AB 2448 Medical information: confidentiality
Sep 20, 2026 edition · GC-2026-0076 · Published 2026-09-20 · Version 2 · Proposed
AB 2448 proposed requiring specified sensitive-health-data businesses to enable security features they were already required to develop.
What happened
AB 2448’s retained proposal would amend Civil Code 56.101 to require covered businesses described in Section 56.06 that electronically maintain sensitive-service information on behalf of specified entities to enable the security capabilities, policies and procedures in the statute. The features concern gender-affirming care, abortion-related services and contraception, including access limits, segregation, controls on out-of-state disclosure and the ability to disable access to segregated information from another state. The proposal remained pending during September 13–19.
The targeted subdivision expressly excludes contractors, health care service plans and providers as those terms are defined in Section 56.05, so the specified business duty cannot simply be assigned to every hospital or plan. Other confidentiality duties remain distinct. The retained text contains an existing July 1, 2024 date in the provision being amended; that is not a newly announced 2026 implementation deadline. Fees for compliance must remain consistent with the referenced federal information-blocking rule. Applicability and final commencement would need review before treating the proposed “enable” language as operative.
Scope and timing
- Authority status
- Proposed
- Applicability
- Potentially applicable
- Audience
- Health systems, Provider networks, Health-tech
- Jurisdiction
- California
Why it matters
Sensitive-data system owners need to identify the covered business role and statutory exceptions before assigning proposed technical changes.
Recommended action
Monitor the final enactment and have Privacy, Legal and system owners map the covered business and data scope, existing capabilities and applicable access controls without treating the old 2024 text as a new deadline.
Sources
- AB 2448 Medical information: confidentiality, bill historyOfficial · California Legislature · 2026-09-03 · Source review 2026-09-10
- AB 2448 Medical information: confidentiality, current bill text (08/30/26 - Enrolled)Official · California Legislature · 2026-08-30 · Source review 2026-09-10
Complete edition and supplemental material
This finding in the complete approved report →Regulatory horizons, CIA trends and implementation trackers remain in the full report.
Read the entire Compliance Sweep report →