CALIFORNIA LEGISLATURE 20192020 REGULAR SESSION Assembly Bill No. 528Introduced by Assembly Member LowFebruary 13, 2019 An act to amend Section 11165 of the Health and Safety Code, relating to controlled substances, and declaring the urgency thereof, to take effect immediately. LEGISLATIVE COUNSEL'S DIGESTAB 528, as introduced, Low. Controlled substances: CURES database.Existing law classifies certain controlled substances into designated schedules. Existing law requires the Department of Justice to maintain the Controlled Substance Utilization Review and Evaluation System (CURES) for the electronic monitoring of the prescribing and dispensing of Schedule II, Schedule III, and Schedule IV controlled substances by a health care practitioner authorized to prescribe, order, administer, furnish, or dispense a Schedule II, Schedule III, or Schedule IV controlled substance. Existing law requires a dispensing pharmacy, clinic, or other dispenser to report specified information to the Department of Justice as soon as reasonably possible, but not more than 7 days after the date a controlled substance is dispensed.This bill would require a dispensing pharmacy, clinic, or other dispenser to report the information required by the CURES database no more than one working day after a controlled substance is dispensed.This bill would declare that it is to take effect immediately as an urgency statute.Digest Key Vote: 2/3 Appropriation: NO Fiscal Committee: YES Local Program: NO Bill TextThe people of the State of California do enact as follows:SECTION 1. It is the intent of the Legislature that state laws regarding the operation and use of prescription drug monitoring programs continue to empower health care-oriented technology solutions to the opioid crisis.SEC. 2. Section 11165 of the Health and Safety Code is amended to read:11165. (a) To assist health care practitioners in their efforts to ensure appropriate prescribing, ordering, administering, furnishing, and dispensing of controlled substances, law enforcement and regulatory agencies in their efforts to control the diversion and resultant abuse of Schedule II, Schedule III, and Schedule IV controlled substances, and for statistical analysis, education, and research, the Department of Justice shall, contingent upon the availability of adequate funds in the CURES Fund, maintain the Controlled Substance Utilization Review and Evaluation System (CURES) for the electronic monitoring of, and Internet access to information regarding, the prescribing and dispensing of Schedule II, Schedule III, and Schedule IV controlled substances by all practitioners authorized to prescribe, order, administer, furnish, or dispense these controlled substances.(b) The Department of Justice may seek and use grant funds to pay the costs incurred by the operation and maintenance of CURES. The department shall annually report to the Legislature and make available to the public the amount and source of funds it receives for support of CURES.(c) (1) The operation of CURES shall comply with all applicable federal and state privacy and security laws and regulations.(2) (A) CURES shall operate under existing provisions of law to safeguard the privacy and confidentiality of patients. Data obtained from CURES shall only be provided to appropriate state, local, and federal public agencies for disciplinary, civil, or criminal purposes and to other agencies or entities, as determined by the Department of Justice, for the purpose of educating practitioners and others in lieu of disciplinary, civil, or criminal actions. Data may be provided to public or private entities, as approved by the Department of Justice, for educational, peer review, statistical, or research purposes, if patient information, including any information that may identify the patient, is not compromised. Further, data disclosed to any individual or agency as described in this subdivision shall not be disclosed, sold, or transferred to any third party, unless authorized by, or pursuant to, state and federal privacy and security laws and regulations. The Department of Justice shall establish policies, procedures, and regulations regarding the use, access, evaluation, management, implementation, operation, storage, disclosure, and security of the information within CURES, consistent with this subdivision.(B) Notwithstanding subparagraph (A), a regulatory board whose licensees do not prescribe, order, administer, furnish, or dispense controlled substances shall not be provided data obtained from CURES.(3) The Department of Justice shall, no later than July 1, 2020, adopt regulations regarding the access and use of the information within CURES. The Department of Justice shall consult with all stakeholders identified by the department during the rulemaking process. The regulations shall, at a minimum, address all of the following in a manner consistent with this chapter:(A) The process for approving, denying, and disapproving individuals or entities seeking access to information in CURES.(B) The purposes for which a health care practitioner may access information in CURES.(C) The conditions under which a warrant, subpoena, or court order is required for a law enforcement agency to obtain information from CURES as part of a criminal investigation.(D) The process by which information in CURES may be provided for educational, peer review, statistical, or research purposes.(4) In accordance with federal and state privacy laws and regulations, a health care practitioner may provide a patient with a copy of the patients CURES patient activity report as long as no additional CURES data are provided and keep a copy of the report in the patients medical record in compliance with subdivision (d) of Section 11165.1.(d) For each prescription for a Schedule II, Schedule III, or Schedule IV controlled substance, as defined in the controlled substances schedules in federal law and regulations, specifically Sections 1308.12, 1308.13, and 1308.14, respectively, of Title 21 of the Code of Federal Regulations, the dispensing pharmacy, clinic, or other dispenser shall report the following information to the Department of Justice as soon as reasonably possible, but not more than seven days one working day after the date a controlled substance is dispensed, in a format specified by the Department of Justice:(1) Full name, address, and, if available, telephone number of the ultimate user or research subject, or contact information as determined by the Secretary of the United States Department of Health and Human Services, and the gender, and date of birth of the ultimate user.(2) The prescribers category of licensure, license number, national provider identifier (NPI) number, the federal controlled substance registration number, and the state medical license number of any prescriber using the federal controlled substance registration number of a government-exempt facility, if provided.(3) Pharmacy prescription number, license number, NPI number, and federal controlled substance registration number.(4) National Drug Code (NDC) number of the controlled substance dispensed.(5) Quantity of the controlled substance dispensed.(6) International Statistical Classification of Diseases, 9th revision (ICD-9) or 10th revision (ICD-10) Code, if available.(7) Number of refills ordered.(8) Whether the drug was dispensed as a refill of a prescription or as a first-time request.(9) Date of origin of the prescription.(10) Date of dispensing of the prescription.(11) The serial number for the corresponding prescription form, if applicable.(e) The Department of Justice may invite stakeholders to assist, advise, and make recommendations on the establishment of rules and regulations necessary to ensure the proper administration and enforcement of the CURES database. All prescriber and dispenser invitees shall be licensed by one of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, in active practice in California, and a regular user of CURES.(f) The Department of Justice shall, prior to upgrading CURES, consult with prescribers licensed by one of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, one or more of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, and any other stakeholder identified by the department, for the purpose of identifying desirable capabilities and upgrades to the CURES Prescription Drug Monitoring Program (PDMP).(g) The Department of Justice may establish a process to educate authorized subscribers of the CURES PDMP on how to access and use the CURES PDMP.(h) (1) The Department of Justice may enter into an agreement with any entity operating an interstate data sharing hub, or any agency operating a prescription drug monitoring program in another state, for purposes of interstate data sharing of prescription drug monitoring program information.(2) Data obtained from CURES may be provided to authorized users of another states prescription drug monitoring program, as determined by the Department of Justice pursuant to subdivision (c), if the entity operating the interstate data sharing hub, and the prescription drug monitoring program of that state, as applicable, have entered into an agreement with the Department of Justice for interstate data sharing of prescription drug monitoring program information.(3) Any agreement entered into by the Department of Justice for purposes of interstate data sharing of prescription drug monitoring program information shall ensure that all access to data obtained from CURES and the handling of data contained within CURES comply with California law, including regulations, and meet the same patient privacy, audit, and data security standards employed and required for direct access to CURES.(4) For purposes of interstate data sharing of CURES information pursuant to this subdivision, an authorized user of another states prescription drug monitoring program shall not be required to register with CURES, if he or she is registered and in good standing with that states prescription drug monitoring program.(5) The Department of Justice shall not enter into an agreement pursuant to this subdivision until the department has issued final regulations regarding the access and use of the information within CURES as required by paragraph (3) of subdivision (c).SEC. 3. This act is an urgency statute necessary for the immediate preservation of the public peace, health, or safety within the meaning of Article IV of the California Constitution and shall go into immediate effect. The facts constituting the necessity are:In order to address the active crisis of opioid overprescribing and abuse through timely data, it is necessary that this bill go into immediate effect.
