RSA 141-J:8 Privacy and Confidentiality Protections.

I. Any person allowed access to individually identifiable health information in program records shall sign a confidentiality agreement, in a form specified by the department, requiring adherence to privacy and security protections equivalent to or greater than the protections provided in this chapter.
II. The department shall maintain a list of any persons other than program staff given access to individually identifiable health information. The list shall include:
(a) The name of the person authorizing access.
(b) The name, title, and organizational affiliation of each person given access.
(c) The date of access.
(d) The specific purpose for which the information was used.
III. Individually identifiable health information in the records of the pr