Regulatory Compliance Sweep, week ending October 3, 2026

Treasury, Labor, HHS and OPM published an August 28 correcting amendment to the June 4 Federal Independent Dispute Resolution Operations final rule, 91 FR 33900. It restores omitted provisions and corrects drafting instructions, placeholders and cross-references across 26 CFR part 54, 29 CFR part 2590 and 45 CFR part 149. The correction is effective August 28, 2026 and applies beginning August 3, the final rule’s effective date. For 45 CFR 149.510(c), the departments include the paragraph in full because the earlier text was incomplete.

The restored binding-determination language makes a certified IDR entity’s determination binding absent fraud or intentional misrepresentation of material claim facts and limits judicial review to the cited federal arbitration grounds. Other corrections remove an inadvertently retained word and repair references connecting payment determination and related procedures. The departments explain that these changes correct the text to reflect policies already described through notice and comment, rather than adopt new substantive policy, and invoke good cause to avoid another proposal and a delayed effective date. The earlier August applicability is therefore material when reviewing dispute procedures used after the original rule took effect.

CDPH’s August 27 All Facilities Letter 26-28 explains SB 164, Chapter 27, which imposed a home health agency licensure moratorium from June 29, 2026 until no later than 90 days after the revised required regulations take effect. CDPH cannot issue new initial licenses or approve branches without the specified written unmet-need finding based on geographic concentration. It must stop processing new-license applications not licensed by June 29. Applicants with then-pending applications must respond by October 9, an upcoming date in this October 4 edition, through withdrawal, an exception justification with supporting evidence, or the stated intent to continue a change-of-ownership process. CDPH otherwise automatically withdraws the application. Changes of ownership within five years of initial licensing require an exception for continuity of care or both financial hardship and unmet geographic need. The letter also addresses exception requests for later applicants, geographic changes and branches, while preserving ordinary renewals and specified other changes.

Agencies must have an administrator and designee and a director of patient care services and designee. For each, the required HS 215 A or successor, resume and list of current management roles are due at application, within 10 business days of a personnel change, and once for currently licensed agencies by March 31, 2027; parent-agency branch offices are exempt from these management filings. Private-HHA applicants must provide fingerprints for persons with at least a five-percent ownership interest. Expanded denial, suspension or revocation grounds include specified prior program termination or license action, a pattern of violations over three years, the applicant’s or licensee’s exclusion-list presence, management noncooperation and unreported ownership, personnel, service-area or location changes. The AFL also addresses provisional-license renewal limits. The ownership fingerprint threshold and exclusion-list grounds are separate provisions.

California enacted AB 1760 as Chapter 167 on August 31, with general changes subject to the ordinary January 1, 2027 effective-date rule. The law revises licensing and examination evidence, including the foreign-school accreditation cross-reference, subject reexamination treatment and credentials for certain out-of-state practitioners and faculty. The credential pathways distinguish clinical hours from specified nonclinical public-health experience and require supporting documentation. Elective facial cosmetic surgery permit review also changes: when an applicant requests both procedure categories, the committee may recommend a permit limited to one if competency for both is not established.

The measure adds polishing and contouring existing amalgam restorations to specified extended-function assistant duties under direct dentist supervision and revises related training requirements. Radiation-safety course provisions address approval, instructional requirements, provisional approval and written reasons for approval decisions, and permit didactic distance learning subject to stated conditions. Existing course approvals continue only until January 1, 2028 under the transition provision. That date concerns the course-approval transition; it should not be treated as the commencement date for every licensing or assistant-duty amendment.

California enacted AB 2341 as Chapter 170 on August 31 with an express urgency clause making it effective immediately. Amended Government Code section 7299.7 first asks whether at least five percent of the jurisdiction’s population speaks English less than very well, using American Community Survey data or an equally reliable source. Once that threshold is met, emergency information must be provided in English and each language spoken by at least five percent of the limited-English population. The denominator for identifying the languages is therefore the population speaking English less than very well, rather than everyone in the jurisdiction.

Local agencies must reassess the data every five years and make translated emergency information as comprehensive, actionable and timely as English information. They should endeavor to use culturally competent community members and fluent native speakers when feasible. The statutory local-agency definition covers cities, counties, a city and county, and their departments; it does not assign the same duty to every private hospital. A separate state office sampling survey starts January 1, 2027 and repeats every three years. The law preserves other emergency-service duties and permits more expansive local standards.

HHS OCR issued a September 3, 2026 letter explaining how Title VI and Section 1557 apply when antisemitic conduct discriminates on a protected ground, including actual or perceived Jewish ancestry, ethnic characteristics or Israeli national origin. It addresses recipients of HHS financial assistance, including hospitals, nursing facilities, medical schools, training programs, research institutions and human-services providers. The letter covers clinical and administrative decisions, such as access, treatment, security, discharge and grievance handling. It distinguishes discriminatory treatment from individualized clinical, safety or operational judgments applied consistently without regard to protected status. It also explains that recipients cannot evade applicable obligations through contractors or affiliated clinical sites.

OCR describes harassment and retaliation analysis, including the recipient's knowledge, control, response and restoration of equal access. The letter warns against treating the private-damages deliberate-indifference formulation as the only administrative enforcement theory; the applicable theory and facts still matter. It identifies accessible reporting, responsible-staff training, appropriate contracts, documented responses and follow-up as possible compliance measures. Separate religious nondiscrimination rules can also govern visitation. The employment discussion expressly limits OCR's Title VI employment jurisdiction and generally addresses professionals and trainees as program participants, rather than asserting general jurisdiction over all employment discrimination. The letter is guidance about existing protections, so its examples should be applied with those scope limits intact.

DMHC's September 3, 2026 All Plan Letter 26-014 directs health care service plans to submit contracted pharmacy benefit manager information by October 1, 2026. The letter specifies an eFiling Report/Other submission titled 'Contracted PBMs and Pharmacy Delegations,' including an Exhibit E-1. The exhibit must identify each currently contracted PBM and each PBM whose contract will be in effect January 1, 2027, and describe delegated functions. By this October 4 issue, the filing date has passed; the appropriate task is to confirm the submission or address an identified omission, rather than describe October 1 as an upcoming deadline.

