Editorial Notes
References in Text

Section 264(c) of the Health Insurance Portability and Accountability Act of 1996, referred to in subsec. (c), is section 264(c) of Pub. L. 104–191, title II, Aug. 21, 1996, 110 Stat. 2033, which is set out as a note under section 1320d–2 of this title.

Statutory Notes and Related Subsidiaries
Guidance

Pub. L. 115–271, title V, § 5042(b), Oct. 24, 2018, 132 Stat. 3970, provided that: “Not later than October 1, 2019, the Administrator of the Centers for Medicare & Medicaid Services, in consultation with the Director of the Centers for Disease Control and Prevention, shall issue guidance on best practices on the uses of prescription drug monitoring programs required of prescribers and on protecting the privacy of Medicaid beneficiary information maintained in and accessed through prescription drug monitoring programs.”

Development of Model State Practices

Pub. L. 115–271, title V, § 5042(c), Oct. 24, 2018, 132 Stat. 3970, provided that:

“(1)
In general.—
Not later than October 1, 2020, the Secretary of Health and Human Services shall develop and publish model practices to assist State Medicaid program operations in identifying and implementing strategies to utilize data-sharing agreements described in the matter following paragraph (2) of section 1944(b) of the Social Security Act [42 U.S.C. 1396w–3a(b)], as added by subsection (a), for the following purposes:
“(A)
Monitoring and preventing fraud, waste, and abuse.
“(B)
Improving health care for individuals enrolled in a State plan under title XIX of such Act [42 U.S.C. 1396 et seq.] (or under a waiver of such plan) who—
“(i)
transition in and out of coverage under such title;
“(ii)
may have sources of health care coverage in addition to coverage under such title; or
“(iii)
pay for prescription drugs with cash.
“(C)
Any other purposes specified by the Secretary.
“(2)
Elements of model practices.—
The model practices described in paragraph (1)—
“(A)
shall include strategies for assisting States in allowing the medical director or pharmacy director (or designees of such a director) of managed care organizations or pharmaceutical benefit managers to access information with respect to all covered individuals served by such managed care organizations or pharmaceutical benefit managers to access as a single data set, in an electronic format; and
“(B)
shall include any appropriate beneficiary protections and privacy guidelines.
“(3)
Consultation.—
In developing model practices under this subsection, the Secretary shall consult with the National Association of Medicaid Directors, managed care entities (as defined in section 1932(a)(1)(B) of the Social Security Act [42 U.S.C. 1396u–2(a)(1)(B)]) with contracts with States pursuant to section 1903(m) of such Act [42 U.S.C. 1396b(m)], pharmaceutical benefit managers, physicians and other health care providers, beneficiary advocates, and individuals with expertise in health care technology related to prescription drug monitoring programs and electronic health records.”