Rhode Island Health Privacy Rights

Pre-HIPAA Privacy Law: Rhode Island's Confidentiality of Health Care Communications and Information Act (R.I. Gen. Laws § 5-37.3) predates HIPAA and is quite protective. It generally prohibits healthcare providers from releasing a patient's identifiable health information to third parties without the patient's written consent, except for certain limited purposes. This gave Rhode Islanders a broad right to confidentiality – essentially, your authorization is needed for disclosures not explicitly allowed by that law (which include things like continuity of care and mandatory reporting). HIPAA's allowances are largely mirrored, but if HIPAA would allow something not allowed under RI law, the RI law (being more stringent) controls.

Access: Rhode Island guarantees patients the right to see and copy their medical records. State law requires providers to permit inspection of records during business hours within 10 days of a request, and to provide copies within 30 days. So RI patients benefit from quick inspection and standard copy times. Fees for copies are limited by regulation.

Mental Health & HIV: RI requires patient consent for most mental health record disclosures and follows a similar consent model for HIV information.

Enforcement: Rhode Island's law gives patients the right to file a complaint with the state Department of Health for violations, and providers can face penalties. Patients can't directly sue under the statute, but they might use common law. Overall, RI's law strongly reinforces patient consent rights for info sharing beyond treatment needs, making it one of the strict states in terms of requiring patient permission.