§15–1629.

    (a)    This section applies only to a pharmacy benefits manager that provides pharmacy benefits management services on behalf of a carrier.

    (b)    This section does not apply to an audit that involves probable or potential fraud or willful misrepresentation by a pharmacy or pharmacist.

    (c)    A pharmacy benefits manager shall conduct an audit of a pharmacy or pharmacist under contract with the pharmacy benefits manager in accordance with this section.

    (d)    (1)    A pharmacy benefits manager may conduct an audit through an auditing entity.

        (2)    The Commissioner may adopt regulations to carry out this subsection.

    (e)    A pharmacy benefits manager may not schedule an onsite audit to begin during the first 5 calendar days of a month unless requested by the pharmacy or pharmacist.

    (f)    When conducting an audit, a pharmacy benefits manager shall:

        (1)    if the audit is onsite, provide written notice to the pharmacy or pharmacist at least 2 weeks before conducting the initial onsite audit for each audit cycle;

        (2)    employ the services of a pharmacist if the audit requires the clinical or professional judgment of a pharmacist;

        (3)    allow its auditors to enter the prescription area of a pharmacy only when accompanied by or authorized by a member of the pharmacy staff;

        (4)    allow a pharmacist or pharmacy to use any prescription, or authorized change to a prescription, that meets the requirements of COMAR 10.34.20.02 to validate claims submitted for reimbursement for dispensing of original and refill prescriptions;

        (5)    for purposes of validating the pharmacy record with respect to orders or refills of a drug, allow the pharmacy or pharmacist to use records of a hospital or a physician or other prescriber authorized by law that are:

            (i)    written; or

            (ii)    transmitted electronically or by any other means of communication authorized by contract between the pharmacy and the pharmacy benefits manager;

        (6)    accept a completed cash register transaction to serve as proof of delivery or pickup for a pharmacy customer unless there is contradictory information;

        (7)    audit each pharmacy and pharmacist under the same standards and parameters as other similarly situated pharmacies or pharmacists audited by the pharmacy benefits manager;

        (8)    only audit claims submitted or adjudicated within the 2–year period immediately preceding the audit, unless a longer period is authorized under federal or State law;

        (9)    deliver the preliminary audit report to the pharmacy or pharmacist within 120 calendar days after the completion of the audit, with reasonable extensions allowed;

        (10)    in accordance with subsection (m) of this section, allow a pharmacy or pharmacist to produce documentation to address any discrepancy found during the audit; and

        (11)    deliver the final audit report to the pharmacy or pharmacist:

            (i)    within 6 months after delivery of the preliminary audit report if the pharmacy or pharmacist does not request an internal appeal under subsection (m) of this section; or

            (ii)    within 30 days after the conclusion of the internal appeals process under subsection (m) of this section if the pharmacy or pharmacist requests an internal appeal.

    (g)    If a contract between a pharmacy or pharmacist and a pharmacy benefits manager specifies a period of time in which a pharmacy or pharmacist is allowed to withdraw and resubmit a claim and that period of time expires before the pharmacy benefits manager delivers a preliminary audit report that identifies discrepancies, the pharmacy benefits manager shall allow the pharmacy or pharmacist to withdraw and resubmit a claim within 30 days after:

        (1)    the preliminary audit report is delivered if the pharmacy or pharmacist does not request an internal appeal under subsection (m) of this section; or

        (2)    the conclusion of the internal appeals process under subsection (m) of this section if the pharmacy or pharmacist requests an internal appeal.

    (h)    During an audit, a pharmacy benefits manager may not disrupt the provision of services to the customers of a pharmacy.

    (i)    (1)    A pharmacy benefits manager may not:

            (i)    use the accounting practice of extrapolation to calculate overpayments or underpayments;

            (ii)    except as provided in paragraph (2) of this subsection:

                1.    share information from an audit with another pharmacy benefits manager; or

                2.    use information from an audit conducted by another pharmacy benefits manager;

            (iii)    recoup any funds from or charge any fees to a pharmacy or pharmacist for a prescription with regard to an incorrect days of supply calculation if the package size of the medication is unbreakable and the pharmacy benefits manager cannot accept the correct mathematically calculable days’ supply during prescription adjudication;

            (iv)    have or request access to a pharmacy’s or pharmacist’s bank, credit card, or depository statements or data as it relates to cost–sharing; or

            (v)    audit claims that were reversed or for which there was no remuneration by the purchaser or cost to the pharmacy customer except if necessary to evaluate compliance to a contract.

