42 U.S.C. § 280g–3

(a) Program (1) In general Each fiscal year, the Secretary, acting through the Director of the Centers for Disease Control and Prevention, in coordination with the heads of other departments and agencies as appropriate, shall support States or localities for the purpose of improving the efficiency and use of PDMPs, including— (A) establishment and implementation of a PDMP; (B) maintenance of a PDMP; (C) improvements to a PDMP by— (i) enhancing functional components to work toward— (I) universal use of PDMPs among providers and their delegates, to the extent that State laws allow; (II) more timely inclusion of data within a PDMP; (III) active management of the PDMP, in part by sending proactive or unsolicited reports to providers to inform prescribing; and (IV) ensuring the highest level of ease in use of and access to PDMPs by providers and their delegates, to the extent that State laws allow; (ii) in consultation with the Office of the National Coordinator for Health Information Technology, improving the intrastate interoperability of PDMPs by— (I) making PDMPs more actionable by integrating PDMPs within electronic health records and health information technology infrastructure; and (II) linking PDMP data to other data systems within the State, including— (aa) the data of pharmacy benefit managers, medical examiners and coroners, and the State’s Medicaid program; (bb) worker’s compensation data; and (cc) prescribing data of providers of the Department of Veterans Affairs and the Indian Health Service within the State; (iii) in consultation with the Office of the National Coordinator for Health Information Technology, improving the interstate interoperability of PDMPs through— (I) sharing of dispensing data in near-real time across State lines; and (II) integration of automated queries for multistate PDMP data and analytics into clinical workflow to improve the use of such data and analytics by practitioners and dispensers; or (iv) improving the ability to include treatment availability resources and referral capabilities within the PDMP. (2) Legislation As a condition on the receipt of support under this section, the Secretary shall require a State or locality to demonstrate that it has enacted legislation or regulations— (A) to provide for the implementation of the PDMP; and (B) to permit the imposition of appropriate penalties for the unauthorized use and disclosure of information maintained by the PDMP. (b) PDMP strategies The Secretary shall encourage a State or locality, in establishing, improving, or maintaining a PDMP, to implement strategies that improve— (1) the reporting of dispensing in the State or locality of a controlled substance to an ultimate user so the reporting occurs not later than 24 hours after the dispensing event; (2) the consultation of the PDMP by each prescribing practitioner, or their designee, in the State or locality before initiating treatment with a controlled substance, or any substance as required by the State to be reported to the PDMP, and over the course of ongoing treatment for each prescribing event; (3) the consultation of the PDMP before dispensing a controlled substance, or any substance as required by the State to be reported to the PDMP; (4) the proactive notification to a practitioner when patterns indicative of controlled substance misuse by a patient, including opioid misuse, are detected; (5) the availability of data in the PDMP to other States, as allowable under State law; and (6) the availability of nonidentifiable information to the Centers for Disease Control and Prevention for surveillance, epidemiology, statistical research, or educational purposes. (c) Drug misuse and abuse In consultation with practitioners, dispensers, and other relevant and interested stakeholders, a State receiving support under this section— (1) shall establish a program to notify practitioners and dispensers of information that will help to identify and prevent the unlawful diversion or misuse of controlled substances; (2) may, to the extent permitted under State law, notify the appropriate authorities responsible for carrying out drug diversion investigations if the State determines that information in the PDMP maintained by the State indicates an unlawful diversion or abuse of a controlled substance; (3) may conduct analyses of controlled substance program data for purposes of providing appropriate State agencies with aggregate reports based on such analyses in as close to real-time as practicable, regarding prescription patterns flagged as potentially presenting a risk of misuse, abuse, addiction, overdose, and other aggregate information, as appropriate and in compliance with applicable Federal and State laws and provided that such reports shall not include protected health information; and (4) may access information about prescriptions, such as claims data, to ensure that such prescribing and dispensing history is updated in as close to real-time as practicable, in compliance with applicable Federal and State laws and provided that such information shall not include protected health information. (d) Evaluation and reporting As a condition on receipt of support under this section, the State shall report on interoperability with PDMPs of other States and Federal agencies, where appropriate, intrastate interoperability with health information technology systems such as electronic health records, health information exchanges, and e-prescribing, where appropriate, and whether or not the State provides automatic, up-to-date, or daily information about a patient when a practitioner (or the designee of a practitioner, where permitted) requests information about such patient. (e) Evaluation and reporting A State receiving support under this section shall provide the Secretary with aggregate nonidentifiable information, as permitted by State law, to enable the Secretary— (1) to evaluate the success of the State’s program in achieving the purpose described in subsection (a); or (2) to prepare and submit to the Congress the report required by subsection (i)(2). (f) Education and access to the monitoring system A State receiving support under this section shall take steps to— (1) facilitate prescribers and dispensers, and their delegates, as permitted by State law, to use the PDMP, to the extent practicable; and (2) educate prescribers and dispensers, and their delegates on the benefits of the use of PDMPs. (g) Electronic format The Secretary may issue guidelines specifying a uniform electronic format for the reporting, sharing, and disclosure of information pursuant to PDMPs. To the extent possible, such guidelines shall be consistent with standards recognized by the Office of the National Coordinator for Health Information Technology. (h) Rules