Each agency shall retain the accounting made pursuant to Section 1798.25 for at least three years after the disclosure for which the accounting is made, or until the record is destroyed, whichever is shorter.
Access to medical and health reports portions of birth records is limited to state and local registrar staff, state and local health department staff, and persons with valid educational or scientific interest as determined by the State Registrar and are engaged in studies for health purposes. The department shall maintain accurate records of those allowed access to reports.
By written request, individuals may gain access to their personal information held by an insurance institution, agent or insurance-support organization. The entities must also provide a list of entities/persons to whom this personal information was disclosed within the last two years. Medical information in the possession of insurance entities may be provided either directly to the individual or to a medical professional designated by the individual.
Any disclosure of information of records made under 4514 (a), (d), or (q) or 4514.5 shall be entered into the person's medical record and included reasons for disclosure, to whom disclosure was made, and the information disclosed.
Any disclosure made pursuant to 5328, 5328.3, or 5328.4 should be entered into the patient's medical record including the date and circumstances of the disclosure, to whom the disclosure was made to, and the specific information disclosed.
An agency may disclose personal information pursuant to a determination by the agency that compelling circumstances exist that affect the health or safety of an individual, if upon the disclosure notification is transmitted to the individual to whom the information pertains at his or her last known address. Disclosure shall not be made if it is in conflict with other state or federal laws.
Each agency shall keep an accurate accounting of the date, nature, and purpose of (certain) disclosures made pursuant to section 1798.24, including the name, title, and business address of the person or agency to whom the disclosure was made.
With some exceptions, if a business has an established business relationship with a customer and has within the immediately preceding calendar year disclosed personal information, including medical conditions and drugs, therapies, or medical products/equipment used, to third parties that used the personal information for direct marketing purposes, that business shall, upon request from the customer, provide to the customer free of charge: (1) a list of the categories of personal information disclosed by the business to third parties for the third parties' direct marketing purposes during the i