a health care practitioner may access information in CURES.(C) The conditions under which a warrant, subpoena, or court order is required for a law enforcement agency to obtain information from CURES as part of a criminal investigation.(D) The process by which information in CURES may be provided for educational, peer review, statistical, or research purposes.(4) In accordance with federal and state privacy laws and regulations, a health care practitioner may provide a patient with a copy of the patients CURES patient activity report as long as no additional CURES data are provided and keep a copy of the report in the patients medical record in compliance with subdivision (d) of Section 11165.1.(d) For each prescription for a Schedule II, Schedule III, or Schedule IV controlled substance, as defined in the controlled substances schedules in federal law and regulations, specifically Sections 1308.12, 1308.13, and 1308.14, respectively, of Title 21 of the Code of Federal Regulations, the dispensing pharmacy, clinic, or other dispenser shall report the following information to the Department of Justice as soon as reasonably possible, but not more than seven days after the date a controlled substance is dispensed, in a format specified by the Department of Justice:(1) Full name, address, and, if available, telephone number of the ultimate user or research subject, or contact information as determined by the Secretary of the United States Department of Health and Human Services, and the gender, and date of birth of the ultimate user.(2) The prescribers category of licensure, license number, national provider identifier (NPI) number, the federal controlled substance registration number, and the state medical license number of any prescriber using the federal controlled substance registration number of a government-exempt facility, if provided.(3) Pharmacy prescription number, license number, NPI number, and federal controlled substance registration number.(4) National Drug Code (NDC) number of the controlled substance dispensed.(5) Quantity of the controlled substance dispensed.(6) International Statistical Classification of Diseases, 9th revision (ICD-9) or 10th revision (ICD-10) Code, if available.(7) Number of refills ordered.(8) Whether the drug was dispensed as a refill of a prescription or as a first-time request.(9) Date of origin of the prescription.(10) Date of dispensing of the prescription.(11) The serial number for the corresponding prescription form, if applicable.(e) The Department of Justice may invite stakeholders to assist, advise, and make recommendations on the establishment of rules and regulations necessary to ensure the proper administration and enforcement of the CURES database. All prescriber and dispenser invitees shall be licensed by one of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, in active practice in California, and a regular user of CURES.(f) The Department of Justice shall, prior to upgrading CURES, consult with prescribers licensed by one of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, one or more of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, and any other stakeholder identified by the department, for the purpose of identifying desirable capabilities and upgrades to the CURES Prescription Drug Monitoring Program (PDMP).(g) The Department of Justice may establish a process to educate authorized subscribers of the CURES PDMP on how to access and use the CURES PDMP.(h) (1) The Department of Justice may enter into an agreement with any entity operating an interstate data sharing hub, or any agency operating a prescription drug monitoring program in another state, for purposes of interstate data sharing of prescription drug monitoring program information.(2) Data obtained from CURES may be provided to authorized users of another states prescription drug monitoring program, as determined by the Department of Justice pursuant to subdivision (c), if the entity operating the interstate data sharing hub, and the prescription drug monitoring program of that state, as applicable, have entered into an agreement with the Department of Justice for interstate data sharing of prescription drug monitoring program information.(3) Any agreement entered into by the Department of Justice for purposes of interstate data sharing of prescription drug monitoring program information shall ensure that all access to data obtained from CURES and the handling of data contained within CURES comply with California law, including regulations, and meet the same patient privacy, audit, and data security standards employed and required for direct access to CURES.(4) For purposes of interstate data sharing of CURES information pursuant to this subdivision, an authorized user of another states prescription drug monitoring program shall not be required to register with CURES, if he or she is registered and in good standing with that states prescription drug monitoring program.(5) The Department of Justice shall not enter into an agreement pursuant to this subdivision until the department has issued final regulations regarding the access and use of the information within CURES as required by paragraph (3) of subdivision (c).
