MedicaidAdministrativeHigh impact
23-1257 Reminder: Protect Patient Privacy When Sharing Medical Records
Health Net·CA·Prior Authorization
We identified it
Jun 20, 2026
Summary
CalViva Health (Health Net) reminds providers they must have written HIPAA policies for protecting patient health information, with specific requirements for handling sensitive services like mental health, reproductive health, and substance abuse. Providers must respond to confidential communication requests within 7-14 days and direct all communications about sensitive services to the member's designated contact information.
Action Required
Immediately: All providers must ensure written HIPAA policy is in place (hard copy or electronic) covering PHI protection mechanisms. Billing and front desk staff must respond to confidential communication requests within 7 days (electronic/phone) or 14 days (mail). Update workflow to direct all bills, EOBs, and communications about sensitive services (mental health, reproductive health, STI, substance abuse, gender affirming care) to member's designated address/contact info only, not primary subscriber. Notify all enrollees about confidential communication options at enrollment and annually.