WeVote
Log In

Bill

Bill

SB 4197

CONTROLLED SUB-PMP-INTERSTATE

104th Regular Session Introduced by Mike Porfirio

SB4197 strengthens interstate PMP data sharing and tightens control over how PMP data is integrated and accessed across health IT systems, with strict security, privacy, and vendor

Referred to Assignments
0
WeVote Research Nonpartisan
Bill Summary · SB 4197

Summary of SB4197 (104th General Assembly, Illinois)

Purpose and intent

SB4197 amends the Illinois Controlled Substances Act to update provisions governing the Prescription Monitoring Program (PMP), with a focus on how data is shared and how integration with the PMP is implemented across Electronic Health Records (EHR), health IT modules, pharmacy systems, and data sharing partners. The bill emphasizes mutual interstate data sharing and expands protections and conditions around data access, security, and vendor integration.

Key provisions

  • Interstate data sharing

    • Interstate PMP data sharing agreements must be mutual.
    • The Department of Human Services (DHS) may share PMP data with other states only if the reciprocal state provides equal access to its PMP data for all authorized users, licensed health care entities, and application vendors, regardless of how those users connect to the PMP.

  • Access and integration of PMP data

    • Entities or systems that integrate PMP data with EHRs, Certified Health IT Modules, Pharmacy Dispensing Systems, or Pharmacy Management Systems must meet State-administered rules, including:
    • Entering into a data-sharing agreement with the PMP.
    • Maintaining security and privacy compliance per state and federal standards.
    • The PMP retains administrative control over each integration site and can disable integration points at no cost to the State.
    • Interstate data sharing requires written authorization from the PMP.
    • PMP data cannot be stored, cached, or sold; the State may audit integration points under confidentiality to protect trade secrets.
    • Data analysis requires express written permission from the PMP.
    • Access to audit data must be available in real time or hourly increments at no cost to the State.

  • Vendor and customer obligations

    • Integrated systems must allow customers (healthcare entities, pharmacies, providers, etc.) to choose their integration vendor or connect directly to the Illinois PMP.
    • Customers must have access to PMP data through their chosen integration vendor, as allowed by law.
    • System suppliers must comply with security and privacy standards.

  • Memoranda of Understanding (MOUs)

    • The PMP can require MOUs with all customers clarifying the customer’s chosen method of integration and data-use requirements.
    • No fee may be charged for MOUs.

  • Compliance and enforcement

    • Non-compliance by any integration vendor, customer, or related party can lead to removal from eligibility to serve as an integration provider and termination of contracts, with cure notices as needed.

  • Effective date

    • The act takes effect immediately upon becoming law.

Affected parties

  • Illinois Department of Human Services (PMP administrator)
  • Health care providers, pharmacists, and dispensing entities
  • Electronic Health Record (EHR) vendors, Certified Health IT Module providers, Pharmacy Management System vendors, and Pharmacy Dispensing System providers
  • Interstate partners and their authorized users, vendors, and entities connected to PMP data

Procedural and timeline aspects

  • The bill was introduced May 6, 2026, and is currently in the assignment stage. It becomes effective immediately if enacted.
  • Provisions rely on rulemaking and MOUs to operationalize data-sharing and integration standards.

Overall, SB4197 aims to strengthen mutual interstate data sharing, tighten control over how PMP data is integrated and accessed across health IT systems, and establish clear obligations and protections for data security, privacy, and vendor compliance.

Compiled from official sources — confirm details with the bill’s official record.

Sign in to ask a question.