Health information: disclosure: Taft-Hartley plans.

Existing law, the federal Health Insurance Portability and Accountability Act of 1996 (HIPAA) , establishes certain requirements relating to the provision of health insurance and, among other things, requires the Secretary of the United States Department of Health and Human Services to publicize the standards for the electronic exchange, privacy, and security of protected health information, as defined. Existing law, the Confidentiality of Medical Information Act, prohibits a health care provider, a contractor, or a health care service plan from disclosing medical information, as defined, regarding a patient of the provider or an enrollee or subscriber of the health care service plan without first obtaining an authorization, except as specified. Existing law makes a violation of the act that results in economic loss or personal injury to a patient a misdemeanor. This bill would authorize a health care provider or a health care service plan to disclose medical information to a specified type of employee welfare benefit plan formed under the Taft-Hartley Act, or to an entity contracting with that employee welfare benefit plan, as specified, if, among other requirements, the disclosure is for a specified purpose, is made pursuant to a request accompanied by a written authorization for the release of the information, as specified, and is authorized by and made in a manner consistent with HIPAA. By changing the definition of a crime, the bill would impose a state-mandated local program. The California Constitution requires the state to reimburse local agencies and school districts for certain costs mandated by the state. Statutory provisions establish procedures for making that reimbursement. This bill would provide that no reimbursement is required by this act for a specified reason.