Confidentiality of patient records – Ohio Admin. Code 4729-5-29

Records relating to the practice of pharmacy, the administration of drugs, or any patient-specific drug transaction are not public records.  A person having custody of or access to such records may only disclose the contents of the records, or provide a copy of the records, to the following:

• The patient for whom the prescription or medication order was issued;
• The prescriber who issued the prescription or medication order;
• Certified/licensed health care personnel who are responsible for the care of the patient;
• A member, inspector, agent or investigator of the state board of pharmacy;
• Any federal, state, county or municipal officer whose duty is to enforce state or federal laws relating to drugs and who is engaged in a specific investigation involving a designated person or drug;
• An agent of the state medical board when enforcing provisions governing physicians, limited practitioners, or physicians assistants;
• An agency of government charged with the responsibility of providing medical care for the patient upon a written request by an authorized representative of the agency requesting such information;
• An agent of a medical insurance company who provides prescription insurance coverage to the patient;
• An agent who contracts with the pharmacy as a business associate;
• An agent of the state board of nursing when enforcing provisions governing the practice of nursing; and
• Any other person, if the patient gives consent to such disclosure.

All such records, including consents, memoranda of emergency disclosures and written requests must be kept on file at the pharmacy for three years in a readily retrievable manner.