The exhibit also asks whether the plan intends to continue contracting with each listed PBM beyond January 1, 2027 and whether it confirmed that each PBM submitted a licensure application. Those are separate questions: confirmation of an application does not by itself establish that a license has been issued. The letter reminds plans to ensure contracted PBMs are licensed before January 1, 2027, citing the governing legislation and prior all-licensee guidance. It directs questions about the checklist or letter to the Office of Plan Licensing through the assigned reviewer. Plans therefore need both a complete filing record and continuing evidence of each PBM's licensing status.

California enacted AB 173 on September 18 as an immediately effective health-budget law, resolving the earlier proposal status. Amended Welfare and Institutions Code section 14043.2 adds denial or termination where an applicant or provider has an affiliation within the previous five years with a person or entity experiencing a federally defined disclosable event and DHCS determines an undue risk of fraud, waste or abuse. DHCS must apply the cited federal risk factors and may act despite full and timely disclosure. Legally protected healthcare activity does not constitute fraud, waste or abuse merely because of its nature. The section is implemented only after necessary federal approvals and only while federal financial participation is available and not jeopardized.

The final text also expands enrollment-status and site-compliance controls and changes section 14043.36 suspension and deactivation timing from the prior notice period to the date DHCS sends notice. When an email address is on file, certified-mail and email notice are required, and the email-send date governs. A separate payment-suspension provision in section 14107.11 generally requires notice within five days, with written law-enforcement requests allowing bounded delays; that is a different process from enrollment deactivation. The larger budget law contains separate Medi-Cal eligibility, maintenance-dialysis, assisted-living and other health-program provisions, so an enrollment review does not complete the organization’s review of the whole measure.

The retained official AB 1018 text is the August 28, 2026 Senate amendment, and its history lists the latest action on August 30 as a second reading followed by an order to third reading. Those records support continuing to track a proposal; they do not establish passage to the Governor or enactment. The proposal would regulate developers and deployers of covered automated decision systems used to make or facilitate consequential decisions. Its framework reaches decisions involving matters such as health care and insurance, employment, education, housing, financial services and government benefits. The ADS definition focuses on computational outputs that assist or replace discretionary decisions and materially affect people.

The amended proposal distinguishes developers' documentation responsibilities from deployers' responsibilities to affected people. Its digest describes instructions for developer-approved uses, disclosures following adverse consequential outcomes and an opportunity to appeal as prescribed in the proposed text. Definitions also exclude specified ordinary tools, including spam filters, access-management tools, calculators and standalone compilations of data; a generative-AI system is not necessarily covered merely because it generates content. Organizations can use that scope to inventory candidate systems and vendor dependencies, but should not represent the proposed duties as current law. The appropriate next event is a verified legislative action, with any implementation plan contingent on a final enacted version.

California enacted AB 1199 on September 30, amending Business and Professions Code sections 2282 and 2453 and Health and Safety Code section 1275.6. Hospital rules for organized medical staffs must provide reappointments at least every three years, replacing the annual or biennial formulation. Physician staff competency controls continue to require demonstration of ability to perform surgical and other procedures at original appointment and at least every three years thereafter. The amended hospital provision similarly requires medical staff committees to assess competency at original appointment and every three years thereafter. The enactment is the event reported here; the applicable commencement of these provisions must be confirmed separately.

The law directs CDPH not to require general acute care or acute psychiatric hospitals to conduct routine reappointments more frequently than every three years. That language addresses the department’s routine reappointment requirement, alongside the medical staff’s ongoing professional and ethical controls; it does not itself resolve separate federal, accreditation, contractual or bylaw obligations. The final text also retains the requirement for medical staff review and analysis of clinical experience using patient records. A longer routine cycle therefore does not eliminate competency oversight between appointments.

California chaptered AB 1405 on September 9, 2026, establishing an AI Auditor Registry administered by the Government Operations Agency. The agency must establish the registry, annual fees limited to reasonable administrative costs, and a public misconduct-reporting mechanism by January 1, 2029. Beginning that date, a person may not offer, sell or conduct a covered AI audit without registration. The definition covers audits of AI controls, processes or systems necessary for compliance with state law; it does not make every assessment of an AI product a covered audit. Registration numbers must appear conspicuously in advertising for covered audit services, and the public registry must state that registration is not a state recommendation or endorsement.

Registered auditors must disclose their services, applicable laws, qualifications and operating procedures, update material registration information within 90 days, and retain audit reports and supporting documentation for at least 10 years. Reports must explain scope, findings, supporting evidence, limitations and appropriate measures to address deficiencies, with a signed compliance statement. Independence safeguards address financial conflicts, reviewing one's own work, employment negotiations during an audit and specified recent employment with the auditee. Qualified accountants and accounting firms can satisfy specified report and independence requirements through the stated professional standards; they are not categorically exempt from registration. The law also protects employee reporting of suspected violations and permits investigation, removal from the registry and enforcement referrals, subject to notice and an opportunity to cure or contest removal.

California enacted AB 1979 on September 30 with separate confidentiality and clinical-use provisions. Under Civil Code section 56.06, a business offering a qualifying healthcare chatbot so a consumer can manage information or obtain diagnosis, treatment or management of a condition is deemed a healthcare provider for CMIA purposes. The chatbot definition requires an adaptive generative AI natural-language interface, marketing as supporting health services and use of health-related information supplied, accessed, collected, generated or inferred by the chatbot. Covered businesses must maintain provider-equivalent confidentiality standards and face CMIA penalties for improper use or disclosure. This designation does not make them licensed providers under other laws. The enactment is the event reported here; the applicable commencement of these provisions must be confirmed separately.

New Business and Professions Code section 22758.5 requires covered facilities and practices to take reasonable steps to preserve a licensed provider’s independent professional judgment when care is informed by clinical decision support. They may not deploy AI to independently perform clinical functions legally requiring a professional license or direct unlicensed personnel in those functions. The text preserves use by trainees in supervised training toward licensure and excludes documentation or communication without professional judgment, such as record-update messages, reminders or helping a patient find requested information. Listed administrative functions are also outside the clinical-decision-support definition when their independent performance requires no professional license. Physician discipline and licensing-board injunction authority remain specified enforcement routes.

