California's wiretapping law is a "two-party consent" law. California makes it a crime to record or eavesdrop on any confidential communication, including a private conversation or telephone call, without the consent of all parties to the conversation. See Cal. Penal Code § 632.
What is CMIA? The Confidentiality of Medical Information Act (CMIA) is a California law that protects the confidentiality of individually identifiable medical information obtained by health care providers, health insurers, and their contractors.
Questions like if an employee is able to work or when they expect they will be healthy enough to return back to work are perfectly acceptable. However, the employer is not able to ask direct questions about the specifics of the medical condition.
By law, a patient's records are defined as records relating to the health history, diagnosis, or condition of a patient, or relating to treatment provided or proposed to be provided to the patient. Physicians must provide patients with copies within 15 days of receipt of the request.
All employees have the right to keep their medical conditions confidential if they wish. Rather, an employer should ask if their recent medical history is preventing them from performing the job tasks they used to do before the illness.
However, within the remaining 11 states including California and Washington—also known as “all-party jurisdiction states”—state law dictates that all parties recorded must express their consent.
California Health & Safety Code section 123100 et seq. establishes a patient's right to see and receive copies of his or her medical records, under specific conditions and/or requirements as shown below.
While the federal wiretapping law (18 U.S. Code § 2511) requires only one person consent to record a conversation,2 California requires that all parties must consent to recording a conversation. Secretly recording physician visits is illegal in California.
In some cases, employers may also ask for a doctor's note or medical certification to verify your need for time off. However, they are not allowed to ask for the details of your medical condition, as this would violate your privacy rights.
(a) Patients may authorize the release of their health care information by completing the CDCR 7385, Authorization for Release of Protected Health Information , to allow a family member or friend to request and receive an update when there is a significant change in the patient 's health care condition.