CA
California Assembly Bill AB894

California 2025-2026 Regular Session

California Assembly Bill AB894 Compare Versions

OldNewDifferences
1-Amended IN Assembly March 24, 2025 CALIFORNIA LEGISLATURE 20252026 REGULAR SESSION Assembly Bill No. 894Introduced by Assembly Member CarrilloFebruary 19, 2025 An act relating to health and care facilities. An act to add Section 1275.9 to the Health and Safety Code, relating to health facilities.LEGISLATIVE COUNSEL'S DIGESTAB 894, as amended, Carrillo. Health facilities: immigration and patient privacy. General acute care hospitals: patient directories.Existing law requires the State Department of Public Health to license and regulate health facilities, including general acute care hospitals. Existing law makes a violation of these provisions a crime.Existing federal law, the Health Insurance Portability and Accountability Act of 1996 (HIPAA), authorizes a covered health care provider to use specified protected health information to maintain a directory of patients in its facility, and to disclose that information to persons who ask for the patient by name. Existing federal law requires a covered health care provider to inform an individual of the use and disclosure of information in the directory and to provide the patient with the opportunity to restrict or prohibit that use or disclosure.Existing law, the Confidentiality of Medical Information Act, prohibits a health care provider, a contractor, or a health care service plan from disclosing medical information, as defined, but does not prevent a general acute care hospital, upon an inquiry concerning a specific patient, from releasing a patients name, address, age, and sex, and a general description of the reason for treatment, among other information, unless there is a specific written request by the patient to the contrary.This bill would require a general acute care hospital to inform a patient, at the time of admitting, or at the earliest time possible in cases of patient incapacity or an emergency treatment circumstance, that the patient may restrict or prohibit the use or disclosure of protected health information in the hospitals patient directory by using a separate document or having hospital personnel verbally inform the patient, as specified. Because a violation of the bills requirements would be a crime, this bill would impose a state-mandated local program.The California Constitution requires the state to reimburse local agencies and school districts for certain costs mandated by the state. Statutory provisions establish procedures for making that reimbursement.This bill would provide that no reimbursement is required by this act for a specified reason.Existing law requires the State Department of Public Health to license and regulate health facilities, including general acute care hospitals, acute psychiatric hospitals, and skilled nursing facilities, and clinics. Existing law makes a violation of these provisions a crime.The Confidentiality of Medical Information Act (CMIA) prohibits a provider of health care, a health care service plan, a contractor, or a corporation and its subsidiaries and affiliates from intentionally sharing, selling, using for marketing, or otherwise using any medical information, as defined, for any purpose not necessary to provide health care services to a patient, except as provided. Existing law makes a violation of these provisions that results in economic loss or personal injury to a patient punishable as a misdemeanor.This bill would state the intent of the Legislature to enact legislation to protect the privacy of undocumented Californians in hospitals.Digest Key Vote: MAJORITY Appropriation: NO Fiscal Committee: NOYES Local Program: NOYES Bill TextThe people of the State of California do enact as follows:SECTION 1. Section 1275.9 is added to the Health and Safety Code, to read:1275.9. (a) A general acute care hospital shall inform a patient, at the time of admitting, or at the earliest time possible in cases of patient incapacity or an emergency treatment circumstance, that the patient may restrict or prohibit the use or disclosure of protected health information in the hospitals patient directory, as provided in Section 164.510 of Title 45 of the Code of Federal Regulations, in either of the following manners:(1) Using a separate document that only includes information regarding the hospitals directory and the included protected health information. The separate document shall include check boxes for the patient to mark whether they authorize or restrict or prohibit use or disclosure of the protected health information in the hospitals patient directory.(2) Having hospital personnel verbally inform the patient.(b) The information required pursuant to subdivision (a) shall be made available or provided in the top five languages, other than English, in the hospitals service area.SEC. 2. No reimbursement is required by this act pursuant to Section 6 of Article XIIIB of the California Constitution because the only costs that may be incurred by a local agency or school district will be incurred because this act creates a new crime or infraction, eliminates a crime or infraction, or changes the penalty for a crime or infraction, within the meaning of Section 17556 of the Government Code, or changes the definition of a crime within the meaning of Section 6 of Article XIIIB of the California Constitution.SECTION 1.It is the intent of the Legislature to enact legislation to protect the privacy of undocumented Californians in hospitals.