California chaptered AB 2311 on September 18, 2026, adding a limited exception to the corporate practice prohibition for a health care district, or a nonprofit with a health care district as its sole corporate member, that owns or controls a general acute care hospital. The pathway lasts until January 1, 2037. It applies only if the hospital received a Distressed Hospital Loan Program loan before January 1, 2025, or meets the specified greater-than-75-percent combined Medicare and Medi-Cal payer-mix test using January 1, 2025 data. For the payer-mix route, both the hospital and its health system, if any, must qualify. The enactment therefore does not authorize physician employment at every district hospital.

Use of the pathway requires an affirmative medical staff vote under its bylaws, protection of professional judgment, and positions that add to rather than supplant medical staff professional-service positions existing on January 1, 2026. The district or nonprofit must affirmatively offer a prospective employee the option to contract instead; existing professional-services contracts may be amended by mutual agreement. Beginning January 1, 2028, an entity using the pathway must publish a report by July 1 each year covering recruitment and retention in the prior year and cumulative totals since January 1, 2027, separating employed and contracted positions. Under the ordinary constitutional rule the nonurgency law takes effect January 1, 2027; the temporary authorization and subsequent reporting schedule should be planned separately.

California enacted AB 2448 on September 27 to amend Civil Code section 56.101. For covered businesses described in section 56.06 that electronically store or maintain sensitive-service medical information on behalf of the listed healthcare and employer entities, the text adds an express requirement to enable the specified safeguards as well as develop capabilities, policies and procedures. The controls cover information related to gender-affirming care, abortion and abortion-related services, and contraception. They limit access privileges to authorized persons, address prohibited out-of-state disclosure and processing, segregate the sensitive information from the rest of a record, and provide the ability to disable out-of-state access automatically. The enactment is the event reported here; the applicable commencement of these provisions must be confirmed separately.

The amendment retains the subsection’s July 1, 2024 date in its wording; that retained date should not be described as a newly created prospective implementation period in 2026. Subsection (c) excludes contractors, health plans and healthcare providers as those terms are defined in section 56.05, so the identity and role of the storage business matter. The surrounding section preserves confidentiality duties and requires an EHR or EMR to record changes or deletions with the user identity, access date and time, and change made. Fees charged to comply with subsection (c) must remain consistent with the cited federal information-blocking regulation.

California enacted AB 2562 on September 27, amending the requirements for covered alcohol or other drug recovery and treatment programs and facilities. Health and Safety Code section 11832.8 adds a suicide-prevention plan to the minimum policies and procedures kept in a certified program’s operation manual, alongside admissions, client rights, services, medication and conduct policies. Section 11834.26(h) separately requires a licensed facility to develop a suicide-prevention plan. The enacted text addresses both program documentation and licensed-facility planning rather than a single generic training requirement. The enactment is the event reported here; the applicable commencement of these provisions must be confirmed separately.

For the licensed-facility provision, DHCS may implement the requirement through a bulletin, all-county letter or all-provider letter after stakeholder input until regulations are issued. The department must promulgate implementing regulations for that provision no later than January 1, 2031. That is a department rulemaking deadline, not a universal provider implementation date. The surrounding licensed-facility section retains separate recovery, treatment and withdrawal-management requirements and other DHCS deadlines, so the suicide-plan addition should be tracked independently from those existing program controls.

California enacted AB 2598 on September 27 to add Probate Code section 7600.4 and Health and Safety Code section 1280.7 and amend Probate Code section 7600.5. A general acute care hospital or skilled nursing facility licensee must make a reasonable attempt to notify known next of kin after a death; a hospital holding a body transferred after death also has a contact duty. A reasonable attempt is a documented good-faith effort within 72 hours, using available contact information, including a call or voicemail and, if available, a text or email. The requirement may also be met through notice to the designated resident representative or the person’s written predeath instruction not to notify known next of kin of their presence or death. The enactment is the event reported here; the applicable commencement of these provisions must be confirmed separately.

If the licensee cannot locate next of kin after the required effort, or the statutory alternative conditions are met, it must notify the county public administrator within two business days as section 7600.4 provides and supply available identifying information. Separate penalties of $200 per day, each capped at $50,000, address failures of next-of-kin and public-administrator notice. For the latter, measurement starts on the fifth business day after death; that is not the public-administrator notification deadline. The amended section preserves immediate public-administrator notice for other covered health or board-and-care facilities when no next of kin is known and excludes specified incarcerated-person deaths governed by separate statutes.

On September 18, 2026, DOJ announced two Justice Manual revisions concerning False Claims Act enforcement. The first reinstates and builds on its 2017 position that sub-regulatory guidance cannot impose obligations beyond statute or regulation. The announcement emphasizes fair notice and enforcement of binding legal or contractual obligations. For compliance teams, the distinction concerns the authority underlying a control or alleged violation: a guidance document's recommendation should not automatically be treated as an independent legal command. The release reports DOJ's enforcement policy, rather than repealing substantive program rules or making guidance irrelevant to every operational or evidentiary question.

The second revision directs DOJ to consider its dismissal authority when declining to intervene in a qui tam case and to revisit that assessment as appropriate during litigation if dismissal was not initially sought. DOJ says it will exercise that authority judiciously, emphasizing cases lacking legal or factual merit and the interests of the United States. That is a review obligation within DOJ's policy; it does not mean a declined case is automatically dismissed or that a defendant can assume the litigation has ended. The retained announcement summarizes and links the manual revisions, so counsel should consult the controlling manual text and the actual case record before making a litigation-specific assessment.

CMS Transmittal 247 revised State Operations Manual Appendix W with September 18, 2026 effective and implementation dates. The new C-0896 guidance addresses the critical access hospital emergency-readiness standard at 42 CFR 485.618(e), whose text identifies a July 1, 2025 effective date. The September event is therefore updated survey guidance, rather than the first effective date of the underlying standard. CMS calls for protocols consistent with nationally recognized evidence-based guidance for emergency conditions, including obstetrical emergencies, complications and immediate post-delivery care, in keeping with the hospital's scope and complexity of services.

The guidance links written protocols to adequate equipment, supplies, medications, blood products and personnel, as well as defined staff roles. It calls for medical staff and governing-body approval, accessible protocols and review against current standards. Surveyors are directed to examine three elements: required protocol content, actual implementation and adequate provisions. They may review emergency records, interview staff, inspect supplies and ask staff to explain equipment use and escalation or transfer when needs exceed the CAH's capabilities. CMS expressly tells surveyors to focus on documentation and protocol alignment rather than evaluate clinical judgment. A policy-only review would miss the operational evidence described in the revised procedures.

