California Privacy Laws

The California Confidentiality of Medical Information Act

^{(CA Civil Code §56 et seq)}

provides that Private Information about your health and healthcare is perhaps the most sensitive and personal kind of information collected. California State & Federal HIPAA laws give us many rights to limit those who see our medical records.

Businesses are forbidden from trying to obtain medical information directly from an individual for direct marketing purposes without clearly and conspicuously disclosing how it will use and share that information, and without obtaining the consumer’s consent. (SB 1633 Civil Code §1798.91)

Consumer Links

Website Privacy Law Opt Out Selling Information ^{LA Times 1.2.2020} *

California Patients Guide wikipedia.org

California State Office of Privacy Protection Website CA Office of HIPAA Implementation CA Healthcare Foundation 15 Page Pdf

Rights & Requirements Federal HIPAA

Technical & Research Links

Use of Social Security Number §1798.85 California Senate Bill 168

Family Law Code §3751.5 Right of Other Parent to Obtain Medical Information

Covered CA Agent Agreement Exhibit # D on Privacy & Security

Insurance Information and Privacy Protection Act §791-791.27

California Code of Regulations Section §2689.1 et seq. www.calregs.com/

CA Department of Insurance

Regulations Title 10 Subchapter 5.9 – 22 pages pdf

Related Pages in Privacy – HIPAA Section

Shop, Compare & Enroll in Health Insurance

Online Privacy Act

The California Online Privacy Protection Act of 2003 (CalOPPA) amended in 2013, requires commercial websites on the World Wide Web and online services to include a privacy policy on their website. ^Wikipedia *

Data Privacy Law

On Jan. 1, 2020, all Californians will be able to find out what personal information a business is collecting about them, their devices and their children. Companies can still collect the data: what you buy; where you go, and when; all the photos you’ve ever taken; your emails, even the ones you deleted. But what companies must now do is tell you what they’re collecting when you ask, and delete it all if you ask for that. However, some companies can deny your request to delete if the data is required in order to complete a financial transaction or protect against fraud. What companies can’t do anymore, legally, is sell that data if you tell them not to ^NPR *

California Consumer Privacy Act (CCPA)

The intentions of the Act are to provide California residents with the right to:

Know what personal data is being collected about them.
Know whether their personal data is sold or disclosed and to whom.
Say no to the sale of personal data.
Access their personal data.
Request a business to delete any personal information about a consumer collected from that consumer.^[9]
Not be discriminated against for exercising their privacy rights. ^Wikipedia *