1.  Prescription drug data.  Within 30 business days of a request from a plan sponsor that has certified its compliance with the use and disclosure requirements of 45 Code of Federal Regulations, Section 164.504(f), a pharmacy benefits manager shall provide data to the plan sponsor regarding the actual amounts directly or indirectly paid by the pharmacy benefits manager to a pharmacy or pharmacist on behalf of the plan sponsor for a prescription drug and any dispensing fee for a prescription drug.  

2.  Claims data; right to audit.  Notwithstanding section 4350‑C, a pharmacy benefits manager that contracts with a plan sponsor to provide prescription drug coverage shall permit a plan sponsor to perform a post-payment audit of claims paid to ensure compliance with the contract at least once in a calendar year as long as the request is not earlier than 6 months following a previously requested audit. Upon request of a plan sponsor as part of an audit, a pharmacy benefits manager shall disclose within 30 business days to a plan sponsor who has certified its compliance with the use and disclosure requirements of 45 Code of Federal Regulations, Section 164.504(f), or, to the extent permitted by law and if requested by the plan sponsor, to the plan sponsor's designated business associate the following information specific to the plan sponsor:  

3.  No conditions or fees on audit.  A pharmacy benefits manager may not impose on a plan sponsor:  

4.  Nondisclosure and data use agreement.  A pharmacy benefits manager may require that the plan sponsor and the plan sponsor's designated business associate execute a nondisclosure and data use agreement that reasonably restricts the auditor's use of data provided by the pharmacy benefits manager to the sole purpose of conducting an audit on behalf of a plan sponsor. The coverage limits of any cybersecurity insurance or liability insurance policy required under the nondisclosure and data use agreement may not exceed the pharmacy benefits manager's limit of liability under the services agreement between the plan sponsor and the pharmacy benefits manager, if such limit applies. In addition, a pharmacy benefits manager is not required to provide data to an auditor selected by a plan sponsor if the auditor has previously breached a nondisclosure and data use agreement with that pharmacy benefits manager or refuses to execute a nondisclosure and data use agreement.  

5.  Compliance with federal law.  Information provided by a pharmacy benefits manager to a plan sponsor in accordance with this section must comply with any applicable requirements of the federal Health Insurance Portability and Accountability Act of 1996, Public Law 104-191, and the federal Health Information Technology for Economic and Clinical Health Act of 2009, Title XIII, Subtitle D, Public Law 111-5, and any regulations promulgated under those laws.  

6.  Application.  An administrator or pharmacy benefits manager may not enter into, issue, amend or renew any contract or network services agreement with a plan sponsor on or after January 1, 2026 that contains any provision that violates this section.  

7.  Exclusive enforcement; violation.  Notwithstanding section 12‑A, a violation of this section is subject to exclusive enforcement under the Maine Unfair Trade Practices Act, including any of the remedies provided for in the Act. A violation is committed each time a prohibited act under this section occurs. Investigations of violations by pharmacy benefits managers may include a 3rd party that may possess evidence supporting such investigation.