Bill Full Text
Home
-
Bills
-
Bill
-
Authors
-
Dates
-
Locations
-
Analyses
-
Organizations
<?xml version="1.0" ?>
<ns0:MeasureDoc xmlns:html="http://www.w3.org/1999/xhtml" xmlns:ns0="http://lc.ca.gov/legalservices/schemas/caml.1#" xmlns:ns3="http://www.w3.org/1999/xlink" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" version="1.0" xsi:schemaLocation="http://lc.ca.gov/legalservices/schemas/caml.1# xca.1.xsd">
<ns0:Description>
<ns0:Id>20250AB__197999INT</ns0:Id>
<ns0:VersionNum>99</ns0:VersionNum>
<ns0:History>
<ns0:Action>
<ns0:ActionText>INTRODUCED</ns0:ActionText>
<ns0:ActionDate>2026-02-13</ns0:ActionDate>
</ns0:Action>
</ns0:History>
<ns0:LegislativeInfo>
<ns0:SessionYear>2025</ns0:SessionYear>
<ns0:SessionNum>0</ns0:SessionNum>
<ns0:MeasureType>AB</ns0:MeasureType>
<ns0:MeasureNum>1979</ns0:MeasureNum>
<ns0:MeasureState>INT</ns0:MeasureState>
</ns0:LegislativeInfo>
<ns0:AuthorText authorType="LEAD_AUTHOR">Introduced by Assembly Member Bonta</ns0:AuthorText>
<ns0:Authors>
<ns0:Legislator>
<ns0:Contribution>LEAD_AUTHOR</ns0:Contribution>
<ns0:House>ASSEMBLY</ns0:House>
<ns0:Name>Bonta</ns0:Name>
</ns0:Legislator>
</ns0:Authors>
<ns0:Title> An act to amend Section 56.05 of the Civil Code, relating to privacy. </ns0:Title>
<ns0:RelatingClause>privacy</ns0:RelatingClause>
<ns0:GeneralSubject>
<ns0:Subject>Confidentiality of Medical Information Act: definitions.</ns0:Subject>
</ns0:GeneralSubject>
<ns0:DigestText>
<html:p>The Confidentiality of Medical Information Act (CMIA) prohibits a provider of health care, a health care service plan, a contractor, or a corporation and its subsidiaries and affiliates from intentionally sharing, selling, using for marketing, or otherwise using any medical information, as defined, for any purpose not necessary to provide health care services to a patient, except as provided. The act defines various terms for its purposes.</html:p>
<html:p>This bill would make a nonsubstantive change to that provision.</html:p>
</ns0:DigestText>
<ns0:DigestKey>
<ns0:VoteRequired>MAJORITY</ns0:VoteRequired>
<ns0:Appropriation>NO</ns0:Appropriation>
<ns0:FiscalCommittee>NO</ns0:FiscalCommittee>
<ns0:LocalProgram>NO</ns0:LocalProgram>
</ns0:DigestKey>
<ns0:MeasureIndicators>
<ns0:ImmediateEffect>NO</ns0:ImmediateEffect>
<ns0:ImmediateEffectFlags>
<ns0:Urgency>NO</ns0:Urgency>
<ns0:TaxLevy>NO</ns0:TaxLevy>
<ns0:Election>NO</ns0:Election>
<ns0:UsualCurrentExpenses>NO</ns0:UsualCurrentExpenses>
<ns0:BudgetBill>NO</ns0:BudgetBill>
<ns0:Prop25TrailerBill>NO</ns0:Prop25TrailerBill>
</ns0:ImmediateEffectFlags>
</ns0:MeasureIndicators>
</ns0:Description>
<ns0:Bill id="bill">
<ns0:Preamble>The people of the State of California do enact as follows:</ns0:Preamble>
<ns0:BillSection id="id_857B5F56-98D6-44A3-ADB4-147F4BB947FA">
<ns0:Num>SECTION 1.</ns0:Num>
<ns0:ActionLine action="IS_AMENDED" ns3:href="urn:caml:codes:CIV:caml#xpointer(%2Fcaml%3ALawDoc%2Fcaml%3ACode%2Fcaml%3ALawHeading%5B%40type%3D'DIVISION'%20and%20caml%3ANum%3D'1.'%5D%2Fcaml%3ALawHeading%5B%40type%3D'PART'%20and%20caml%3ANum%3D'2.6.'%5D%2Fcaml%3ALawHeading%5B%40type%3D'CHAPTER'%20and%20caml%3ANum%3D'1.'%5D%2Fcaml%3ALawSection%5Bcaml%3ANum%3D'56.05.'%5D)" ns3:label="fractionType: LAW_SECTION" ns3:type="locator">
Section 56.05 of the
<ns0:DocName>Civil Code</ns0:DocName>
is amended to read:
</ns0:ActionLine>
<ns0:Fragment>
<ns0:LawSection id="id_C2F527C6-C014-4F36-B29A-2A5B36E7BDBC">
<ns0:Num>56.05.</ns0:Num>
<ns0:LawSectionVersion id="id_A379DDC6-8228-4994-9407-BEE1474CEC85">
<ns0:Content>
<html:p>For purposes of this part, the following definitions apply:</html:p>
<html:p>
(a)
<html:span class="EnSpace"/>
“Authorization” means permission granted in accordance with Section 56.11 or 56.21 for the disclosure of medical information.