California enacted AB 2613 on September 18, amending Health and Safety Code section 1373.65 for implementation under the ordinary January 1, 2027 effective-date rule. In addition to mailed notice, a plan must send a text or email at least 60 days before a covered provider-group or general acute care hospital contract terminates when the enrollee has opted into electronic delivery and supplied the required contact information. The underlying process retains a block-transfer filing at least 75 days before termination and department review of the proposed notice. Hospital and preferred-provider-organization notice populations have additional specified rules.

If the parties reach an agreement after termination notices were sent, the plan must submit the follow-up notice to DMHC within five business days and send mailed and qualifying electronic notices within 10 business days after approval. An agreement before termination tells affected members they remain assigned to the provider; an agreement after termination offers the option to return. The section preserves the required continuity-of-care statement in communications and specified waiver procedures for exigent circumstances. The additions and amendments do not apply to the listed Medi-Cal managed care contracts with DHCS, so a plan should not use one undifferentiated notice rule for every product.

California enacted AB 1907 in September, with replacement Government Code section 100503.4 operative July 1, 2027. When it receives a qualifying electronic account or complete insurance-affordability application through the Statewide Automated Welfare System, Covered California must use available information to enroll people determined eligible for financial assistance in a specified plan. Options include the lowest-cost silver plan, the plan used by other members of the modified-adjusted-gross-income household, the lowest-cost plan for an eligible Indian receiving the cited reduced cost sharing, or a qualifying previous managed-care plan when the Exchange has the necessary information.

Enrollment timing must align with termination of prior affordability coverage or receipt of the complete application, and the premium cannot be due before the last day of the first month. A notice before coverage becomes effective must identify the selected plan, alternatives and deadlines, assistance, the right not to enroll, relevant appeal information and instructions for paying or opting into a no-premium plan. Separate plan and insurer amendments address policy years beginning January 1, 2027: the specified enrollment window and coverage-effective dates apply except to the extent inconsistent with the cited federal regulation, in which case its requirements control. Those provisions should not all be assigned the later July application-intake date.

California enacted AB 1983 on September 18, revising Health and Safety Code sections 1771, 1788 and 1788.4 under the ordinary January 1, 2027 effective-date rule. The statute separates repayable contracts conditioned on resale or reoccupancy from repayable-in-sequential-order contracts. A provider offering the latter assigns each terminated contract a repayment number and funds a separate repayment account from the specified later entrance-fee proceeds. The account exists exclusively for those repayments, is separately accounted for and protected from the provider’s other liabilities; it is not the statutory refund reserve.

Contract disclosures differ by repayment model. Resale-conditioned contracts describe historical resale timing, while sequential contracts disclose termination-to-payment experience, relevant account and repayment information, and dependence on queue position and available funds. Resale or reoccupancy generally triggers payment within 14 calendar days for the resale-conditioned model. Sequential payment is due within 14 calendar days after sufficient funds exist for the assigned number, with specified exceptions and interest provisions. For sequential contracts entered on or after January 1, 2027, the amended interest framework does not move a contract ahead in the queue; the account must support both principal and accrued interest before payment.

California enacted SB 16 on September 18, amending Welfare and Institutions Code section 5121 under the ordinary January 1, 2027 effective-date rule. County behavioral health directors must establish and implement procedures for designating and training professionals who perform section 5150 functions. The procedures cover eligible disciplines and experience, initial and continuing training and testing, application and approval, renewal and monitoring. The amended text requires emergency physicians to be included among eligible practice disciplines, defining them by emergency-department screening and treatment in a general acute care hospital.

Emergency physicians remain subject to the training, application, approval and revocation processes that apply to other eligible professionals. A county may retain consistent designation criteria, and its monitoring process may be a passive system responding to complaints and grievances as the statute permits. Denial or revocation requires written reasons to the specified requester and affected person. The section also preserves transportation authority for designated mobile-crisis members and professional persons and a distinct Sacramento provision. Eligibility for designation should therefore not be represented as automatic authorization for every emergency physician.

California enacted SB 1447 on September 14, with general amendments subject to the ordinary January 1, 2027 effective-date rule and separate statutory reporting triggers. Its amended patient-safety section retains multidisciplinary plans, reporting and analysis, corrective-action monitoring and disparity review, with the specified voluntary-information protection and public posting. Food-code provisions address matters including catering definitions and removal of reduced-oxygen packaging before thawing labelled frozen fish. For syndromic surveillance, CDPH may implement or modify data elements, standards, schedules and instructions in collaboration with local departments under the specified publication procedure.

Amended Health and Safety Code section 131370 requires specified entities to collect and report as near real time as possible no later than December 31, 2028 or within one year of official CDPH notification, whichever is sooner. This is an entity reporting deadline, not simply a deadline for CDPH to issue specifications. Qualified reporting through a local department can satisfy the framework when its system can transmit the required data under the statutory conditions. Penalties or licensure consequences for failure require the specified data, standards and schedules to have been printed in the regulations and at least six months’ department notification to the person or facility. System designation also remains subject to appropriation.

California chaptered AB 1930 on September 26, 2026. Civil Code section 1798.309 addresses California-connected persons and entities receiving subpoenas, discovery requests or other legal-process requests in investigations concerning abortion or gender-affirming health care that qualifies as legally protected activity. Unless exempt, the recipient must notify the Attorney General at least seven business days before producing records and wait at least that long after notice. The notice includes the request, with identifying or confidential information redacted as permitted or required. A shorter deadline required by federal law or another federal obligation, including a contract, grant requirement or Medicare condition of participation, permits notice no later than production. The law's ordinary effective date is January 1, 2027; the September signature is not evidence that the new process was already operative on October 4.

The notice requirement does not apply to court-ordered requests, California state or local agency requests, qualifying attestations, or protected-care information incidental to the investigation. Attestations can establish that information will not support liability for care lawful in California, or identify California unlawful conduct or professional-discipline grounds under investigation, and recipients may rely on the attestation's representations. The Attorney General may intervene in protective litigation and seek enforcement, including penalties for false attestations and specified culpable violations. Protected activity excludes unprofessional conduct and violations of California antidiscrimination law. The provision establishes a defined request-review and escalation process; it is not a blanket prohibition on all disclosures or a separate warrant rule.

