65.
(a) Nothing in this part may be construed to limit or restrict the release of physician prescribing data to any of the following:(1) A licensed health care professional, if the release is directly related to providing health care to a patient.
(2) A health insurer or disability insurer, health care service plan, pharmacy benefit manager, employer-sponsored health benefit plan, or their contractors, if the data is directly related to administering or monitoring the use of a health care benefit.
(3) An authorized operator of a program related to the treatment of chronic and seriously debilitating or life-threatening conditions, as defined in subdivisions (d) and (e) of Section 1367.21 of the Health and Safety Code.
(4) An employee benefit plan or any other person or private entity responsible for paying for health care services rendered to the patient, if the physician prescribing data is reasonably necessary to complete or verify a health care transaction related to the prescription information sought to be disclosed.
(5) Any health care, health care service plan, contractor, or other health care professional or facility exclusively for purposes of diagnosis or treatment of a patient.
(6) Use by a health care service plan or health insurer or disability insurer as permitted or required by Section 1367.01 or 1370 of the Health and Safety Code or Section 10123.135 or subdivision (d) of Section 10133 of the Insurance Code.
(b) Any entity receiving physician prescribing data pursuant to paragraph (2) of subdivision (a) is authorized to release or sell the data if:
(1) Each entity voluntarily assumes a duty to review and comply with the “Do Not Use” list described in Section 71 at least once every six months, and owes this duty to every physician who voluntarily joins the list described in this part.
(2) (A) If the entity is a California corporation or is engaged in business activity in California, it is presumed to have consented to the jurisdiction of this state for enforcement by private parties and by the Attorney General of this state for a violation of this part.
(B) If the entity is not a California corporation, or is not engaged in business activity in California, but receives prescriber data of a physician licensed in this state, the entity agrees to authorize the Attorney General of the state of incorporation, on its own or in conjunction with the Attorney General of this state, to prosecute violations of this part, as well as provide for private enforcement in this state and in the state of incorporation.
(c) Nothing in this part is intended to limit or restrict the release of prescriber data for purposes of otherwise lawful pharmacovigilence programs.
(d) Nothing in this part is intended to limit or restrict the release of prescriber data of injectable drugs administered in a physician’s office.