1.1 	A bill for an act
1.2 	relating to health; modifying reporting, access, and other requirements related to 
1.3 	the prescription monitoring program;amending Minnesota Statutes 2020, section 
1.4 	152.126, subdivisions 4, 5, 6, 9.
1.5 	BE IT ENACTED BY THE LEGISLATURE OF THE STATE OF MINNESOTA:

1.6 	Section 1. Minnesota Statutes 2020, section 152.126, subdivision 4, is amended to read:
1.7 		Subd. 4.Reporting requirements; notice. (a) Each dispenser must submit the following 
1.8 	data to the board or its designated vendor:
1.9 	(1) name of the prescriber;
1.10 	(2) national provider identifier of the prescriber;
1.11 	(3) name of the dispenser;
1.12 	(4) national provider identifier of the dispenser;
1.13 	(5) prescription number;
1.14 	(6) name of the patient for whom the prescription was written;
1.15 	(7) address of the patient for whom the prescription was written;
1.16 	(8) date of birth of the patient for whom the prescription was written;
1.17 	(9) date the prescription was written;
1.18 	(10) date the prescription was filled;
1.19 	(11) name and strength of the controlled substance;
1.20 	(12) quantity of controlled substance prescribed;
2.1 	(13) quantity of controlled substance dispensed; and
2.2 	(14) number of days supply.
2.3 	(b) The dispenser must submit the required information by a procedure and in a format 
2.4 	established by the board. The board may allow dispensers to omit data listed in this 
2.5 	subdivision or may require the submission of data not listed in this subdivision provided 
2.6 	the omission or submission is necessary for the purpose of complying with the electronic 
2.7 	reporting or data transmission standards of the American Society for Automation in 
2.8 	Pharmacy, the National Council on Prescription Drug Programs, or other relevant national 
2.9 	standard-setting body.
2.10 	(c) The dispenser must submit the required information within the time frame specified 
2.11 	by the board. If no reportable prescriptions are dispensed or sold on any day, a report 
2.12 	indicating that fact must be filed with the board.
2.13 	(d) The dispenser must submit accurate information to the database and must correct 
2.14 	errors identified during the submission process within seven calendar days.
2.15 	(e) The dispenser must correct errors brought to the dispenser's attention by the subject 
2.16 	of the data, within seven calendar days, unless the dispenser verifies that an error did not 
2.17 	occur and the data was correctly submitted. The dispenser must notify the subject of the 
2.18 	data that either the error was corrected or that no error occurred. For the purposes of this 
2.19 	paragraph, the term "subject of the data" means the individual reported as being the patient, 
2.20 	the practitioner reported as being the prescriber, the client when an animal is reported as 
2.21 	being the patient, or an authorized agent of these individuals.
2.22 	(c) (f) A dispenser is not required to submit this data for those controlled substance 
2.23 	prescriptions dispensed for:
2.24 	(1) individuals residing in a health care facility as defined in section 151.58, subdivision 
2.25 	2, paragraph (b), when a drug is distributed through the use of an automated drug distribution 
2.26 	system according to section 151.58; and
2.27 	(2) individuals receiving a drug sample that was packaged by a manufacturer and provided 
2.28 	to the dispenser for dispensing as a professional sample pursuant to Code of Federal 
2.29 	Regulations, title 21, part 203, subpart D.; and
2.30 	(3) individuals whose prescriptions are being mailed, shipped, or delivered from 
2.31 	Minnesota to another state, so long as the data is reported to the prescription drug monitoring 
2.32 	program of that state.
3.1 	(d) (g) A dispenser must provide notice to the patient for whom the prescription was 
3.2 	written a conspicuous notice, or to that patient's authorized representative, of the reporting 
3.3 	requirements of this section and notice that the information may be used for program 
3.4 	administration purposes.

