{"data":{"id":"us-nh/rsa-332-i-5","jurisdiction":"us-nh","citation":"RSA 332-I:5","heading":"Unauthorized Disclosure.","body":"In the event of a use or disclosure of protected health information by a health care provider or a business associate of a health care provider that is allowed under federal law but not permitted by RSA 332-I:4, the health care provider shall promptly notify in writing the individual or individuals whose protected health information was disclosed. A business associate shall be responsible for the cost of such notification if the use or disclosure was by the business associate.","path":["Title XXX: OCCUPATIONS AND PROFESSIONS","Chapter 332-I: MEDICAL RECORDS, PATIENT INFORMATION, AND THE HEALTH INFORMATION ORGANIZATION CORPORATION"],"source_url":"https://gc.nh.gov/rsa/html/XXX/332-I/332-I-5.htm","current_through":"2025 regular legislative session, or December 2025","vintage":"","retrieved_at":"2026-09-05T15:13:22Z","sha256":"edf1505e693698a1018b1fed52f46992fd146430b23b222d9914c4e86fe0a445","source_id":"us-nh","stale":false,"prev":"us-nh/rsa-332-i-4","next":"us-nh/rsa-332-i-6"},"notice":"GroundRules: Original legal text. Not legal advice."}