CALIFORNIA LEGISLATURE 20192020 REGULAR SESSION Assembly Bill No. 528Introduced by Assembly Member LowFebruary 13, 2019 An act to amend Section 11165 of the Health and Safety Code, relating to controlled substances, and declaring the urgency thereof, to take effect immediately. LEGISLATIVE COUNSEL'S DIGESTAB 528, as introduced, Low. Controlled substances: CURES database.Existing law classifies certain controlled substances into designated schedules. Existing law requires the Department of Justice to maintain the Controlled Substance Utilization Review and Evaluation System (CURES) for the electronic monitoring of the prescribing and dispensing of Schedule II, Schedule III, and Schedule IV controlled substances by a health care practitioner authorized to prescribe, order, administer, furnish, or dispense a Schedule II, Schedule III, or Schedule IV controlled substance. Existing law requires a dispensing pharmacy, clinic, or other dispenser to report specified information to the Department of Justice as soon as reasonably possible, but not more than 7 days after the date a controlled substance is dispensed.This bill would require a dispensing pharmacy, clinic, or other dispenser to report the information required by the CURES database no more than one working day after a controlled substance is dispensed.This bill would declare that it is to take effect immediately as an urgency statute.Digest Key Vote: 2/3 Appropriation: NO Fiscal Committee: YES Local Program: NO
CALIFORNIA LEGISLATURE 20192020 REGULAR SESSION
Assembly Bill No. 528
Introduced by Assembly Member LowFebruary 13, 2019
Introduced by Assembly Member Low
February 13, 2019
An act to amend Section 11165 of the Health and Safety Code, relating to controlled substances, and declaring the urgency thereof, to take effect immediately.
LEGISLATIVE COUNSEL'S DIGEST
## LEGISLATIVE COUNSEL'S DIGEST
AB 528, as introduced, Low. Controlled substances: CURES database.
Existing law classifies certain controlled substances into designated schedules. Existing law requires the Department of Justice to maintain the Controlled Substance Utilization Review and Evaluation System (CURES) for the electronic monitoring of the prescribing and dispensing of Schedule II, Schedule III, and Schedule IV controlled substances by a health care practitioner authorized to prescribe, order, administer, furnish, or dispense a Schedule II, Schedule III, or Schedule IV controlled substance. Existing law requires a dispensing pharmacy, clinic, or other dispenser to report specified information to the Department of Justice as soon as reasonably possible, but not more than 7 days after the date a controlled substance is dispensed.This bill would require a dispensing pharmacy, clinic, or other dispenser to report the information required by the CURES database no more than one working day after a controlled substance is dispensed.This bill would declare that it is to take effect immediately as an urgency statute.
Existing law classifies certain controlled substances into designated schedules. Existing law requires the Department of Justice to maintain the Controlled Substance Utilization Review and Evaluation System (CURES) for the electronic monitoring of the prescribing and dispensing of Schedule II, Schedule III, and Schedule IV controlled substances by a health care practitioner authorized to prescribe, order, administer, furnish, or dispense a Schedule II, Schedule III, or Schedule IV controlled substance. Existing law requires a dispensing pharmacy, clinic, or other dispenser to report specified information to the Department of Justice as soon as reasonably possible, but not more than 7 days after the date a controlled substance is dispensed.
This bill would require a dispensing pharmacy, clinic, or other dispenser to report the information required by the CURES database no more than one working day after a controlled substance is dispensed.
This bill would declare that it is to take effect immediately as an urgency statute.