3.5 	Sec. 2. Minnesota Statutes 2020, section 152.126, subdivision 5, is amended to read:
3.6 		Subd. 5.Use of data by board. (a) The board shall develop and maintain a database of 
3.7 	the data reported under subdivision 4. The board shall maintain data that could identify an 
3.8 	individual prescriber or dispenser in encrypted form. Except as otherwise allowed under 
3.9 	subdivision 6, the database may be used by permissible users identified under subdivision 
3.10 	6 for the identification of:
3.11 	(1) individuals receiving prescriptions for controlled substances from prescribers who 
3.12 	subsequently obtain controlled substances from dispensers in quantities or with a frequency 
3.13 	inconsistent with generally recognized standards of use for those controlled substances, 
3.14 	including standards accepted by national and international pain management associations; 
3.15 	and
3.16 	(2) individuals presenting forged or otherwise false or altered prescriptions for controlled 
3.17 	substances to dispensers.
3.18 	(b) No permissible user identified under subdivision 6 may access the database for the 
3.19 	sole purpose of identifying prescribers of controlled substances for unusual or excessive 
3.20 	prescribing patterns without a valid search warrant or court order.
3.21 	(c) No personnel of a state or federal occupational licensing board or agency may access 
3.22 	the database for the purpose of obtaining information to be used to initiate a disciplinary 
3.23 	action against a prescriber.
3.24 	(d) Data reported under subdivision 4 shall be made available to permissible users for 
3.25 	a 12-month period beginning the day the data was received prescription was reported as 
3.26 	dispensed and ending 12 months from the last day of the month in which the data was 
3.27 	received day the prescription was reported as dispensed, except that permissible users defined 
3.28 	in subdivision 6, paragraph (b), clauses (6) (7) and (7) (8), may use all data collected under 
3.29 	this section for the purposes of administering, operating, and maintaining the prescription 
3.30 	monitoring program and or conducting trend analyses and other studies necessary to evaluate 
3.31 	the effectiveness of the program.
3.32 	(e) Data reported during the period January 1, 2015, through December 31, 2018, may 
3.33 	be retained through December 31, 2019, in an identifiable manner. Effective January 1, 
4.1 	2020, data older than 24 months must be destroyed. Data reported as dispensed on or after 
4.2 	January 1, 2020 2021, must be destroyed no later than 12 months from the date the data 
4.3 	was received reported as dispensed, except that de-identified data may be maintained for 
4.4 	the purposes described in paragraph (d) that are carried out by the permissible users defined 
4.5 	in subdivision 6, paragraph (b), clauses (7) and (8).

4.6 	Sec. 3. Minnesota Statutes 2020, section 152.126, subdivision 6, is amended to read:
4.7 		Subd. 6.Access to reporting system data. (a) Except as indicated in this subdivision, 
4.8 	the data submitted to the board under subdivision 4 is private data on individuals as defined 
4.9 	in section 13.02, subdivision 12, and not subject to public disclosure.
4.10 	(b) Except as specified in subdivision 5, the following persons shall be considered 
4.11 	permissible users and may access the data submitted under subdivision 4 in the same or 
4.12 	similar manner, and for the same or similar purposes, as those persons who are authorized 
4.13 	to access similar private data on individuals under federal and state law:
4.14 	(1) a prescriber or an agent or employee of the prescriber to whom the prescriber has 
4.15 	delegated the task of accessing the data, to the extent the information relates specifically to 
4.16 	a current patient, to whom the prescriber is:
4.17 	(i) prescribing or considering prescribing any controlled substance;
4.18 	(ii) providing emergency medical treatment for which access to the data may be necessary;
4.19 	(iii) providing care, and the prescriber has reason to believe, based on clinically valid 
4.20 	indications, that the patient is potentially abusing a controlled substance; or
4.21 	(iv) providing other medical treatment for which access to the data may be necessary 
4.22 	for a clinically valid purpose and the patient has consented to access to the submitted data, 
4.23 	and with the provision that the prescriber remains responsible for the use or misuse of data 
4.24 	accessed by a delegated agent or employee;
4.25 	(2) a dispenser or an agent or employee of the dispenser to whom the dispenser has 
4.26 	delegated the task of accessing the data, to the extent the information relates specifically to 
4.27 	a current patient to whom that dispenser is dispensing or considering dispensing any 
4.28 	controlled substance and with the provision that the dispenser remains responsible for the 
4.29 	use or misuse of data accessed by a delegated agent or employee;
