An entity described in section 71-2455 shall establish a system of prescription drug monitoring which shall include provisions that make the prescription information available to the statewide health information exchange described in section 71-2455 for access by its participants if such access is in compliance with the privacy and security protections set forth in the provisions of the federal Health Insurance Portability and Accountability Act of 1996, Public Law 104-191, and regulations promulgated thereunder, except that if a patient opts out of the statewide health information exchange, the prescription information regarding that patient shall not be accessible by the participants in the statewide health information exchange.