Health and care facilities: information sharing.

(1) The Confidentiality of Medical Information Act (CMIA) prohibits a provider of health care, a health care service plan, a contractor, or a corporation and its subsidiaries and affiliates from intentionally sharing, selling, using for marketing, or otherwise using any medical information, as defined, for any purpose not necessary to provide health care services to a patient, except as provided. The CMIA prohibits a provider of health care, health care service plan, or contractor from disclosing medical information regarding a patient of the provider of health care or an enrollee or subscriber of a health care service plan without first obtaining authorization from the patient, except if the disclosure is compelled by, among other things, a search warrant lawfully issued to a governmental law enforcement agency or a court order. Existing law makes a violation of these provisions that results in economic loss or personal injury to a patient punishable as a misdemeanor. This bill would revise the definition of "medical information" to include immigration status, including current and prior immigration status, and place of birth, if that information is known or collected, as specified, and would define "immigration enforcement" to mean any and all efforts to investigate, enforce, or assist in the investigation or enforcement of any federal civil immigration law, and also includes any and all efforts to investigate, enforce, or assist in the investigation or enforcement of any federal criminal immigration law that penalizes a person's presence in, entry or reentry to, or employment in, the United States. The bill would specify that a provider of health care, health care service plan, or contractor shall disclose medical information regarding a patient of the provider of health care or an enrollee or subscriber or a health care service plan pursuant to a valid search warrant issued by a judicial officer, including a magistrate, to a governmental law enforcement agency, or pursuant to a state or federal court order issued by a court of this state or a federal court. The bill would also prohibit, except to the extent expressly authorized by a patient, enrollee, or subscriber, or as otherwise permitted or required, a provider of health care, health care service plan, contractor, or corporation and its subsidiaries and affiliates from disclosing medical information for immigration enforcement. Because the bill would expand the scope of a crime, it would impose a state-mandated local program. (2) Under existing law, the State Department of Public Health is responsible for the licensing and regulation of various facilities and settings that provide health care services, as specified. Existing law makes a willful violation of these provisions a crime. This bill would require health care provider entities, as defined, to establish or amend procedures for monitoring, documenting, and receiving visitors to health care provider entities to the extent possible. The bill would require health care provider entity personnel to immediately notify health care provider entity management, administration, or legal counsel of any request for access to a health care provider entity site or patient for immigration enforcement, and to provide any requests for review of health care provider entity documents, as prescribed. The bill would prohibit, unless required by state or federal law, a health care provider entity and its personnel from allowing any person access to nonpublic areas of the provider's facilities for immigration enforcement purposes, except as specified. The bill would require health care provider entities to inform staff and relevant volunteers on how to respond to requests relating to immigration enforcement that grants access to health care provider entity sites or to patients. The bill would require that health care provider entities comply with these provisions within 45 days from their effective date. By expanding the scope of a crime and increasing duties on local health officials, the bill would impose a state-mandated local program. The California Constitution requires the state to reimburse local agencies and school districts for certain costs mandated by the state. Statutory provisions establish procedures for making that reimbursement. This bill would provide that with regard to certain mandates no reimbursement is required by this act for a specified reason. With regard to any other mandates, this bill would provide that, if the Commission on State Mandates determines that the bill contains costs so mandated by the state, reimbursement for those costs shall be made pursuant to the statutory provisions noted above. This bill would provide that no reimbursement is required by this act for a specified reason. This bill would declare that it is to take effect immediately as an urgency statute.