## Digest Key
## Bill Text
The people of the State of California do enact as follows:SECTION 1. It is the intent of the Legislature that state laws regarding the operation and use of prescription drug monitoring programs continue to empower health care-oriented technology solutions to the opioid crisis.SEC. 2. Section 11165 of the Health and Safety Code is amended to read:11165. (a) To assist health care practitioners in their efforts to ensure appropriate prescribing, ordering, administering, furnishing, and dispensing of controlled substances, law enforcement and regulatory agencies in their efforts to control the diversion and resultant abuse of Schedule II, Schedule III, and Schedule IV controlled substances, and for statistical analysis, education, and research, the Department of Justice shall, contingent upon the availability of adequate funds in the CURES Fund, maintain the Controlled Substance Utilization Review and Evaluation System (CURES) for the electronic monitoring of, and Internet access to information regarding, the prescribing and dispensing of Schedule II, Schedule III, and Schedule IV controlled substances by all practitioners authorized to prescribe, order, administer, furnish, or dispense these controlled substances.(b) The Department of Justice may seek and use grant funds to pay the costs incurred by the operation and maintenance of CURES. The department shall annually report to the Legislature and make available to the public the amount and source of funds it receives for support of CURES.(c) (1) The operation of CURES shall comply with all applicable federal and state privacy and security laws and regulations.(2) (A) CURES shall operate under existing provisions of law to safeguard the privacy and confidentiality of patients. Data obtained from CURES shall only be provided to appropriate state, local, and federal public agencies for disciplinary, civil, or criminal purposes and to other agencies or entities, as determined by the Department of Justice, for the purpose of educating practitioners and others in lieu of disciplinary, civil, or criminal actions. Data may be provided to public or private entities, as approved by the Department of Justice, for educational, peer review, statistical, or research purposes, if patient information, including any information that may identify the patient, is not compromised. Further, data disclosed to any individual or agency as described in this subdivision shall not be disclosed, sold, or transferred to any third party, unless authorized by, or pursuant to, state and federal privacy and security laws and regulations. The Department of Justice shall establish policies, procedures, and regulations regarding the use, access, evaluation, management, implementation, operation, storage, disclosure, and security of the information within CURES, consistent with this subdivision.(B) Notwithstanding subparagraph (A), a regulatory board whose licensees do not prescribe, order, administer, furnish, or dispense controlled substances shall not be provided data obtained from CURES.(3) The Department of Justice shall, no later than July 1, 2020, adopt regulations regarding the access and use of the information within CURES. The Department of Justice shall consult with all stakeholders identified by the department during the rulemaking process. The regulations shall, at a minimum, address all of the following in a manner consistent with this chapter:(A) The process for approving, denying, and disapproving individuals or entities seeking access to information in CURES.(B) The purposes for which a health care practitioner may access information in CURES.(C) The conditions under which a warrant, subpoena, or court order is required for a law enforcement agency to obtain information from CURES as part of a criminal investigation.(D) The process by which information in CURES may be provided for educational, peer review, statistical, or research purposes.(4) In accordance with federal and state privacy laws and regulations, a health care practitioner may provide a patient with a copy of the patients CURES patient activity report as long as no additional CURES data are provided and keep a copy of the report in the patients medical record in compliance with subdivision (d) of Section 11165.1.(d) For each prescription for a Schedule II, Schedule III, or Schedule IV controlled substance, as defined in the controlled substances schedules in federal law and regulations, specifically Sections 1308.12, 1308.13, and 1308.14, respectively, of Title 21 of the Code of Federal Regulations, the dispensing pharmacy, clinic, or other dispenser shall report the following information to the Department of Justice as soon as reasonably possible, but not more than seven days one working day after the date a controlled substance is dispensed, in a format specified by the Department of Justice:(1) Full name, address, and, if available, telephone number of the ultimate user or research subject, or contact information as determined by the Secretary of the United States Department of Health and Human Services, and the gender, and date of birth of the ultimate user.(2) The prescribers category of licensure, license number, national provider identifier (NPI) number, the federal controlled substance registration number, and the state medical license number of any prescriber using the federal controlled substance registration number of a government-exempt facility, if provided.(3) Pharmacy prescription number, license number, NPI number, and federal controlled substance registration number.(4) National Drug Code (NDC) number of the controlled substance dispensed.(5) Quantity of the controlled substance dispensed.(6) International Statistical Classification of Diseases, 9th revision (ICD-9) or 10th revision (ICD-10) Code, if available.(7) Number of refills ordered.(8) Whether the drug was dispensed as a refill of a prescription or as a first-time request.(9) Date of origin of the prescription.(10) Date of dispensing of the prescription.(11) The serial number for the corresponding prescription form, if applicable.(e) The Department of Justice may invite stakeholders to assist, advise, and make recommendations on the establishment of rules and regulations necessary to ensure the proper administration and enforcement of the CURES database. All prescriber and dispenser invitees shall be licensed by one of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, in active practice in California, and a regular user of CURES.(f) The Department of Justice shall, prior to upgrading CURES, consult with prescribers licensed by one of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, one or more of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, and any other stakeholder identified by the department, for the purpose of identifying desirable capabilities and upgrades to the CURES Prescription Drug Monitoring Program (PDMP).(g) The Department of Justice may establish a process to educate authorized subscribers of the CURES PDMP on how to access and use the CURES PDMP.(h) (1) The Department of Justice may enter into an agreement with any entity operating an interstate data sharing hub, or any agency operating a prescription drug monitoring program in another state, for purposes of interstate data sharing of prescription drug monitoring program information.(2) Data obtained from CURES may be provided to authorized users of another states prescription drug monitoring program, as determined by the Department of Justice pursuant to subdivision (c), if the entity operating the interstate data sharing hub, and the prescription drug monitoring program of that state, as applicable, have entered into an agreement with the Department of Justice for interstate data sharing of prescription drug monitoring program information.(3) Any agreement entered into by the Department of Justice for purposes of interstate data sharing of prescription drug monitoring program information shall ensure that all access to data obtained from CURES and the handling of data contained within CURES comply with California law, including regulations, and meet the same patient privacy, audit, and data security standards employed and required for direct access to CURES.(4) For purposes of interstate data sharing of CURES information pursuant to this subdivision, an authorized user of another states prescription drug monitoring program shall not be required to register with CURES, if he or she is registered and in good standing with that states prescription drug monitoring program.(5) The Department of Justice shall not enter into an agreement pursuant to this subdivision until the department has issued final regulations regarding the access and use of the information within CURES as required by paragraph (3) of subdivision (c).SEC. 3. This act is an urgency statute necessary for the immediate preservation of the public peace, health, or safety within the meaning of Article IV of the California Constitution and shall go into immediate effect. The facts constituting the necessity are:In order to address the active crisis of opioid overprescribing and abuse through timely data, it is necessary that this bill go into immediate effect.
The people of the State of California do enact as follows:
## The people of the State of California do enact as follows:
SECTION 1. It is the intent of the Legislature that state laws regarding the operation and use of prescription drug monitoring programs continue to empower health care-oriented technology solutions to the opioid crisis.
SECTION 1. It is the intent of the Legislature that state laws regarding the operation and use of prescription drug monitoring programs continue to empower health care-oriented technology solutions to the opioid crisis.
SECTION 1. It is the intent of the Legislature that state laws regarding the operation and use of prescription drug monitoring programs continue to empower health care-oriented technology solutions to the opioid crisis.
