If a health care service plan requests medical information from providers in order to determine whether to approve, modify, or deny requests for authorization of services, the plan shall request only the information reasonably necessary to make the determination.
To assess overlapping or duplicate health coverage, every health insurer shall maintain a centralized file of the subscribers' names, mailing addresses, and social security numbers or dates of birth. This information is available to the California Department of Developmental Services or a regional center upon reasonable request. The Board of Administration of the California Public Employees' Retirement System and affiliated systems can data match with the state department to identify consumers with third-party health coverage or insurance.
(a) Insurers shall make medical records available to the Department of Developmental Services or a regional center upon request, so long as (1) the department/regional center certifies that the individual is an applicant/recipient of services for the developmentally disabled or the California Early Intervention Program; or is a person who is legally responsible for the applicant or recipient; and (2) the department/regional center is in certifiable compliance with all state and federal laws pertaining to the confidentiality of medical information.
A provider of health care or a health care service plan may disclose medical information in the following circumstances: 1) to other healthcare providers to facilitate diagnosis and treatment 2) to find financially liable party and obtain payment 3) to administrative subcontractors 4) quality control organizations (peer review boards, etc.) 5) accrediting agencies 6) coroners 7) \bona fide research purposes\" 8) employer
No provider of health care, health care service plan, or contractor shall disclose medical information regarding a patient of the provider of health care or an enrollee or subscriber of a health care service plan without first obtaining an authorization, except as provided in subdivision (b) or (c).
No provider of health care, health care service plan, or contractor may require a patient, as a condition of receiving health care services, to sign an authorization, release, consent, or waiver that would permit the disclosure of medical information that otherwise may not be disclosed.
A health care service plan shall not release any information indicating an employee is receiving services from a health care provider under the plan to an employer, unless the employee authorizes the plan to do so.
No contract between a plan and health care provider for the provision of health care services shall include a requirement to permit access to patient information in violation of laws regarding the confidentiality of patient information.