California enacted SB 934 on September 26, amending Business and Professions Code sections 865, 865.1 and 865.2 under the ordinary January 1, 2027 effective-date rule. The defined change efforts are practices by a licensed mental health provider during mental health services that direct a patient toward a predetermined sexual orientation or gender identity outcome, regardless of the direction sought. The text includes efforts to increase or decrease specified attractions or suppress or constrain gender identity or expression. The provider definition spans the listed physicians, psychologists, therapists, social workers, counselors, trainees and other designated mental health professionals.

The statute prohibits those efforts with a patient under 18 under any circumstances and makes attempted efforts unprofessional conduct subject to the provider’s licensing entity. Its definition excludes nondirective psychotherapy supporting coping, exploration and self-understanding without a predetermined outcome; age-appropriate interventions addressing unlawful or unsafe conduct without directing identity or orientation; and supportive services consistent with standards of care that respect the patient-defined gender identity. These conditions are important to scope: the law does not characterize all identity discussion or supportive counseling as prohibited conversion efforts.

California chaptered SB 1023 on September 26, 2026, changing coverage for FDA-approved antiretroviral drugs, drug devices and drug products used to prevent HIV/AIDS. For affected health plan contracts and health insurance policies issued, amended or renewed on or after January 1, 2027, non-self-administered products must be covered under both medical and prescription drug benefits. A product obtained through the prescription drug benefit must be dispensed and administered by a provider acting within the scope of their license. The contract or policy trigger matters: the chaptered text supplies a future implementation date rather than an October 4 requirement to treat all existing coverage as already changed.

The amended sections also prohibit prior authorization and step therapy for medically necessary HIV-prevention products, including PrEP and PEP, while retaining a therapeutic-equivalent exception if at least one equivalent is available without those restrictions. They preserve coverage for pharmacist-furnished PrEP and PEP, pharmacist services and related testing, with out-of-network payment tied to an out-of-network pharmacy benefit. Specialized dental, mental health or vision coverage and Medicare supplements are excluded. The health plan section also excludes Medi-Cal managed care to the extent these services are outside its contract with the Department of Health Care Services. Benefits teams therefore need to assess the product, benefit channel and particular coverage arrangement rather than apply a single rule to every antiretroviral use or insurance product.

California chaptered SB 1114 on September 26, 2026, revising protections for sexual orientation, gender identity and variations in sex characteristics or intersex status, collectively SOGISC. Government Code section 8310.8 identifies the state entities it governs, including health and social-services departments, education agencies and specified workforce and disability agencies. For its disclosure restriction, covered information includes data that could reasonably identify transgender or intersex status, such as gender-marker change records and certain medical information not otherwise protected by HIPAA or California's medical confidentiality law. The measure also addresses teacher-credentialing and higher-education data. Its specified agency and program scope does not create a universal new collection duty for every health care provider.

Identifiable SOGISC information collected under section 8310.8 generally cannot be disclosed outside California state or local government or its authorized agents, subject to defined exceptions for mandatory federal or interstate reporting, enforceable warrants or court orders, public health, qualifying vendors, the Information Practices Act and Civil Rights Department functions. Disclosure must be limited to the minimum required. A separate public-records provision protects SOGISC information subject to its own exceptions, including deidentification. The ordinary effective date is January 1, 2027, but the text supplies specific schedules: Social Services has until January 1, 2028 for the stated disclosure restriction, and separation of shared-program data becomes operative for each covered entity after it notifies the Legislature that necessary automation is complete. These distinctions require program-level implementation planning rather than one assumed deadline.

California enacted AB 2150 on September 20 as Chapter 384, adding Health and Safety Code section 1797.197b under the ordinary January 1, 2027 effective-date rule. An employer operating in California that requires employee CPR certification must also require approved online video training on naloxone use and pay its cost. The module is separate from the existing CPR curriculum. EMSA reviews content for recognition of overdose signs, appropriate emergency response and proper administration of naloxone or other approved opioid antagonists; its assigned role does not include administering or monitoring employer compliance.

An employee’s existing CPR, first-aid or other program can satisfy the requirement if EMSA determines the training meets or exceeds the minimum standards and the employer keeps documentation. Existing clinical staffing or internal medication policies alone do not exempt a covered employer. The training is for education and preparedness and creates no independent duty, authority or expectation to administer naloxone; licensing, delegation and medication-administration laws remain. The section establishes a minimum and preserves authority for more protective rules covering additional employers, frequency or content, so completion does not establish compliance with every other training requirement.

California enacted SB 1302 on September 20 as Chapter 429, with general provisions under the ordinary January 1, 2027 effective-date rule and separate later requirements. It expands the registered-nursing medication language to orders from nurse practitioners and certified nurse-midwives and direction by an advanced practice registered nurse to the extent allowed by that professional’s scope. Nursing education changes address board-approved programs, public listing, inspection criteria, simulation standards and conditional clinical-hour adjustments. The measure does not turn every medication instruction or simulated placement into an authorized nursing practice or approved clinical experience.

For nurse practitioners seeking the specified independent-practice pathway, the law permits qualifying transition-to-practice experience from another state and directs BRN to identify states meeting the California-equivalent standard by January 1, 2028. Existing education, experience and scope conditions remain relevant; recognition is not automatic merely because someone practiced elsewhere. Beginning January 1, 2029, BRN must require renewal proof documenting the applicable continuing education during the relevant period. The broader measure also addresses furnishing-number applications and other board and education provisions, so credentialing, school agreements and renewal systems require separate implementation owners and dates.

On September 25, 2026, the California Attorney General reaffirmed the state's commitment to disability rights and community integration. The release describes the ADA, Section 504 and the Supreme Court's Olmstead decision as protecting access to appropriate community settings, and states that California will continue enforcing protections against unnecessary segregation. The immediate event is an official California enforcement position amid a federal legal dispute. The release reports that a September 23 order in Texas v. Kennedy granted a proposed resolution vacating references to community integration in HHS Section 504 regulations and closing the case. The court order itself was not retrieved for this finding, so that account remains attributed to the Attorney General.