### SECTION 1.
SEC. 2. Section 11165 of the Health and Safety Code is amended to read:11165. (a) To assist health care practitioners in their efforts to ensure appropriate prescribing, ordering, administering, furnishing, and dispensing of controlled substances, law enforcement and regulatory agencies in their efforts to control the diversion and resultant abuse of Schedule II, Schedule III, and Schedule IV controlled substances, and for statistical analysis, education, and research, the Department of Justice shall, contingent upon the availability of adequate funds in the CURES Fund, maintain the Controlled Substance Utilization Review and Evaluation System (CURES) for the electronic monitoring of, and Internet access to information regarding, the prescribing and dispensing of Schedule II, Schedule III, and Schedule IV controlled substances by all practitioners authorized to prescribe, order, administer, furnish, or dispense these controlled substances.(b) The Department of Justice may seek and use grant funds to pay the costs incurred by the operation and maintenance of CURES. The department shall annually report to the Legislature and make available to the public the amount and source of funds it receives for support of CURES.(c) (1) The operation of CURES shall comply with all applicable federal and state privacy and security laws and regulations.(2) (A) CURES shall operate under existing provisions of law to safeguard the privacy and confidentiality of patients. Data obtained from CURES shall only be provided to appropriate state, local, and federal public agencies for disciplinary, civil, or criminal purposes and to other agencies or entities, as determined by the Department of Justice, for the purpose of educating practitioners and others in lieu of disciplinary, civil, or criminal actions. Data may be provided to public or private entities, as approved by the Department of Justice, for educational, peer review, statistical, or research purposes, if patient information, including any information that may identify the patient, is not compromised. Further, data disclosed to any individual or agency as described in this subdivision shall not be disclosed, sold, or transferred to any third party, unless authorized by, or pursuant to, state and federal privacy and security laws and regulations. The Department of Justice shall establish policies, procedures, and regulations regarding the use, access, evaluation, management, implementation, operation, storage, disclosure, and security of the information within CURES, consistent with this subdivision.(B) Notwithstanding subparagraph (A), a regulatory board whose licensees do not prescribe, order, administer, furnish, or dispense controlled substances shall not be provided data obtained from CURES.(3) The Department of Justice shall, no later than July 1, 2020, adopt regulations regarding the access and use of the information within CURES. The Department of Justice shall consult with all stakeholders identified by the department during the rulemaking process. The regulations shall, at a minimum, address all of the following in a manner consistent with this chapter:(A) The process for approving, denying, and disapproving individuals or entities seeking access to information in CURES.(B) The purposes for which a health care practitioner may access information in CURES.(C) The conditions under which a warrant, subpoena, or court order is required for a law enforcement agency to obtain information from CURES as part of a criminal investigation.(D) The process by which information in CURES may be provided for educational, peer review, statistical, or research purposes.(4) In accordance with federal and state privacy laws and regulations, a health care practitioner may provide a patient with a copy of the patients CURES patient activity report as long as no additional CURES data are provided and keep a copy of the report in the patients medical record in compliance with subdivision (d) of Section 11165.1.(d) For each prescription for a Schedule II, Schedule III, or Schedule IV controlled substance, as defined in the controlled substances schedules in federal law and regulations, specifically Sections 1308.12, 1308.13, and 1308.14, respectively, of Title 21 of the Code of Federal Regulations, the dispensing pharmacy, clinic, or other dispenser shall report the following information to the Department of Justice as soon as reasonably possible, but not more than seven days one working day after the date a controlled substance is dispensed, in a format specified by the Department of Justice:(1) Full name, address, and, if available, telephone number of the ultimate user or research subject, or contact information as determined by the Secretary of the United States Department of Health and Human Services, and the gender, and date of birth of the ultimate user.(2) The prescribers category of licensure, license number, national provider identifier (NPI) number, the federal controlled substance registration number, and the state medical license number of any prescriber using the federal controlled substance registration number of a government-exempt facility, if provided.(3) Pharmacy prescription number, license number, NPI number, and federal controlled substance registration number.(4) National Drug Code (NDC) number of the controlled substance dispensed.(5) Quantity of the controlled substance dispensed.(6) International Statistical Classification of Diseases, 9th revision (ICD-9) or 10th revision (ICD-10) Code, if available.(7) Number of refills ordered.(8) Whether the drug was dispensed as a refill of a prescription or as a first-time request.(9) Date of origin of the prescription.(10) Date of dispensing of the prescription.(11) The serial number for the corresponding prescription form, if applicable.(e) The Department of Justice may invite stakeholders to assist, advise, and make recommendations on the establishment of rules and regulations necessary to ensure the proper administration and enforcement of the CURES database. All prescriber and dispenser invitees shall be licensed by one of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, in active practice in California, and a regular user of CURES.(f) The Department of Justice shall, prior to upgrading CURES, consult with prescribers licensed by one of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, one or more of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, and any other stakeholder identified by the department, for the purpose of identifying desirable capabilities and upgrades to the CURES Prescription Drug Monitoring Program (PDMP).(g) The Department of Justice may establish a process to educate authorized subscribers of the CURES PDMP on how to access and use the CURES PDMP.(h) (1) The Department of Justice may enter into an agreement with any entity operating an interstate data sharing hub, or any agency operating a prescription drug monitoring program in another state, for purposes of interstate data sharing of prescription drug monitoring program information.(2) Data obtained from CURES may be provided to authorized users of another states prescription drug monitoring program, as determined by the Department of Justice pursuant to subdivision (c), if the entity operating the interstate data sharing hub, and the prescription drug monitoring program of that state, as applicable, have entered into an agreement with the Department of Justice for interstate data sharing of prescription drug monitoring program information.(3) Any agreement entered into by the Department of Justice for purposes of interstate data sharing of prescription drug monitoring program information shall ensure that all access to data obtained from CURES and the handling of data contained within CURES comply with California law, including regulations, and meet the same patient privacy, audit, and data security standards employed and required for direct access to CURES.(4) For purposes of interstate data sharing of CURES information pursuant to this subdivision, an authorized user of another states prescription drug monitoring program shall not be required to register with CURES, if he or she is registered and in good standing with that states prescription drug monitoring program.(5) The Department of Justice shall not enter into an agreement pursuant to this subdivision until the department has issued final regulations regarding the access and use of the information within CURES as required by paragraph (3) of subdivision (c).
