MedicaidAdministrativeHigh impact
24-349 New Laws Help Safeguard Privacy and Enhance Protections for Reproductive Rights
Health Net·CA · OB-GYN, Family Medicine, Internal Medicine +3 more·Prior Authorization
Effective date
Jul 1, 2024
We identified it
Jun 20, 2026
Summary
New California laws require healthcare providers to implement enhanced data security measures for sensitive services (reproductive health, gender-affirming care) by July 1, 2024, including segregating this medical information from other patient records and restricting access to prevent disclosure to out-of-state entities. Providers must also exclude abortion and gender-affirming care data from health information exchanges.
Action Required
By July 1, 2024: IT and billing teams must update EHR/EMR systems to segregate medical information for gender-affirming care, abortion/abortion-related services, and contraception from other patient records. Implement user access restrictions limiting these records to authorized personnel only. Configure systems to prevent data transmission to out-of-state entities and exclude sensitive service data from California HIE exchanges. Develop written security policies and procedures for handling sensitive medical information. Failure to comply may result in privacy violations and legal penalties.