The Attorney General rejects the federal executive interpretation described in the release and says it cannot rewrite the governing statutes or settled precedent. That position matters for providers, public agencies and community-care arrangements subject to California enforcement, but it does not by itself establish the exact text or nationwide effect of the reported court order. The release also points to California's disability-access work in emergency preparedness and response, illustrating that the state's enforcement concerns extend beyond placement decisions. Organizations should preserve integration, access and nondiscrimination controls while counsel examines the actual order, applicable statutes and specific service arrangements. A reported regulatory vacatur should not be treated as a blanket removal of all disability duties.

California enacted SB 923 on September 27 to expand the California Consumer Privacy Act right to delete from information collected from a consumer to information collected from or about that consumer. CalPrivacy’s contemporaneous announcement states that the law takes effect January 1, 2027. Amended Civil Code section 1798.105 requires a business responding to a verifiable deletion request to delete covered information from its records, notify service providers and contractors, and notify third parties to which it sold or shared the information, subject to the stated impossibility or disproportionate-effort qualification. A qualifying business operating exclusively online with a direct consumer relationship must offer an online submission method, such as a web form or portal, as well as an email address.

For information obtained from another source, the final text permits retaining the deletion request and the minimum data necessary to ensure the information stays deleted and is not used for another purpose. That provision supports suppression when new third-party data arrives; it is not permission to continue ordinary use of a deleted profile. The statute retains specified exceptions where keeping information is reasonably necessary, including legal obligations, security and integrity, completing a requested transaction, and qualifying research. It also retains service-provider and contractor cooperation duties. The change therefore requires tracing the source and destination of covered information while documenting any applicable retention exception.

California enacted AB 2011 on September 30, amending Health and Safety Code section 1374.76 and Insurance Code section 10144.4. Large-group, individual and small-group plan contracts and insurance policies must provide covered mental health and substance use disorder benefits in compliance with the federal Mental Health Parity and Addiction Equity Act and the specified implementing rules, regulations and guidance as they existed on January 1, 2025. Individual and small-group coverage also remains linked to the cited state benefit provisions. The Legislature describes the amendment as preserving parity protections under state law if federal regulations are repealed, amended or invalidated. The enactment is the event reported here; the applicable commencement of these provisions must be confirmed separately.

The legislative findings identify nonquantitative treatment limitations such as prior authorization, medical-necessity standards, network composition and reimbursement practices as a central compliance concern. They emphasize assessment both as written and in operation, and describe the law as preserving protections rather than creating new benefit mandates or expanding required covered services. If a provision conflicts with or materially differs from federal regulations, the responsible department must review it and collaborate with the other insurance regulator to issue compliance guidance. The sections allow implementation with existing departmental resources or upon sufficient appropriation. Those provisions do not establish the current federal enforceability of every contested regulation; the state incorporation and the specified regulator response are separate issues.

California enacted AB 1798 on September 30 to change genetic-information protections in life and disability insurance. Amended Insurance Code section 10148 prohibits adverse coverage, premium, terms and underwriting decisions based on a test for a genetic characteristic, requires that people not be compelled to undergo genetic testing for insurance purposes, and prohibits questions about whether a person or family member has taken a genetic test or its result. The statute also restricts requesting, soliciting or using genetic information and considering decisions about testing. The article’s disability-insurance definition excludes health insurance; this is not a description of general clinical testing requirements or all healthcare coverage. The enactment is the event reported here; the applicable commencement of these provisions must be confirmed separately.

The narrow underwriting exception requires results already in the medical record, authorized access to that record, a test other than a direct-to-consumer test, and use to rule out an adverse finding, with informed written consent or results supplied by the individual. Specified restrictions also except records necessary solely for benefit payment or a therapeutic purpose. The law does not prohibit ordinary access to an application’s medical record, consideration of a medical diagnosis even if based on genetic testing, or decisions based on a manifested, diagnosed or treated present disease. The article prohibits use or disclosure of an individual’s full genome. Its definition of genetic information excludes routine examinations, ordinary chemical, blood or urine analysis unless performed purposefully for genetic information, and family-history questions.

HRSA published final Living Organ Donation Reimbursement Program guidelines September 29 to implement the Honor Our Living Donors Act’s removal of recipient household income from donor reimbursement eligibility. They apply to applications reviewed on or after September 30, 2026. The final donor-centered priorities are income at or below 350 percent of HHS poverty guidelines, above 350 through 500 percent if resources permit, and above 500 through 750 percent through a financial-hardship waiver if resources permit. All categories open at the start of a budget period, with monitoring and advance notice if funding requires lower-priority categories to close.

Qualifying reimbursement remains limited to expenses not reasonably covered by the listed compensation, insurance or health-benefit sources, with a total federal ceiling of $6, 000 per potential donor evaluated or organ donated. The guidelines retain donor and recipient residence, lawful-presence and certification conditions, with recipient-related exceptions for nondirected donors. Eligible costs include specified travel and caregiving or lost-wage expenses, subject to the stated periods and evidence. Hardship above 500 percent requires case review and documented expenses through the transplant-center process. Removing recipient-income screening therefore does not mean unconditional reimbursement, payment for an organ or automatic acceptance of every expense.

The California Attorney General announced October 2 conditional approval of the proposed transfer of St. Elizabeth Care Center, a 52-bed nonprofit skilled nursing facility in North Hollywood, from Providence Health System Southern California to Ensign affiliates. The announcement says Ensign had operated the facility since June 2025 under CDPH-approved management and identifies this as the California facility in a broader multistate transaction. Conditional transaction approval is the event reported; the announcement does not establish completion of the sale.

Conditions described in the release run for seven to 10 years depending on the requirement. They include continued Medicare and Medi-Cal participation with at least 30 percent of skilled-nursing beds reserved for Medi-Cal, sufficient direct-care staffing for resident acuity, a full-time licensed administrator, safe transfers and discharges and adequate space. Financial protections limit rent increases, affiliated payments and debt that could threaten stability or direct care, including Attorney General approval above a 2.5 percent rent increase. An Attorney General-appointed monitor oversees compliance. These are conditions for this transaction rather than universal statewide bed or rent requirements.

California enacted AB 1776 on September 30, adding Cartwright Act provisions under the ordinary January 1, 2027 effective-date rule. New Business and Professions Code section 16731 prohibits monopolizing or monopsonizing, attempting either, maintaining monopoly or monopsony, and specified combinations or conspiracies. A plaintiff must allege and ultimately prove substantial market power through direct or indirect evidence under the cited California analytical framework. The legislative text includes competition for workers and recognizes that superior products, services or business acumen can lawfully produce market power.