SEC. 2. Section 11165 of the Health and Safety Code is amended to read:
### SEC. 2.
11165. (a) To assist health care practitioners in their efforts to ensure appropriate prescribing, ordering, administering, furnishing, and dispensing of controlled substances, law enforcement and regulatory agencies in their efforts to control the diversion and resultant abuse of Schedule II, Schedule III, and Schedule IV controlled substances, and for statistical analysis, education, and research, the Department of Justice shall, contingent upon the availability of adequate funds in the CURES Fund, maintain the Controlled Substance Utilization Review and Evaluation System (CURES) for the electronic monitoring of, and Internet access to information regarding, the prescribing and dispensing of Schedule II, Schedule III, and Schedule IV controlled substances by all practitioners authorized to prescribe, order, administer, furnish, or dispense these controlled substances.(b) The Department of Justice may seek and use grant funds to pay the costs incurred by the operation and maintenance of CURES. The department shall annually report to the Legislature and make available to the public the amount and source of funds it receives for support of CURES.(c) (1) The operation of CURES shall comply with all applicable federal and state privacy and security laws and regulations.(2) (A) CURES shall operate under existing provisions of law to safeguard the privacy and confidentiality of patients. Data obtained from CURES shall only be provided to appropriate state, local, and federal public agencies for disciplinary, civil, or criminal purposes and to other agencies or entities, as determined by the Department of Justice, for the purpose of educating practitioners and others in lieu of disciplinary, civil, or criminal actions. Data may be provided to public or private entities, as approved by the Department of Justice, for educational, peer review, statistical, or research purposes, if patient information, including any information that may identify the patient, is not compromised. Further, data disclosed to any individual or agency as described in this subdivision shall not be disclosed, sold, or transferred to any third party, unless authorized by, or pursuant to, state and federal privacy and security laws and regulations. The Department of Justice shall establish policies, procedures, and regulations regarding the use, access, evaluation, management, implementation, operation, storage, disclosure, and security of the information within CURES, consistent with this subdivision.(B) Notwithstanding subparagraph (A), a regulatory board whose licensees do not prescribe, order, administer, furnish, or dispense controlled substances shall not be provided data obtained from CURES.(3) The Department of Justice shall, no later than July 1, 2020, adopt regulations regarding the access and use of the information within CURES. The Department of Justice shall consult with all stakeholders identified by the department during the rulemaking process. The regulations shall, at a minimum, address all of the following in a manner consistent with this chapter:(A) The process for approving, denying, and disapproving individuals or entities seeking access to information in CURES.(B) The purposes for which a health care practitioner may access information in CURES.(C) The conditions under which a warrant, subpoena, or court order is required for a law enforcement agency to obtain information from CURES as part of a criminal investigation.(D) The process by which information in CURES may be provided for educational, peer review, statistical, or research purposes.(4) In accordance with federal and state privacy laws and regulations, a health care practitioner may provide a patient with a copy of the patients CURES patient activity report as long as no additional CURES data are provided and keep a copy of the report in the patients medical record in compliance with subdivision (d) of Section 11165.1.(d) For each prescription for a Schedule II, Schedule III, or Schedule IV controlled substance, as defined in the controlled substances schedules in federal law and regulations, specifically Sections 1308.12, 1308.13, and 1308.14, respectively, of Title 21 of the Code of Federal Regulations, the dispensing pharmacy, clinic, or other dispenser shall report the following information to the Department of Justice as soon as reasonably possible, but not more than seven days one working day after the date a controlled substance is dispensed, in a format specified by the Department of Justice:(1) Full name, address, and, if available, telephone number of the ultimate user or research subject, or contact information as determined by the Secretary of the United States Department of Health and Human Services, and the gender, and date of birth of the ultimate user.(2) The prescribers category of licensure, license number, national provider identifier (NPI) number, the federal controlled substance registration number, and the state medical license number of any prescriber using the federal controlled substance registration number of a government-exempt facility, if provided.(3) Pharmacy prescription number, license number, NPI number, and federal controlled substance registration number.(4) National Drug Code (NDC) number of the controlled substance dispensed.(5) Quantity of the controlled substance dispensed.(6) International Statistical Classification of Diseases, 9th revision (ICD-9) or 10th revision (ICD-10) Code, if available.(7) Number of refills ordered.(8) Whether the drug was dispensed as a refill of a prescription or as a first-time request.(9) Date of origin of the prescription.(10) Date of dispensing of the prescription.(11) The serial number for the corresponding prescription form, if applicable.(e) The Department of Justice may invite stakeholders to assist, advise, and make recommendations on the establishment of rules and regulations necessary to ensure the proper administration and enforcement of the CURES database. All prescriber and dispenser invitees shall be licensed by one of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, in active practice in California, and a regular user of CURES.(f) The Department of Justice shall, prior to upgrading CURES, consult with prescribers licensed by one of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, one or more of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, and any other stakeholder identified by the department, for the purpose of identifying desirable capabilities and upgrades to the CURES Prescription Drug Monitoring Program (PDMP).(g) The Department of Justice may establish a process to educate authorized subscribers of the CURES PDMP on how to access and use the CURES PDMP.(h) (1) The Department of Justice may enter into an agreement with any entity operating an interstate data sharing hub, or any agency operating a prescription drug monitoring program in another state, for purposes of interstate data sharing of prescription drug monitoring program information.(2) Data obtained from CURES may be provided to authorized users of another states prescription drug monitoring program, as determined by the Department of Justice pursuant to subdivision (c), if the entity operating the interstate data sharing hub, and the prescription drug monitoring program of that state, as applicable, have entered into an agreement with the Department of Justice for interstate data sharing of prescription drug monitoring program information.(3) Any agreement entered into by the Department of Justice for purposes of interstate data sharing of prescription drug monitoring program information shall ensure that all access to data obtained from CURES and the handling of data contained within CURES comply with California law, including regulations, and meet the same patient privacy, audit, and data security standards employed and required for direct access to CURES.(4) For purposes of interstate data sharing of CURES information pursuant to this subdivision, an authorized user of another states prescription drug monitoring program shall not be required to register with CURES, if he or she is registered and in good standing with that states prescription drug monitoring program.(5) The Department of Justice shall not enter into an agreement pursuant to this subdivision until the department has issued final regulations regarding the access and use of the information within CURES as required by paragraph (3) of subdivision (c).
