R383-2-4. Confidentiality Requirements

(1) A person authorized to access information in the EVS or ICS shall only access the minimum amount of information necessary to perform an authorized function, as specified in: (a) Title 26B, Chapter 4, Part 2, Cannabinoid Research and Medical Cannabis; (b) Title 4, Chapter 41a, Cannabis Production Establishments and Pharmacies; and (c) this rule. (2) A person authorized to access information in the EVS or ICS shall safeguard any information stored in the system. (3) A person authorized to access the EVS and ICS shall safeguard login credentials and not share those credentials with anyone. (4) A person authorized to access the EVS and ICS who fails to observe the confidentiality requirements of this rule may: (a) be subject to the penalties listed in Section 26B-4-202; and (b) lose access to the EVS or ICS.