Back to California

AB-1979 • 2026

Health care services: artificial intelligence.

Health care services: artificial intelligence.

Crime Education Healthcare Labor Technology
Passed Legislature

This bill passed both chambers and reached final enrollment, even if later executive action is not shown here.

Sponsor
Bonta
Last action
2026-04-23
Official status
Read second time and amended.
Effective date
Not listed

Plain English Breakdown

The candidate explanation included claims about the enforcement of new requirements, penalties, and specific guidelines for businesses offering chatbots that are not supported by the official source material.

Health Care Services: Artificial Intelligence

AB-1979 updates the Confidentiality of Medical Information Act to include businesses offering healthcare chatbots and other medical information management tools, and restricts the use of artificial intelligence in clinical decision-making processes.

What This Bill Does

  • Expands the definition of 'provider of health care' under the CMIA to include businesses that offer software or hardware for managing personal medical information, including mental health and reproductive services.
  • Clarifies that businesses offering tools to manage medical records can help patients query their medical history, summarize doctor's notes, and organize lab results.
  • Requires healthcare chatbots to be treated as providers of health care under the CMIA if they are used for managing personal medical information or diagnosing conditions.
  • Prohibits using artificial intelligence in a way that replaces professional judgment by licensed healthcare professionals when making clinical decisions.

Who It Names or Affects

  • Healthcare providers who use software or hardware to manage patient medical information.
  • Businesses offering mental health, reproductive health, or general healthcare chatbots.
  • Licensed healthcare professionals making clinical decisions using AI tools.

Terms To Know

Confidentiality of Medical Information Act (CMIA)
A law that protects patient medical information from being shared without consent for purposes unrelated to providing health care services.
Clinical decision support system
An AI tool used in healthcare to assist with making clinical decisions based on patient data and other relevant information.

Limits and Unknowns

  • The bill does not specify how the new requirements will be enforced or what penalties might apply.
  • It is unclear if there are specific guidelines for businesses offering chatbots to comply with these regulations.

Bill History

  1. 2026-04-23 California Legislative Information

    Read second time and amended.

  2. 2026-04-22 California Legislative Information

    From committee: Amend, and do pass as amended and re-refer to Com. on APPR. (Ayes 11. Noes 4.) (April 21).

  3. 2026-04-17 California Legislative Information

    In committee: Hearing postponed by committee.

  4. 2026-04-13 California Legislative Information

    Re-referred to Com. on P. & C.P.

  5. 2026-04-09 California Legislative Information

    Read second time and amended.

  6. 2026-04-08 California Legislative Information

    From committee: Amend, and do pass as amended and re-refer to Com. on P. & C.P. (Ayes 12. Noes 3.) (April 7).

  7. 2026-03-23 California Legislative Information

    Re-referred to Com. on HEALTH.

  8. 2026-03-19 California Legislative Information

    From committee chair, with author's amendments: Amend, and re-refer to Com. on HEALTH. Read second time and amended.

  9. 2026-03-17 California Legislative Information

    Re-referred to Com. on HEALTH.

  10. 2026-03-16 California Legislative Information

    From committee chair, with author's amendments: Amend, and re-refer to Com. on HEALTH. Read second time and amended.

  11. 2026-03-16 California Legislative Information

    Referred to Coms. on HEALTH and P. & C.P.

  12. 2026-02-14 California Legislative Information

    From printer. May be heard in committee March 16.

  13. 2026-02-13 California Legislative Information

    Read first time. To print.

Official Summary Text

AB 1979, as amended, Bonta.
Health care services: artificial intelligence.
(1) The Confidentiality of Medical Information Act (CMIA) prohibits a provider of health care, a health care service plan, a contractor, or a corporation and its subsidiaries and affiliates from intentionally sharing, selling, using for marketing, or otherwise using any medical information, as defined, for any purpose not necessary to provide health care services to a patient, except as provided.
The CMIA makes a business that offers software or hardware to consumers, including a mobile application or other related device that is designed to maintain medical information in order to make the information available to an individual or a provider of health care at the request of the individual or a provider of health care, for purposes of allowing the individual to manage the individual’s information or for the diagnosis, treatment, or management of a medical
condition of the individual, a provider of health care subject to the requirements of the CMIA.
Existing law deems a business that offers a mental health digital service or reproductive or sexual health digital service to a consumer for the purpose of allowing the individual to manage the individual’s information, or for the diagnosis, treatment, or management of a medical condition of the individual, to be a provider of health care subject to the requirements of the CMIA.
The bill would
clarify that “manage the individual’s information” includes the ability to query their medical history, summarize doctor’s notes, or organize lab results.
additionally deem a business that offers a healthcare chatbot, as defined, to a consumer for the above-described purposes to be a provider of health care subject to the requirements of the CMIA.
(2) Existing law provides for the licensure and regulation of health facilities and clinics by the State Department of Public Health. Existing law generally makes a violation of these provisions a crime. Existing law requires a health facility, clinic, physician’s office, or office of a group practice that uses generative artificial intelligence to generate written or verbal patient communications pertaining to patient clinical information, as defined, to ensure that those communications include both a disclaimer that indicates to the patient that a communication was generated by generative artificial intelligence, as specified, and clear instructions describing how a patient may contact a human health care provider,
employee, or other appropriate person, except as specified.
This bill would
prohibit
require
a health facility, clinic, physician’s office, or office or a group practice
from using or deploying a tool, system, or device that includes artificial intelligence to replace the use of professional judgment by a licensed health care professional, as specified, and would prohibit the use of artificial intelligence to direct, guide, supervise, or instruct unlicensed personnel in performing any function that requires a professional license.
to ensure that no clinical decision, as specified, is based solely on the output of
a clinical decision support system, as defined, and that a licensed health care professional exercises independent professional judgment when reviewing and approving a clinical decision that is based on the output of a clinical decision support system.
The bill would authorize the appropriate professional licensing board to pursue an injunction or restraining order to enforce these provisions to the extent that a violation constitutes the practice of a health care profession without a license. The bill would specify that these provisions do not prohibit the use of artificial intelligence for documentation and communication that does not involve the application of professional judgment, including automated messages to inform patients of updates to their health records. By placing new requirements on health facilities and clinics, this bill would expand the scope of a crime and would impose a state-mandated local program.
(3) The California Constitution requires the state to reimburse local agencies and school districts for certain costs mandated by the state. Statutory provisions establish procedures for making that reimbursement.
This bill would provide that no reimbursement is required by this act for a specified reason.

Current Bill Text

Read the full stored bill text
Download Bill PDF