§ 5-37.7-5. Regulatory oversight.
(a) The director of the department of health shall develop regulations regarding the confidentiality of patient participant information received, accessed or held by the HIE and is authorized to promulgate such other regulations as the director deems necessary or desirable to implement the provisions of this chapter, in accordance with the provisions set forth in chapter 17 of title 23 and chapter 35 of title 42 of the general laws.
(b) The department of health has exclusive jurisdiction over the HIE, except with respect to the jurisdiction conferred upon the attorney general in § 5-37.7-13. This chapter shall not apply to any other private and/or public health information systems utilized within a health care provider or other organization that provides health care services.
(c) The department of health shall promulgate rules and regulations for the establishment of an HIE advisory commission that will be responsible for recommendations relating to the use of, and appropriate confidentiality protections for, the confidential health care information of the HIE, subject to regulatory oversight by the department of health. Said commission members shall be subject to the advice and consent of the senate. The commission shall report annually to the department of health and the RHIO, and such report shall be made public.
(P.L. 2008, ch. 171, § 2; P.L. 2008, ch. 466, § 2.)