641—154.10(124E) Confidentiality. The department shall maintain a confidential file of the names of each patient to or for whom the department approves the issuance of a medical cannabidiol registration card and the name of each primary caregiver to whom the department issues a medical cannabidiol registration card under Iowa Code section 124E.4.
	154.10(1) Personally identifiable information of patients and primary caregivers shall be maintained as confidential and is not accessible to the public. The department and the department of transportation shall release aggregate and statistical information regarding the medical cannabidiol act registration card program in a manner which prevents the identification of any patient or primary caregiver.
	154.10(2) Personally identifiable information of patients and primary caregivers may be disclosed under the following limited circumstances:
	a. 	To authorized employees or agents of the department and the department of transportation as necessary to perform the duties of the department and the department of transportation pursuant to Iowa Code chapter 124E.
	b. 	To authorized employees of state or local law enforcement agencies located in Iowa, solely for the purpose of verifying that a person is lawfully in possession of a medical cannabidiol registration card issued pursuant to Iowa Code chapter 124E.
	c. 	To a patient, primary caregiver, or health care practitioner, upon written authorization of the patient or primary caregiver.
[ARC 1640C, IAB 10/1/14, effective 1/30/15; ARC 3150C, IAB 7/5/17, effective 6/13/17]