11165. (a) To assist health care practitioners in their efforts to ensure appropriate prescribing, ordering, administering, furnishing, and dispensing of controlled substances, law enforcement and regulatory agencies in their efforts to control the diversion and resultant abuse of Schedule II, Schedule III, and Schedule IV controlled substances, and for statistical analysis, education, and research, the Department of Justice shall, contingent upon the availability of adequate funds in the CURES Fund, maintain the Controlled Substance Utilization Review and Evaluation System (CURES) for the electronic monitoring of, and Internet access to information regarding, the prescribing and dispensing of Schedule II, Schedule III, and Schedule IV controlled substances by all practitioners authorized to prescribe, order, administer, furnish, or dispense these controlled substances.(b) The Department of Justice may seek and use grant funds to pay the costs incurred by the operation and maintenance of CURES. The department shall annually report to the Legislature and make available to the public the amount and source of funds it receives for support of CURES.(c) (1) The operation of CURES shall comply with all applicable federal and state privacy and security laws and regulations.(2) (A) CURES shall operate under existing provisions of law to safeguard the privacy and confidentiality of patients. Data obtained from CURES shall only be provided to appropriate state, local, and federal public agencies for disciplinary, civil, or criminal purposes and to other agencies or entities, as determined by the Department of Justice, for the purpose of educating practitioners and others in lieu of disciplinary, civil, or criminal actions. Data may be provided to public or private entities, as approved by the Department of Justice, for educational, peer review, statistical, or research purposes, if patient information, including any information that may identify the patient, is not compromised. Further, data disclosed to any individual or agency as described in this subdivision shall not be disclosed, sold, or transferred to any third party, unless authorized by, or pursuant to, state and federal privacy and security laws and regulations. The Department of Justice shall establish policies, procedures, and regulations regarding the use, access, evaluation, management, implementation, operation, storage, disclosure, and security of the information within CURES, consistent with this subdivision.(B) Notwithstanding subparagraph (A), a regulatory board whose licensees do not prescribe, order, administer, furnish, or dispense controlled substances shall not be provided data obtained from CURES.(3) The Department of Justice shall, no later than July 1, 2020, adopt regulations regarding the access and use of the information within CURES. The Department of Justice shall consult with all stakeholders identified by the department during the rulemaking process. The regulations shall, at a minimum, address all of the following in a manner consistent with this chapter:(A) The process for approving, denying, and disapproving individuals or entities seeking access to information in CURES.(B) The purposes for which a health care practitioner may access information in CURES.(C) The conditions under which a warrant, subpoena, or court order is required for a law enforcement agency to obtain information from CURES as part of a criminal investigation.(D) The process by which information in CURES may be provided for educational, peer review, statistical, or research purposes.(4) In accordance with federal and state privacy laws and regulations, a health care practitioner may provide a patient with a copy of the patients CURES patient activity report as long as no additional CURES data are provided and keep a copy of the report in the patients medical record in compliance with subdivision (d) of Section 11165.1.(d) For each prescription for a Schedule II, Schedule III, or Schedule IV controlled substance, as defined in the controlled substances schedules in federal law and regulations, specifically Sections 1308.12, 1308.13, and 1308.14, respectively, of Title 21 of the Code of Federal Regulations, the dispensing pharmacy, clinic, or other dispenser shall report the following information to the Department of Justice as soon as reasonably possible, but not more than seven days one working day after the date a controlled substance is dispensed, in a format specified by the Department of Justice:(1) Full name, address, and, if available, telephone number of the ultimate user or research subject, or contact information as determined by the Secretary of the United States Department of Health and Human Services, and the gender, and date of birth of the ultimate user.(2) The prescribers category of licensure, license number, national provider identifier (NPI) number, the federal controlled substance registration number, and the state medical license number of any prescriber using the federal controlled substance registration number of a government-exempt facility, if provided.(3) Pharmacy prescription number, license number, NPI number, and federal controlled substance registration number.(4) National Drug Code (NDC) number of the controlled substance dispensed.(5) Quantity of the controlled substance dispensed.(6) International Statistical Classification of Diseases, 9th revision (ICD-9) or 10th revision (ICD-10) Code, if available.(7) Number of refills ordered.(8) Whether the drug was dispensed as a refill of a prescription or as a first-time request.(9) Date of origin of the prescription.(10) Date of dispensing of the prescription.(11) The serial number for the corresponding prescription form, if applicable.(e) The Department of Justice may invite stakeholders to assist, advise, and make recommendations on the establishment of rules and regulations necessary to ensure the proper administration and enforcement of the CURES database. All prescriber and dispenser invitees shall be licensed by one of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, in active practice in California, and a regular user of CURES.(f) The Department of Justice shall, prior to upgrading CURES, consult with prescribers licensed by one of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, one or more of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, and any other stakeholder identified by the department, for the purpose of identifying desirable capabilities and upgrades to the CURES Prescription Drug Monitoring Program (PDMP).(g) The Department of Justice may establish a process to educate authorized subscribers of the CURES PDMP on how to access and use the CURES PDMP.(h) (1) The Department of Justice may enter into an agreement with any entity operating an interstate data sharing hub, or any agency operating a prescription drug monitoring program in another state, for purposes of interstate data sharing of prescription drug monitoring program information.(2) Data obtained from CURES may be provided to authorized users of another states prescription drug monitoring program, as determined by the Department of Justice pursuant to subdivision (c), if the entity operating the interstate data sharing hub, and the prescription drug monitoring program of that state, as applicable, have entered into an agreement with the Department of Justice for interstate data sharing of prescription drug monitoring program information.(3) Any agreement entered into by the Department of Justice for purposes of interstate data sharing of prescription drug monitoring program information shall ensure that all access to data obtained from CURES and the handling of data contained within CURES comply with California law, including regulations, and meet the same patient privacy, audit, and data security standards employed and required for direct access to CURES.(4) For purposes of interstate data sharing of CURES information pursuant to this subdivision, an authorized user of another states prescription drug monitoring program shall not be required to register with CURES, if he or she is registered and in good standing with that states prescription drug monitoring program.(5) The Department of Justice shall not enter into an agreement pursuant to this subdivision until the department has issued final regulations regarding the access and use of the information within CURES as required by paragraph (3) of subdivision (c).