1+CALIFORNIA LEGISLATURE 20252026 REGULAR SESSION Assembly Bill No. 894Introduced by Assembly Member CarrilloFebruary 19, 2025 An act relating to health and care facilities. LEGISLATIVE COUNSEL'S DIGESTAB 894, as introduced, Carrillo. Health facilities: immigration and patient privacy.Existing law requires the State Department of Public Health to license and regulate health facilities, including general acute care hospitals, acute psychiatric hospitals, and skilled nursing facilities, and clinics. Existing law makes a violation of these provisions a crime.The Confidentiality of Medical Information Act (CMIA) prohibits a provider of health care, a health care service plan, a contractor, or a corporation and its subsidiaries and affiliates from intentionally sharing, selling, using for marketing, or otherwise using any medical information, as defined, for any purpose not necessary to provide health care services to a patient, except as provided. Existing law makes a violation of these provisions that results in economic loss or personal injury to a patient punishable as a misdemeanor.This bill would state the intent of the Legislature to enact legislation to protect the privacy of undocumented Californians in hospitals.Digest Key Vote: MAJORITY Appropriation: NO Fiscal Committee: NO Local Program: NO Bill TextThe people of the State of California do enact as follows:SECTION 1. It is the intent of the Legislature to enact legislation to protect the privacy of undocumented Californians in hospitals.
22
3- Amended IN Assembly March 24, 2025 CALIFORNIA LEGISLATURE 20252026 REGULAR SESSION Assembly Bill No. 894Introduced by Assembly Member CarrilloFebruary 19, 2025 An act relating to health and care facilities. An act to add Section 1275.9 to the Health and Safety Code, relating to health facilities.LEGISLATIVE COUNSEL'S DIGESTAB 894, as amended, Carrillo. Health facilities: immigration and patient privacy. General acute care hospitals: patient directories.Existing law requires the State Department of Public Health to license and regulate health facilities, including general acute care hospitals. Existing law makes a violation of these provisions a crime.Existing federal law, the Health Insurance Portability and Accountability Act of 1996 (HIPAA), authorizes a covered health care provider to use specified protected health information to maintain a directory of patients in its facility, and to disclose that information to persons who ask for the patient by name. Existing federal law requires a covered health care provider to inform an individual of the use and disclosure of information in the directory and to provide the patient with the opportunity to restrict or prohibit that use or disclosure.Existing law, the Confidentiality of Medical Information Act, prohibits a health care provider, a contractor, or a health care service plan from disclosing medical information, as defined, but does not prevent a general acute care hospital, upon an inquiry concerning a specific patient, from releasing a patients name, address, age, and sex, and a general description of the reason for treatment, among other information, unless there is a specific written request by the patient to the contrary.This bill would require a general acute care hospital to inform a patient, at the time of admitting, or at the earliest time possible in cases of patient incapacity or an emergency treatment circumstance, that the patient may restrict or prohibit the use or disclosure of protected health information in the hospitals patient directory by using a separate document or having hospital personnel verbally inform the patient, as specified. Because a violation of the bills requirements would be a crime, this bill would impose a state-mandated local program.The California Constitution requires the state to reimburse local agencies and school districts for certain costs mandated by the state. Statutory provisions establish procedures for making that reimbursement.This bill would provide that no reimbursement is required by this act for a specified reason.Existing law requires the State Department of Public Health to license and regulate health facilities, including general acute care hospitals, acute psychiatric hospitals, and skilled nursing facilities, and clinics. Existing law makes a violation of these provisions a crime.The Confidentiality of Medical Information Act (CMIA) prohibits a provider of health care, a health care service plan, a contractor, or a corporation and its subsidiaries and affiliates from intentionally sharing, selling, using for marketing, or otherwise using any medical information, as defined, for any purpose not necessary to provide health care services to a patient, except as provided. Existing law makes a violation of these provisions that results in economic loss or personal injury to a patient punishable as a misdemeanor.This bill would state the intent of the Legislature to enact legislation to protect the privacy of undocumented Californians in hospitals.Digest Key Vote: MAJORITY Appropriation: NO Fiscal Committee: NOYES Local Program: NOYES
