657—7.5(124,155A) Security. The pharmacy shall be located in an area or areas that facilitate the provision of services to patients and shall be integrated with the facility’s communication and transportation systems. The following conditions must be met to ensure appropriate control over drugs and chemicals in and under the control of the pharmacy:
	7.5(1)  Pharmacy department security.  Policies and procedures shall identify measures to ensure the security of the pharmacy department, including provisions for effective control against theft of, diversion of, or unauthorized access to drugs or devices, controlled substances, records for such drugs, and patient records, including when the pharmacist is absent from the pharmacy department or absent from the facility pursuant to rule 657—7.6(155A).
	7.5(2)  Security outside the pharmacy department.  Policies and procedures shall identify measures to ensure security in areas outside the pharmacy department where drugs, including controlled substances, devices, drug records, and patient records are maintained or stored, including provisions for effective control against theft of, diversion of, or unauthorized access to such drugs and records.
	7.5(3) Authorized collection program. Receptacles that are located in the hospital for the authorized collection of controlled substances shall be secured pursuant to 657—Chapter 10 and federal regulations for disposal of controlled substances.
	7.5(4) System security. Electronic systems shall be secured to prevent unauthorized access. System login or access credentials issued to an authorized system user shall not be shared with or disclosed to any other individual.
[ARC 8673B, IAB 4/7/10, effective 6/1/10; ARC 9408B, IAB 3/9/11, effective 4/13/11; ARC 1308C, IAB 2/5/14, effective 3/12/14; ARC 2408C, IAB 2/17/16, effective 3/23/16; ARC 4267C, IAB 1/30/19, effective 3/6/19]