Health Information Technology

The department of health will administer a Health Information Exchange (HIE) that will allow providers and patients to exchange confidential health care information.1 The Rhode Island Health Information Organization (RHIO) will oversee the HIE’s functions and ensure that the HIE utilizes nationally recognized standards for interoperability.2 With limited exceptions, the HIE must obtain a patient’s authorization to release or transfer that patient’s information.3 Providers that receive information from the HIE may further disclose the information in accordance with state and federal law.4 The HIE must incorporate specified, minimum security measures (e.g. designating a person as responsible for security oversight and informing employees of the need to safeguard confidential information).5 Patients whose information is transferred on the HIE will receive various rights (e.g. the right to obtain their health information from the HIE, the right to receive notice of a security breach).6 Providers that treat patients in reliance on information obtained from the HIE are immune from liability.7 Persons that violate any of these provisions regarding the may be civilly and criminally liable.8

Rhode Island utilizes HIT in areas beyond the HIE. For example, the department of health utilizes “KIDSNET, a confidential, computerized child health information system” to manage immunization and health preventive services for children aged 18 and under9 and maintains a “comprehensive health care information system.”10 Future HIT use and implementation will be guided by the healthcare information technology and infrastructure and advisory committee.11