20:51:32:01.  Definitions. Terms defined in SDCL 34-20E-1 have the same meaning in this article.

          Source: 37 SDR 214, effective May 30, 2011; 45 SDR 86, effective December 24, 2018.

          General Authority: SDCL 34-20E-20.

          Law Implemented: SDCL 34-20E-1, 34-20E-20.

          20:51:32:02.  Data submission. Each dispenser may submit the data to the central repository using any electronic device compatible with the board's receiving device or the receiving device of the board's contracted vendor every 24 hours or by midnight of the next business day after dispensing. The data submitted to the central repository may be on electronic media approved by the board accompanied by a transmittal form identifying the dispenser submitting the electronic media, the number of prescription records included on the media, and the individual submitting the media.

          If the dispenser does not have an automated recordkeeping system capable of producing an electronic report of the required data in the format established by the American Society for Automation in Pharmacy (ASAP), the dispenser may request a waiver from the electronic reporting requirement from the board.

          If the board grants a waiver from the electronic reporting requirement, then the dispenser shall comply with an alternative method of reporting the data as determined by the board, such as submitting the required data on a form approved by the board.

          Source: 37 SDR 214, effective May 30, 2011; 45 SDR 86, effective December 24, 2018.

          General Authority: SDCL 34-20E-20.

          Law Implemented: SDCL 34-20E-2, 34-20E-3, 34-20E-20(1).

          20:51:32:03.  Data elements. The information submitted for each prescription shall include the following items:

          (1)  Dispenser name and identification number;

          (2)  Date prescription filled;

          (3)  Prescription number;

          (4)  Prescription is new or is a refill;

          (5)  Identification code for drug dispensed;

          (6)  Quantity dispensed;

          (7)  Day's supply dispensed;

          (8)  Number of refills ordered;

          (9)  Patient name;

          (10)  Patient address;

          (11)  Patient date of birth;

          (12)  Patient gender;

          (13)  Prescriber identification number;

          (14)  Date prescription issued by the prescriber;

          (15)  Pharmacy phone number;

          (16)  Code identifying type of payment;

          (17)  Prescriber last name;

          (18)  Prescriber first name; and

          (19)  Prescriber phone number.

          Source: 37 SDR 214, effective May 30, 2011; 45 SDR 86, effective December 24, 2018.

          General Authority: SDCL 34-20E-20(2).

          Law Implemented: SDCL 34-20E-2, 34-20E-3, 34-20E-20(2).

          20:51:32:04.  Access to data. Healthcare practitioners authorized to prescribe or dispense controlled substances may request on-line access to the data for the purpose of providing patient health care. A healthcare practitioner authorized to prescribe may designate one or more persons who are licensed or registered with the respective regulatory board to serve as a delegate. Prior to being granted access to program information, a practitioner or delegate shall submit a request for registration and program access. The board will verify the licensure status of the practitioner or delegate with the appropriate licensing authority. In the case of integration, as defined in SDCL  subdivision 34-20E-1(9), the board may allow an entity's credentialing process to verify licensure status. The program safeguards to protect the privacy of the data include a secure login and password for the practitioners authorized to access the data.

          The board shall conduct regular reviews of data access by practitioners to identify possible violations of law or breach of professional standards that may have occurred. Whenever such information is identified, the board will notify the appropriate professional licensing, certification or regulatory agency or entity, and provide information necessary for an investigation.

          Source: 37 SDR 214, effective May 30, 2011; 45 SDR 86, effective December 24, 2018.

          General Authority: SDCL 34-20E-20(4).

          Law Implemented: SDCL 34-20E-7(1), 34-20E-12, 34-20E-20(4).

          20:51:32:05.  Disclosure of data. Each request for information from the central repository must be submitted on a form or electronic platform provided by the board and may be mailed, faxed, or submitted electronically to the board office. The information may be mailed, faxed or submitted electronically to the individual requesting the profile, and marked "confidential".

          A prescriber or dispenser may request patient information electronically or in writing if the request:

          (1)  Is signed or submitted on an electronic platform by the prescriber, delegate, or dispenser requesting the information and includes the business name and address;

          (2)  Includes the patient's name, date of birth, purpose of the request, and the date range for the profile; and

          (3)  Includes a statement indicating a prescriber or a dispenser and patient relationship exists.

          Source: 37 SDR 214, effective May 30, 2011; 45 SDR 86, effective December 24, 2018.

          General Authority: SDCL 34-20E-20(4).

          Law Implemented: SDCL 34-20E-5, 34-20E-7(1).

          20:51:32:07.  Disclosure of data -- Regulatory board. A state board or regulatory agency with appropriate authority may request information electronically or in writing.

          The request shall include a statement of its purpose and authority, the name and license number of the individual, the date range requested, and the specific reasons for the request.

          The request shall be signed or submitted electronically by the authorized agent and include the mailing address for the board or agency.

          Source: 37 SDR 214, effective May 30, 2011; 45 SDR 86, effective December 24, 2018.

          General Authority: SDCL 34-20E-20.

          Law Implemented: SDCL 34-20E-7(3), 34-20E-20(4).

          20:51:32:08.  Disclosure of data -- Law enforcement. A local, state, and federal law enforcement or prosecutorial official engaged in the enforcement of laws related to controlled substances may request information for the purpose of an investigation or prosecution of the drug-related activity or probation or parole compliance of an individual. The board shall verify the status of the law enforcement or prosecutorial official with the appropriate authority.

          The electronic or written request shall include the individual's name and date of birth, the date range requested, and the specific reasons for the request, that must be approved by the board prior to the release of the information.

          The request shall be signed by the authorized official and include that person's mailing address.

          Source: 37 SDR 214, effective May 30, 2011; 45 SDR 86, effective December 24, 2018.

          General Authority: SDCL 34-20E-20(4).

          Law Implemented: SDCL 34-20E-7(4), 34-20E-20(4).

          20:51:32:10.  Disclosure of data -- Other entities. Other designated entities may request profiles or information as identified in SDCL 34-20E-7.

          The request shall include the date range requested, the specific reasons for the request, and the individual's name and birth date if applicable.

          The request shall be signed by the authorized individual and include that person's mailing address.

          Source: 37 SDR 214, effective May 30, 2011; 45 SDR 86, effective December 24, 2018.

          General Authority: SDCL 34-20E-20(4).

          Law Implemented: SDCL 34-20E-7(5)(6)(8) and (9).