In California, the California Confidentiality of Medical Information Act (CMIA) defines who may release confidential medical information, and under what circumstances. The CMIA also prohibits the sharing, selling, or otherwise unlawful use of medical information.
California's wiretapping law is a "two-party consent" law. California makes it a crime to record or eavesdrop on any confidential communication, including a private conversation or telephone call, without the consent of all parties to the conversation. See Cal. Penal Code § 632.
California Health & Safety Code section 123100 et seq. establishes a patient's right to see and receive copies of his or her medical records, under specific conditions and/or requirements as shown below.
(a) For individuals 21 years of age or older, a service is “medically necessary” or a “medical necessity” when it is reasonable and necessary to protect life, to prevent significant illness or significant disability, or to alleviate severe pain.
However, within the remaining 11 states including California and Washington—also known as “all-party jurisdiction states”—state law dictates that all parties recorded must express their consent.
Generally, an authorization provides the authority for a doctor's release of PHI for specified purposes, which are generally other than treatment, payment, or healthcare operations, or, to disclose protected health information to a third party specified by the individual.
Sometimes a third party — like an insurance company or an attorney — needs to request your medical information. In that case, you'll have to sign a release of information authorization.
(5) A person or entity who is not permitted to receive medical information pursuant to this part and who knowingly and willfully obtains, discloses, or uses medical information without written authorization from the patient shall be liable for a civil penalty not to exceed two hundred fifty thousand dollars ($250,000) ...
While the federal wiretapping law (18 U.S. Code § 2511) requires only one person consent to record a conversation,2 California requires that all parties must consent to recording a conversation. Secretly recording physician visits is illegal in California.
The Confidentiality Of Medical Information Act (CMIA) CMIA prohibits a health care provider, health care service plan, or contractor from disclosing medical information regarding a patient, enrollee, or subscriber without first obtaining an authorization, except as specified.