S.F. No. 4257 Summary

• Requires dispensers to submit controlled substance prescription data to the board within specified timeframes and correct errors within seven calendar days, with new exemption for prescriptions mailed/shipped to other states where data is reported to that state's monitoring program.

• Modifies data retention requirements to destroy identifiable data no later than 12 months from when prescriptions are reported as dispensed (effective January 1, 2021), except de-identified data may be retained for program administration and trend analysis.

• Establishes mandatory prescriber access requirements to the prescription monitoring program database before issuing initial opioid prescriptions and at least quarterly for patients receiving chronic pain treatment or opioid addiction medication, with specific exemptions for end-of-life care, cancer treatment, and post-surgical situations.

• Expands permissible users to include new categories and clarifies electronic access restrictions, requiring comprehensive information security programs and quarterly random audits of user access with 30-day response requirements.

• Maintains liability protections for good-faith reporting and exempts prescribers from liability for not accessing the database, except when required by mandatory access provisions.