11165. (a) To assist health care practitioners in their efforts to ensure appropriate prescribing, ordering, administering, furnishing, and dispensing of controlled substances, law enforcement and regulatory agencies in their efforts to control the diversion and resultant abuse of Schedule II, Schedule III, and Schedule IV controlled substances, and for statistical analysis, education, and research, the Department of Justice shall, contingent upon the availability of adequate funds in the CURES Fund, maintain the Controlled Substance Utilization Review and Evaluation System (CURES) for the electronic monitoring of, and Internet access to information regarding, the prescribing and dispensing of Schedule II, Schedule III, and Schedule IV controlled substances by all practitioners authorized to prescribe, order, administer, furnish, or dispense these controlled substances.(b) The Department of Justice may seek and use grant funds to pay the costs incurred by the operation and maintenance of CURES. The department shall annually report to the Legislature and make available to the public the amount and source of funds it receives for support of CURES.(c) (1) The operation of CURES shall comply with all applicable federal and state privacy and security laws and regulations.(2) (A) CURES shall operate under existing provisions of law to safeguard the privacy and confidentiality of patients. Data obtained from CURES shall only be provided to appropriate state, local, and federal public agencies for disciplinary, civil, or criminal purposes and to other agencies or entities, as determined by the Department of Justice, for the purpose of educating practitioners and others in lieu of disciplinary, civil, or criminal actions. Data may be provided to public or private entities, as approved by the Department of Justice, for educational, peer review, statistical, or research purposes, if patient information, including any information that may identify the patient, is not compromised. Further, data disclosed to any individual or agency as described in this subdivision shall not be disclosed, sold, or transferred to any third party, unless authorized by, or pursuant to, state and federal privacy and security laws and regulations. The Department of Justice shall establish policies, procedures, and regulations regarding the use, access, evaluation, management, implementation, operation, storage, disclosure, and security of the information within CURES, consistent with this subdivision.(B) Notwithstanding subparagraph (A), a regulatory board whose licensees do not prescribe, order, administer, furnish, or dispense controlled substances shall not be provided data obtained from CURES.(3) The Department of Justice shall, no later than July 1, 2020, adopt regulations regarding the access and use of the information within CURES. The Department of Justice shall consult with all stakeholders identified by the department during the rulemaking process. The regulations shall, at a minimum, address all of the following in a manner consistent with this chapter:(A) The process for approving, denying, and disapproving individuals or entities seeking access to information in CURES.(B) The purposes for which a health care practitioner may access information in CURES.(C) The conditions under which a warrant, subpoena, or court order is required for a law enforcement agency to obtain information from CURES as part of a criminal investigation.(D) The process by which information in CURES may be provided for educational, peer review, statistical, or research purposes.(4) In accordance with federal and state privacy laws and regulations, a health care practitioner may provide a patient with a copy of the patients CURES patient activity report as long as no additional CURES data are provided and keep a copy of the report in the patients medical record in compliance with subdivision (d) of Section 11165.1.(d) For each prescription for a Schedule II, Schedule III, or Schedule IV controlled substance, as defined in the controlled substances schedules in federal law and regulations, specifically Sections 1308.12, 1308.13, and 1308.14, respectively, of Title 21 of the Code of Federal Regulations, the dispensing pharmacy, clinic, or other dispenser shall report the following information to the Department of Justice as soon as reasonably possible, but not more than seven days one working day after the date a controlled substance is dispensed, in a format specified by the Department of Justice:(1) Full name, address, and, if available, telephone number of the ultimate user or research subject, or contact information as determined by the Secretary of the United States Department of Health and Human Services, and the gender, and date of birth of the ultimate user.(2) The prescribers category of licensure, license number, national provider identifier (NPI) number, the federal controlled substance registration number, and the state medical license number of any prescriber using the federal controlled substance registration number of a government-exempt facility, if provided.(3) Pharmacy prescription number, license number, NPI number, and federal controlled substance registration number.(4) National Drug Code (NDC) number of the controlled substance dispensed.(5) Quantity of the controlled substance dispensed.(6) International Statistical Classification of Diseases, 9th revision (ICD-9) or 10th revision (ICD-10) Code, if available.(7) Number of refills ordered.(8) Whether the drug was dispensed as a refill of a prescription or as a first-time request.(9) Date of origin of the prescription.(10) Date of dispensing of the prescription.(11) The serial number for the corresponding prescription form, if applicable.(e) The Department of Justice may invite stakeholders to assist, advise, and make recommendations on the establishment of rules and regulations necessary to ensure the proper administration and enforcement of the CURES database. All prescriber and dispenser invitees shall be licensed by one of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, in active practice in California, and a regular user of CURES.(f) The Department of Justice shall, prior to upgrading CURES, consult with prescribers licensed by one of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, one or more of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, and any other stakeholder identified by the department, for the purpose of identifying desirable capabilities and upgrades to the CURES Prescription Drug Monitoring Program (PDMP).(g) The Department of Justice may establish a process to educate authorized subscribers of the CURES PDMP on how to access and use the CURES PDMP.(h) (1) The Department of Justice may enter into an agreement with any entity operating an interstate data sharing hub, or any agency operating a prescription drug monitoring program in another state, for purposes of interstate data sharing of prescription drug monitoring program information.(2) Data obtained from CURES may be provided to authorized users of another states prescription drug monitoring program, as determined by the Department of Justice pursuant to subdivision (c), if the entity operating the interstate data sharing hub, and the prescription drug monitoring program of that state, as applicable, have entered into an agreement with the Department of Justice for interstate data sharing of prescription drug monitoring program information.(3) Any agreement entered into by the Department of Justice for purposes of interstate data sharing of prescription drug monitoring program information shall ensure that all access to data obtained from CURES and the handling of data contained within CURES comply with California law, including regulations, and meet the same patient privacy, audit, and data security standards employed and required for direct access to CURES.(4) For purposes of interstate data sharing of CURES information pursuant to this subdivision, an authorized user of another states prescription drug monitoring program shall not be required to register with CURES, if he or she is registered and in good standing with that states prescription drug monitoring program.(5) The Department of Justice shall not enter into an agreement pursuant to this subdivision until the department has issued final regulations regarding the access and use of the information within CURES as required by paragraph (3) of subdivision (c).
11165. (a) To assist health care practitioners in their efforts to ensure appropriate prescribing, ordering, administering, furnishing, and dispensing of controlled substances, law enforcement and regulatory agencies in their efforts to control the diversion and resultant abuse of Schedule II, Schedule III, and Schedule IV controlled substances, and for statistical analysis, education, and research, the Department of Justice shall, contingent upon the availability of adequate funds in the CURES Fund, maintain the Controlled Substance Utilization Review and Evaluation System (CURES) for the electronic monitoring of, and Internet access to information regarding, the prescribing and dispensing of Schedule II, Schedule III, and Schedule IV controlled substances by all practitioners authorized to prescribe, order, administer, furnish, or dispense these controlled substances.
(b) The Department of Justice may seek and use grant funds to pay the costs incurred by the operation and maintenance of CURES. The department shall annually report to the Legislature and make available to the public the amount and source of funds it receives for support of CURES.
