Bill Text: CA AB1697 | 2023-2024 | Regular Session | Amended
NOTE: There are more recent revisions of this legislation. Read Latest Draft
Bill Title: Uniform Electronic Transactions Act.
Spectrum: Partisan Bill (Democrat 1-0)
Status: (Passed) 2023-10-07 - Chaptered by Secretary of State - Chapter 374, Statutes of 2023. [AB1697 Detail]
Download: California-2023-AB1697-Amended.html
Bill Title: Uniform Electronic Transactions Act.
Spectrum: Partisan Bill (Democrat 1-0)
Status: (Passed) 2023-10-07 - Chaptered by Secretary of State - Chapter 374, Statutes of 2023. [AB1697 Detail]
Download: California-2023-AB1697-Amended.html
|
Amended
IN
Assembly
April 27, 2023 |
|
Amended
IN
Assembly
April 06, 2023 |
|
Amended
IN
Assembly
March 14, 2023 |
CALIFORNIA LEGISLATURE—
2023–2024 REGULAR SESSION
Assembly Bill
No. 1697
| Introduced by Assembly Member Schiavo |
February 17, 2023 |
An act to amend Sections 56.11, 56.17, 56.21, and 1633.3 of the Civil Code, relating to civil law.
LEGISLATIVE COUNSEL'S DIGEST
AB 1697, as amended, Schiavo.
Uniform Electronic Transactions Act.
Existing law, the Uniform Electronic Transactions Act, provides that a record or signature may not be denied legal effect or enforceability solely because it is in electronic form. The act exempts from its provisions, among other things, specific transactions, including an authorization for the release of medical information by a provider of health care, health care service plan, pharmaceutical company, or contractor and an authorization for the release of genetic test results by a health care service plan under the Confidentiality of Medical Information Act.
This bill would delete the exemption for the above-described authorizations under the Confidentiality of Medical Information Act and would make conforming changes.
Existing law requires that the authorization for release of
medical information contain a specific end date.
This bill would, instead, require that the authorization contain a specific end date or expiration event. event, as specified.
Digest Key
Vote: MAJORITY Appropriation: NO Fiscal Committee: NO Local Program: NOBill Text
The people of the State of California do enact as follows:
SECTION 1.
Section 56.11 of the Civil Code is amended to read:56.11.
Any person or entity that wishes to obtain medical information pursuant to subdivision (a) of Section 56.10, other than a person or entity authorized to receive medical information pursuant to subdivision (b) or (c) of Section 56.10, except as provided in paragraph (21) of subdivision (c) of Section 56.10, shall obtain a valid authorization for the release of this information.An authorization for the release of medical information by a provider of health care, health care service plan, pharmaceutical company, or contractor shall be valid if it:
(a) Is handwritten or is in a typeface no smaller than 14-point type.
(b) Is clearly separate from any other language present on the same page and is executed by a signature which serves no other purpose than to execute the authorization.
(c) Is signed, including with an electronic or handwritten signature, and dated by one of the following:
(1) The patient. A patient who is a minor may only sign an authorization for the release of medical information obtained by a provider of health care, health care service plan, pharmaceutical company, or contractor in the course of furnishing services to which the minor could lawfully have consented under Part 1 (commencing with Section 25) or Part 2.7 (commencing with Section 60).
(2) The legal representative of the patient, if the patient
is a minor or an incompetent. However, authorization may not be given under this subdivision for the disclosure of medical information obtained by the provider of health care, health care service plan, pharmaceutical company, or contractor in the course of furnishing services to which a minor patient could lawfully have consented under Part 1 (commencing with Section 25) or Part 2.7 (commencing with Section 60).
(3) The spouse of the patient or the person financially responsible for the patient, where the medical information is being sought for the sole purpose of processing an application for health insurance or for enrollment in a nonprofit hospital plan, a health care service plan, or an employee benefit plan, and where the patient is to be an enrolled spouse or dependent under the policy or plan.
(4) The beneficiary or personal representative of a deceased patient.
(d) States the specific uses and limitations on the types of medical information to be disclosed.
(e) States the name or functions of the provider of health care, health care service plan, pharmaceutical company, or contractor that may disclose the medical information.
(f) States the name or functions of the persons or entities authorized to receive the medical information.
(g) States the specific uses and limitations on the use of the medical information by the persons or entities authorized to receive the medical information.
(h) States a specific date or expiration event after which the provider of health care, health care service plan, pharmaceutical company, or contractor is no longer authorized to disclose the medical information.
