34-20G-88. Permitted disclosure of data maintained by the department.

Confidential data or data that is not a public record kept or maintained by the department may only be disclosed as necessary to:

(1)    Verify a registration certificate or registry identification card pursuant to this chapter;

(2)    Notify law enforcement of an apparent criminal violation of this chapter or respond to law enforcement or prosecutorial officials engaged in the investigation or enforcement of the criminal provisions of this chapter;

(3)    Notify state and local law enforcement about falsified or fraudulent information submitted for the purpose of obtaining or renewing a registry identification card;

(4)    Notify the applicable licensing board if there is reason to believe that a practitioner provided a written certification and the department has reason to believe the practitioner otherwise violated the standard of care for evaluating a medical condition or respond to the board, if the board is seeking data relevant to an investigation of a person who holds a license issued by the board;

(5)    Any judicial authority under grand jury subpoena or court order or equivalent judicial process for investigation of criminal, civil, or administrative violations related to the use of medical cannabis;

(6)    An authorized employee of the department performing official duties associated with the medical cannabis program; or

(7)    A practitioner to determine if a person in the practitioner's care engages in the medical use of cannabis so the practitioner may assess possible drug interactions or assess other medically necessary concerns.

Source: Initiated Measure No. 26, approved Nov. 3, 2020, eff. Jul. 1, 2021; SL 2022, ch 120, § 2; SL 2022, ch 134, § 2; SL 2022, ch 136, § 3.