4.30 	(3) a licensed dispensing practitioner or licensed pharmacist, to the extent necessary to 
4.31 	determine whether corrections made to the data reported under subdivision 4 are accurate;
5.1 	(3) (4) a licensed pharmacist who is providing pharmaceutical care for which access to 
5.2 	the data may be necessary to the extent that the information relates specifically to a current 
5.3 	patient for whom the pharmacist is providing pharmaceutical care: (i) if the patient has 
5.4 	consented to access to the submitted data; or (ii) if the pharmacist is consulted by a prescriber 
5.5 	who is requesting data in accordance with clause (1);
5.6 	(4) (5) an individual who is the recipient of a controlled substance prescription for which 
5.7 	data was submitted under subdivision 4, or a guardian of the individual, parent or guardian 
5.8 	of a minor, or health care agent of the individual acting under a health care directive under 
5.9 	chapter 145C. For purposes of this clause, access by individuals includes persons in the 
5.10 	definition of an individual under section 13.02;
5.11 	(5) (6) personnel or designees of a health-related licensing board listed in section 214.01, 
5.12 	subdivision 2, or of the Emergency Medical Services Regulatory Board, assigned to conduct 
5.13 	a bona fide investigation of a complaint received by that board that alleges that a specific 
5.14 	licensee is impaired by use of a drug for which data is collected under subdivision 4, has 
5.15 	engaged in activity that would constitute a crime as defined in section 152.025, or has 
5.16 	engaged in the behavior specified in subdivision 5, paragraph (a);
5.17 	(6) (7) personnel of the board engaged in the collection, review, and analysis of controlled 
5.18 	substance prescription information as part of the assigned duties and responsibilities under 
5.19 	this section;
5.20 	(7) (8) authorized personnel of a vendor under contract with the state of Minnesota or 
5.21 	the board who are engaged in the design, evaluation, implementation, operation, and or
5.22 	maintenance of the prescription monitoring program as part of the assigned duties and 
5.23 	responsibilities of their employment, provided that access to data is limited to the minimum 
5.24 	amount necessary to carry out such duties and responsibilities, and subject to the requirement 
5.25 	of de-identification and time limit on retention of data specified in subdivision 5, paragraphs 
5.26 	(d) and (e);
5.27 	(8) (9) federal, state, and local law enforcement authorities acting pursuant to a valid 
5.28 	search warrant;
5.29 	(9) (10) personnel of the Minnesota health care programs assigned to use the data 
5.30 	collected under this section to identify and manage recipients whose usage of controlled 
5.31 	substances may warrant restriction to a single primary care provider, a single outpatient 
5.32 	pharmacy, and a single hospital;
5.33 	(10) (11) personnel of the Department of Human Services assigned to access the data 
5.34 	pursuant to paragraph (k);
6.1 	(11) (12) personnel of the health professionals services program established under section 
6.2 	214.31, to the extent that the information relates specifically to an individual who is currently 
6.3 	enrolled in and being monitored by the program, and the individual consents to access to 
6.4 	that information. The health professionals services program personnel shall not provide this 
6.5 	data to a health-related licensing board or the Emergency Medical Services Regulatory 
6.6 	Board, except as permitted under section 214.33, subdivision 3; and
6.7 	(12) (13) personnel or designees of a health-related licensing board other than the Board 
6.8 	of Pharmacy listed in section 214.01, subdivision 2, assigned to conduct a bona fide 
6.9 	investigation of a complaint received by that board that alleges that a specific licensee is 
6.10 	inappropriately prescribing controlled substances as defined in this section. For the purposes 
6.11 	of this clause, the health-related licensing board may also obtain utilization data; and
6.12 	(14) personnel of the board specifically assigned to conduct a bona fide investigation 
6.13 	of a specific licensee or registrant. For the purposes of this clause, the board may also obtain 
6.14 	utilization data.
6.15 	(c) By July 1, 2017, every prescriber licensed by a health-related licensing board listed 
6.16 	in section 214.01, subdivision 2, practicing within this state who is authorized to prescribe 
6.17 	controlled substances for humans and who holds a current registration issued by the federal 
6.18 	Drug Enforcement Administration, and every pharmacist licensed by the board and practicing 
6.19 	within the state, shall register and maintain a user account with the prescription monitoring 
6.20 	program. Data submitted by a prescriber, pharmacist, or their delegate during the registration 
6.21 	application process, other than their name, license number, and license type, is classified 
6.22 	as private pursuant to section 13.02, subdivision 12.
