This RSA section is an unofficial mirror, is not legal advice, and may be incomplete, outdated, or incorrectly processed.

RSA 332-I:1 · Medical Records; Definitions

332-I:1 Medical Records; Definitions. –

Copy link
I.

All medical information contained in the medical records in the possession of any health care provider, or in the possession of any third-party vendor with whom a health care provider contracts to store, handle, and issue copies of such medical records, shall be deemed to be the property of the patient. The patient or the patient's requestor shall be entitled to a copy of such records upon request, as regulated by the Health Insurance Portability and Accountability Act of 1996, as amended ("HIPAA").

Copy link
(a)

For purposes of this section, a "requestor" means the patient's personal representative, the patient's health care provider, an individual authorized to access the patient's medical record through a valid power of attorney, or the patient's attorney.

Copy link
(b)

For any request made by a requestor, the cost for electronic copies of the patient's medical records, and all related services, shall be charged at a reasonable rate not to exceed $50.00, and the cost for paper copies of the patient's medical records, and all related services, shall not exceed $5 for the first page, $.41 per page for pages 2 through 50, and $.30 per page for pages 51 and higher. If, however, any redactions to the patient's records are specifically requested by the requestor, such as for example, redactions of sensitive information pertaining to HIV status, drug and alcohol use, mental health, or genetic testing, the requestor may be charged a reasonable cost for the labor necessary to complete those redactions, not to exceed $25 per hour.

Copy link
(c)

If a patient's medical records are stored and available in an electronic format, they shall be provided in that format to the requestor. Records which are stored and available in an electronic format shall not be printed and provided in paper format unless specifically requested in paper format by the requestor.

Copy link
(d)

All records being provided pursuant to requests by a requestor shall be provided to the requestor within 30 days of the receipt of the request, and any records not provided within 30 days shall be provided at no cost, absent an independent intervening force majeure which renders the requested records inaccessible, irretrievable, or undeliverable within this 30-day timeframe.

Copy link
(e)

If an incomplete copy of the requested medical records is provided, and additional requests are required to obtain a complete copy of the originally requested medical records, any records provided pursuant to those additional requests shall be provided at no cost.

Copy link
(f)

Notwithstanding any other provision of law, when the requestor of medical records is the person's health care provider, the requested transfer must be made within 14 days of the request at no cost.

Copy link
II.

In this chapter:

Copy link
(a)

The following terms have the same meaning as given in the regulations under sections 262 and 264 of the Health Insurance Portability and Accountability Act of 1996 (HIPAA):

Copy link
(1)

Business associate;

Copy link
(2)

Use;

Copy link
(3)

Disclosure; and

Copy link
(4)

Protected health information.

Copy link
(b)

"Health care provider" means any person, corporation, facility, or institution either licensed by this state or otherwise lawfully providing health care services, including, but not limited to, a physician, advanced practice registered nurse, physician associate, hospital, office, clinic, health center or other health care facility, dentist, nurse, optometrist, pharmacist, podiatrist, physical therapist, mental health professional, care coordinator, managed care provider, or the department of health and human services, and any officer, employee, or agent of such provider acting in the course and scope of employment or agency related to or supportive of health care services.

Copy link
(c)

[Repealed.]

Copy link
(d)

"Marketing" means:

Copy link
(1)

To make a communication about a product or service that encourages recipients of the communication to purchase or use the product or service, unless the communication is made by the individual's health care provider;

Copy link
(A)

For treatment of the individual;

Copy link
(B)

For case management or care coordination for the individual;

Copy link
(C)

To direct or recommend to the individual:

Copy link
(i)

Alternative treatments or therapies if recommended by the individual's health care provider;

Copy link
(ii)

Health care providers;

Copy link
(iii)

Settings of care; or

Copy link
(D)

For treatment-related reminders or health promotion activities by health care providers.

Copy link
(2)

An arrangement between a health care provider and any other person whereby the health care provider discloses protected health information to the other person, in exchange for direct or indirect remuneration, for the other person or an affiliate of the other person to make a communication about the person's own product or service that encourages recipients of the communication to purchase or use that product or service.

Copy link
(e)

"Audit trail" means a chronological record identifying specific persons who have accessed an electronic medical record, the date and time the record was accessed, and, if such information is available, the area of the record that was accessed. An audit trail shall not be considered a part of a person's medical care.

Copy link
(f)

"Individual" means the subject of the protected health information, including a guardian or other legal representative.

Copy link
(g)

[Repealed.]

Copy link
(h)

[Repealed.]

Copy link
III.

Release or use of patient identifiable medical information for the purpose of sales or marketing of services or products shall be prohibited without written authorization. Source. 1989, 43:2. 1997, 331:11. 1998, 236:2. 2001, 85:2. 2004, 144:1. 2006, 250:1. 2009, 213:5; 318:2. 2010, 64:1. 2011, 232:2, 3. 2014, 189:1, eff. Sept. 9, 2014. 2020, 37:4, XXIII, XXIV, eff. July 29, 2020. 2024, 265:5, eff. July 26, 2024. 2025, 105:1, eff. June 17, 2025; 233:1, eff. Sept. 13, 2025.

Copy link

Source note

Source. 1989, 43:2. 1997, 331:11. 1998, 236:2. 2001, 85:2. 2004, 144:1. 2006, 250:1. 2009, 213:5; 318:2. 2010, 64:1. 2011, 232:2, 3. 2014, 189:1, eff. Sept. 9, 2014. 2020, 37:4, XXIII, XXIV, eff. July 29, 2020. 2024, 265:5, eff. July 26, 2024. 2025, 105:1, eff. June 17, 2025; 233:1, eff. Sept. 13, 2025.

Source history

  • 1989, 43:2
  • 1997, 331:11
  • 1998, 236:2
  • 2001, 85:2
  • 2004, 144:1
  • 2006, 250:1
  • 2009, 213:5; 318:2
  • 2010, 64:1
  • 2011, 232:2, 3
  • 2014, 189:1, eff. Sept. 9, 2014
  • 2020, 37:4, XXIII, XXIV, eff. July 29, 2020
  • 2024, 265:5, eff. July 26, 2024
  • 2025, 105:1, eff. June 17, 2025; 233:1, eff. Sept. 13, 2025

Related materials

Bill relationships

  • 2026 HB1231 amend

    1 New Subdivision; Medical Records, Patient Information, and The Health Information Organization Corporation; Disclosure of Medical Services Billed to Insurance Carrier. Amend RSA 332-I by inserting after section 13 the following new subdivision: Disclosure of Medical Services Billed to Insurance Carrier 332-I:14 Definitions. In this subdivision: I. “Health care provider” means any individual or

  • 2026 HB1378 amend

    a minor child’s health care needs, parents must be granted access to their children’s medical records. 2 New Section; Parental Access to a Minor Child's Medical Records. Amend RSA 332-I by inserting after section 1 the following new section: 332-I:1-a Parental Access to a Minor Child's Medical Records. I. For the purposes of this section, "medical records" means physical medical records and elect

  • 2025 HB70 add

    erminable Indeterminable Indeterminable Local Revenue $0 $0 $0 $0 Local Expenditures $0 Indeterminable Indeterminable Indeterminable METHODOLOGY: The Insurance Department states this bill adds a new section to RSA 332-I prohibiting public and private health carriers from requiring health care providers meet certain electronic medical record standards. Carriers would be prohibited from requiring use of electronic medical recor

Opinions and discipline decisions mentioning this RSA