Each agency shall keep an accurate accounting of the date, nature, and purpose of (certain) disclosures made pursuant to section 1798.24, including the name, title, and business address of the person or agency to whom the disclosure was made.
With some exceptions, if a business has an established business relationship with a customer and has within the immediately preceding calendar year disclosed personal information, including medical conditions and drugs, therapies, or medical products/equipment used, to third parties that used the personal information for direct marketing purposes, that business shall, upon request from the customer, provide to the customer free of charge: (1) a list of the categories of personal information disclosed by the business to third parties for the third parties' direct marketing purposes during the i
By written request, individuals may gain access to their personal information held by an insurance institution, agent or insurance-support organization. The entities must also provide a list of entities/persons to whom this personal information was disclosed within the last two years. Medical information in the possession of insurance entities may be provided either directly to the individual or to a medical professional designated by the individual.
