Or. Admin. Code § 855-041-3240 - Telework: Security

(1) Telework Sites must be located in a designated area where:

(a) All equipment is stored;

(b) All work is performed; and

(2) Confidentiality must be maintained such that patient information cannot be viewed or overheard by anyone other than the Pharmacist, Intern, Certified Oregon Pharmacy Technician, or Pharmacy Technician.

(3) The Pharmacist-in-charge of the Drug Outlet Pharmacy and each Oregon licensed Pharmacist supervising a Telework Site is responsible for ensuring the Telework Site has a designated work area that is secure and has been approved and documented by an Oregon licensed Pharmacist prior to utilization.

(4) All computer equipment used for telework must:

(a) Establish and maintain a secure connection to the pharmacy and patient information;

(b) Utilize equipment that prevents unauthorized access to the pharmacy and patient information; and

(c) Be configured so that the pharmacy and patient information is not accessible when:

(A) There is no Oregon licensed Pharmacist actively supervising the Intern, Certified Oregon Pharmacy Technician, or Pharmacy Technician who is assisting in the practice of pharmacy at a Telework Site; or

(B) There is no Intern, Certified Oregon Pharmacy Technician, or Pharmacy Technician present at the Telework Site; or

(C) Any component of the audiovisual communication system with the Telework Site is not functioning;

(d) Be configured so information from any patient or pharmacy records are not duplicated, downloaded, or removed from the electronic database when an electronic database is accessed remotely; and

(e) Comply with all security and confidentiality requirements.

(5) A record must be maintained with the date, time and identification of the licensee accessing patient or pharmacy records at a Telework Site.

(6) Interns, Certified Oregon Pharmacy Technicians, and Pharmacy Technicians may only work at a Telework Site when authorized in real-time by an Oregon licensed Pharmacist who is supervising the licensee at the Telework Site.

(7) All records must be stored in a secure manner that prevents access by unauthorized persons.

Notes

Or. Admin. Code § 855-041-3240

BP 37-2021, adopt filed 12/16/2021, effective 12/16/2021; BP 17-2022, amend filed 04/20/2022, effective 4/20/2022; BP 24-2022, temporary amend filed 04/22/2022, effective 4/22/2022 through 10/18/2022; BP 33-2022, amend filed 06/15/2022, effective 6/16/2022

Statutory/Other Authority: ORS 689.135, ORS 689.151, ORS 689.205 & 2022 HB 4034

Statutes/Other Implemented: ORS 689.155 & 2022 HB 4034