295307
296308
297309
298310 11165. (a) To assist health care practitioners in their efforts to ensure appropriate prescribing, ordering, administering, furnishing, and dispensing of controlled substances, law enforcement and regulatory agencies in their efforts to control the diversion and resultant abuse of Schedule II, Schedule III, and Schedule IV controlled substances, and for statistical analysis, education, and research, the Department of Justice shall, contingent upon the availability of adequate funds in the CURES Fund, maintain the Controlled Substance Utilization Review and Evaluation System (CURES) for the electronic monitoring of, and Internet access to information regarding, the prescribing and dispensing of Schedule II, Schedule III, and Schedule IV controlled substances by all practitioners authorized to prescribe, order, administer, furnish, or dispense these controlled substances.
299311
300312 (b) The Department of Justice may seek and use grant funds to pay the costs incurred by the operation and maintenance of CURES. The department shall annually report to the Legislature and make available to the public the amount and source of funds it receives for support of CURES.
301313
302314 (c) (1) The operation of CURES shall comply with all applicable federal and state privacy and security laws and regulations.
303315
304316 (2) (A) CURES shall operate under existing provisions of law to safeguard the privacy and confidentiality of patients. Data obtained from CURES shall only be provided to appropriate state, local, and federal public agencies for disciplinary, civil, or criminal purposes and to other agencies or entities, as determined by the Department of Justice, for the purpose of educating practitioners and others in lieu of disciplinary, civil, or criminal actions. Data may be provided to public or private entities, as approved by the Department of Justice, for educational, peer review, statistical, or research purposes, if patient information, including any information that may identify the patient, is not compromised. Further, data disclosed to any individual or agency as described in this subdivision shall not be disclosed, sold, or transferred to any third party, unless authorized by, or pursuant to, state and federal privacy and security laws and regulations. The Department of Justice shall establish policies, procedures, and regulations regarding the use, access, evaluation, management, implementation, operation, storage, disclosure, and security of the information within CURES, consistent with this subdivision.
305317
306318 (B) Notwithstanding subparagraph (A), a regulatory board whose licensees do not prescribe, order, administer, furnish, or dispense controlled substances shall not be provided data obtained from CURES.
307319
308320 (3) The Department of Justice shall, no later than July 1, 2020, adopt regulations regarding the access and use of the information within CURES. The Department of Justice shall consult with all stakeholders identified by the department during the rulemaking process. The regulations shall, at a minimum, address all of the following in a manner consistent with this chapter:
309321
310322 (A) The process for approving, denying, and disapproving individuals or entities seeking access to information in CURES.
311323
312324 (B) The purposes for which a health care practitioner may access information in CURES.
313325
314326 (C) The conditions under which a warrant, subpoena, or court order is required for a law enforcement agency to obtain information from CURES as part of a criminal investigation.
315327
316328 (D) The process by which information in CURES may be provided for educational, peer review, statistical, or research purposes.
317329
318330 (4) In accordance with federal and state privacy laws and regulations, a health care practitioner may provide a patient with a copy of the patients CURES patient activity report as long as no additional CURES data are provided and keep a copy of the report in the patients medical record in compliance with subdivision (d) of Section 11165.1.
319331
320332 (d) For each prescription for a Schedule II, Schedule III, or Schedule IV controlled substance, as defined in the controlled substances schedules in federal law and regulations, specifically Sections 1308.12, 1308.13, and 1308.14, respectively, of Title 21 of the Code of Federal Regulations, the dispensing pharmacy, clinic, or other dispenser shall report the following information to the Department of Justice as soon as reasonably possible, but not more than seven days after the date a controlled substance is dispensed, in a format specified by the Department of Justice:
321333
322334 (1) Full name, address, and, if available, telephone number of the ultimate user or research subject, or contact information as determined by the Secretary of the United States Department of Health and Human Services, and the gender, and date of birth of the ultimate user.
323335
324336 (2) The prescribers category of licensure, license number, national provider identifier (NPI) number, the federal controlled substance registration number, and the state medical license number of any prescriber using the federal controlled substance registration number of a government-exempt facility, if provided.
325337
326338 (3) Pharmacy prescription number, license number, NPI number, and federal controlled substance registration number.
