Security - R.I. Gen. Laws Ann. § 5-37.7-8

The Rhode Island Health Information Exchange (HIE) must comply, at minimum with the following security measures: (1) “authenticate the recipient of any confidential health information disclosed by the HIE…;” (2) limit access to confidential health information to persons that “need” the information; (3) assign responsibility for security oversight to an individual or individuals; (4) provide employees and agents with a statement regarding the need to safeguard confidential health care information and the penalties for improper disclosure of such information; and (5) prohibit the discipline of an employee in retaliation to their reporting of a security or confidentiality violation.