West Virginia PDMP for Pharmacies: Query Requirements and Patient Privacy Laws

Initial Dispensing Query Obligations

Before you initially dispense any Schedule II controlled substance, any opioid, or any benzodiazepine to a patient who is not suffering from a terminal illness, West Virginia’s Controlled Substances Monitoring Program (CSMP)—the state’s PDMP—must be queried. This pharmacist query mandate applies at the point of “initially dispensing” to that patient and is designed to surface recent controlled substance history that could impact safe dispensing decisions. ([regulations.justia.com](https://regulations.justia.com/states/west-virginia/agency-15/title-15/series-15-08/section-15-8-8/))

State law also requires all persons with dispensing authority, including pharmacists, to be registered for and maintain online access to the CSMP. New licensees must complete registration and secure access within 30 days so they can perform required queries without delay. ([code.wvlegislature.gov](https://code.wvlegislature.gov/60a-9-5A/))

Annual Requery Requirements

If you continue dispensing controlled substances to the same patient, you must recheck the CSMP at least annually. Aligning the requery with your yearly patient profile updates or medication therapy reviews helps ensure compliance without disrupting workflow. ([code.wvlegislature.gov](https://code.wvlegislature.gov/60a-9-5A/))

Documenting the timing of your annual review in your dispensing workflow is a best practice for audit readiness, even though the statutory documentation requirement expressly references prescriber and inpatient facility medical records. The key compliance trigger for pharmacies is performing the annual access when ongoing controlled substance therapy continues. ([code.wvlegislature.gov](https://code.wvlegislature.gov/60a-9-5A/))

Schedule II Controlled Substances Regulations

For Schedule II controlled substances, the CSMP query requirement is unequivocal at the initial dispensing event for non–terminally ill patients. That same patient may also be receiving other controlled medications, but the Schedule II initiation itself triggers the mandatory PDMP check. ([regulations.justia.com](https://regulations.justia.com/states/west-virginia/agency-15/title-15/series-15-08/section-15-8-8/))

At pickup, you must verify the full legal name, address, and date of birth of the person receiving any Schedule II–IV prescription using a valid government-issued photo ID. This identity verification supports diversion prevention alongside CSMP checks. ([code.wvlegislature.gov](https://code.wvlegislature.gov/60A-9-4A/))

Remember that dispensing data for controlled substances must be transmitted to the state within 24 hours (48 hours if shipped by mail or common carrier), which reinforces accurate CSMP data for subsequent pharmacist queries. ([regulations.justia.com](https://regulations.justia.com/states/west-virginia/agency-15/title-15/series-15-08/section-15-8-4/))

Patient Privacy Safeguards

West Virginia’s CSMP data is confidential, exempt from the state Freedom of Information Act, and not discoverable in civil matters without a court order. Disclosures are tightly limited to defined purposes and parties, preserving patient information confidentiality under state data privacy regulations. ([code.wvlegislature.gov](https://code.wvlegislature.gov/60A-9-5/))

The Board of Pharmacy’s rules further restrict access, allowing release only to specified users—such as pharmacists and their authorized delegates for treatment—and permitting de-identified use for educational or statistical purposes. Access occurs via secure connections with safeguards against unauthorized disclosure. ([law.cornell.edu](https://www.law.cornell.edu/regulations/west-virginia/W-Va-C-S-R-SS-15-8-7))

Authorized Access and Compliance

Authorized user access includes prescribing practitioners, pharmacists, certain law enforcement agents, specified health oversight entities, and others expressly listed in statute. All information the Board releases must relate to a specific patient or to a defined investigation, with limited exceptions for prescribers/dispensers reviewing data associated with their DEA numbers or for direct patient care. ([code.wvlegislature.gov](https://code.wvlegislature.gov/60A-9-5/))

Facilities may delegate CSMP access to appropriate personnel under Board rules, but the licensed practitioner or dispenser remains responsible for proper use. Registration and ongoing electronic access are mandatory, and good‑faith reliance on CSMP information is an absolute defense in civil or criminal actions tied to dispensing decisions. ([code.wvlegislature.gov](https://code.wvlegislature.gov/60A-9-5/))

