SENATE . . . . . . . . . . . . . . No. 2240
In the Year Two Thousand Twelve
An Act to ensure the privacy of patient prescription records.
Be it enacted by the Senate and House of Representatives in General Court assembled, and by the authority of the same, as follows:
SECTION 1. Chapter 112 of the general laws, as appearing in the 2010 Official Edition, is hereby amended by inserting at the end of section 24, the following paragraph: -
Pharmacists licensed in the Commonwealth, and pharmacies operating in the Commonwealth, and all other persons who control, own, license, use or share pharmacy records shall protect the privacy and confidentiality of provider-identifiable prescription information as if such information constituted "protected health information" within the meaning of the federal Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule (45 CFR Parts 160 & 164). Each violation of this provision shall carry a fine of $1,000 per affected record. Suit to enforce this provision may be brought by the Attorney General or by any affected patient or provider. This provision is a state expansion of medical privacy rights, as permitted by Section 264(c)(2) of HIPAA (Public Law 104-191).