327339
328340 (4) National Drug Code (NDC) number of the controlled substance dispensed.
329341
330342 (5) Quantity of the controlled substance dispensed.
331343
332344 (6) International Statistical Classification of Diseases, 9th revision (ICD-9) or 10th revision (ICD-10) Code, if available.
333345
334346 (7) Number of refills ordered.
335347
336348 (8) Whether the drug was dispensed as a refill of a prescription or as a first-time request.
337349
338350 (9) Date of origin of the prescription.
339351
340352 (10) Date of dispensing of the prescription.
341353
342354 (11) The serial number for the corresponding prescription form, if applicable.
343355
344356 (e) The Department of Justice may invite stakeholders to assist, advise, and make recommendations on the establishment of rules and regulations necessary to ensure the proper administration and enforcement of the CURES database. All prescriber and dispenser invitees shall be licensed by one of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, in active practice in California, and a regular user of CURES.
345357
346358 (f) The Department of Justice shall, prior to upgrading CURES, consult with prescribers licensed by one of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, one or more of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, and any other stakeholder identified by the department, for the purpose of identifying desirable capabilities and upgrades to the CURES Prescription Drug Monitoring Program (PDMP).
347359
348360 (g) The Department of Justice may establish a process to educate authorized subscribers of the CURES PDMP on how to access and use the CURES PDMP.
349361
350362 (h) (1) The Department of Justice may enter into an agreement with any entity operating an interstate data sharing hub, or any agency operating a prescription drug monitoring program in another state, for purposes of interstate data sharing of prescription drug monitoring program information.
351363
352364 (2) Data obtained from CURES may be provided to authorized users of another states prescription drug monitoring program, as determined by the Department of Justice pursuant to subdivision (c), if the entity operating the interstate data sharing hub, and the prescription drug monitoring program of that state, as applicable, have entered into an agreement with the Department of Justice for interstate data sharing of prescription drug monitoring program information.
353365
354366 (3) Any agreement entered into by the Department of Justice for purposes of interstate data sharing of prescription drug monitoring program information shall ensure that all access to data obtained from CURES and the handling of data contained within CURES comply with California law, including regulations, and meet the same patient privacy, audit, and data security standards employed and required for direct access to CURES.
355367
356368 (4) For purposes of interstate data sharing of CURES information pursuant to this subdivision, an authorized user of another states prescription drug monitoring program shall not be required to register with CURES, if he or she is registered and in good standing with that states prescription drug monitoring program.
357369
358370 (5) The Department of Justice shall not enter into an agreement pursuant to this subdivision until the department has issued final regulations regarding the access and use of the information within CURES as required by paragraph (3) of subdivision (c).
359371
360372 SEC. 5. Section 4.5 of this bill incorporates amendments to Section 11165 of the Health and Safety Code proposed by both this bill and Assembly Bill 1751. That section of this bill shall only become operative if (1) both bills are enacted and become effective on or before January 1, 2019, (2) each bill amends Section 11165 of the Health and Safety Code, and (3) this bill is enacted after Assembly Bill 1751, in which case Section 4 of this bill shall not become operative.
361373
362374 SEC. 5. Section 4.5 of this bill incorporates amendments to Section 11165 of the Health and Safety Code proposed by both this bill and Assembly Bill 1751. That section of this bill shall only become operative if (1) both bills are enacted and become effective on or before January 1, 2019, (2) each bill amends Section 11165 of the Health and Safety Code, and (3) this bill is enacted after Assembly Bill 1751, in which case Section 4 of this bill shall not become operative.
363375
364376 SEC. 5. Section 4.5 of this bill incorporates amendments to Section 11165 of the Health and Safety Code proposed by both this bill and Assembly Bill 1751. That section of this bill shall only become operative if (1) both bills are enacted and become effective on or before January 1, 2019, (2) each bill amends Section 11165 of the Health and Safety Code, and (3) this bill is enacted after Assembly Bill 1751, in which case Section 4 of this bill shall not become operative.
365377
366378 ### SEC. 5.