A provider of health care or a health care service plan may disclose medical information in the following circumstances: 1) to other healthcare providers to facilitate diagnosis and treatment 2) to find financially liable party and obtain payment 3) to administrative subcontractors 4) quality control organizations (peer review boards, etc.) 5) accrediting agencies 6) coroners 7) \bona fide research purposes\" 8) employer
An agency may disclose personal information to a person who has provided the agency with advance, adequate written assurance that the information will be used solely for statistical research or reporting purposes, but only if the information to be disclosed is in a form that will not identify any individual.
An agency may disclose personal information to the University of California or a nonprofit entity conducting scientific research, provided the request for information is approved by the Committee for the Protection of Human Subjects (CPHS) for the California Health and Human Services Agency (CHHSA) or an authorized institutional review board.