(A) Prescription information and other patient health care information received by a pharmacy must be maintained in a manner that protects the integrity and confidentiality of such information as provided by the State Board of Pharmacy in regulation.

(B) A pharmacy shall provide a mechanism to prevent the disclosure of any information, confidential or otherwise, about patients that was obtained or collected by a pharmacist or pharmacy incidental to the delivery of pharmaceutical care other than as authorized in regulation.

(C) The pharmacist-in-charge shall:

(a) establish and maintain written policies and procedures for maintaining the integrity and confidentiality of prescription information and patient health care information. All employees of the pharmacy with access to this information must be required to comply with the established policies and procedures.

(b) ensure that the requirements of this section are established and implemented.