</html:p>
<html:p>
(b)
<html:span class="EnSpace"/>
“Authorized recipient” means a person who is authorized to receive medical information pursuant to Section 56.10 or 56.20.
</html:p>
<html:p>
(c)
<html:span class="EnSpace"/>
“Confidential communications request” means a request by a subscriber or enrollee that health care service plan communications containing medical
information be communicated to them at a specific mail or email address or specific telephone number, as designated by the subscriber or enrollee.
</html:p>
<html:p>
(d)
<html:span class="EnSpace"/>
“Contractor” means a person or entity that is a medical group, independent practice association, pharmaceutical benefits manager, or a medical service organization and is not a health care service plan or provider of health care. “Contractor” does not include insurance institutions as defined in subdivision (k) of Section 791.02 of the Insurance Code or pharmaceutical benefits managers licensed pursuant to the Knox-Keene Health Care Service Plan Act of 1975 (Chapter 2.2 (commencing with Section 1340) of Division 2 of the Health and Safety Code).
</html:p>
<html:p>
(e)
<html:span class="EnSpace"/>
“Enrollee” has the same meaning as that term is defined in Section 1345 of the Health and Safety Code.
</html:p>
<html:p>
(f)
<html:span class="EnSpace"/>
“Expiration
date or event” means a specified date or an occurrence relating to the individual to whom the medical information pertains or the purpose of the use or disclosure, after which the provider of health care, health care service plan, pharmaceutical company, or contractor is no longer authorized to disclose the medical information.
</html:p>
<html:p>
(g)
<html:span class="EnSpace"/>
“Health care service plan” means an entity regulated pursuant to the Knox-Keene Health Care Service Plan Act of 1975 (Chapter 2.2 (commencing with Section 1340) of Division 2 of the Health and Safety Code).
</html:p>
<html:p>
(h)
<html:span class="EnSpace"/>
“Licensed health care professional” means a person licensed or certified pursuant to Division 2 (commencing with Section 500) of the Business and Professions Code, the Osteopathic Initiative Act or the Chiropractic Initiative Act, or Division 2.5 (commencing with Section 1797) of the Health and Safety Code.
</html:p>
<html:p>
(i)
<html:span class="EnSpace"/>
“Marketing” means to make a communication about a product or service that encourages recipients of the communication to purchase or use the product or service.
</html:p>
<html:p>“Marketing” does not include any of the following:</html:p>
<html:p>
(1)
<html:span class="EnSpace"/>
Communications made orally or in writing for which the communicator does not receive direct or indirect remuneration, including, but not limited to, gifts, fees, payments, subsidies, or other economic benefits, from a third party for making the communication.
</html:p>
<html:p>
(2)
<html:span class="EnSpace"/>
Communications made to current enrollees solely for the purpose of describing a provider’s participation in an existing health care provider network or health plan network of a Knox-Keene licensed health plan to which the enrollees already subscribe; communications made to current enrollees solely for
the purpose of describing if, and the extent to which, a product or service, or payment for a product or service, is provided by a provider, contractor, or plan or included in a plan of benefits of a Knox-Keene licensed health plan to which the enrollees already subscribe; or communications made to plan enrollees describing the availability of more cost-effective pharmaceuticals.
</html:p>
<html:p>
(3)
<html:span class="EnSpace"/>
Communications that are tailored to the circumstances of a particular individual to educate or advise the individual about treatment options, and otherwise maintain the individual’s adherence to a prescribed course of medical treatment, as provided in Section 1399.901 of the Health and Safety Code, for a chronic and seriously debilitating or life-threatening condition as defined in subdivisions (d) and (e) of Section 1367.21 of the Health and Safety Code, if the health care provider, contractor, or health plan receives direct or indirect remuneration, including,
but not limited to, gifts, fees, payments, subsidies, or other economic benefits, from a third party for making the communication, if all of the following apply:
</html:p>
<html:p>
(A)
<html:span class="EnSpace"/>
The individual receiving the communication is notified in the communication in typeface no smaller than 14-point type of the fact that the provider, contractor, or health plan has been remunerated and the source of the remuneration.
</html:p>
<html:p>
(B)
<html:span class="EnSpace"/>
The individual is provided the opportunity to opt out of receiving future remunerated communications.
</html:p>
<html:p>
(C)
<html:span class="EnSpace"/>
The communication contains instructions in typeface no smaller than 14-point type describing how the individual can opt out of receiving further communications by calling a toll-free number of the health care provider, contractor, or health plan making the remunerated communications. Further communication shall not be
made to an individual who has opted out after 30 calendar days from the date the individual makes the opt-out request.
