Rhode Island Workers’ Compensation Medical Record Privacy Laws: What Employees and Employers Need to Know

Confidentiality of Medical Records

In Rhode Island, a patient’s health information is confidential and may not be released without written consent except as specifically allowed by law. The Confidentiality of Health Care Communications and Information Act permits disclosures only under defined circumstances, while also declaring any attempted contractual waiver of these protections void as against public policy. For workers’ compensation matters, the law expressly allows limited disclosures that are directly related to a current claim or proceeding. ([law.justia.com](https://law.justia.com/codes/rhode-island/title-5/chapter-5-37-3/section-5-37-3-4/?utm_source=openai))

HIPAA aligns with state law by allowing covered entities to disclose protected health information as authorized by, and to the extent necessary to comply with, workers’ compensation laws. Practically, this means providers may share injury-related information with an insurer, employer, or the Workers’ Compensation Court as needed to administer a claim, subject to the “minimum necessary” standard. ([law.cornell.edu](https://www.law.cornell.edu/cfr/text/45/164.512?utm_source=openai))

Insurers operating in Rhode Island may use and disclose nonpublic personal health information for defined insurance functions—including claims administration and fraud prevention—without a patient authorization, reinforcing that claim-related data flows are permitted while preserving privacy safeguards. Importantly, workers’ compensation claim records are not public information. ([rules.sos.ri.gov](https://rules.sos.ri.gov/regulations/part/230-20-60-7?utm_source=openai))

Best practice is to maintain confidential medical files separately from personnel records and restrict access to those with a need to know for claims administration. This approach is consistent with federal disability law guidance and Rhode Island public-sector practice. ([eeoc.gov](https://www.eeoc.gov/laws/guidance/ada-primer-small-business?utm_source=openai))

Employer's Responsibilities Regarding Medical Records

Employers and insurers must promptly give injured employees exact duplicate copies of any statements, reports, or records obtained from them—including hospital records and nurses’ notes—about compensation. If copies are not furnished, those materials may be excluded from evidence. This rule promotes transparency while protecting confidential medical files. ([webserver.rilegislature.gov](https://webserver.rilegislature.gov/Statutes/TITLE28/28-35/28-35-10.htm?utm_source=openai))

When an employer arranges a medical examination, the employee is entitled—on request and by court order if necessary—to a full, exact, signed duplicate of the examining physician’s report. Employers should store such reports in confidential medical files and limit internal use to workers’ compensation claim handling. ([webserver.rilegislature.gov](https://webserver.rilegislature.gov/Statutes/TITLE28/28-33/28-33-34.htm?utm_source=openai))

Admissibility of Medical Records in Workers' Compensation Proceedings

Certified medical records are expressly admissible in Rhode Island workers’ compensation proceedings. By statute, a certified copy of the record of a licensed health care facility or provider is admissible, and admissibility is determined pursuant to the Rhode Island Rules of Evidence and related statutes. This framework streamlines proof while preserving evidentiary reliability. ([webserver.rilegislature.gov](https://webserver.rilegislature.gov/Statutes/TITLE28/28-35/28-35-21.htm?utm_source=openai))

Two companion statutes often used in practice are the medical-records affidavit rule and the custodian-of-records certification rule. Properly noticed and sworn medical reports and itemized bills may be admitted to establish diagnosis, prognosis, causation, disability, and reasonableness/necessity of treatment; certified copies from custodians may substitute for originals. Wage records signed by the employer may also be admitted. ([webserver.rilegislature.gov](https://webserver.rilegislature.gov/Statutes/TITLE9/9-19/9-19-27.HTM?utm_source=openai))

Employee's Choice of Healthcare Provider

You have the initial freedom to choose any qualified health care provider for a work injury. If your employer or insurer has filed a Preferred-Provider Network (PPN) approved by the Medical Advisory Board, any change from your initial provider must be to a provider within that approved network, though emergency or priority-care visits do not count as your first choice. ([webserver.rilegislature.gov](https://webserver.rilegislature.gov/Statutes/TITLE28/28-33/28-33-8.HTM))

Your provider must send a “notification of compensable injury” within three days of the first visit and provide timely return‑to‑work notices. To ensure payment, the provider must notify the employer/insurer of your chosen provider within 15 days after treatment begins and submit periodic affidavits and itemized bills on the schedule set by statute and the Medical Advisory Board. ([webserver.rilegislature.gov](https://webserver.rilegislature.gov/Statutes/TITLE28/28-33/28-33-8.HTM))

Employer's Obligations to Report Injuries

Rhode Island law sets clear workers’ compensation reporting obligations. If an injury is fatal, the employer must report it within 48 hours; for nonfatal injuries that require medical treatment or cause at least three days of lost wages, the employer must report within 10 days of the injury or knowledge of it. Typically, the employer promptly notifies its insurer, which files the First Report of Injury electronically with the state. ([webserver.rilegislature.gov](https://webserver.rilegislature.gov/Statutes/TITLE28/28-32/28-32-1.htm?utm_source=openai))