of construction (1) Functions otherwise authorized by law Nothing in this section shall be construed to restrict the ability of any authority, including any local, State, or Federal law enforcement, narcotics control, licensure, disciplinary, or program authority, to perform functions otherwise authorized by law. (2) Additional privacy protections Nothing in this section shall be construed as preempting any State from imposing any additional privacy protections. (3) Federal privacy requirements Nothing in this section shall be construed to supersede any Federal privacy or confidentiality requirement, including the regulations promulgated under section 264(c) of the Health Insurance Portability and Accountability Act of 1996 ( Public Law 104–191 ; 110 Stat. 2033 ) and section 290dd–2 of this title . (4) No Federal private cause of action Nothing in this section shall be construed to create a Federal private cause of action. (5) Promoting State choice Nothing in this section shall be construed to authorize the Secretary to require States to use a specific vendor or a specific interoperability connection other than to align with nationally recognized, consensus-based open standards, such as in accordance with sections 300jj–11 and 300jj–14 of this title. (i) Progress report Not later than 3 years after October 24, 2018 , the Secretary shall— (1) complete a study that— (A) determines the progress of grantees in establishing and implementing PDMPs consistent with this section; (B) provides an analysis of the extent to which the operation of PDMPs has— (i) reduced inappropriate use, abuse, diversion of, and overdose with, controlled substances; (ii) established or strengthened initiatives to ensure linkages to substance use disorder treatment services; or (iii) affected patient access to appropriate care in States operating PDMPs; (C) determine 1 1 So in original. Probably should be “determines”. the progress of grantees in achieving interstate interoperability and intrastate interoperability of PDMPs, including an assessment of technical, legal, and financial barriers to such progress and recommendations for addressing these barriers; (D) determines the progress of grantees in implementing near real-time electronic PDMPs; (E) provides an analysis of the privacy protections in place for the information reported to the PDMP in each State or locality receiving support under this section and any recommendations of the Secretary for additional Federal or State requirements for protection of this information; (F) determines the progress of States or localities in implementing technological alternatives to centralized data storage, such as peer-to-peer file sharing or data pointer systems, in PDMPs and the potential for such alternatives to enhance the privacy and security of individually identifiable data; and (G) evaluates the penalties that States or localities have enacted for the unauthorized use and disclosure of information maintained in PDMPs, and the criteria used by the Secretary to determine whether such penalties qualify as appropriate for purposes of subsection (a)(2); and (2) submit a report to the Congress on the results of the study. (j) Advisory Council (1) Establishment A State or locality may establish an advisory council to assist in the establishment, improvement, or maintenance of a PDMP consistent with this section. (2) Limitation A State or locality may not use Federal funds for the operations of an advisory council to assist in the establishment, improvement, or maintenance of a PDMP. (3) Sense of Congress It is the sense of the Congress that, in establishing an advisory council to assist in the establishment, improvement, or maintenance of a PDMP, a State or locality should consult with appropriate professional boards and other interested parties. (k) Definitions For purposes of this section: (1) The term “controlled substance” means a controlled substance (as defined in section 802 of title 21 ) in schedule II, III, or IV of section 812 of such title. (2) The term “dispense” means to deliver a controlled substance to an ultimate user by, or pursuant to the lawful order of, a practitioner, irrespective of whether the dispenser uses the Internet or other means to effect such delivery. (3) The term “dispenser” means a physician, pharmacist, or other person that dispenses a controlled substance to an ultimate user. (4) The term “interstate interoperability” with respect to a PDMP means the ability of the PDMP to electronically share reported information with another State if the information concerns either the dispensing of a controlled substance to an ultimate user who resides in such other State, or the dispensing of a controlled substance prescribed by a practitioner whose principal place of business is located in such other State. (5) The term “intrastate interoperability” with respect to a PDMP means the integration of PDMP data within electronic health records and health information technology infrastructure or linking of a PDMP to other data systems within the State, including the State’s Medicaid program, workers’ compensation programs, and medical examiners or coroners. (6) The term “nonidentifiable information” means information that does not identify a practitioner, dispenser, or an ultimate user and with respect to which there is no reasonable basis to believe that the information can be used to identify a practitioner, dispenser, or an ultimate user. (7) The term “PDMP” means a prescription drug monitoring program that is State-controlled. (8) The term “practitioner” means a physician, dentist, veterinarian, scientific investigator, pharmacy, hospital, or other person licensed, registered, or otherwise permitted, by the United States or the jurisdiction in which the individual practices or does research, to distribute, dispense, conduct research with respect to, administer, or use in teaching or chemical analysis, a controlled substance in the course of professional practice or research. (9) The term “State” means each of the 50 States, the District of Columbia, and any commonwealth or territory of the United States. (10) The term “ultimate user” means a person who has obtained from a dispenser, and who possesses, a controlled substance for the person’s own use, for the use of a member of the person’s household, or for the use of an animal owned by the person or by a member of the person’s household. (11) The term “clinical workflow” means the integration of automated queries for prescription drug monitoring programs data and analytics into health information technologies such as electronic health record systems, health information exchanges, and/or pharmacy dispensing software systems, thus streamlining provider access through automated queries.