A. The Oklahoma Medical Marijuana Authority shall create a medical marijuana use registry of patients and caregivers as provided under this section. The handling of any records maintained in the registry shall comply with all relevant state and federal laws including, but not limited to, the Health Insurance Portability and Accountability Act of 1996 (HIPAA).

B. The medical marijuana use registry shall be accessible to:

1. Oklahoma-licensed medical marijuana dispensaries to verify the license of a patient or caregiver by the twenty-four-character identifier; and

2. Any court in this state.

C. All other records regarding a medical marijuana licensee shall be maintained by the Authority and shall be deemed confidential. The handling of any records maintained by the Authority shall comply with all relevant state and federal laws including, but not limited to, the Health Insurance Portability and Accountability Act of 1996 (HIPAA). Such records shall be marked as confidential, shall not be made available to the public and shall only be made available to the licensee, designee of the licensee, any physician of the licensee or the caregiver of the licensee.

D. A log shall be kept with the file of the licensee to record any event in which the records of the licensee were made available and to whom the records were provided.

E. The Department shall ensure that all application records and information are sealed to protect the privacy of medical marijuana patient license applicants.

Added by Laws 2019, c. 11, § 7. Amended by Laws 2019, c. 509, § 5.