        (2)    Paragraph (1)(ii) of this subsection does not apply to the sharing of information:

            (i)    required by federal or State law;

            (ii)    in connection with an acquisition or merger involving the pharmacy benefits manager; or

            (iii)    at the payor’s request or under the terms of the agreement between the pharmacy benefits manager and the payor.

    (j)    A pharmacy benefits manager or purchaser may not audit more than 125 prescriptions during a desk or site audit.

    (k)    The recoupment of a claims payment from a pharmacy or pharmacist by a pharmacy benefits manager shall be based on an actual overpayment or denial of an audited claim unless the projected overpayment or denial is part of a settlement agreed to by the pharmacy or pharmacist.

    (l)    (1)    In this subsection, “overpayment” means a payment by the pharmacy benefits manager to a pharmacy or pharmacist that is greater than the rate or terms specified in the contract between the pharmacy or pharmacist and the pharmacy benefits manager at the time that the payment is made.

        (2)    A clerical error, record–keeping error, typographical error, or scrivener’s error in a required document or record may not constitute fraud or grounds for recoupment of a claims payment from a pharmacy or pharmacist by a pharmacy benefits manager if the prescription was otherwise legally dispensed and the claim was otherwise materially correct.

        (3)    Notwithstanding paragraph (2) of this subsection, claims remain subject to recoupment of overpayment or payment of any discovered underpayment by the pharmacy benefits manager.

    (m)    (1)    A pharmacy benefits manager shall establish an internal appeals process under which a pharmacy or pharmacist may appeal any disputed claim in a preliminary audit report.

        (2)    Under the internal appeals process, a pharmacy benefits manager shall allow a pharmacy or pharmacist to request an internal appeal within 30 working days after receipt of the preliminary audit report, with reasonable extensions allowed.

        (3)    The pharmacy benefits manager shall include in its preliminary audit report a written explanation of the internal appeals process, including the name, address, and telephone number of the person to whom an internal appeal should be addressed.

        (4)    The decision of the pharmacy benefits manager on an appeal of a disputed claim in a preliminary audit report by a pharmacy or pharmacist shall be reflected in the final audit report.

        (5)    The pharmacy benefits manager shall deliver the final audit report to the pharmacy or pharmacist within 30 calendar days after conclusion of the internal appeals process.

    (n)    (1)    A pharmacy benefits manager may not recoup by setoff any money for an overpayment or denial of a claim until:

            (i)    the pharmacy or pharmacist has an opportunity to review the pharmacy benefits manager’s findings; and

            (ii)    if the pharmacy or pharmacist concurs with the pharmacy benefits manager’s findings of overpayment or denial, 30 working days have elapsed after the date the final audit report has been delivered to the pharmacy or pharmacist.

        (2)    If the pharmacy or pharmacist does not concur with the pharmacy benefits manager’s findings of overpayment or denial, the pharmacy benefits manager may not recoup by setoff any money pending the outcome of an appeal under subsection (m) of this section.

        (3)    A pharmacy benefits manager shall remit any money due to a pharmacy or pharmacist as a result of an underpayment of a claim within 30 working days after the final audit report has been delivered to the pharmacy or pharmacist.

        (4)    Notwithstanding the provisions of paragraph (1) of this subsection, a pharmacy benefits manager may withhold future payments before the date the final audit report has been delivered to the pharmacy or pharmacist if the identified discrepancy for all disputed claims in a preliminary audit report for an individual audit exceeds $25,000.

    (o)    (1)    A pharmacy benefits manager shall provide a pharmacy or pharmacist being audited with a phone number and, if available, access to a secure portal that the pharmacy or pharmacist may use to ask questions regarding the audit.

        (2)    An individual who is familiar with the audit shall respond to all inquiries made through a phone number or secure portal provided under paragraph (1) of this subsection within 3 business days after the inquiry was made.

    (p)    (1)    The pharmacy benefits manager shall give the pharmacy or pharmacist the option to provide requested audit documentation by postal mail, e–mail, or facsimile.

        (2)    If a document is requested regarding an audit, the pharmacy benefits manager shall provide a secure facsimile number and a mechanism for receiving secure e–mails.

        (3)    On or before October 1, 2025, a pharmacy benefits manager shall provide a mechanism for secure electronic communication for pharmacies and pharmacists to communicate with and submit documents to the auditing entity.

    (q)    (1)    The Commissioner may adopt regulations regarding:

            (i)    the documentation that may be requested during an audit; and

            (ii)    the process a pharmacy benefits manager may use to conduct an audit.

        (2)    On request of the Commissioner or the Commissioner’s designee, a pharmacy benefits manager shall provide a copy of its audit procedures or internal appeals process.