Any business organized for the purpose of maintaining medical information in order to make the information available to the patient or to a provider of health care [upon request], for purposes of diagnosis or treatment of the patient, shall be deemed to be a provider of health care and shall maintain the same standards of confidentiality required of a provider of health care with respect to medical information disclosed to the corporation.
No provider of health care, health care service plan, or contractor shall disclose medical information regarding a patient of the provider of health care or an enrollee or subscriber of a health care service plan without first obtaining an authorization, except as provided in subdivision (b) or (c).
No provider of health care, health care service plan, or contractor may require a patient, as a condition of receiving health care services, to sign an authorization, release, consent, or waiver that would permit the disclosure of medical information that otherwise may not be disclosed.
Among other procedures/requirements, a school health center receiving grant funds shall have a written contract/memorandum of understanding between the school district and the health care provider or any other community providers that ensures coordination of services, ensures confidentiality and privacy of health information consistent with applicable federal and state laws.
In order to contract with the department the independent medical review organization must demonstrate that it has a quality assurance mechanism in place that ensures the confidentiality of medical records and the review materials that is consistent with the requirements of applicable laws.
An agency may disclose personal information to the officers, employees, attorneys, agents, or volunteers of the agency that has custody of the information if the disclosure is relevant and necessary in the ordinary course of the performance of their official duties and is related to the purpose for which the information was acquired.
An independent medical review organization contracting with the Department of Managed Health Care shall demonstrate that it has a quality assurance mechanism in place to ensure confidentiality of medical records it reviews.
The State Department of Health Care Services and Social Services may utilize an entity (contractor, county consortia, nonprofit providers, partnerships) to develop and complete a comprehensive plan pertaining to statewide eligibility and enrollment determination process for the California Work Opportunity and Responsibility to Kids (CalWORKs) program, the Medi-Cal program, and the Supplemental Nutrition Assistance Program (SNAP).