<?xml version="1.0"?>
<law><site_title>Virginia Decoded</site_title><site_url>https://vacode.org</site_url><law_id>56919</law_id><section_number>54.1-2523</section_number><catch_line>Confidentiality of data; disclosure of information; discretionary authority of Director</catch_line><edition url="https://vacode.org/2025/" slug="2025" current="TRUE" last_updated="">2025</edition><referred_to_by><reference>32.1-276.6</reference><reference>54.1-2520</reference><reference>54.1-2524</reference></referred_to_by><structure><unit label="title" level="1" order_by="1" identifier="54.1">Professions and Occupations</unit><unit label="subtitle" level="2" order_by="1" identifier="III">Professions and Occupations Regulated by Boards Within the Department of Health Professions</unit><unit label="chapter" level="3" order_by="1" identifier="25.2">Prescription Monitoring Program</unit></structure><text>
						<section id="A"><p><span class="prefix-number">A.</span> All data, records, and reports relating to the prescribing and dispensing of <span class="dictionary">covered substances</span> to <span class="dictionary">recipients</span> and any abstracts from such data, records, and reports that are in the <span class="dictionary">possession</span> of the Prescription Monitoring Program pursuant to this chapter and any <span class="dictionary">material</span> relating to the operation or security of the program shall be confidential and shall be exempt from the Virginia Freedom of Information Act (&#xA7; <a class="law" title="Short title; policy" href="/2.2-3700/">2.2-3700</a> et seq.) pursuant to subdivision 2 of &#xA7; <a class="law" title="Exclusions to application of chapter; health and social services records" href="/2.2-3705.5/">2.2-3705.5</a>. Records in <span class="dictionary">possession</span> of the Prescription Monitoring Program shall not be available for civil <span class="dictionary">subpoena</span>, nor shall such records be disclosed, discoverable, or compelled to be produced in any civil proceeding, nor shall such records be deemed <span class="dictionary">admissible</span> as <span class="dictionary">evidence</span> in any civil proceeding for any reason. Further, the <span class="dictionary">Director</span> shall only have discretion to disclose any such information as provided in subsections B and C. <a id="paragraph-208476" class="section-permalink" href="https://vacode.org/54.1-2523/#A"><i class="fa fa-link"/></a></p></section>
						<section id="B"><p><span class="prefix-number">B.</span> Upon receiving a request for information in accordance with the <span class="dictionary">Department</span>&#x2019;s regulations and in compliance with applicable federal <span class="dictionary">law</span> and regulations, the <span class="dictionary">Director</span> shall disclose the following: <a id="paragraph-208477" class="section-permalink" href="https://vacode.org/54.1-2523/#B"><i class="fa fa-link"/></a></p></section>
						<section id="B1" class="indent-1"><p><span class="prefix-number">1.</span> Information relevant to a specific investigation of a specific <span class="dictionary">recipient</span> or of a specific <span class="dictionary">dispenser</span> or <span class="dictionary">prescriber</span> to an agent who has completed the Virginia State Police Drug <span class="dictionary">Diversion</span> School designated by the superintendent of the <span class="dictionary">Department</span> of State Police or designated by the chief <span class="dictionary">law</span>-enforcement officer of any county, city, or town or campus police <span class="dictionary">department</span> to conduct drug <span class="dictionary">diversion</span> investigations pursuant to &#xA7; <a class="law" title="Access to and copies of records; inspections" href="/54.1-3405/">54.1-3405</a>. <a id="paragraph-208478" class="section-permalink" href="https://vacode.org/54.1-2523/#B1"><i class="fa fa-link"/></a></p></section>
						<section id="B2" class="indent-1"><p><span class="prefix-number">2.</span> Information relevant to an investigation or inspection of or <span class="dictionary">allegation</span> of misconduct by a specific person licensed, certified, or registered by or an applicant for licensure, certification, or registration by a health regulatory board; information relevant to a disciplinary proceeding before a health regulatory board or in any subsequent <span class="dictionary">trial</span> or <span class="dictionary">appeal</span> of an action or board <span class="dictionary">order</span> to designated employees of the <span class="dictionary">Department</span> of Health Professions; or to designated persons operating the Health Practitioners&#x2019; Monitoring Program pursuant to Chapter 25.1 (&#xA7; <a class="law" title="Definitions" href="/54.1-2515/">54.1-2515</a> et seq.). <a id="paragraph-208479" class="section-permalink" href="https://vacode.org/54.1-2523/#B2"><i class="fa fa-link"/></a></p></section>