6.23 	(d) Notwithstanding paragraph (b), beginning January 1, 2021, a prescriber or an agent 
6.24 	or employee of the prescriber to whom the prescriber has delegated the task of accessing 
6.25 	the data, must access the data submitted under subdivision 4 to the extent the information 
6.26 	relates specifically to the patient:
6.27 	(1) before the prescriber issues an initial prescription order for a Schedules II through 
6.28 	IV opiate controlled substance to the patient; and
6.29 	(2) at least once every three months for patients receiving an opiate for treatment of 
6.30 	chronic pain or participating in medically assisted treatment for an opioid addiction.
6.31 	(e) Paragraph (d) does not apply if:
6.32 	(1) the patient is receiving palliative care, or hospice or other end-of-life care;
6.33 	(2) the patient is being treated for pain due to cancer or the treatment of cancer;
7.1 	(3) the prescription order is for a number of doses that is intended to last the patient five 
7.2 	days or less and is not subject to a refill;
7.3 	(4) the prescriber and patient have a current or ongoing provider/patient relationship of 
7.4 	a duration longer than one year;
7.5 	(5) the prescription order is issued within 14 days following surgery or three days 
7.6 	following oral surgery or follows the prescribing protocols established under the opioid 
7.7 	prescribing improvement program under section 256B.0638;
7.8 	(6) the controlled substance is prescribed or administered to a patient who is admitted 
7.9 	to an inpatient hospital;
7.10 	(7) the controlled substance is lawfully administered by injection, ingestion, or any other 
7.11 	means to the patient by the prescriber, a pharmacist, or by the patient at the direction of a 
7.12 	prescriber and in the presence of the prescriber or pharmacist;
7.13 	(8) due to a medical emergency, it is not possible for the prescriber to review the data 
7.14 	before the prescriber issues the prescription order for the patient; or
7.15 	(9) the prescriber is unable to access the data due to operational or other technological 
7.16 	failure of the program so long as the prescriber reports the failure to the board.
7.17 	(f) Only permissible users identified in paragraph (b), clauses (1), (2), (3), (6) (4), (7), 
7.18 	(9), and (10), and (11), may directly access the data electronically. Permissible users 
7.19 	identified in paragraph (b), clause (8), may directly access the data electronically only as 
7.20 	permitted by the board. No other permissible users may directly access the data electronically. 
7.21 	If the data is directly accessed electronically, the permissible user shall implement and 
7.22 	maintain a comprehensive information security program that contains administrative, 
7.23 	technical, and physical safeguards that are appropriate to the user's size and complexity, 
7.24 	and the sensitivity of the personal information obtained. The permissible user shall identify 
7.25 	reasonably foreseeable internal and external risks to the security, confidentiality, and integrity 
7.26 	of personal information that could result in the unauthorized disclosure, misuse, or other 
7.27 	compromise of the information and assess the sufficiency of any safeguards in place to 
7.28 	control the risks.
7.29 	(g) The board shall not release data submitted under subdivision 4 unless it is provided 
7.30 	with evidence, satisfactory to the board, that the person requesting the information is entitled 
7.31 	to receive the data.
8.1 	(h) The board shall maintain a log of all persons who access the data for a period of at 
8.2 	least three years and shall ensure that any permissible user complies with paragraph (c) 
8.3 	prior to attaining direct access to the data.
8.4 	(i) Section 13.05, subdivision 6, shall apply to any contract the board enters into pursuant 
8.5 	to subdivision 2. A vendor shall not use data collected under this section for any purpose 
8.6 	not specified in this section.
8.7 	(j) The board may participate in an interstate prescription monitoring program data 
8.8 	exchange system provided that permissible users in other states have access to the data only 
8.9 	as allowed under this section, and that section 13.05, subdivision 6, applies to any contract 
8.10 	or memorandum of understanding that the board enters into under this paragraph.
