AIHealthcare Analytics

Overview

Rhode Island enacted a new AI and healthcare privacy law, making it one of the first states to directly address AI-specific privacy risks in healthcare settings beyond existing HIPAA requirements.

Key Provisions

The Data Protection Report covered Rhode Island's new law, which addresses AI-specific privacy concerns in healthcare that fall outside HIPAA's traditional scope (article 21). The law reflects growing state-level recognition that federal privacy frameworks have not kept pace with AI capabilities, particularly for consumer-facing health AI tools that may not qualify as HIPAA-covered entities.

Significance

Rhode Island's law is part of a broader pattern of state-level AI health regulation, complementing existing state guardrails on AI in health insurance (existing page on states-ai-health-insurance-guardrails). It signals that in the absence of comprehensive federal AI health privacy legislation, states are filling the regulatory vacuum—creating a patchwork of requirements that AI health companies must navigate across jurisdictions.