Confidentiality of Medical Information Act.

Assembly Member Bauer-Kahan's medical privacy legislation revises California's Confidentiality of Medical Information Act to narrow the circumstances under which healthcare providers may disclose patient information without authorization. The bill limits compelled disclosures to those required by California state court orders and modifies requirements for out-of-state search warrants to ensure alignment with California law, including reproductive privacy protections.

The legislation prohibits healthcare providers, health plans, and contractors from complying with foreign subpoenas unless issued through California's Interstate and International Depositions and Discovery Act. It also eliminates provisions that previously allowed disclosure based solely on patient authorization for marketing purposes, instead implementing an outright ban on selling medical information or using it for marketing by healthcare entities and their affiliates.

These changes expand existing criminal penalties by classifying unauthorized disclosures that result in economic loss or personal injury as misdemeanors. The bill maintains exceptions for legitimate healthcare operations, including treatment coordination, payment processing, and public health activities, while establishing stricter controls over how medical information can be shared beyond direct care delivery.