§ 5-37.7-4. Participation in the health information exchange. (a) There shall be established a statewide HIE under state authority to allow for the electronic mobilization of confidential healthcare information in Rhode Island. Confidential healthcare information may only be accessed, released, or transferred from the HIE in accordance with this chapter.

(b) The state of Rhode Island has an interest in encouraging participation in the HIE by all interested parties, including, but not limited to, healthcare providers, patients, health plans, entities submitting information to the HIE, entities obtaining information from the HIE, and the RHIO. The Rhode Island department of health is also considered a participant for public health purposes.

(c) Patients and healthcare providers shall have the choice to participate in the HIE, as defined by regulations in accordance with § 5-37.7-3; provided, however, that provider participants must continue to maintain their own medical record meeting the documentation and other standards imposed by otherwise applicable law.

(d) Participation in the HIE shall have no impact on the content of, or use or disclosure of, confidential healthcare information of patient participants that is held in locations other than the HIE. Nothing in this chapter shall be construed to limit, change, or otherwise affect entities' rights to exchange confidential healthcare information in accordance with other applicable laws.

(e) The state of Rhode Island hereby imposes on the HIE and the RHIO as a matter of state law, the obligation to maintain, and abide by the terms of, HIPAA-compliant business associate agreements, including, without limitation, the obligations to use appropriate safeguards to prevent use or disclosure of confidential healthcare information in accordance with HIPAA and this chapter; not to use or disclose confidential healthcare information other than as permitted by HIPAA and this chapter; or to make any amendment to a confidential healthcare record that a provider participant so directs; and to respond to a request by a patient participant to make an amendment to the patient participant's confidential healthcare record.

History of Section. (P.L. 2008, ch. 171, § 2; P.L. 2008, ch. 466, § 2; P.L. 2016, ch. 67, § 1; P.L. 2016, ch. 71, § 1.)