Failure to make required reports can trigger a $250 administrative penalty for each violation. Timely, accurate reporting protects both employees and employers and helps ensure uninterrupted Workers’ Compensation Insurance Coverage. ([webserver.rilegislature.gov](https://webserver.rilegislature.gov/Statutes/TITLE28/28-32/28-32-2.htm?utm_source=openai))

Workers' Compensation Insurance Requirements

With limited exceptions, Rhode Island employers with one or more employees must maintain workers’ compensation insurance coverage. Coverage can be secured by purchasing a policy from a licensed carrier, obtaining authority to self‑insure (with required security), or using a combination with excess insurance, as provided by statute. ([dlt.ri.gov](https://dlt.ri.gov/workers-compensation/employers?utm_source=openai))

Independent contractors generally are not covered as employees, but Rhode Island requires a DWC‑11‑IC filing to document independent‑contractor status; hiring entities should obtain proof of Workers’ Compensation Insurance Coverage or confirmation of that filing. Misclassification or coercing DWC‑11‑IC filings can lead to enforcement action. ([dlt.ri.gov](https://dlt.ri.gov/workers-compensation/independent-contractors?utm_source=openai))

Penalties for Non-Compliance with Workers' Compensation Insurance

Operating without required workers’ compensation insurance carries serious consequences. Knowingly failing to secure coverage is a felony punishable by up to two years’ imprisonment and civil fines up to $1,000 per day of noncompliance; corporate officers and certain business principals may be personally liable for penalties and unpaid benefits. ([law.justia.com](https://law.justia.com/codes/rhode-island/title-28/chapter-28-36/section-28-36-15/))

The Director of Labor and Training may issue an immediate stop‑work order until valid coverage is in place, with a right to appeal to the Workers’ Compensation Court. In cases of unintentional noncompliance with no injuries and an uninsured period under one year, an administrative penalty of at least the estimated annual premium, up to triple that amount, may be assessed. ([law.cornell.edu](https://www.law.cornell.edu/regulations/rhode-island/260-RICR-50-05-10.4?utm_source=openai))

Conclusion

Rhode Island Workers’ Compensation medical record privacy laws balance confidentiality with the information flows needed to resolve claims. Keep confidential medical files separate and share only what’s necessary; understand how certified medical records are admitted; respect employee choice of provider within any approved PPN; meet all workers’ compensation reporting obligations; and maintain required insurance coverage to avoid steep penalties. ([eeoc.gov](https://www.eeoc.gov/laws/guidance/ada-primer-small-business?utm_source=openai))

FAQs

Who can access workers’ compensation medical records in Rhode Island?

Access is limited to those involved in administering, litigating, or regulating the claim—such as the insurer/TPA, employer (on a need‑to‑know basis), the Workers’ Compensation Court, counsel of record, and relevant state agencies—consistent with state confidentiality law and HIPAA’s workers’ compensation provisions. Claim records are not public information. ([law.justia.com](https://law.justia.com/codes/rhode-island/title-5/chapter-5-37-3/section-5-37-3-4/?utm_source=openai))

What are the employer’s duties in maintaining medical record confidentiality?

Maintain confidential medical files separate from personnel records; restrict access to those handling the claim; use information only for workers’ compensation purposes; and provide employees with duplicate copies of any documents or statements obtained about compensation. Secure storage and limited sharing support both privacy compliance and evidentiary integrity. ([eeoc.gov](https://www.eeoc.gov/laws/guidance/ada-primer-small-business?utm_source=openai))

How are medical records used in workers’ compensation claims?

Medical records substantiate causation, diagnosis, treatment, disability, and work capacity. Certified medical records and properly noticed affidavits are admissible under statute and the Rhode Island Rules of Evidence; wage records may also be admitted. This evidentiary pathway reduces the need for live medical testimony in many cases. ([webserver.rilegislature.gov](https://webserver.rilegislature.gov/Statutes/TITLE28/28-35/28-35-21.htm?utm_source=openai))

Can an injured employee choose their own healthcare provider?

Yes. You may initially choose any qualified provider. If an approved Preferred‑Provider Network is on file, any change from your initial provider must be within that network (emergency or priority‑care visits don’t count as your first choice). Your provider must send required notices, including a 15‑day notice of your chosen provider to the insurer/employer for charges to be valid. ([webserver.rilegislature.gov](https://webserver.rilegislature.gov/Statutes/TITLE28/28-33/28-33-8.HTM))

What penalties exist for employers without workers’ compensation insurance?

Penalties include an immediate stop‑work order, civil fines up to $1,000 per day, possible felony prosecution (up to two years’ imprisonment), and personal liability for corporate officers and certain business principals. For some inadvertent lapses, an administrative penalty of at least the estimated annual premium up to triple may apply. ([law.cornell.edu](https://www.law.cornell.edu/regulations/rhode-island/260-RICR-50-05-10.4?utm_source=openai))