Limits sharing of gender-affirming and protected care data

(1)The United States Constitution generally requires a state to give full faith and credit to the public acts, records, and judicial proceedings of every other state. Existing law generally authorizes a California court or attorney to issue a subpoena if a foreign subpoena has been sought in this state but prohibits the issuance of a subpoena based on another state’s law that interferes with a person’s right to allow a child to receive gender-affirming health care or gender-affirming mental health care. Existing law generally prohibits a provider of health care, a health care service plan, or a contractor from disclosing medical information regarding a patient, enrollee, or subscriber without first obtaining an authorization unless an exception applies, including that the disclosure is in response to a subpoena. Existing law prohibits a provider of health care, a health care service plan, or a contractor from releasing medical information related to a person or entity allowing a child to receive gender-affirming health care or gender-affirming mental health care in response to a civil action, including a foreign subpoena, based on another state’s law that authorizes a person to bring a civil action against a person or entity that allows a child to receive gender-affirming health care or gender-affirming mental health care.

This bill would additionally prohibit a provider of health care, a health care service plan, or a contractor from releasing medical information related to a person seeking or obtaining gender-affirming health care or gender-affirming mental health care in response to a criminal or civil action, including a foreign subpoena, based on another state’s law that interferes with an individual’s right to seek or obtain gender-affirming health care or gender-affirming mental health care. The bill would also prohibit a provider of health care, health care service plan, contractor, or employer from cooperating with or providing medical information to an individual, agency, or department from another state or, to the extent permitted by federal law, to a federal law enforcement agency that would identify an individual and that is related to an individual seeking or obtaining gender-affirming health care, as specified. The bill would prohibit these entities from releasing medical information related to sensitive services, as defined, in response to a foreign subpoena that is based on a violation of another state’s laws authorizing a criminal action against a person or entity for provision or receipt of legally protected health care activity, as defined. The bill would also generally prohibit the issuance of a subpoena based on a violation of another state’s law that interferes with a person’s right to seek or obtain gender-affirming health care or gender-affirming mental health care, as specified.

(2)Existing law requires the Department of Justice to maintain the Controlled Substance Utilization Review and Evaluation System (CURES) for the electronic monitoring of the prescribing and dispensing of certain controlled substances by a health care practitioner authorized to prescribe, order, administer, furnish, or dispense those controlled substances. Existing law authorizes the department to enter into an agreement with an entity operating an interstate data sharing hub, or an agency operating a prescription drug monitoring program in another state, for purposes of interstate data sharing of prescription drug monitoring program information. Existing law limits the entities to which data may be provided from CURES, as well as the type of data that may be released and the uses to which it may be put.

This bill would prohibit a state or local agency or employee, appointee, officer, contractor, or official or any other person acting on behalf of a public agency from knowingly providing any CURES data or knowingly expending any resources in furtherance of any interstate investigation or proceeding seeking to impose civil, criminal, or disciplinary liability based upon another state’s law for the provision or receipt of legally protected health care activity, as defined. The bill would prohibit the department from sharing data with an out-of-state law enforcement agency without a warrant, subpoena, or court order and would prohibit an out-of-state user from providing any data in furtherance of an investigation or proceeding to impose liability based on another state’s law for the provision or receipt of legally protected health care activity.

This bill would make it a misdemeanor for a person to access the CURES database when not authorized by law and would make it a misdemeanor for a person who is authorized to access the database to knowingly furnish information from the CURES database to a person who is not authorized by law to receive that information. By creating new crimes, the bill would impose a state-mandated local program.

(3)This bill would provide that its provisions are severable.

(4)This bill would incorporate additional changes to Section 11165 of the Health and Safety Code proposed by AB 82 to be operative only if this bill and AB 82 are enacted and this bill is enacted last.

(5)The California Constitution requires the state to reimburse local agencies and school districts for certain costs mandated by the state. Statutory provisions establish procedures for making that reimbursement.

This bill would provide that no reimbursement is required by this act for a specified reason.

(6)This bill would declare that it is to take effect immediately as an urgency statute.