(c) (1) The operation of CURES shall comply with all applicable federal and state privacy and security laws and regulations.
(2) (A) CURES shall operate under existing provisions of law to safeguard the privacy and confidentiality of patients. Data obtained from CURES shall only be provided to appropriate state, local, and federal public agencies for disciplinary, civil, or criminal purposes and to other agencies or entities, as determined by the Department of Justice, for the purpose of educating practitioners and others in lieu of disciplinary, civil, or criminal actions. Data may be provided to public or private entities, as approved by the Department of Justice, for educational, peer review, statistical, or research purposes, if patient information, including any information that may identify the patient, is not compromised. Further, data disclosed to any individual or agency as described in this subdivision shall not be disclosed, sold, or transferred to any third party, unless authorized by, or pursuant to, state and federal privacy and security laws and regulations. The Department of Justice shall establish policies, procedures, and regulations regarding the use, access, evaluation, management, implementation, operation, storage, disclosure, and security of the information within CURES, consistent with this subdivision.
(B) Notwithstanding subparagraph (A), a regulatory board whose licensees do not prescribe, order, administer, furnish, or dispense controlled substances shall not be provided data obtained from CURES.
(3) The Department of Justice shall, no later than July 1, 2020, adopt regulations regarding the access and use of the information within CURES. The Department of Justice shall consult with all stakeholders identified by the department during the rulemaking process. The regulations shall, at a minimum, address all of the following in a manner consistent with this chapter:
(A) The process for approving, denying, and disapproving individuals or entities seeking access to information in CURES.
(B) The purposes for which a health care practitioner may access information in CURES.
(C) The conditions under which a warrant, subpoena, or court order is required for a law enforcement agency to obtain information from CURES as part of a criminal investigation.
(D) The process by which information in CURES may be provided for educational, peer review, statistical, or research purposes.
(4) In accordance with federal and state privacy laws and regulations, a health care practitioner may provide a patient with a copy of the patients CURES patient activity report as long as no additional CURES data are provided and keep a copy of the report in the patients medical record in compliance with subdivision (d) of Section 11165.1.
(d) For each prescription for a Schedule II, Schedule III, or Schedule IV controlled substance, as defined in the controlled substances schedules in federal law and regulations, specifically Sections 1308.12, 1308.13, and 1308.14, respectively, of Title 21 of the Code of Federal Regulations, the dispensing pharmacy, clinic, or other dispenser shall report the following information to the Department of Justice as soon as reasonably possible, but not more than seven days one working day after the date a controlled substance is dispensed, in a format specified by the Department of Justice:
(1) Full name, address, and, if available, telephone number of the ultimate user or research subject, or contact information as determined by the Secretary of the United States Department of Health and Human Services, and the gender, and date of birth of the ultimate user.
(2) The prescribers category of licensure, license number, national provider identifier (NPI) number, the federal controlled substance registration number, and the state medical license number of any prescriber using the federal controlled substance registration number of a government-exempt facility, if provided.
(3) Pharmacy prescription number, license number, NPI number, and federal controlled substance registration number.
(4) National Drug Code (NDC) number of the controlled substance dispensed.
(5) Quantity of the controlled substance dispensed.
(6) International Statistical Classification of Diseases, 9th revision (ICD-9) or 10th revision (ICD-10) Code, if available.
(7) Number of refills ordered.
(8) Whether the drug was dispensed as a refill of a prescription or as a first-time request.
(9) Date of origin of the prescription.
(10) Date of dispensing of the prescription.
(11) The serial number for the corresponding prescription form, if applicable.
(e) The Department of Justice may invite stakeholders to assist, advise, and make recommendations on the establishment of rules and regulations necessary to ensure the proper administration and enforcement of the CURES database. All prescriber and dispenser invitees shall be licensed by one of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, in active practice in California, and a regular user of CURES.
(f) The Department of Justice shall, prior to upgrading CURES, consult with prescribers licensed by one of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, one or more of the boards or committees identified in subdivision (d) of Section 208 of the Business and Professions Code, and any other stakeholder identified by the department, for the purpose of identifying desirable capabilities and upgrades to the CURES Prescription Drug Monitoring Program (PDMP).
(g) The Department of Justice may establish a process to educate authorized subscribers of the CURES PDMP on how to access and use the CURES PDMP.
(h) (1) The Department of Justice may enter into an agreement with any entity operating an interstate data sharing hub, or any agency operating a prescription drug monitoring program in another state, for purposes of interstate data sharing of prescription drug monitoring program information.
(2) Data obtained from CURES may be provided to authorized users of another states prescription drug monitoring program, as determined by the Department of Justice pursuant to subdivision (c), if the entity operating the interstate data sharing hub, and the prescription drug monitoring program of that state, as applicable, have entered into an agreement with the Department of Justice for interstate data sharing of prescription drug monitoring program information.
(3) Any agreement entered into by the Department of Justice for purposes of interstate data sharing of prescription drug monitoring program information shall ensure that all access to data obtained from CURES and the handling of data contained within CURES comply with California law, including regulations, and meet the same patient privacy, audit, and data security standards employed and required for direct access to CURES.
(4) For purposes of interstate data sharing of CURES information pursuant to this subdivision, an authorized user of another states prescription drug monitoring program shall not be required to register with CURES, if he or she is registered and in good standing with that states prescription drug monitoring program.
(5) The Department of Justice shall not enter into an agreement pursuant to this subdivision until the department has issued final regulations regarding the access and use of the information within CURES as required by paragraph (3) of subdivision (c).
SEC. 3. This act is an urgency statute necessary for the immediate preservation of the public peace, health, or safety within the meaning of Article IV of the California Constitution and shall go into immediate effect. The facts constituting the necessity are:In order to address the active crisis of opioid overprescribing and abuse through timely data, it is necessary that this bill go into immediate effect.
SEC. 3. This act is an urgency statute necessary for the immediate preservation of the public peace, health, or safety within the meaning of Article IV of the California Constitution and shall go into immediate effect. The facts constituting the necessity are:In order to address the active crisis of opioid overprescribing and abuse through timely data, it is necessary that this bill go into immediate effect.
SEC. 3. This act is an urgency statute necessary for the immediate preservation of the public peace, health, or safety within the meaning of Article IV of the California Constitution and shall go into immediate effect. The facts constituting the necessity are:
### SEC. 3.
In order to address the active crisis of opioid overprescribing and abuse through timely data, it is necessary that this bill go into immediate effect.