Plain English Breakdown
The bill summary repeats that it requires businesses to enable capabilities already required by July 1, 2024; the exact nature of the *new* requirement versus the old deadline is not fully detailed in the provided text.
Medical Information Confidentiality Requirements
AB-2448 requires certain businesses storing medical data on sensitive services to implement security features like limiting user access and segregating specific records, while stating no state reimbursement is needed.
What This Bill Does
- Requires specified businesses that electronically store or maintain medical information on sensitive services to develop capabilities, policies, and procedures for security features.
- Mandates these security features include limiting user access privileges.
- Orders the segregation of medical records related to gender affirming care, abortion and abortion-related services, and contraception from other data.
- Expands the scope of an existing crime under current confidentiality laws.
- States that no state reimbursement is required for costs created by this act.
Who It Names or Affects
- Specified businesses that electronically store or maintain medical information on sensitive services
- Entities acting on behalf of providers of health care, health care service plans, pharmaceutical companies, contractors, or employers
Terms To Know
- Confidentiality of Medical Information Act (CMIA)
- The existing law that generally stops health providers and related entities from sharing patient medical information without permission.
- Segregating medical information
- Keeping specific types of sensitive health records, such as those for gender affirming care or abortion services, separate in a computer system.
Limits and Unknowns
- The official text does not specify the exact date this bill becomes effective.
- The source states no reimbursement is required but only mentions it is 'for a specified reason' without detailing that reason.
- Existing law requires these security measures by July 1, 2024; the new bill adds requirements to enable them again or further as specified.