Connecticut Healthcare Law Tightens Patient Protections and Provider Rules
Key changes impact patient confidentiality, provider practices, and data security.
New legislation in Connecticut ushers in changes affecting patient rights, health provider operations, and data security protocols. Signed by Governor Ned Lamont on June 25, 2025, the wide-ranging law updates numerous facets of the state’s healthcare system, commencing this fall.
Psychologist-Patient Confidentiality Rules Shift
Beginning October 1, 2025, rules regarding psychologist patient confidentiality will harmonize with those currently in place for psychiatric mental health providers. This means psychologists’ patient communications and records may be disclosed, without consent, in specific scenarios, such as treatment necessity or potential imminent harm.
Changes in Provider Operations
Starting October 1, 2025, Connecticut healthcare systems and providers are now forbidden from demanding patient financial information, like bank account or credit card numbers, before delivering services. Infringements constitute an unfair trade practice, possibly leading to significant penalties under the Connecticut Unfair Trade Practices Act.
"The law offers greater protection for patients and clarity for providers navigating complex healthcare regulations," said Ivy Miller, legal intern at Robinson+Cole.
A recent study indicates that in 2024, approximately 1.4% of all healthcare records experienced a data breach, highlighting the growing importance of data security measures. (Source: Statista).
Additional Operational Adjustments
The act also modifies reporting timelines for healthcare institutions with at least 50 employees. Hospitals must now report on nurse staffing assignments more swiftly, while the deadline for reporting workplace violence incidents moves to February 1 each year.
Revised Penalties and Scope of Practice
The maximum civil penalty against individual healthcare providers by the Department of Public Health (DPH) or its licensing boards has increased to $25,000. Additionally, MRI and radiologic technicians gain authorization to conduct particular oxygen-related patient care activities starting July 1, 2025. Physical therapists in Connecticut must commence biennial ethics and jurisprudence training in 2026.
Healthcare Exchange Updates
The legislation also modifies Connecticut’s Statewide Health Information Exchange, "Connie." From October 1, 2025, Connie must notify all patients if it experiences a data breach or cyberattack. Furthermore, Connie is prohibited from disclosing protected health information in response to a subpoena unless complying with all legal and federal mandates.
The changes aim to reinforce patient data security and clarify responsibilities for healthcare professionals.
Descriptive caption
