<?xml version='1.0' encoding='utf-8'?>
<chapter num="05" heading="Pharmacy Security" title_num="10" subtitle_num="34">
  <regulation prefix="Regulation" num=".01" heading="Definitions.">
    <paragraph num="A.">
      <text>In this chapter, the following terms have the meanings indicated.</text>
    </paragraph>
    <paragraph num="B.">
      <text>Terms Defined.</text>
      <paragraph num="(1)">
        <text>“Emergency” means an event such as a fire, water leak, electrical failure, public disaster, or catastrophe which may impact the prescription area.</text>
      </paragraph>
      <paragraph num="(2)">
        <text>“Means of access” means the manner of entry into the secure prescription area.</text>
      </paragraph>
      <paragraph num="(3)">
        <text>“Prescription area” means the portion of an establishment for which a pharmacy permit has been issued which contains:</text>
        <paragraph num="(a)">
          <text>Patient records;</text>
        </paragraph>
        <paragraph num="(b)">
          <text>Prescription devices; and</text>
        </paragraph>
        <paragraph num="(c)">
          <text>Prescription drugs.</text>
        </paragraph>
      </paragraph>
    </paragraph>
  </regulation>
  <regulation prefix="Regulation" num=".02" heading="Prescription Area.">
    <paragraph num="A.">
      <text>The pharmacy permit holder shall:</text>
      <paragraph num="(1)">
        <text>Ensure that the prescription area:</text>
        <paragraph num="(a)">
          <text>Maintains temperature and ventilation at levels that do not affect the prescription drugs or devices stored in the area; and</text>
        </paragraph>
        <paragraph num="(b)">
          <text>Permits reasonable communication between the pharmacist and the public when the pharmacy is open;</text>
        </paragraph>
      </paragraph>
      <paragraph num="(2)">
        <text>Provide a means of securing the prescription area;</text>
      </paragraph>
      <paragraph num="(3)">
        <text>Prevent an individual from being in the prescription area unless a pharmacist is immediately available on the premises to provide pharmacy services;</text>
      </paragraph>
      <paragraph num="(4)">
        <text>Monitor unauthorized or emergency entry after the prescription area has been secured by the pharmacist; and</text>
      </paragraph>
      <paragraph num="(5)">
        <text>Prevent unauthorized entry when the prescription area is closed during a period that the rest of the establishment is open.</text>
      </paragraph>
    </paragraph>
    <paragraph num="B.">
      <text>The pharmacist shall:</text>
      <paragraph num="(1)">
        <text>Secure the prescription area and its contents in order that the pharmacy permit holder or the pharmacy permit holder's agent may:</text>
        <paragraph num="(a)">
          <text>Monitor unauthorized or emergency entry after the prescription area has been secured by the pharmacist; and</text>
        </paragraph>
        <paragraph num="(b)">
          <text>Prevent unauthorized entry when the prescription area is closed during a period that the rest of the establishment is open;</text>
        </paragraph>
      </paragraph>
      <paragraph num="(2)">
        <text>Have sole possession of a means of access to the pharmacy, except in emergencies; and</text>
      </paragraph>
      <paragraph num="(3)">
        <text>Establish a means of access for use in an emergency when the pharmacist is not available to access the prescription area.</text>
      </paragraph>
    </paragraph>
    <paragraph num="C.">
      <text>Security.</text>
      <paragraph num="(1)">
        <text>A pharmacy shall be secure from unauthorized entry as follows:</text>
        <paragraph num="(a)">
          <text>Access from outside the premises shall be:</text>
          <paragraph num="(i)">
            <text>Kept to a minimum; and</text>
          </paragraph>
          <paragraph num="(ii)">
            <text>Well controlled;</text>
          </paragraph>
        </paragraph>
        <paragraph num="(b)">
          <text>The outside perimeter of the premises shall be well lit; and</text>
        </paragraph>
        <paragraph num="(c)">
          <text>Entry into areas where prescription drugs or devices and patient records are stored shall be limited to authorized personnel.</text>
        </paragraph>
      </paragraph>
      <paragraph num="(2)">
        <text>A pharmacy shall be equipped with:</text>
        <paragraph num="(a)">
          <text>An alarm system to detect entry after hours;</text>
        </paragraph>
        <paragraph num="(b)">
          <text>A security system that provides protection against theft and diversion;</text>
        </paragraph>
        <paragraph num="(c)">
          <text>Appropriate software to facilitate the identification of evidence of tampering with computers or electronic records;</text>
        </paragraph>
        <paragraph num="(d)">
          <text>An inventory management and control system that protects against, detects, and documents any instances of theft, diversion, or counterfeiting;</text>
        </paragraph>
        <paragraph num="(e)">
          <text>A security system to protect the integrity and confidentiality of data and documents limited to authorized personnel; and</text>
        </paragraph>
        <paragraph num="(f)">