						<section id="B3" class="indent-1"><p><span class="prefix-number">3.</span> Information relevant to the proceedings of any investigatory <span class="dictionary">grand jury</span> or special <span class="dictionary">grand jury</span> that has been properly impaneled in accordance with the provisions of Chapter 13 (&#xA7; <a class="law" title="Functions of a grand jury" href="/19.2-191/">19.2-191</a> et seq.) of Title 19.2. <a id="paragraph-208480" class="section-permalink" href="https://vacode.org/54.1-2523/#B3"><i class="fa fa-link"/></a></p></section>
						<section id="B4" class="indent-1"><p><span class="prefix-number">4.</span> Information relevant to a specific investigation of a specific <span class="dictionary">recipient</span>, <span class="dictionary">dispenser</span>, or <span class="dictionary">prescriber</span> to an agent of a federal <span class="dictionary">law</span>-enforcement agency with authority to conduct drug <span class="dictionary">diversion</span> investigations. <a id="paragraph-208481" class="section-permalink" href="https://vacode.org/54.1-2523/#B4"><i class="fa fa-link"/></a></p></section>
						<section id="B5" class="indent-1"><p><span class="prefix-number">5.</span> Information relevant to a specific investigation, supervision, or monitoring of a specific <span class="dictionary">recipient</span> for purposes of the administration of criminal justice pursuant to Chapter 1 (&#xA7; <a class="law" title="Department of Criminal Justice Services" href="/9.1-100/">9.1-100</a> et seq.) of Title 9.1 to a probation or <span class="dictionary">parole</span> officer as described in Article 2 (&#xA7; <a class="law" title="Division into probation and parole districts" href="/53.1-141/">53.1-141</a> et seq.) of Chapter 4 of Title 53.1, a local community-based <span class="dictionary">probation officer</span> as described in &#xA7; <a class="law" title="Duties and responsibilities of local community-based probation officers" href="/9.1-176.1/">9.1-176.1</a>, a drug <span class="dictionary">court</span> administrator as described in &#xA7; <a class="law" title="Recovery Court Act" href="/18.2-254.1/">18.2-254.1</a>, or a behavioral health <span class="dictionary">docket</span> administrator as described in &#xA7; <a class="law" title="Behavioral Health Docket Act" href="/18.2-254.3/">18.2-254.3</a> who has completed the Virginia State Police Drug <span class="dictionary">Diversion</span> School designated by the <span class="dictionary">Director</span> of the <span class="dictionary">Department</span> of Corrections or his designee. <a id="paragraph-208482" class="section-permalink" href="https://vacode.org/54.1-2523/#B5"><i class="fa fa-link"/></a></p></section>
						<section id="B6" class="indent-1"><p><span class="prefix-number">6.</span> Information relevant to a specific investigation of a specific individual into a possible delivery of a <span class="dictionary">controlled substance</span> in violation of &#xA7; <a class="law" title="Delivery of drugs, firearms, explosives, etc., to prisoners or committed persons" href="/18.2-474.1/">18.2-474.1</a> to an investigator for the <span class="dictionary">Department</span> of Corrections who has completed the Virginia State Police Drug <span class="dictionary">Diversion</span> School and who has been designated by the <span class="dictionary">Director</span> of the <span class="dictionary">Department</span> of Corrections or his designee. <a id="paragraph-208483" class="section-permalink" href="https://vacode.org/54.1-2523/#B6"><i class="fa fa-link"/></a></p></section>
						<section id="B7" class="indent-1"><p><span class="prefix-number">7.</span> Information about a specific <span class="dictionary">recipient</span> to the Smartchart Network Program in accordance with subdivision B 7 of &#xA7; <a class="law" title="Smartchart Network Program established; purpose" href="/32.1-372/">32.1-372</a>. <a id="paragraph-208484" class="section-permalink" href="https://vacode.org/54.1-2523/#B7"><i class="fa fa-link"/></a></p></section>
						<section id="C"><p><span class="prefix-number">C.</span> In accordance with the <span class="dictionary">Department</span>&#x2019;s regulations and applicable federal <span class="dictionary">law</span> and regulations, the <span class="dictionary">Director</span> may, in his discretion, disclose: <a id="paragraph-208485" class="section-permalink" href="https://vacode.org/54.1-2523/#C"><i class="fa fa-link"/></a></p></section>
						<section id="C1" class="indent-1"><p><span class="prefix-number">1.</span> Information in the <span class="dictionary">possession</span> of the Prescription Monitoring Program concerning a <span class="dictionary">recipient</span> who is over the age of 18 to that <span class="dictionary">recipient</span>. The information shall be mailed to the street or mailing address indicated on the <span class="dictionary">recipient</span> request form. <a id="paragraph-208486" class="section-permalink" href="https://vacode.org/54.1-2523/#C1"><i class="fa fa-link"/></a></p></section>