Only the Attorney General or a district attorney may initiate an action under the new section, and a violation cannot serve as a private unfair-competition predicate outside such a public action. The statute does not change unrelated actions merely because this route is limited. It excludes a defined independently owned California small business meeting the employee, domicile and revenue conditions and preserves the specified granted-and-supervised government franchises, licenses, contracts and authorized conduct. Additional rules address combined or conspiratorial claims and complex-case filing. The final public-enforcement scope is therefore narrower than a general claim that any private party received a new single-firm lawsuit.

Effective October 1, 2026, the approved amendment to title 22, California Code of Regulations, section 97046.4 extends the skilled nursing facility annual consolidated financial report deadline to eight months after the facility's fiscal year-end. The Office of Administrative Law approved the regular rulemaking on August 12, and the filed form bears the same date. The three-page approval package identifies the subject as extending the SNF consolidated-report due date and specifies October 1 as the effective date. Unlike a measure merely signed during September, this amendment was already effective by the October 4 issue.

The attached amendment page shows the operative change directly: 'four' months is struck through and 'eight' is inserted. Although that attachment retains a proposed-amendments heading, it accompanies the approval notice and endorsed filing, so those pages must be read together to establish the adopted change. The provision concerns the annual consolidated financial report and measures the interval from the SNF's fiscal year-end. It does not establish a new calendar deadline for every HCAI filing or change other reporting schedules by implication. Finance should therefore map the revised interval to the correct report and fiscal year-end while retaining distinct calendars for other submissions.

California enacted SB 503 on September 30, adding Business and Professions Code section 22758 for artificial intelligence systems that aid clinical decisions about timing of care, diagnosis or treatment. Developers and deployers must make reasonable efforts to identify covered systems with known or reasonably foreseeable risks of biased impacts in health programs or activities. Developers must make reasonable efforts to mitigate those risks and give deployers intended-use and risk statements, high-level descriptions of training data and demographic representativeness when available, performance and bias evaluations, data-governance information, expected outputs, and recommendations for use, monitoring and mitigation. The required documentation must be available on request or at initial sale, whichever comes first, and as applicable with material updates. The enactment is the event reported here; the applicable commencement of these provisions must be confirmed separately.

The law assigns deployers a continuing duty to monitor identified systems regularly and take reasonable and proportionate mitigation steps. A health facility, clinic, physician office or group-practice office using a covered system is a deployer, and an organization can be both developer and deployer. An internally developed and deployed system qualifies for the documentation exception only when information consistent with the specified documentation requirements is readily available to that deployer; the exception does not remove the monitoring duty. The definition excludes listed administrative functions, including appointment management, patient education and payment processing, to the extent their independent performance does not require a professional license. Biased impact includes adverse effects on access, care quality or outcomes based on protected characteristics, and compliance is not a defense to unlawful discrimination.

California enacted AB 1637 on September 27, adding Business and Professions Code section 2266.1 to the Medical Practice Act. The provision makes a physician and surgeon responsible for their patient notes regardless of the clinical setting. Patient notes include notes, after-visit summaries, and diagnosis and treatment plans. The basic rule is that no one other than the authoring physician and surgeon may alter, modify or edit that material, subject to the law’s specific exceptions. The change therefore reaches more than a signed progress note: the statutory definition also covers patient-facing summaries and plans. The enactment is the event reported here; the applicable commencement of these provisions must be confirmed separately.

The final text permits a scribe, medical assistant or other authorized individual to act under authority delegated by the authoring physician. It also permits a physician receiving a transferred patient to add to the prior author’s notes, and permits a supervising physician to alter, modify or edit the notes of a supervised postgraduate training licensee, intern, resident or postdoctoral fellow. The transfer exception is framed as permission to add, while the trainee-supervision exception expressly addresses editing. These exceptions preserve defined team documentation arrangements alongside the author’s responsibility; they do not grant every staff member unrestricted editing access.

California enacted AB 1854 on September 27 to amend Penal Code sections 1549.1, 13778.2 and 13778.3. The amendments apply specified arrest, public-agency cooperation and California subpoena restrictions to legally protected healthcare activity regardless of the patient’s location, when the activity is lawful under California law. They also bar state or local law enforcement from knowingly arresting, or participating in the arrest of, a person whom the Governor has declined to surrender under section 1549.1. The public-agency restriction on cooperation with federal law enforcement remains expressly limited to the extent permitted by federal law. The enactment is the event reported here; the applicable commencement of these provisions must be confirmed separately.

The law extends the declaration requirements for specified out-of-state process and law-enforcement record requests to California corporations providing financial services to the general public, alongside electronic communication and remote computing services. Financial services include receiving deposits, extending credit, transferring funds, or transporting cash or financial instruments. The declaration must state that the discovery and resulting information will not be used in a protected-care proceeding, or establish the specified alternative for a patient-brought tort, contract or statutory claim actionable in an equivalent or similar manner in California. Covered corporations may rely on the declaration’s representations. The Attorney General may seek enforcement, and a court must assess $10,000 for a first and $15,000 for each subsequent violation involving intentional, knowing, willing or reckless prohibited compliance or disclosure. The text also preserves process unrelated to laws penalizing protected care and specified requests by the investigation’s subject.

California enacted AB 1696 on September 27, amending Health and Safety Code sections 1317.1 and 1317.10. Section 1317.1 generally defines emergency services and care through medical screening, examination and evaluation by physicians or other appropriate licensed persons under physician supervision, with treatment within the person’s license and the facility’s capability. The new subdivision (n) states that the section does not require physician supervision of a licensed nurse-midwife in a labor and delivery unit, obstetric triage or dedicated emergency obstetric evaluation unit when the care is authorized by and consistent with Business and Professions Code section 2746.5. It also addresses a nurse-midwife specifically requested by the treating physician to provide obstetric consultation. The enactment is the event reported here; the applicable commencement of these provisions must be confirmed separately.

The amendment operates notwithstanding the listed supervision language in the emergency-care, consultation and stabilization provisions; it does not expand the scope of licensure. Section 1317.1 continues to preserve restrictions on transfers or admissions that conflict with the Lanterman-Petris-Short Act or federal emergency-treatment law. The bill adds parallel nurse-midwife supervision language to section 1317.10, the specific arrangement under which Stanford Hospital and Clinics and Lucile Packard Children’s Hospital may be treated as one licensed facility for active-labor emergency care. That arrangement retains its conditions, including a safe transfer determination and the patient’s right to refuse transfer.