(i) Advises the person signing the authorization of the right to receive a copy of the authorization.
(j) For purposes of this section, an “expiration event” shall relate to the individual or the purpose of the use or disclosure. The statement “end of the research study,” “none,” or similar language is sufficient if the authorization is for a use or disclosure of protected health information for research, including for the creation and maintenance of a research database or research
repository.
SEC. 2.
Section 56.17 of the Civil Code is amended to read:56.17.
(a) This section shall apply to the disclosure of genetic test results contained in an applicant’s or enrollee’s medical records by a health care service plan.(b) Any person who negligently discloses results of a test for a genetic characteristic to any third party in a manner that identifies or provides identifying characteristics of the person to whom the test results apply, except pursuant to a written authorization as described in subdivision (g), shall be assessed a civil penalty in an amount not to exceed one thousand dollars ($1,000) plus court costs, as determined by the court, which penalty and costs shall be paid to the subject of the
test.
(c) Any person who willfully discloses the results of a test for a genetic characteristic to any third party in a manner that identifies or provides identifying characteristics of the person to whom the test results apply, except pursuant to a written authorization as described in subdivision (g), shall be assessed a civil penalty in an amount not less than one thousand dollars ($1,000) and no more than five thousand dollars ($5,000) plus court costs, as determined by the court, which penalty and costs shall be paid to the subject of the test.
(d) Any person who willfully or negligently discloses the results of a test for a genetic characteristic to a third party in a manner that identifies or provides identifying characteristics of the person to whom the test results
apply, except pursuant to a written authorization as described in subdivision (g), that results in economic, bodily, or emotional harm to the subject of the test, is
guilty of a misdemeanor punishable by a fine not to exceed ten thousand dollars ($10,000).
(e) In addition to the penalties listed in subdivisions (b) and (c), any person who commits any act described in subdivision (b) or (c) shall be liable to the subject for all actual damages, including damages for economic, bodily, or emotional harm which is proximately caused by the act.
(f) Each disclosure made in violation of this section is a separate and actionable offense.
(g) The applicant’s “written authorization,” as used in this section, shall satisfy the following requirements:
(1) Is written in plain language and is in a typeface no smaller than
14-point type.
(2) Is dated and signed, including with an electronic or handwritten signature, by the individual or a person authorized to act on behalf of the individual.
(3) Specifies the types of persons authorized to disclose information about the individual.
(4) Specifies the nature of the information authorized to be disclosed.
(5) States the name or functions of the persons or entities authorized to receive the information.
(6) Specifies the purposes for which the information is collected.
(7) Specifies the length of time the
authorization shall remain valid or describes an expiration event.
(8) Advises the person signing the authorization of the right to receive a copy of the authorization. Written authorization is required for each separate disclosure of the test results.
(h) This section shall not apply to disclosures required by the State Department of Health Services necessary to monitor compliance with Chapter 1 (commencing with Section 124975) of Part 5 of Division 106 of the Health and Safety Code, nor to disclosures required by the Department of Managed Health Care necessary to administer and enforce compliance with Section 1374.7 of the Health and Safety Code.
(i) For purposes of this section, “genetic characteristic” has the same
meaning as that set forth in subdivision (d) of Section 1374.7 of the Health and Safety Code.
(j) For purposes of this section, an “expiration event” shall relate to the individual or the purpose of the use or disclosure. The statement “end of the research study,” “none,” or similar language is sufficient if the authorization is for a use or disclosure of protected health information for research, including for the creation and maintenance of a research database or research repository
SEC. 3.
Section 56.21 of the Civil Code is amended to read:56.21.
An authorization for an employer to disclose medical information shall be valid if it complies with all of the following:(a) Is handwritten or is in a typeface no smaller than 14-point type.
(b) Is clearly separate from any other language present on the same page and is executed by a signature that serves no purpose other than to execute the authorization.
(c) Is signed, including with an electronic or handwritten signature, and dated by one of the following:
(1) The patient, except
that a patient who is a minor may only sign an authorization for the disclosure of medical information obtained by a provider of health care in the course of furnishing services to which the minor could lawfully have consented under Part 1 (commencing with Section 25) or Part 2.7 (commencing with Section 60) of Division 1.
(2) The legal representative of the patient, if the patient is a minor or incompetent. However, authorization may not be given under this subdivision for the disclosure of medical information that pertains to a competent minor and that was created by a provider of health care in the course of furnishing services to which a minor patient could lawfully have consented under Part 1 (commencing with Section 25) or Part 2.7 (commencing with Section 60) of Division 1.