						<section id="C2" class="indent-1"><p><span class="prefix-number">2.</span> Information on a specific <span class="dictionary">recipient</span> to a <span class="dictionary">prescriber</span>, as defined in this chapter, for the purpose of establishing the treatment history of the specific <span class="dictionary">recipient</span> when such <span class="dictionary">recipient</span> is either under care and treatment by the <span class="dictionary">prescriber</span> or the <span class="dictionary">prescriber</span> is consulting on or initiating treatment of such <span class="dictionary">recipient</span>. In a manner specified by the <span class="dictionary">Director</span> in regulation, notice shall be given to patients that information may be requested by the <span class="dictionary">prescriber</span> from the Prescription Monitoring Program. <a id="paragraph-208487" class="section-permalink" href="https://vacode.org/54.1-2523/#C2"><i class="fa fa-link"/></a></p></section>
						<section id="C3" class="indent-1"><p><span class="prefix-number">3.</span> Information on a specific <span class="dictionary">recipient</span> to a <span class="dictionary">dispenser</span> for the purpose of establishing a prescription history to assist the <span class="dictionary">dispenser</span> in (i) determining the validity of a prescription in accordance with &#xA7; <a class="law" title="Prescriptions to be issued and drugs to be dispensed for medical or therapeutic purposes only" href="/54.1-3303/">54.1-3303</a> or (ii) providing clinical consultation on the care and treatment of the <span class="dictionary">recipient</span>. In a manner specified by the <span class="dictionary">Director</span> in regulation, notice shall be given to patients that information may be requested by the <span class="dictionary">dispenser</span> from the Prescription Monitoring Program. <a id="paragraph-208488" class="section-permalink" href="https://vacode.org/54.1-2523/#C3"><i class="fa fa-link"/></a></p></section>
						<section id="C4" class="indent-1"><p><span class="prefix-number">4.</span> Information relevant to an investigation or regulatory proceeding of a specific <span class="dictionary">dispenser</span> or <span class="dictionary">prescriber</span> to other regulatory authorities concerned with granting, limiting or denying licenses, certificates or registrations to practice a health profession when such regulatory authority licenses such <span class="dictionary">dispenser</span> or <span class="dictionary">prescriber</span> or such <span class="dictionary">dispenser</span> or <span class="dictionary">prescriber</span> is seeking licensure by such other regulatory authority. <a id="paragraph-208489" class="section-permalink" href="https://vacode.org/54.1-2523/#C4"><i class="fa fa-link"/></a></p></section>
						<section id="C5" class="indent-1"><p><span class="prefix-number">5.</span> Information relevant to an investigation relating to a specific <span class="dictionary">dispenser</span> or <span class="dictionary">prescriber</span> who is a participating provider in the Virginia Medicaid program or information relevant to an investigation relating to a specific <span class="dictionary">recipient</span> who is currently eligible for and receiving or who has been eligible for and has received medical assistance services to the Medicaid <span class="dictionary">Fraud</span> Control Unit of the Office of the <span class="dictionary">Attorney General</span> or to designated employees of the <span class="dictionary">Department</span> of Medical Assistance Services, as appropriate. <a id="paragraph-208490" class="section-permalink" href="https://vacode.org/54.1-2523/#C5"><i class="fa fa-link"/></a></p></section>
						<section id="C6" class="indent-1"><p><span class="prefix-number">6.</span> Information relevant to determination of the cause of death of a specific <span class="dictionary">recipient</span> to the designated employees of the Office of the Chief Medical Examiner. <a id="paragraph-208491" class="section-permalink" href="https://vacode.org/54.1-2523/#C6"><i class="fa fa-link"/></a></p></section>
						<section id="C7" class="indent-1"><p><span class="prefix-number">7.</span> Information for the purpose of bona fide research or education to qualified personnel; however, data elements that would reasonably identify a specific <span class="dictionary">recipient</span>, <span class="dictionary">prescriber</span>, or <span class="dictionary">dispenser</span> shall be deleted or redacted from such information prior to disclosure. Further, release of the information shall only be made pursuant to a written agreement between such qualified personnel and the <span class="dictionary">Director</span> in <span class="dictionary">order</span> to ensure compliance with this subdivision. <a id="paragraph-208492" class="section-permalink" href="https://vacode.org/54.1-2523/#C7"><i class="fa fa-link"/></a></p></section>
						<section id="C8" class="indent-1"><p><span class="prefix-number">8.</span> Information relating to prescriptions for <span class="dictionary">covered substances</span> issued by a specific <span class="dictionary">prescriber</span>, which have been dispensed and reported to the Prescription Monitoring Program, to that <span class="dictionary">prescriber</span>. <a id="paragraph-208493" class="section-permalink" href="https://vacode.org/54.1-2523/#C8"><i class="fa fa-link"/></a></p></section>
