All PlansAdministrativeMedium impact
24-352 New Laws Help Safeguard Privacy and Enhance Protections for Reproductive Rights
Health Net·CA · OB-GYN, Family Medicine, Internal Medicine +3 more·Prior Authorization
Effective date
Jul 1, 2024
We identified it
Jun 20, 2026
Summary
California health care providers must implement new security policies by July 1, 2024 to protect sensitive medical information including reproductive health, gender-affirming care, and contraception services. These policies must segregate sensitive data, limit access privileges, and prevent disclosure to entities outside California.
Action Required
By July 1, 2024: IT and compliance teams must develop and implement security policies to segregate medical information for reproductive health, gender-affirming care, and contraception services from other patient records. Update EHR systems to limit user access privileges for sensitive services and prevent data transmission to entities outside California. Configure systems to automatically disable access by out-of-state entities. Ensure HIE exchanges exclude abortion and gender-affirming care data.