Rights of the Subjects of PMP Information

The Division may collect data, in its capacity as a lawfully authorized health oversight agency under the federal Health Insurance Portability and Accountability Privacy Act (HIPAA), for use in its legally authorized oversight activities.

A practitioner or pharmacist must comply with HIPAA requirements when accessing and using PMP information.

Specific information about a practitioner’s or pharmacist’s obligations under the federal health privacy rule, including permitted uses and disclosures of patient information, enforcement provisions, and penalties for non-compliance, can be found at

Summary of HIPAA Privacy Rule

A pharmacy permit holder, pharmacist, practitioner, and any other person who discloses or uses PMP information other than as permitted by the PMP law may be subject to a civil penalty and disciplinary action by the appropriate licensing board. In order to ensure compliance with HIPAA mandates, the NJPMP law designates NJPMP data as confidential and exempts the data from public or open records laws.