CalOHii shall assume responsibilities for determining which provisions of state law concerning personal medical information are preempted by HIPAA. State entities impacted by HIPAA shall assist in determining which state laws concerning personal medical information are preempted by HIPAA and conform to all determinations made by the office regarding HIPAA. Any provision of state law pertaining to personal health information that is determined to be preempted by HIPAA shall not be applicable to the extent of that preemption.
Upon referral, CalCalOHii may assess an administrative fine against any person or provider of health care (except clinics, health facilities, hospices or agencies as defined) as provided in Civil Code section 56.36(b) and (c),
Every provider of health care shall establish and implement appropriate administrative, technical, and physical safeguards to protect the privacy of patient's medical information. Every provider of health care shall reasonably safeguard confidential medical information from any unauthorized access or unlawful access, use, or disclosure.
CalCalOHii director may send a recommendation for further investigation or discipline for a violation of this division to the licensee's relevant licensing authority.
