Rhode Island General Laws Title 5. Businesses and Professions § 5-37.7-5. Regulatory oversight

(a) The department shall develop regulations regarding the confidentiality of patient information received, accessed, or held by the HIE and is authorized to promulgate other regulations as the department deems necessary or desirable to implement the provisions of this chapter, in accordance with the provisions set forth in chapter 17 of title 23 and chapter 35 of title 42.

(b) The department has exclusive jurisdiction over the HIE, except with respect to the jurisdiction conferred upon the attorney general in § 5-37.7-13. This chapter shall not apply to any other private and/or public health information systems utilized within a healthcare provider or other organization that provides healthcare services.

(c) The department shall promulgate rules and regulations for the establishment of an HIE advisory commission. The HIE advisory commission, in consultation with the RHIO, will be responsible for recommendations relating to the department regarding the use of, and appropriate confidentiality protections for, the confidential healthcare information of the HIE. The commission members shall be subject to the advice and consent of the senate. The commission shall report annually to the department, and the report shall be made public.