</html:p>
<html:p>
(j)
<html:span class="EnSpace"/>
(1)
<html:span class="EnSpace"/>
“Medical information” means any individually identifiable information, in electronic or physical form, in possession of or derived from a provider of health care, health care service plan, pharmaceutical company, or contractor regarding a patient’s medical history, mental health application information, reproductive or sexual health application information, mental or physical condition, or treatment. “Individually identifiable” means that the medical information includes or contains any element of personal identifying information sufficient to allow identification of the individual, such as the patient’s name, address, electronic mail address, telephone number, or social security number, or other information that, alone or in combination with other publicly available information, reveals the
identity of the individual.
</html:p>
<html:p>
(2)
<html:span class="EnSpace"/>
If individually identifying information regarding immigration status, including current and prior immigration status, or place of birth, is known or collected in electronic or physical form by a provider of health care, health care service plan, pharmaceutical company, or contractor regarding a patient’s medical history, it shall be treated as medical information, as defined in paragraph (1).
</html:p>
<html:p>
(k)
<html:span class="EnSpace"/>
“Mental health application information” means information related to a consumer’s inferred or diagnosed mental health or substance use disorder, as defined in Section 1374.72 of the Health and Safety Code, collected by a mental health digital service.
</html:p>
<html:p>
(
<html:i>l</html:i>
)
<html:span class="EnSpace"/>
“Mental health digital service” means a mobile-based application or internet website that collects mental health application
information from a consumer, markets itself as facilitating mental health services to a consumer, and uses the information to facilitate mental health services to a consumer.
</html:p>
<html:p>
(m)
<html:span class="EnSpace"/>
“Patient” means a natural person, whether or not still living, who received health care services from a provider of health care and to whom medical information pertains.
</html:p>
<html:p>
(n)
<html:span class="EnSpace"/>
“Pharmaceutical company” means a company or business, or an agent or representative thereof, that manufactures, sells, or distributes pharmaceuticals, medications, or prescription drugs. “Pharmaceutical company” does not include a pharmaceutical benefits manager, as included in subdivision (c), or a provider of health care.
</html:p>
<html:p>
(o)
<html:span class="EnSpace"/>
“Protected individual” means any adult covered by the subscriber’s health care service plan or a minor who can consent to a health care service
without the consent of a parent or legal guardian, pursuant to state or federal law. “Protected individual” does not include an individual that lacks the capacity to give informed consent for health care pursuant to Section 813 of the Probate Code.
</html:p>
<html:p>
(p)
<html:span class="EnSpace"/>
“Provider of health care” means a person licensed or certified pursuant to Division 2 (commencing with Section 500) of the Business and Professions Code; a person licensed pursuant to the Osteopathic Initiative Act or the Chiropractic Initiative Act; a person certified pursuant to Division 2.5 (commencing with Section 1797) of the Health and Safety Code; or a clinic, health dispensary, or health facility licensed pursuant to Division 2 (commencing with Section 1200) of the Health and Safety Code. “Provider of health care” does not include insurance institutions as defined in subdivision (k) of Section 791.02 of the Insurance Code.
</html:p>
<html:p>
(q)
<html:span class="EnSpace"/>
“Reproductive or sexual health application information” means information about a consumer’s reproductive health, menstrual cycle, fertility, pregnancy, pregnancy outcome, plans to conceive, or type of sexual activity collected by a reproductive or sexual health digital service, including, but not limited to, information from which one can infer someone’s pregnancy status, menstrual cycle, fertility, hormone levels, birth control use, sexual activity, or gender identity.
</html:p>
<html:p>
(r)
<html:span class="EnSpace"/>
“Reproductive or sexual health digital service” means a mobile-based application or internet website that collects reproductive or sexual health application information from a consumer, markets itself as facilitating reproductive or sexual health services to a consumer, and uses the information to facilitate reproductive or sexual health services to a consumer.
</html:p>
<html:p>
(s)
<html:span class="EnSpace"/>
“Sensitive services” means
all health care services related to mental or behavioral health, sexual and reproductive health, sexually transmitted infections, substance use disorder, gender-affirming care, and intimate partner violence, and includes services described in Sections 6924, 6925, 6926, 6927, 6928, 6929, and 6930 of the Family Code, and Sections 121020 and 124260 of the Health and Safety Code, obtained by a patient at or above the minimum age specified for consenting to the service specified in the section.
</html:p>
<html:p>
(t)
<html:span class="EnSpace"/>
“Subscriber” has the same meaning as that term is defined in Section 1345 of the Health and Safety Code.
</html:p>
<html:p>
(u)
<html:span class="EnSpace"/>
“Immigration enforcement” means any and all efforts to investigate, enforce, or assist in the investigation or enforcement of any federal civil immigration law, and also includes any and all efforts to investigate, enforce, or assist in the investigation or enforcement of any federal
criminal immigration law that penalizes a person’s presence in, entry or reentry to, or employment in, the United States.
</html:p>
</ns0:Content>
</ns0:LawSectionVersion>
</ns0:LawSection>
</ns0:Fragment>
</ns0:BillSection>
</ns0:Bill>
</ns0:MeasureDoc>