Federal HIPAA laws require you either give signed persmission or a law enforcement official has to get a judge signed court warrant to look at your medical files.
But some states are starting registries for patients that have no medical information, only that you're a legal MMJ patient. Not sure what law RI has. And that should be strictly for the state and law enforcement. No insurance company or employer should have access to that.