Insurance Code 791.08 (1980)

By written request, individuals may gain access to their personal information held by an insurance institution, agent or insurance-support organization. The entities must also provide a list of entities/persons to whom this personal information was disclosed within the last two years. Medical information in the possession of insurance entities may be provided either directly to the individual or to a medical professional designated by the individual. Mental health record information shall be supplied directly to the individual, pursuant to this section, only with the approval of the qualified professional person with treatment responsibility for the condition to which the information relates.

Insurance Code 791.08(a)(3) (1980)

By written request, individuals may gain access to their personal information held by an insurance institution, agent or insurance-support organization. The entities must also provide a list of entities/persons to whom this personal information was disclosed within the last two years. Medical information in the possession of insurance entities may be provided either directly to the individual or to a medical professional designated by the individual. Mental health record information shall be supplied directly to the individual, pursuant to this section, only with the approval of the qualified professional person with treatment responsibility for the condition to which the information relates.

Health & Safety Code 120440(c) (2008)

Unless a refusal to permit record sharing is made under (e), health care providers and other agencies may disclose information specified in (c)(1) to (9) from the patient's medical record or the client's record to local health departments operating immunization information systems and to the State Department of Health Services. Local health departments and the State Department may disclose (c)(1) to (9) information to each other and to requesting health care providers taking care of a particular patient. Information under (c)(1) to (6), (8), and (9) may be disclosed to the agencies and entities listed.

Health & Safety Code 121025(c) (Added by S.B. 1360, 1995; amended by multiple subsequent amendments, the latest of which was S.B. 249, 2013)

(c) Except as provided in paragraphs (1) to (3), inclusive, any disclosure authorized by subdivision (a) or (b) shall include only the information necessary for the purpose of that disclosure and shall be made only upon agreement that the information will be kept confidential and will not be further disclosed without written authorization, as described in subdivision (a). (1) Notwithstanding any other provision of law, the following disclosures shall be authorized for the purpose of enhancing completeness of HIV/AIDS, tuberculosis, and sexually transmitted disease coinfection reporting to the federal Centers for Disease Control and Prevention (CDC): (A) The local public health agency HIV surveillance staff may further disclose the information to the health care provider who provides HIV care to the HIV-positive person who is the subject of the record for the purpose of assisting in compliance with subdivision (a) of Section 121022. (B) Local public health agency tuberculosis control staff may further disclose the information to state public health agency tuberculosis control staff, who may further disclose the information, without disclosing patient identifying information, to the CDC, to the extent the information is requested by the CDC and permitted by subdivision (b), for purposes of the investigation, control, or surveillance of HIV and tuberculosis coinfections. (C) Local public health agency sexually transmitted disease control staff may further disclose the information to state public health agency sexually transmitted disease control staff, who may further disclose the information, without disclosing patient identifying information, to the CDC, to the extent it is requested by the CDC, and permitted by subdivision (b), for the purposes of the investigation, control, or surveillance of HIV and syphilis, gonorrhea, or chlamydia coinfection. (2) Notwithstanding any other provision of law, the following disclosures shall be authorized for the purpose of facilitating appropriate HIV/AIDS medical care and treatment: (A) State public health agency HIV surveillance staff, AIDS Drug Assistance Program staff, and care services staff may further disclose the information to local public health agency staff, who may further disclose the information to the HIV-positive person who is the subject of the record, or the health care provider who provides his or her HIV care, for the purpose of proactively offering and coordinating care and treatment services to him or her. (B) AIDS Drug Assistance Program staff and care services staff in the State Department of Public Health may further disclose the information directly to the HIV-positive person who is the subject of the record or the health care provider who provides his or her HIV care, for the purpose of proactively offering and coordinating care and treatment services to him or her. (C) Local public health agency staff may further disclose acquired or developed information to the HIV-positive person who is the subject of the record or the health care provider who provides his or her HIV care for the purpose of proactively offering and coordinating care and treatment services to him or her. (3) Notwithstanding any other provision of law, for the purpose of facilitating appropriate medical care and treatment of persons coinfected with HIV, tuberculosis, and syphilis, gonorrhea, or chlamydia, local public health agency sexually transmitted disease control and tuberculosis control staff may further disclose the information to state or local public health agency sexually transmitted disease control and tuberculosis control staff, the HIV-positive person who is the subject of the record, or the health care provider who provides his or her HIV, tuberculosis, and sexually transmitted disease care. (4) For the purposes of paragraphs (2) and (3), “staff” shall not include nongovernmental entities, but shall include state and local contracted employees who work within state and local public health departments. Exceptions: disclosures authorized (1) for the purpose of enhancing completeness of HIV/AIDS, tuberculosis, and sexually transmitted disease coinfection reporting to the federal Centers for Disease Control and Prevention (CDC); (2) to facilitate appropriate HIV/AIDS medical care and treatment; (3) to facilitate appropriate medical care and treatment of persons coinfected with HIV, tuberculosis, and any STD(s), the local public health agency STD and tuberculosis control staff may further disclose the information to (i) the state or local public health agency staff, (ii) the HIV-positive person who is the subject of the record, or (iii) the health care provider who provides his or her HIV, tuberculosis, and sexually transmitted disease care.

Health & Safety Code 124119(d) (1998, amended 2006)

Data collected by the Newborn Hearing Screening tracking system obtained directly from the medical records of the newborn or infant shall be for the confidential use of the department and for other entities that the department determines are necessary to carry out the intent of the reporting and tracking system.

Health & Safety Code 120130 (1995; amended by AB 186, 2011)

The Department of Health Services shall establish (1) a list of reportable diseases and conditions to be properly reported by the health officer, and (2) a list of communicable diseases and conditions for which clinical laboratories shall submit a culture or a specimen to the local public health laboratory and the State Public Health Laboratory. The laboratory report shall be submitted electronically in a manner specified by the department; laboratories that receive incomplete patient information may report the name of the provider who submitted the request to the local health officer.

Health & Safety Code 120130(f) (1995; amended by AB 2658, 2008)

Commencing July 1, 2009, or within one year of the establishment of a state electronic laboratory reporting system, whichever is later, a report of a reportable disease or condition generated by a laboratory shall be submitted electronically in a manner specified by the Department of Public Health. This electronic reporting requirement shall not apply to reports of HIV infections. The department shall allow laboratories that receive incomplete patient information to report the name of the provider who submitted the request to the local health officer.

Health & Safety Code 120440(c)-(d)

Health care providers and local health departments may disclose to each other certain types of health information (listed 1 to 9) for the purpose of immunization and payment for such services.

Health & Safety Code 120440(e) (2008)

An agency possessing immunization information listed in (c)(1) to (9), if planning to disclose information to an immunization system, shall inform the patient that: the information may be shared, information shared will be treated as confidential, the patient has the right to examine any information shared and correct errors, the patient or their parent or guardian may refuse to allow the information to be shared. If patient refuses, the patient's physician may maintain access to such information for patient care and public health purposes and the local health department and the State Department may maintain access for public health purposes pursuant to the listed provisions.

Health & Safety Code 120440(l)

State DHS and local health departments may disclose to each other certain types of health information (listed 1 to 9) for the purpose of immunization and payment for such services.