3+ CALIFORNIA LEGISLATURE 20252026 REGULAR SESSION Assembly Bill No. 894Introduced by Assembly Member CarrilloFebruary 19, 2025 An act relating to health and care facilities. LEGISLATIVE COUNSEL'S DIGESTAB 894, as introduced, Carrillo. Health facilities: immigration and patient privacy.Existing law requires the State Department of Public Health to license and regulate health facilities, including general acute care hospitals, acute psychiatric hospitals, and skilled nursing facilities, and clinics. Existing law makes a violation of these provisions a crime.The Confidentiality of Medical Information Act (CMIA) prohibits a provider of health care, a health care service plan, a contractor, or a corporation and its subsidiaries and affiliates from intentionally sharing, selling, using for marketing, or otherwise using any medical information, as defined, for any purpose not necessary to provide health care services to a patient, except as provided. Existing law makes a violation of these provisions that results in economic loss or personal injury to a patient punishable as a misdemeanor.This bill would state the intent of the Legislature to enact legislation to protect the privacy of undocumented Californians in hospitals.Digest Key Vote: MAJORITY Appropriation: NO Fiscal Committee: NO Local Program: NO
44
5- Amended IN Assembly March 24, 2025
65
7-Amended IN Assembly March 24, 2025
6+
7+
88
99 CALIFORNIA LEGISLATURE 20252026 REGULAR SESSION
1010
1111 Assembly Bill
1212
1313 No. 894
1414
1515 Introduced by Assembly Member CarrilloFebruary 19, 2025
1616
1717 Introduced by Assembly Member Carrillo
1818 February 19, 2025
1919
20- An act relating to health and care facilities. An act to add Section 1275.9 to the Health and Safety Code, relating to health facilities.
20+ An act relating to health and care facilities.
2121
2222 LEGISLATIVE COUNSEL'S DIGEST
2323
2424 ## LEGISLATIVE COUNSEL'S DIGEST
2525
26-AB 894, as amended, Carrillo. Health facilities: immigration and patient privacy. General acute care hospitals: patient directories.
26+AB 894, as introduced, Carrillo. Health facilities: immigration and patient privacy.
2727
28-Existing law requires the State Department of Public Health to license and regulate health facilities, including general acute care hospitals. Existing law makes a violation of these provisions a crime.Existing federal law, the Health Insurance Portability and Accountability Act of 1996 (HIPAA), authorizes a covered health care provider to use specified protected health information to maintain a directory of patients in its facility, and to disclose that information to persons who ask for the patient by name. Existing federal law requires a covered health care provider to inform an individual of the use and disclosure of information in the directory and to provide the patient with the opportunity to restrict or prohibit that use or disclosure.Existing law, the Confidentiality of Medical Information Act, prohibits a health care provider, a contractor, or a health care service plan from disclosing medical information, as defined, but does not prevent a general acute care hospital, upon an inquiry concerning a specific patient, from releasing a patients name, address, age, and sex, and a general description of the reason for treatment, among other information, unless there is a specific written request by the patient to the contrary.This bill would require a general acute care hospital to inform a patient, at the time of admitting, or at the earliest time possible in cases of patient incapacity or an emergency treatment circumstance, that the patient may restrict or prohibit the use or disclosure of protected health information in the hospitals patient directory by using a separate document or having hospital personnel verbally inform the patient, as specified. Because a violation of the bills requirements would be a crime, this bill would impose a state-mandated local program.The California Constitution requires the state to reimburse local agencies and school districts for certain costs mandated by the state. Statutory provisions establish procedures for making that reimbursement.This bill would provide that no reimbursement is required by this act for a specified reason.Existing law requires the State Department of Public Health to license and regulate health facilities, including general acute care hospitals, acute psychiatric hospitals, and skilled nursing facilities, and clinics. Existing law makes a violation of these provisions a crime.The Confidentiality of Medical Information Act (CMIA) prohibits a provider of health care, a health care service plan, a contractor, or a corporation and its subsidiaries and affiliates from intentionally sharing, selling, using for marketing, or otherwise using any medical information, as defined, for any purpose not necessary to provide health care services to a patient, except as provided. Existing law makes a violation of these provisions that results in economic loss or personal injury to a patient punishable as a misdemeanor.This bill would state the intent of the Legislature to enact legislation to protect the privacy of undocumented Californians in hospitals.
