Iowa Admin. Code r. 481-556.5 - [Effective 7/16/2025] Security
(1)
Board. The board will collect, store, and disseminate program
information using technology that utilizes encryption as defined in Iowa Code
section 715C.1.
(2)
Integrated systems. A
practitioner, pharmacy, or health care system utilizing an integrated system to
connect its electronic health record or data processing system with the PMP
will:
a. Ensure the maintenance of user access
logs for four years from the date of access, including the identification of
the practitioner for which a delegate accessed program information.
b. Ensure the maintenance of adequate
security to prevent unauthorized access, disclosure, or theft of program
information.
c. Notify the board
within 72 hours of any breach in the electronic health record or data
processing system that may have included program
information.
Notes
State regulations are updated quarterly; we currently have two versions available. Below is a comparison between our most recent version and the prior quarterly release. More comparison features will be added as we have more versions to compare.
No prior version found.