CSMP Data Confidentiality Measures

The Board must maintain CSMP data for at least five years and may generate de‑identified reports to support education and public health monitoring. A Database Review Committee can query records using set parameters to identify unusual prescribing or dispensing patterns, and it may refer concerns to licensing boards or law enforcement when warranted—all within strict confidentiality limits. ([code.wvlegislature.gov](https://code.wvlegislature.gov/60A-9-5/))

Board rules reinforce these protections, specifying who may receive information, how authorized agents are designated, and how patient‑specific reports may be stored within confidential medical or pharmacy records for treatment purposes. ([law.cornell.edu](https://www.law.cornell.edu/regulations/west-virginia/W-Va-C-S-R-SS-15-8-7))

Legal Penalties for Noncompliance

Compliance enforcement is explicit in state law. Failure to submit required CSMP data can result in a misdemeanor fine of $100–$500; willful refusal to submit can lead to up to six months’ confinement or a $1,000 fine; and knowingly submitting false information can result in up to one year’s confinement or a $5,000 fine. ([code.wvlegislature.gov](https://code.wvlegislature.gov/60A-9-7/))

Improper disclosure outside authorized purposes carries misdemeanor penalties, while unauthorized access or disclosure unrelated to the program is a felony punishable by one to five years’ imprisonment or a $3,000–$10,000 fine. Separate administrative penalties apply for failing to register for CSMP access ($1,000) and for failing to perform required PDMP queries ($100 per violation), alongside any licensing‑board discipline. A lack of available internet connectivity is a defense to specific actions under the statute. ([code.wvlegislature.gov](https://code.wvlegislature.gov/60A-9-7/))

Key takeaways

• Register and maintain CSMP access within 30 days of licensure; query before initially dispensing any Schedule II, opioid, or benzodiazepine; and recheck at least annually if therapy continues. ([code.wvlegislature.gov](https://code.wvlegislature.gov/60a-9-5A/))
• Protect patient information confidentiality by limiting access and use to authorized, patient‑specific purposes under West Virginia’s Controlled Substances Monitoring Program. ([code.wvlegislature.gov](https://code.wvlegislature.gov/60A-9-5/))
• Know the penalties: fines, potential confinement, felony exposure for unauthorized access/disclosure, and administrative sanctions for missed registrations or queries. ([code.wvlegislature.gov](https://code.wvlegislature.gov/60A-9-7/))

FAQs.

What triggers a mandatory PDMP query in West Virginia?

A pharmacist must access the CSMP when initially dispensing any Schedule II controlled substance, any opioid, or any benzodiazepine to a patient who is not terminally ill. This “first‑fill” trigger is explicit in both statute and Board of Pharmacy rules. ([code.wvlegislature.gov](https://code.wvlegislature.gov/60a-9-5A/))

How often must pharmacies query the PDMP for ongoing patients?

At least annually for any patient who continues to receive controlled substances from your pharmacy. Performing and recording the annual review as part of routine profile maintenance supports consistent compliance. ([code.wvlegislature.gov](https://code.wvlegislature.gov/60a-9-5A/))

Who is authorized to access PDMP data?

Access is limited to defined users, including pharmacists and prescribing practitioners for treatment, specified law enforcement and oversight entities, and others identified in statute. Delegated access is permitted under Board rules, but the licensee remains responsible for appropriate use. ([code.wvlegislature.gov](https://code.wvlegislature.gov/60A-9-5/))

What privacy protections govern patient information in the CSMP?

CSMP data is confidential, FOIA‑exempt, and generally not discoverable in civil cases absent a court order. Disclosures are narrowly tailored to authorized purposes, and de‑identified data may be used for educational or statistical work under strict safeguards. ([code.wvlegislature.gov](https://code.wvlegislature.gov/60A-9-5/))