Duty LXD-1131
Processes de-identified data, in Rhode Island
Health Care Quality Program: removal of personal identifiers from data filed for the health care databasesince 1 line
R.I. Gen. Laws sec. 23-17.17-10(a), (b) · Read the law's page
- Remove all personal identifiers from the data you submit to the director under chapter 17.17 of title 23; if you are an insurer, assign to each subscriber record a unique identifier not linked to any personally identifiable information (R.I. Gen. Laws sec. 23-17.17-10(b)).
Rhode Island Data Transparency and Privacy Protection Act, de-identified datasince 3 lines
R.I. Gen. Laws secs. 6-48.1-2(13), 6-48.1-7(j), (n) · Read the law's page
- If you hold de-identified data, take reasonable measures to ensure that it cannot be associated with an individual (R.I. Gen. Laws sec. 6-48.1-7(j)(1)).
- Publicly commit to maintaining and using de-identified data without attempting to re-identify it (R.I. Gen. Laws sec. 6-48.1-7(j)(2)).
- Contractually obligate every recipient of de-identified data to comply with all provisions of the chapter, monitor their compliance with those commitments and take appropriate steps to address any breach of them (R.I. Gen. Laws sec. 6-48.1-7(j)(3) and (n)).
Confidentiality of Health Care Communications and Information Act: research, audit and study disclosures without patient identificationin force1 line
R.I. Gen. Laws sec. 5-37.3-4(b)(3) · Read the law's page
- If you are qualified personnel who receive confidential healthcare information without patient consent for scientific research, management audits, financial audits, program evaluations, actuarial, insurance underwriting or similar studies, do not identify, directly or indirectly, any individual patient in any report of that research, audit or evaluation, and do not otherwise disclose patient identities in any manner (R.I. Gen. Laws sec. 5-37.3-4(b)(3)).