§ 332-i-5

332-I:5 Unauthorized Disclosure. – In the event of a use or disclosure of protected health information by a health care provider or a business associate of a health care provider that is allowed under federal law but not permitted by RSA 332-I:4, the health care provider shall promptly notify in writing the individual or individuals whose protected health information was disclosed. A business associate shall be responsible for the cost of such notification if the use or disclosure was by the business associate. Source. 2009, 213:6, eff. Jan. 1, 2010 at 12:01 a.m.