Regulation 100 Privacy of Consumer Health Information

Regulation Authority:

R.I. Gen. Laws §§ 27-58-4 and 42-14-17

Purpose and Reason:

Purpose. This Regulation governs the treatment of individual’s nonpublic personal health information by all insurance licensees of the Rhode Island Department of Business Regulation. This Regulation: (1) describes the conditions under which a licensee may disclose nonpublic personal health information about individuals to affiliates and nonaffiliated third parties; and (2) provides methods for individuals to prevent a licensee from disclosing that information. B. Scope. This Regulation applies to all nonpublic personal health information. Nothing in this Regulation shall be construed to modify, limit or supercede the operation of the Rhode Island Workers’ Compensation Act (R.I. Gen. Laws § 28-29-1 et seq.) and the health care provider’s obligation to provide information directly related to a claim for workers’ compensation benefits or any proceeding before the Workers’ Compensation Court, or any proceeding relating to workers’ compensation including, but not limited to, actions seeking benefits under the Longshore and Harbor Workers Compensation Act (33 U.S.C. § 901 et seq.) or the Police Officers and Firefighters Relief Statute (R.I. Gen. Laws § 45-19-1 et seq.) C. Compliance. An insurance licensee that is in compliance with this regulation may be deemed to be in compliance with Title V of the Gramm-Leach-Bliley Act in a state which has not yet enacted laws or regulations that meet the requirements of Gramm-Leach-Bliley.