Iowa Admin. Code r. 481-552.3 - [Effective 7/16/2025] Security

(1) Physical security. Each pharmacy will maintain adequate security to ensure the confidentiality of patient information and to prevent theft of, diversion of, or unauthorized access to prescription drugs or records, including when prescription drugs or records are stored outside the pharmacy department pursuant to federal law or regulation or these rules. Pharmacy staff personal items allowed in the pharmacy will be stored away from drug storage areas and monitored. Security will include a basic alarm system and video surveillance system unless the pharmacy is located within a facility that provides equivalent monitoring.

(2) Processing systems security. Each pharmacy will maintain adequate security of any electronic device or system that is used to maintain or process patient, practitioner, drug, or prescription records to prevent and detect unauthorized access, modification, or manipulation of such records. Authentication credentials will be securely maintained by the individual to whom the credentials are issued and cannot be shared with or disclosed to any other individual.

(3) Access when pharmacy department is closed. When the pharmacist is absent from the facility, the pharmacy department will be closed and secured to prevent unauthorized access. Policies and procedures will identify individuals, by title or designation, who are authorized to access the pharmacy department and the specific activities that are authorized.

Notes

Iowa Admin. Code r. 481-552.3

Adopted by IAB June 11, 2025/Volume XLVII, Number 25, effective 7/16/2025