Section 17b-59e - Electronic health record systems. Connection to State-wide Health Information Exchange(a) For purposes of this section:(1) "Health care provider" means any individual, corporation, facility or institution licensed by the state to provide health care services; and(2) "Electronic health record system" means a computer-based information system that is used to create, collect, store, manipulate, share, exchange or make available electronic health records for the purposes of the delivery of patient care.(b) Not later than one year after commencement of the operation of the State-wide Health Information Exchange, each hospital licensed under chapter 368v and clinical laboratory licensed under section 19a-565 shall maintain an electronic health record system capable of connecting to and participating in the State-wide Health Information Exchange and shall apply to begin the process of connecting to, and participating in, the State-wide Health Information Exchange.(c) Not later than two years after commencement of the operation of the State-wide Health Information Exchange, (1) each health care provider with an electronic health record system capable of connecting to, and participating in, the State-wide Health Information Exchange shall apply to begin the process of connecting to, and participating in, the State-wide Health Information Exchange, and (2) each health care provider without an electronic health record system capable of connecting to, and participating in, the State-wide Health Information Exchange shall be capable of sending and receiving secure messages that comply with the Direct Project specifications published by the federal Office of the National Coordinator for Health Information Technology. A health care provider shall not be required to connect with the State-wide Health Information Exchange if the provider (A) possesses no patient medical records, or (B) is an individual licensed by the state that exclusively practices as an employee of a covered entity, as defined by the Health Insurance Portability and Accountability Act of 1996, P.L. 104-191, as amended from time to time, and such covered entity is legally responsible for decisions regarding the safeguarding, release or exchange of health information and medical records, in which case such covered entity is responsible for compliance with the provisions of this section.(d) Nothing in this section shall be construed to require a health care provider to share patient information with the State-wide Health Information Exchange if (1) sharing such information is prohibited by state or federal privacy and security laws, or (2) affirmative consent from the patient is legally required and such consent has not been obtained.(e) No health care provider shall be liable for any private or public claim related directly to a data breach, ransomware or hacking experienced by the State-wide Health Information Exchange, provided a health care provider shall be liable for any failure to comply with applicable state and federal data privacy and security laws and regulations in sharing information with and connecting to the exchange. Any health care provider that would violate any other law by sharing information with or connecting to the exchange shall not be required to share such information with or connect to the exchange.(f) The Commissioner of Health Strategy shall adopt regulations in accordance with the provisions of chapter 54 that set forth requirements necessary to implement the provisions of this section. The commissioner may implement policies and procedures necessary to administer the provisions of this section while in the process of adopting such policies and procedures in regulation form, provided the commissioner holds a public hearing at least thirty days prior to implementing such policies and procedures and publishes notice of intention to adopt the regulations on the Office of Health Strategy's Internet web site and the eRegulations System not later than twenty days after implementing such policies and procedures. Policies and procedures implemented pursuant to this subsection shall be valid until the time such regulations are effective.(g) Not later than eighteen months after the date of implementation of policies and procedures pursuant to subsection (f) of this section, each health care provider shall be connected to and actively participating in the State-wide Health Information Exchange. As used in this subsection, (1) "connection" includes, but is not limited to, onboarding with the exchange, and (2) "participation" means the active sharing of medical records with the exchange in accordance with applicable law including, but not limited to, the Health Insurance Portability and Accountability Act of 1996, P.L. 104-191, as amended from time to time, and 42 CFR 2 .Conn. Gen. Stat. § 17b-59e
( P.A. 15-146 , S. 22 ; June. Sp. Sess. P.A. 17-2 , S. 126 .)
Amended by P.A. 24-0081,S. 181 of the Connecticut Acts of the 2024 Regular Session, eff. 5/30/2024.Amended by P.A. 24-0019,S. 22 of the Connecticut Acts of the 2024 Regular Session, eff. 7/1/2024.Amended by P.A. 22-0058, S. 38 of the Connecticut Acts of the 2022 Regular Session, eff. 5/23/2022.Amended by P.A. 17-0002, S. 126 of the Connecticut Acts of the 2017 Special Session, eff. 10/31/2017.Added by P.A. 15-0146, S. 22 of the Connecticut Acts of the 2015 Regular Session, eff. 6/30/2015.