AB 2448 Medical information: confidentiality
Sep 6, 2026 edition · GC-2026-0076 · Published 2026-09-06 · Version 2 · Proposed
AB 2448 proposed requiring covered medical-information businesses to enable sensitive-service security features.
What happened
The August 30 enrolled AB 2448 would add an express requirement to enable the sensitive-service security capabilities addressed in Civil Code 56.101(c), rather than only develop capabilities, policies and procedures to enable them. The provision covers specified Section 56.06 businesses electronically storing or maintaining sensitive-service medical information on behalf of listed entities. The proposed text retains the July 1, 2024 date in the existing framework; it is not a newly announced future implementation deadline. The amendment remained pending as of September 5.
The listed controls limit authorized access, prevent specified out-of-state handling, segregate gender-affirming, abortion-related and contraceptive information, and provide automatic disabling of out-of-state access to segregated records. Fees must be consistent with the cited federal rule. Subdivision (c) expressly excludes contractors, health plans and providers as defined in Section 56.05, so this business requirement cannot simply be assigned to every provider with an EHR. The broader confidentiality and record-integrity provisions remain distinct.
Scope and timing
- Authority status
- Proposed
- Applicability
- Potentially applicable
- Audience
- Health systems, Provider networks, Health-tech
- Jurisdiction
- California
Why it matters
Scope and actual feature enablement would matter for covered vendors, while the explicit entity exclusion prevents a blanket provider mandate.
Recommended action
Monitor disposition, classify the business under the cited definitions and review sensitive-service feature configuration and lawful data flows against any final law.
Sources
- AB 2448 Medical information: confidentiality, bill historyOfficial · California Legislature · 2026-09-03 · Source review 2026-09-10
- AB 2448 Medical information: confidentiality, current bill text (08/30/26 - Enrolled)Official · California Legislature · 2026-08-30 · Source review 2026-09-10
Complete edition and supplemental material
This finding in the complete approved report →Regulatory horizons, CIA trends and implementation trackers remain in the full report.
Read the entire Compliance Sweep report →