2015 New Hampshire Revised Statutes
Title XXX - OCCUPATIONS AND PROFESSIONS
Chapter 332-I - MEDICAL RECORDS, PATIENT INFORMATION, AND THE HEALTH INFORMATION ORGANIZATION CORPORATION
Section 332-I:10 - Powers and Duties.

    332-I:10 Powers and Duties. – The corporation shall:
    I. Establish and maintain a health information organization that facilitates the private and secure electronic exchange of health information that promotes quality and patient safety, and increases efficiencies in health care delivery. Except as provided in RSA 332-I:3, VI, the health information organization may retain patient demographics, including patient name, address, date of birth, gender, medical record numbers, and location of medical records, which shall be used solely to ensure consistent patient identification between health care providers and enable electronic query for patient health information. The health information organization shall otherwise act solely as a conduit for such electronic exchange and shall neither access nor retain, in a database or otherwise, the clinical content of any medical record. The information retained by the health information organization or its agents or business associates shall not be sold or disclosed.
    II. Implement recognized national standards for interoperability and transmission security. Transmission security standards shall guard against unauthorized access to electronic health information that is being transmitted over an electronic communications network and shall include appropriate integrity controls and encryption mechanisms in accordance with HIPAA security regulations.
    III. Establish all administrative, operational, and financial functions to support the health information organization including, but not limited to, implementing and enforcing policies as appropriate to carry out and discharge its powers, duties, and functions. Such policies shall include protecting the privacy of patients and safeguarding confidential health care information.
    IV. Enter into grants, contracts, or agreements as necessary to the operation of the corporation including any such grants, contracts, or agreements, or the transfer thereof, as necessary to effect the transition of the planning, implementation, and operation of the health information organization from the department of health and human services to the board.
    V. Adopt bylaws to govern the conduct of its affairs and to carry out and discharge its powers, duties, and functions and to adopt policies as appropriate. Such bylaws shall include a provision pertaining to conflicts of interest and that board members, staff, and others conducting business or associated with the health information organization shall be required to sign conflict of interest statements.
    VI. Provide an annual report, including any recommendations, on or before January 1 of each year to the governor, commissioner of the department of health and human services, chair of the department of health and human services oversight committee, speaker of the house of representatives, and senate president, on the development and status of the health information organization.

Source. 2011, 232:5, eff. July 5, 2011. 2014, 189:5, eff. Sept. 9, 2014.