Arizona Laws 36-2807. Verification system
Terms Used In Arizona Laws 36-2807
- Cardholder: means a qualifying patient, a designated caregiver, a nonprofit medical marijuana dispensary agent or a independent third-party laboratory agent who has been issued and possesses a valid registry identification card. See Arizona Laws 36-2801
- Department: means the department of health services or its successor agency. See Arizona Laws 36-2801
- Marijuana: means all parts of any plant of the genus cannabis whether growing or not, and the seeds of such plant. See Arizona Laws 36-2801
- Nonprofit medical marijuana dispensary: means a not-for-profit entity that acquires, possesses, cultivates, manufactures, delivers, transfers, transports, supplies, sells or dispenses marijuana or related supplies and educational materials to cardholders. See Arizona Laws 36-2801
- Qualifying patient: means a person who has been diagnosed by a physician as having a debilitating medical condition. See Arizona Laws 36-2801
- Registry identification card: means a document issued by the department that identifies a person as a registered qualifying patient, a registered designated caregiver, a registered nonprofit medical marijuana dispensary agent or a registered independent third-party laboratory agent. See Arizona Laws 36-2801
- Verification system: means a secure, password-protected, web-based system that is established and maintained by the department and that is available to law enforcement personnel and nonprofit medical marijuana dispensary agents on a twenty-four-hour basis for verifying registry identification cards. See Arizona Laws 36-2801
(Caution: 1998 Prop. 105 applies)
A. Within one hundred twenty days of the effective date of this chapter, the department shall establish a secure, password-protected, web-based verification system for use on a twenty-four hour basis by law enforcement personnel, nonprofit medical marijuana dispensary agents and employers to verify registry identification cards. An employer may use the verification system only to verify a registry identification card that is provided to the employer by a current employee or by an applicant who has received a conditional offer of employment.
B. The verification system must allow law enforcement personnel and nonprofit medical marijuana dispensary agents to enter a registry identification number and verify whether the number corresponds with a current, valid identification card.
C. The system shall disclose:
1. The name of the cardholder, but must not disclose the cardholder’s address.
2. The amount of marijuana that each registered qualifying patient received from nonprofit medical marijuana dispensaries during the past sixty days.
D. The verification system must include the following data security features:
1. Any time an authorized user enters five invalid registry identification numbers within five minutes, that user cannot log in to the system again for ten minutes.
2. A users log-in information shall be deactivated after five incorrect login attempts until the authorized user contacts the department and verifies the user’s identity.
3. The server must reject any log-in request that is not over an encrypted connection.