Educational information: Requirements can change and may vary by pharmacy type, ownership, service, payer, and jurisdiction. Confirm current requirements with official agencies and qualified professionals.
Privacy program
Pharmacies should maintain privacy practices that define permitted uses and disclosures, minimum-necessary access, patient rights, workforce responsibilities, and complaint handling.
Security safeguards
Administrative, physical, and technical safeguards should be aligned with the pharmacy’s systems, devices, vendors, workforce access, backups, and risk-management processes.
Incident response
Have documented procedures for suspected privacy or security incidents, escalation, investigation, mitigation, documentation, and required notifications.