(a) The OCR shall maintain a confidential list of the persons to whom the OCR has issued Medical Cannabis Patient Cards and their addresses, phone numbers, and registry identification numbers. This confidential list may not be combined or linked in any manner with any other list or database, nor may it be used for any purpose not provided for in this chapter.
(b) The OCR shall establish a secure phone or web-based verification system. The verification system must allow law enforcement personnel and Cannabis Businesses to enter a registry identification number and determine whether the number corresponds with a current, valid Medical Cannabis Patient Card. The system must disclose only:(1) whether the identification card is valid;(2) the name of the cardholder;(3) whether the cardholder is a Qualified Patient or a Designated Caregiver;(4) whether the cardholder is permitted to cultivate Cannabis plants; and(5) the registry identification number of any affiliated registered Qualified Patient to a Designated Caregiver.
(1) whether the identification card is valid;
(2) the name of the cardholder;
(3) whether the cardholder is a Qualified Patient or a Designated Caregiver;
(4) whether the cardholder is permitted to cultivate Cannabis plants; and
(5) the registry identification number of any affiliated registered Qualified Patient to a Designated Caregiver.