8.11 	(k) With available appropriations, the commissioner of human services shall establish 
8.12 	and implement a system through which the Department of Human Services shall routinely 
8.13 	access the data for the purpose of determining whether any client enrolled in an opioid 
8.14 	treatment program licensed according to chapter 245A has been prescribed or dispensed a 
8.15 	controlled substance in addition to that administered or dispensed by the opioid treatment 
8.16 	program. When the commissioner determines there have been multiple prescribers or multiple 
8.17 	prescriptions of controlled substances, the commissioner shall:
8.18 	(1) inform the medical director of the opioid treatment program only that the 
8.19 	commissioner determined the existence of multiple prescribers or multiple prescriptions of 
8.20 	controlled substances; and
8.21 	(2) direct the medical director of the opioid treatment program to access the data directly, 
8.22 	review the effect of the multiple prescribers or multiple prescriptions, and document the 
8.23 	review.
8.24 	If determined necessary, the commissioner of human services shall seek a federal waiver 
8.25 	of, or exception to, any applicable provision of Code of Federal Regulations, title 42, section 
8.26 	2.34, paragraph (c), prior to implementing this paragraph.
8.27 	(l) The board shall review the data submitted under subdivision 4 on at least a quarterly 
8.28 	basis and shall establish criteria, in consultation with the advisory task force, for referring 
8.29 	information about a patient to prescribers and dispensers who prescribed or dispensed the 
8.30 	prescriptions in question if the criteria are met.
8.31 	(m) The board shall conduct random audits, on at least a quarterly basis, of electronic 
8.32 	access by permissible users, as identified in paragraph (b), clauses (1), (2), (3), (6) (4), (7), 
8.33 	(9), and (10), and (11), to the data in subdivision 4, to ensure compliance with permissible 
9.1 	use as defined in this section. A permissible user whose account has been selected for a 
9.2 	random audit shall respond to an inquiry by the board, no later than 30 days after receipt of 
9.3 	notice that an audit is being conducted. Failure to respond may result in deactivation of 
9.4 	access to the electronic system and referral to the appropriate health licensing board, or the 
9.5 	commissioner of human services, for further action. The board shall report the results of 
9.6 	random audits to the chairs and ranking minority members of the legislative committees 
9.7 	with jurisdiction over health and human services policy and finance and government data 
9.8 	practices.
9.9 	(n) A permissible user who has delegated the task of accessing the data in subdivision 
9.10 	4 to an agent or employee shall audit the use of the electronic system by delegated agents 
9.11 	or employees on at least a quarterly basis to ensure compliance with permissible use as 
9.12 	defined in this section. When a delegated agent or employee has been identified as 
9.13 	inappropriately accessing data, the permissible user must immediately remove access for 
9.14 	that individual and notify the board within seven days. The board shall notify all permissible 
9.15 	users associated with the delegated agent or employee of the alleged violation.
9.16 	(o) A permissible user who delegates access to the data submitted under subdivision 4 
9.17 	to an agent or employee shall terminate that individual's access to the data within three 
9.18 	business days of the agent or employee leaving employment with the permissible user. The 
9.19 	board may conduct random audits to determine compliance with this requirement.

9.20 	Sec. 4. Minnesota Statutes 2020, section 152.126, subdivision 9, is amended to read:
9.21 		Subd. 9.Immunity from liability; no requirement to obtain information. (a) A 
9.22 	pharmacist, prescriber, or other dispenser making a report to the program in good faith under 
9.23 	this section is immune from any civil, criminal, or administrative liability, which might 
9.24 	otherwise be incurred or imposed as a result of the report, or on the basis that the pharmacist 
9.25 	or prescriber did or did not seek or obtain or use information from the program.
9.26 	(b) Except as required by subdivision 6, paragraph (d), nothing in this section shall 
9.27 	require a pharmacist, prescriber, or other dispenser to obtain information about a patient 
9.28 	from the program, and the pharmacist, prescriber, or other dispenser, if acting in good faith, 
9.29 	is immune from any civil, criminal, or administrative liability that might otherwise be 
9.30 	incurred or imposed for requesting, receiving, or using information from the program.