Utah Administrative Code
The Utah Administrative Code is the body of all effective administrative rules as compiled and organized by the Division of Administrative Rules (see Subsection 63G-3-102(5); see also Sections 63G-3-701 and 702).
NOTE: For a list of rules that have been made effective since April 1, 2019, please see the codification segue page.
NOTE TO RULEFILING AGENCIES: Use the RTF version for submitting rule changes.
R384. Health, Disease Control and Prevention; Health Promotion.
Rule R384-203. Prescription Drug Database Access.
As in effect on April 1, 2019
Table of Contents
- R384-203-1. Authority and Purpose.
- R384-203-2. Definitions.
- R384-203-3. Criteria for Application to Access Prescription Drug Database.
- R384-203-4. Research Application Process.
- R384-203-5. Data Provision and Fees.
- R384-203-6. Audit Provisions.
- Date of Enactment or Last Substantive Amendment
- Notice of Continuation
- Authorizing, Implemented, or Interpreted Law
This rule establishes procedures and application processes pursuant to Title 58-37f-301(2)(d) for Utah Department of Health Executive Director to allow access to the Prescription Drug database by a designated and assigned person to conduct scientific studies regarding the use or abuse of controlled substances, who is not an employee of the Department of Health.
The following definitions apply to this rule:
(1) "Department" means the Utah Department of Health.
(2) "Director" means the Utah Department of Health Executive Director.
(3) "Prescription Drug Database" means the Utah Controlled Substance Database.
(4) "Research facility" means a research facility associated with a university or college in the state accredited by the Northwest Commission on Colleges and Universities.
(5) "Institutional Review Board" means a board that is approved for human subject research by the United States Department of Health and Human Services.
(6) "Designee" means a person designated and assigned by the Director to have access to the Prescription Drug database in order to conduct scientific studies regarding the use or abuse of controlled substances, who is not an employee of the Department.
(7) "Business associate" means a business associate as defined under the HIPAA privacy, security, and breach notification rules in 45 CFR 164.502(a), 164.504(e), and 164.532(d) and (e).
(8) "De-identified" means information as defined in 45 CFR 164.502(d) and 164.514(a), (b), and (c).
(1) The study must fit within the responsibilities of the Department for health and welfare.
(2) De-identified prescriber, patient and pharmacy data will meet the research needs.
(3) The research facility designee must provide:
(a) written assurances that the studies are not conducted for and will not be used for profit or commercial gain;
(b) written assurances that the designee shall protect the information as a business associate of the Department of Health; and
(c) documentation of an Institutional Review Board approval.
(1) The research facility designee will prepare and submit for Department approval an application as designated by the Department detailing explicit information regarding the scientific studies to be conducted including the:
(a) purpose of the study;
(b) research protocol for the project;
(c) description of the data needed from the database to conduct that research;
(d) plan that demonstrates all database information will be maintained securely, with access being strictly restricted to the designee and research study staff; and
(e) provisions for electronic data to be stored on a secure database computer system with access being strictly restricted to the designee and research study staff.
(2) Application will be reviewed by the Department's Institutional Review Board and recommendation made to the director for or against approval.
(3) Director will determine approval status of the application.
(4) Designee will sign the Department's data sharing agreement if application is approved by the Director.
(1) Department will obtain, de-identify and provide the data set requested in the application.
(2) Research facility and designee shall pay all relevant expenses for data transfer and manipulation.
Research facility and designee shall submit, upon request, to a Department audit of the recipients' compliance with the terms of the data sharing agreement.
prescription drug database, controlled substances, substance abuse database
March 1, 2014
February 25, 2019
For questions regarding the content or application of rules under Title R384, please contact the promulgating agency (Health, Disease Control and Prevention; Health Promotion). A list of agencies with links to their homepages is available at http://www.utah.gov/government/agencylist.html or from http://www.rules.utah.gov/contact/agencycontacts.htm.