The medical cannabis registry is a secure system. Records in the medical cannabis registry containing names and other personally identifiable information of qualifying patients and designated providers (DPs) are exempt from disclosure. RCW 42.56.625.
State law strictly limits who can view database information and how the information can be used. Only the following people can see information from the registry for the following purposes:
A patient or DP can access their health care information and actions completed by a person or entity that has queried their name or information.
Healthcare Practitioners who authorize medical cannabis can see their patients' health care information. Practitioners authorized to prescribe or dispense controlled substances can look up patients in the registry for the purpose of providing medical or pharmaceutical care for their patients
Certified medical cannabis consultants working in a medically endorsed cannabis store can add patient information from the authorization form.
Employees who work for a medically-endorsed cannabis retailer to confirm the validity of the recognition card of a qualifying patient or designated provider.
Designated law enforcement or prosecutorial officials engaged in a specific investigation of suspected cannabis-related activity that may be illegal can confirm the validity of the recognition card of a qualifying patient or DP.
The patient registry vendor can do data maintenance and provide store support.
The Department of Health and the health care practitioner's disciplining authority can monitor authorizations and ensure compliance with this chapter and chapter 18.130 RCW by their licensees.
The Liquor and Cannabis Board can view aggregate, non-patient identifying information to verify excise tax exemptions under RCW 69.50.535.