(3) The beneficiary or personal representative of a deceased patient.
(d) States the limitations, if any, on the types of medical information to be disclosed.
(e) States the name or functions of the employer or person authorized to disclose the medical information.
(f) States the names or functions of the persons or entities authorized to receive the medical information.
(g) States the limitations, if any, on the use of the medical information by the persons or entities authorized to receive the medical information.
(h) States a specific date or expiration event after which the employer
is no longer authorized to disclose the medical information.
(i) Advises the person who signed the authorization of the right to receive a copy of the authorization.
(j) For purposes of this section, an “expiration event” shall relate to the individual or the purpose of the use or disclosure. The statement “end of the research study,” “none,” or similar language is sufficient if the authorization is for a use or disclosure of protected health information for research, including for the creation and maintenance of a research database or research repository
SEC. 4.
Section 1633.3 of the Civil Code is amended to read:1633.3.
(a) Except as otherwise provided in subdivisions (b) and (c), this title applies to electronic records and electronic signatures relating to a transaction.(b) This title does not apply to transactions subject to any of the following laws:
(1) A law governing the creation and execution of wills, codicils, or testamentary trusts.
(2) Division 1 (commencing with Section 1101) of the Uniform Commercial Code, except Sections 1206 and 1306.
(3) Divisions 3 (commencing with Section 3101), 4 (commencing
with Section 4101), 5 (commencing with Section 5101), 8 (commencing with Section 8101), 9 (commencing with Section 9101), and 11 (commencing with Section 11101) of the Uniform Commercial Code.
(4) A law that requires that specifically identifiable text or disclosures in a record or a portion of a record be separately signed, including initialed, from the record. However, this paragraph does not apply to Section 1677 or 1678 of this code or Section 1298 of the Code of Civil Procedure.
(c) This title does not apply to any specific transaction described in Section 17511.5 of the Business and Professions Code, Section 798.14, 1133, or 1134 of, Section 1689.6, 1689.7, or 1689.13 of, Chapter 2.5 (commencing with Section 1695) of Title 5 of Part 2 of Division 3 of, Section 1720,
1785.15, 1789.14, 1789.16, or 1793.23 of, Chapter 1 (commencing with Section 1801) of Title 2 of Part 4 of Division 3 of, Section 1861.24, 1862.5, 1917.712, 1917.713, 1950.6, 1983, 2924b, 2924c, 2924f, 2924i, 2924j, 2924.3, or 2937 of, Article 1.5 (commencing with Section 2945) of Chapter 2 of Title 14 of Part 4 of Division 3 of, Section 2954.5 or 2963 of, Chapter 2b (commencing with Section 2981) or 2d (commencing with Section 2985.7) of Title 14 of Part 4 of Division 3 of, Section 3071.5 of, Part 5 (commencing with Section 4000) of Division 4 of, or Part 5.3 (commencing with Section 6500) of Division 4 of, this code, subdivision (b) of Section 18608 or Section 22328 of the Financial Code, Section 1358.15, 1365, 1368.01, 1368.1, 1371, or 18035.5 of the Health and Safety Code, Section 786 as it applies to individual and group disability policies, 10199.44, 10199.46, 10235.16, 10235.40, 11624.09, or
11624.1 of the Insurance Code, Section 779.1, 10010.1, or 16482 of the Public Utilities Code, or Section 9975 or 11738 of the Vehicle Code. An electronic record may not be substituted for any notice that is required to be sent pursuant to Section 1162 of the Code of Civil Procedure. This subdivision does not prohibit the recordation of any document with a county recorder by electronic means.
(d) This title applies to an electronic record or electronic signature otherwise excluded from the application of this title under subdivision (b) when used for a transaction subject to a law other than those specified in subdivision (b).
(e) A transaction subject to this title is also subject to other applicable substantive law.
(f) The exclusion of a transaction from the application of this title under subdivision (b) or (c) shall be construed only to exclude the transaction from the application of this title, but shall not be construed to prohibit the transaction from being conducted by electronic means if the transaction may be conducted by electronic means under any other applicable law.
(g) Notwithstanding subdivisions (b) and (c), this title shall apply to electronic records and electronic signatures relating to transactions conducted by a person licensed, certified, or registered pursuant to the Alarm Company Act (Chapter 11.6 (commencing with Section 7590) of Division 3 of the Business and Professions Code) for purposes of activities authorized by Section 7599.54 of the Business and Professions Code.