29-
30-Existing law requires the State Department of Public Health to license and regulate health facilities, including general acute care hospitals. Existing law makes a violation of these provisions a crime.
31-
32-Existing federal law, the Health Insurance Portability and Accountability Act of 1996 (HIPAA), authorizes a covered health care provider to use specified protected health information to maintain a directory of patients in its facility, and to disclose that information to persons who ask for the patient by name. Existing federal law requires a covered health care provider to inform an individual of the use and disclosure of information in the directory and to provide the patient with the opportunity to restrict or prohibit that use or disclosure.
33-
34-Existing law, the Confidentiality of Medical Information Act, prohibits a health care provider, a contractor, or a health care service plan from disclosing medical information, as defined, but does not prevent a general acute care hospital, upon an inquiry concerning a specific patient, from releasing a patients name, address, age, and sex, and a general description of the reason for treatment, among other information, unless there is a specific written request by the patient to the contrary.
35-
36-This bill would require a general acute care hospital to inform a patient, at the time of admitting, or at the earliest time possible in cases of patient incapacity or an emergency treatment circumstance, that the patient may restrict or prohibit the use or disclosure of protected health information in the hospitals patient directory by using a separate document or having hospital personnel verbally inform the patient, as specified. Because a violation of the bills requirements would be a crime, this bill would impose a state-mandated local program.
37-
38-The California Constitution requires the state to reimburse local agencies and school districts for certain costs mandated by the state. Statutory provisions establish procedures for making that reimbursement.
39-
40-This bill would provide that no reimbursement is required by this act for a specified reason.
28+Existing law requires the State Department of Public Health to license and regulate health facilities, including general acute care hospitals, acute psychiatric hospitals, and skilled nursing facilities, and clinics. Existing law makes a violation of these provisions a crime.The Confidentiality of Medical Information Act (CMIA) prohibits a provider of health care, a health care service plan, a contractor, or a corporation and its subsidiaries and affiliates from intentionally sharing, selling, using for marketing, or otherwise using any medical information, as defined, for any purpose not necessary to provide health care services to a patient, except as provided. Existing law makes a violation of these provisions that results in economic loss or personal injury to a patient punishable as a misdemeanor.This bill would state the intent of the Legislature to enact legislation to protect the privacy of undocumented Californians in hospitals.
4129
4230 Existing law requires the State Department of Public Health to license and regulate health facilities, including general acute care hospitals, acute psychiatric hospitals, and skilled nursing facilities, and clinics. Existing law makes a violation of these provisions a crime.
4331
44-
45-
4632 The Confidentiality of Medical Information Act (CMIA) prohibits a provider of health care, a health care service plan, a contractor, or a corporation and its subsidiaries and affiliates from intentionally sharing, selling, using for marketing, or otherwise using any medical information, as defined, for any purpose not necessary to provide health care services to a patient, except as provided. Existing law makes a violation of these provisions that results in economic loss or personal injury to a patient punishable as a misdemeanor.