						<section id="C9" class="indent-1"><p><span class="prefix-number">9.</span> Information about a specific <span class="dictionary">recipient</span> who is a member of a Virginia Medicaid managed care program to a physician or pharmacist licensed in the Commonwealth and employed by the Virginia Medicaid managed care program or to his clinical designee who holds a multistate licensure <span class="dictionary">privilege</span> to practice nursing or a license issued by a health regulatory board within the <span class="dictionary">Department</span> of Health Professions and is employed by the Virginia Medicaid managed care program. Such information shall only be used to determine eligibility for and to manage the care of the specific <span class="dictionary">recipient</span> in a Patient Utilization Management Safety or similar program. Notice shall be given to <span class="dictionary">recipients</span> that information may be requested by a licensed physician or pharmacist employed by the Virginia Medicaid managed care program from the Prescription Monitoring Program. <a id="paragraph-208494" class="section-permalink" href="https://vacode.org/54.1-2523/#C9"><i class="fa fa-link"/></a></p></section>
						<section id="C10" class="indent-1"><p><span class="prefix-number">10.</span> [Expired.] <a id="paragraph-208495" class="section-permalink" href="https://vacode.org/54.1-2523/#C10"><i class="fa fa-link"/></a></p></section>
						<section id="C11" class="indent-1"><p><span class="prefix-number">11.</span> Information about a specific <span class="dictionary">recipient</span> who is currently eligible for and receiving medical assistance from the <span class="dictionary">Department</span> of Medical Assistance Services to a physician or pharmacist licensed in the Commonwealth or to his clinical designee who holds a multistate licensure <span class="dictionary">privilege</span> to practice nursing or a license issued by a health regulatory board within the <span class="dictionary">Department</span> of Health Professions and is employed by the <span class="dictionary">Department</span> of Medical Assistance Services.
				Such information shall be used only to determine eligibility for and to manage the care of the specific <span class="dictionary">recipient</span> in a Patient Utilization Management Safety or similar program. Notice shall be given to <span class="dictionary">recipients</span> that information may be requested by a licensed physician or pharmacist employed by the <span class="dictionary">Department</span> of Medical Assistance Services from the Prescription Monitoring Program. <a id="paragraph-208496" class="section-permalink" href="https://vacode.org/54.1-2523/#C11"><i class="fa fa-link"/></a></p></section>
						<section id="D"><p><span class="prefix-number">D.</span> The <span class="dictionary">Director</span> may enter into agreements for mutual exchange of information among prescription monitoring programs in other <span class="dictionary">jurisdictions</span>, which shall only use the information for purposes allowed by this chapter. <a id="paragraph-208497" class="section-permalink" href="https://vacode.org/54.1-2523/#D"><i class="fa fa-link"/></a></p></section>
						<section id="E"><p><span class="prefix-number">E.</span> This section shall not be construed to supersede the provisions of &#xA7; <a class="law" title="Records confidential; disclosure of information about violations of federal law" href="/54.1-3406/">54.1-3406</a> concerning the divulging of confidential records relating to investigative information. <a id="paragraph-208498" class="section-permalink" href="https://vacode.org/54.1-2523/#E"><i class="fa fa-link"/></a></p></section>
						<section id="F"><p><span class="prefix-number">F.</span> Confidential information that has been received, maintained or developed by any board or disclosed by the board pursuant to subsection A shall not, under any circumstances, be available for <span class="dictionary">discovery</span> or <span class="dictionary">court</span> <span class="dictionary">subpoena</span> or introduced into <span class="dictionary">evidence</span> in any medical malpractice suit or other action for <span class="dictionary">damages</span> arising out of the provision of or failure to provide services. However, this subsection shall not be construed to inhibit any investigation or <span class="dictionary">prosecution</span> conducted pursuant to Article 1 (&#xA7; <a class="law" title="Use of terms &quot;controlled substances,&quot; &quot;marijuana,&quot; &quot;Schedules I, II, III, IV, V, and VI,&quot; &quot;imitation controlled substance,&quot; and &quot;counterfeit controlled substance&quot; in Title 18.2" href="/18.2-247/">18.2-247</a> et seq.) of Chapter 7 of Title 18.2. <a id="paragraph-208499" class="section-permalink" href="https://vacode.org/54.1-2523/#F"><i class="fa fa-link"/></a></p></section></text><history>2002, c. 481; 2004, c. 690; 2005, cc. 637, 678; 2009, cc. 158, 162, 472; 2012, cc. 21, 71; 2013, c. 739; 2014, cc. 12, 97; 2015, cc. 118, 507; 2016, cc. 309, 410, 447, 568; 2017, cc. 186, 778; 2018, c. 108; 2019, c. 679; 2020, cc. 1066, 1067; 2023, cc. 628, 629; 2024, c. 33.</history><metadata></metadata></law>
