(4) Each registered agency shall be accountable for all confidential and exempt information received by authorized users. The agency shall have an auditable, continuous chain of custody record of the receipt and transfer of confidential and exempt information. When confidential and exempt information is transferred from one agency to another during the transaction of official business, the receiving agency shall maintain the confidential and exempt information in the same manner. see full law

(3) Information from the database disseminated in any form by the program to any entity is considered protected health information, and the use of it is governed by any and all applicable state and federal laws. All information accessed or provided to an authorized agency, entity, or individual shall be labeled “CONFIDENTIAL: This information obtained from E-FORCSE® contains confidential controlled substance prescription dispensing information. Release or disclosure of confidential and exempt information may be a third degree felony.” see full law