4733
48-
49-
5034 This bill would state the intent of the Legislature to enact legislation to protect the privacy of undocumented Californians in hospitals.
51-
52-
5335
5436 ## Digest Key
5537
5638 ## Bill Text
5739
58-The people of the State of California do enact as follows:SECTION 1. Section 1275.9 is added to the Health and Safety Code, to read:1275.9. (a) A general acute care hospital shall inform a patient, at the time of admitting, or at the earliest time possible in cases of patient incapacity or an emergency treatment circumstance, that the patient may restrict or prohibit the use or disclosure of protected health information in the hospitals patient directory, as provided in Section 164.510 of Title 45 of the Code of Federal Regulations, in either of the following manners:(1) Using a separate document that only includes information regarding the hospitals directory and the included protected health information. The separate document shall include check boxes for the patient to mark whether they authorize or restrict or prohibit use or disclosure of the protected health information in the hospitals patient directory.(2) Having hospital personnel verbally inform the patient.(b) The information required pursuant to subdivision (a) shall be made available or provided in the top five languages, other than English, in the hospitals service area.SEC. 2. No reimbursement is required by this act pursuant to Section 6 of Article XIIIB of the California Constitution because the only costs that may be incurred by a local agency or school district will be incurred because this act creates a new crime or infraction, eliminates a crime or infraction, or changes the penalty for a crime or infraction, within the meaning of Section 17556 of the Government Code, or changes the definition of a crime within the meaning of Section 6 of Article XIIIB of the California Constitution.SECTION 1.It is the intent of the Legislature to enact legislation to protect the privacy of undocumented Californians in hospitals.
40+The people of the State of California do enact as follows:SECTION 1. It is the intent of the Legislature to enact legislation to protect the privacy of undocumented Californians in hospitals.
5941
6042 The people of the State of California do enact as follows:
6143
6244 ## The people of the State of California do enact as follows:
6345
64-SECTION 1. Section 1275.9 is added to the Health and Safety Code, to read:1275.9. (a) A general acute care hospital shall inform a patient, at the time of admitting, or at the earliest time possible in cases of patient incapacity or an emergency treatment circumstance, that the patient may restrict or prohibit the use or disclosure of protected health information in the hospitals patient directory, as provided in Section 164.510 of Title 45 of the Code of Federal Regulations, in either of the following manners:(1) Using a separate document that only includes information regarding the hospitals directory and the included protected health information. The separate document shall include check boxes for the patient to mark whether they authorize or restrict or prohibit use or disclosure of the protected health information in the hospitals patient directory.(2) Having hospital personnel verbally inform the patient.(b) The information required pursuant to subdivision (a) shall be made available or provided in the top five languages, other than English, in the hospitals service area.
46+SECTION 1. It is the intent of the Legislature to enact legislation to protect the privacy of undocumented Californians in hospitals.
6547
66-SECTION 1. Section 1275.9 is added to the Health and Safety Code, to read:
48+SECTION 1. It is the intent of the Legislature to enact legislation to protect the privacy of undocumented Californians in hospitals.
49+
50+SECTION 1. It is the intent of the Legislature to enact legislation to protect the privacy of undocumented Californians in hospitals.
6751
6852 ### SECTION 1.
69-
70-1275.9. (a) A general acute care hospital shall inform a patient, at the time of admitting, or at the earliest time possible in cases of patient incapacity or an emergency treatment circumstance, that the patient may restrict or prohibit the use or disclosure of protected health information in the hospitals patient directory, as provided in Section 164.510 of Title 45 of the Code of Federal Regulations, in either of the following manners:(1) Using a separate document that only includes information regarding the hospitals directory and the included protected health information. The separate document shall include check boxes for the patient to mark whether they authorize or restrict or prohibit use or disclosure of the protected health information in the hospitals patient directory.(2) Having hospital personnel verbally inform the patient.(b) The information required pursuant to subdivision (a) shall be made available or provided in the top five languages, other than English, in the hospitals service area.