          <text>A means to make the data and documentation required under this section readily available to the Board, an agent of the Board, the Division of Drug Control, or federal and other State law enforcement officials.</text>
        </paragraph>
      </paragraph>
    </paragraph>
  </regulation>
  <regulation prefix="Regulation" num=".03" heading="Pharmacy Operation.">
    <paragraph num="A.">
      <text>A pharmacist shall be immediately available on the premises to provide pharmacy services at all times the pharmacy is in operation.</text>
    </paragraph>
    <paragraph num="B.">
      <text>If the prescription area is not open the same hours as the establishment, the pharmacy permit holder shall prominently display signs indicating the business hours of the prescription area.</text>
    </paragraph>
  </regulation>
  <regulation prefix="Regulation" num=".04" heading="Records.">
    <paragraph num="A.">
      <text>A pharmacy permit holder shall:</text>
      <paragraph num="(1)">
        <text>Prevent unauthorized disclosure or loss by securing all patient records;</text>
      </paragraph>
      <paragraph num="(2)">
        <text>Designate personnel with authorized access to computerized patient records; and</text>
      </paragraph>
      <paragraph num="(3)">
        <text>Maintain current computerized records in a manner which permits reconstruction within 48 hours, except:</text>
        <paragraph num="(a)">
          <text>In an emergency as defined in Regulation .01 of this chapter, or</text>
        </paragraph>
        <paragraph num="(b)">
          <text>With the prior approval of the Board.</text>
        </paragraph>
      </paragraph>
    </paragraph>
    <paragraph num="B.">
      <text>A pharmacy permit holder may store patient records away from the prescription area in a manner that prevents unauthorized disclosure or loss.</text>
    </paragraph>
  </regulation>
  <regulation prefix="Regulation" num=".05" heading="Security Responsibility.">
    <paragraph num="A.">
      <text>The pharmacy permit holder is responsible for ensuring that pharmacists, employees, and others who enter the pharmacy:</text>
      <paragraph num="(1)">
        <text>Know and abide by the requirements of this chapter;</text>
      </paragraph>
      <paragraph num="(2)">
        <text>Maintain those measures necessary to ensure this chapter’s enforcement;</text>
      </paragraph>
      <paragraph num="(3)">
        <text>Report theft or significant loss of controlled dangerous substances to the:</text>
        <paragraph num="(a)">
          <text>Board;</text>
        </paragraph>
        <paragraph num="(b)">
          <text>Local police;</text>
        </paragraph>
        <paragraph num="(c)">
          <text>Office of Controlled Substances Administration; and</text>
        </paragraph>
        <paragraph num="(d)">
          <text>U.S. Drug Enforcement Administration; and</text>
        </paragraph>
      </paragraph>
      <paragraph num="(4)">
        <text>Report theft of non-controlled prescription drugs or devices to the Board.</text>
      </paragraph>
    </paragraph>
    <paragraph num="B.">
      <text>In determining whether a loss is significant pursuant to §A(3) of this regulation, the pharmacy permit holder shall consider at least the following factors:</text>
      <paragraph num="(1)">
        <text>The actual quantity of controlled dangerous substances lost in relation to the type of business;</text>
      </paragraph>
      <paragraph num="(2)">
        <text>The specific controlled dangerous substances lost;</text>
      </paragraph>
      <paragraph num="(3)">
        <text>Whether the loss of the controlled dangerous substances can be associated with access to those controlled dangerous substances by specific individuals, or whether the loss can be attributed to unique activities that may take place involving controlled dangerous substances;</text>
      </paragraph>
      <paragraph num="(4)">
        <text>A pattern of losses over a specific time period, whether the losses appear to be random, and the results of efforts taken to resolve the losses;</text>
      </paragraph>
      <paragraph num="(5)">
        <text>Whether the specific controlled dangerous substances are likely candidates for diversion, if known; and</text>
      </paragraph>
      <paragraph num="(6)">
        <text>Local trends and other indicators of the diversion potential of the missing controlled dangerous substances, if known.</text>
      </paragraph>
    </paragraph>
  </regulation>
  <annotations>
    <annotation type="Authority">Health Occupations Article, §12-205, Annotated Code of Maryland</annotation>
    <annotation type="History" subtype="Administrative History">Effective date: July 25, 1980 (7:15 Md. R. 1425)</annotation>
    <annotation type="History" subtype="Administrative History">Regulation .02C adopted effective February 19, 1990 (17:3 Md. R. 298)</annotation>
    <annotation type="History" subtype="Administrative History">Chapter, Security of a Pharmacy Facility, repealed and new chapter, Pharmacy Security, adopted effective November 1, 1999 (26:22 Md. R. 1692)</annotation>
    <annotation type="History" subtype="Administrative History">Regulation .02C adopted effective July 1, 2010 (37:10 Md. R. 722)</annotation>
    <annotation type="History" subtype="Administrative History">Regulation .05 amended effective July 1, 2010 (37:10 Md. R. 722); May 20, 2019 (46:10 Md. R. 489)</annotation>
  </annotations>
</chapter>