A provider of health care or a health care service plan may disclose medical information in the following circumstances: 1) to other healthcare providers to facilitate diagnosis and treatment 2) to find financially liable party and obtain payment 3) to administrative subcontractors 4) quality control organizations (peer review boards, etc.) 5) accrediting agencies 6) coroners 7) \bona fide research purposes\" 8) employer
No [paid administrators of] payments for health care services shall knowingly use, disclose, or permit its employees or agents to use or disclose medical information possessed in connection with performing administrative functions for a program, except as reasonably necessary in connection with the administration or maintenance of the program.
Nothing in [the 1977 Information Practices Act] shall be construed to permit the acquisition or disclosure of medical information regarding a patient without an authorization, where the authorization is required by this part.
Nothing in this part shall be construed to prevent a person who could sign the authorization pursuant to subdivision (c) of Section 56.11 from canceling or modifying an authorization.
Upon inquiry about a particular patient, a general acute care hospital has discretion to release certain information that is not medical information (as defined in section 56.05)
Written authorizations for the disclosure of genetic information in an applicant's or enrollee's medical records must be written in plain language and specify the nature and purposes of the disclosures.
Any business organized for the purpose of maintaining medical information in order to make the information available to the patient or to a provider of health care [upon request], for purposes of diagnosis or treatment of the patient, shall be deemed to be a provider of health care and shall maintain the same standards of confidentiality required of a provider of health care with respect to medical information disclosed to the corporation.
No provider of health care, health care service plan, or contractor shall disclose medical information regarding a patient of the provider of health care or an enrollee or subscriber of a health care service plan without first obtaining an authorization, except as provided in subdivision (b) or (c).
Contractors and corporations shall not further disclose patient or enrollee medical information received pursuant to this section to any person or entity that does not provide direct health care services to the patient or her health care provider, health care service plan or insurer.
An employer that is a provider of health care (or its agent) shall not be deemed to have violated Civil Code 56.20 if it follows the requirements for disclosing medical information possessed in connection with providing health care services to the provider's patients or employing its own employees.