71-
72-1275.9. (a) A general acute care hospital shall inform a patient, at the time of admitting, or at the earliest time possible in cases of patient incapacity or an emergency treatment circumstance, that the patient may restrict or prohibit the use or disclosure of protected health information in the hospitals patient directory, as provided in Section 164.510 of Title 45 of the Code of Federal Regulations, in either of the following manners:(1) Using a separate document that only includes information regarding the hospitals directory and the included protected health information. The separate document shall include check boxes for the patient to mark whether they authorize or restrict or prohibit use or disclosure of the protected health information in the hospitals patient directory.(2) Having hospital personnel verbally inform the patient.(b) The information required pursuant to subdivision (a) shall be made available or provided in the top five languages, other than English, in the hospitals service area.
73-
74-1275.9. (a) A general acute care hospital shall inform a patient, at the time of admitting, or at the earliest time possible in cases of patient incapacity or an emergency treatment circumstance, that the patient may restrict or prohibit the use or disclosure of protected health information in the hospitals patient directory, as provided in Section 164.510 of Title 45 of the Code of Federal Regulations, in either of the following manners:(1) Using a separate document that only includes information regarding the hospitals directory and the included protected health information. The separate document shall include check boxes for the patient to mark whether they authorize or restrict or prohibit use or disclosure of the protected health information in the hospitals patient directory.(2) Having hospital personnel verbally inform the patient.(b) The information required pursuant to subdivision (a) shall be made available or provided in the top five languages, other than English, in the hospitals service area.
75-
76-
77-
78-1275.9. (a) A general acute care hospital shall inform a patient, at the time of admitting, or at the earliest time possible in cases of patient incapacity or an emergency treatment circumstance, that the patient may restrict or prohibit the use or disclosure of protected health information in the hospitals patient directory, as provided in Section 164.510 of Title 45 of the Code of Federal Regulations, in either of the following manners:
79-
80-(1) Using a separate document that only includes information regarding the hospitals directory and the included protected health information. The separate document shall include check boxes for the patient to mark whether they authorize or restrict or prohibit use or disclosure of the protected health information in the hospitals patient directory.
81-
82-(2) Having hospital personnel verbally inform the patient.
83-
84-(b) The information required pursuant to subdivision (a) shall be made available or provided in the top five languages, other than English, in the hospitals service area.
85-
86-SEC. 2. No reimbursement is required by this act pursuant to Section 6 of Article XIIIB of the California Constitution because the only costs that may be incurred by a local agency or school district will be incurred because this act creates a new crime or infraction, eliminates a crime or infraction, or changes the penalty for a crime or infraction, within the meaning of Section 17556 of the Government Code, or changes the definition of a crime within the meaning of Section 6 of Article XIIIB of the California Constitution.
87-
88-SEC. 2. No reimbursement is required by this act pursuant to Section 6 of Article XIIIB of the California Constitution because the only costs that may be incurred by a local agency or school district will be incurred because this act creates a new crime or infraction, eliminates a crime or infraction, or changes the penalty for a crime or infraction, within the meaning of Section 17556 of the Government Code, or changes the definition of a crime within the meaning of Section 6 of Article XIIIB of the California Constitution.
89-
90-SEC. 2. No reimbursement is required by this act pursuant to Section 6 of Article XIIIB of the California Constitution because the only costs that may be incurred by a local agency or school district will be incurred because this act creates a new crime or infraction, eliminates a crime or infraction, or changes the penalty for a crime or infraction, within the meaning of Section 17556 of the Government Code, or changes the definition of a crime within the meaning of Section 6 of Article XIIIB of the California Constitution.
91-
92-### SEC. 2.
93-
94-
95-
96-It is the intent of the Legislature to enact legislation to protect the privacy of undocumented Californians in hospitals.