CHAPTER 332-I MEDICAL RECORDS, PATIENT INFORMATION, AND THE HEALTH INFORMATION ORGANIZATION CORPORATION
Section 332-I:5
332-I:5 Unauthorized Disclosure. –
In the event of a use or disclosure of protected health information by a health care provider or a business associate of a health care provider that is allowed under federal law but not permitted by RSA 332-I:4, the health care provider shall promptly notify in writing the individual or individuals whose protected health information was disclosed. A business associate shall be responsible for the cost of such notification if the use or disclosure was by the business associate.
Source. 2009, 213:6, eff. Jan. 1, 2010 at 12:01 a.m.