California enacted SB 1323 on September 27, strengthening Health and Safety Code sections 24250 and 24251. Covered healthcare provider entities must establish or amend procedures for monitoring, documenting and receiving visitors; the amended provision removes the prior “to the extent possible” qualification. It also replaces encouragement to post a notice with a requirement for a “notice to authorities” at the facility’s main public entrances. The notice states that access to nonpublic areas for immigration enforcement requires state or federal law or a valid physical judicial warrant or court order. The bill defines a main public entrance as a singular, facility-designated primary access point used by patients and visitors to enter the main health facility building. The enactment is the event reported here; the applicable commencement of these provisions must be confirmed separately.

The amended text retains immediate escalation of immigration-enforcement access and document requests to management, administration or legal counsel. Areas used for treatment, care or discussion of protected health information must be designated nonpublic, and the access restriction continues to include the state- or federal-law exception and a warrant or order specifically granting access. Staff and relevant volunteers must also be informed how to respond when a person in immigration custody requests notification of a family member or designated support person about their current location. The strengthened versions expire on January 1, 2030; replacement sections then restore the qualified visitor-procedure duty and encouraged notice language while retaining core escalation and nonpublic-area protections.

California enacted SB 626 on September 30, revising the duties of licensed practitioners providing prenatal, postpartum or perinatal care. Under amended Health and Safety Code section 123640, practitioners must ensure screening is offered or appropriately performed and, after a positive result, ensure the patient is offered or receives clinical evaluation consistent with the practitioner’s scope. A practitioner who diagnoses a maternal mental health condition must offer or provide treatment. Referral to another practitioner authorized to screen, evaluate, diagnose and treat can satisfy these duties. The section excludes practitioners providing emergency services or care. Its definition covers conditions during pregnancy or the postpartum period under the most recent applicable ACOG guidelines, regardless of pregnancy outcome and inclusive of gender-diverse birthing people; it removes interpregnancy from the defined period. The enactment is the event reported here; the applicable commencement of these provisions must be confirmed separately.

The related plan and insurer provisions require one or more screenings during pregnancy and one or more during the postpartum period, consistent with applicable guidelines and professional scope. They require case management or care coordination after a positive screen through existing programs, integration of screening and follow-up into quality and population health programs, and documentation available to regulators. Coordination may use an existing qualifying delegation or the specified statutory delegation process, and the text says this does not create a new benefit. Medi-Cal managed care application depends on necessary federal approvals and available federal participation that is not jeopardized. Specialized plans and insurers are generally excluded except specified behavioral-health-only coverage, and Medicare supplement policies are excluded from the insurer section.

California enacted SB 1088 on September 27 to update requests regarding resuscitative measures, including POLST, now defined as Portable Orders Listing Scope of Treatment. Probate Code section 4780 permits execution by the individual with capacity or an authorized health care agent, conservator or surrogate, together with a physician, a nurse practitioner practicing under the specified independent-practice provisions, or a physician assistant or nurse practitioner under physician supervision. An agent, conservator or surrogate may execute a POLST only when the individual lacks capacity or has made the surrogate’s authority effective under the cited statute. A provider must explain the form and complete it based on patient preferences and medical indications. Completion or refusal is entirely voluntary and cannot be a condition of care or admission. The enactment is the event reported here; the applicable commencement of these provisions must be confirmed separately.

The amended section 4783 makes an electronic signature sufficient for a required signature and recognizes a substantially similar out-of-state or other-jurisdiction request that complies with that jurisdiction’s law or California law, to the same extent as a California POLST. A provider without knowledge to the contrary may presume a request is valid and unrevoked. Forms printed after January 1, 2027 must carry the revised representative acknowledgment about the individual’s known desires and best interests. Other provisions preserve a capable person’s ability to revoke a POLST or request alternative treatment, the most recent instruction rule for a direct conflict, and the exception for medically ineffective care or care contrary to generally accepted standards.

California enacted AB 2292 on September 28, adding fee restrictions to Unemployment Insurance Code section 2708. That section uses treating-physician or practitioner certificates to establish medical eligibility for initial disability-benefit claims and continued claims after the period covered by an earlier certificate. It also addresses certification when leave is taken to care for a family member with a serious health condition. New subdivision (h) bars a physician or practitioner from charging a person an administrative fee to complete a certificate required by the section. It separately bars an administrative fee for a subsequent recertification examination or for completing a form required to maintain continued eligibility for disability benefits. The enactment is the event reported here; the applicable commencement of these provisions must be confirmed separately.

The prohibition distinguishes administrative charges from the underlying medical service. The final text permits billing for medical services provided in connection with an examination and collection of an applicable copayment, coinsurance or deductible only if those charges are consistent with a comparable examination or service and are not imposed solely for completing the required certificate or form. Section 2708 retains the medical information and examination basis required for the certificates; eliminating an administrative fee does not remove that documentation framework. The change is tied to certificates and continued-eligibility forms under this section, rather than a general rule eliminating every clinical visit charge or every fee for unrelated paperwork.

California enacted AB 1331 and AB 1883 on September 30. AB 1331 adds Labor Code sections 1560 onward, prohibiting employers from using workplace surveillance tools to monitor employees in a workplace bathroom unless directed by court order. Employees generally may leave portable surveillance tools behind when entering, with an exception tied to legally required availability during meal or rest periods. The law permits a one-time check of bathroom entry and exit. It also specifies circumstances involving an employee’s voluntary choice or required identification, safety or access devices; for the latter, the tool must neither record audio or video nor have embedded or attached AI. The covered tool definition extends beyond cameras to electronic tracking and data collection. The enactment is the event reported here; the applicable commencement of these provisions must be confirmed separately.

AB 1883 separately adds Labor Code sections 1580 onward and prohibits workplace tools using AI on employees to recognize, infer or predict emotional state or collect neural data. Neural data means information generated by measuring activity of the central or peripheral nervous system, not information inferred from nonneural sources. Section 1581 preserves use of a surveillance tool to ensure safety, or otherwise where it does not meet the prohibited specifications. Both laws contain enforcement by the Labor Commissioner or public prosecutors and penalties up to $500 per violation, and both contain narrow federally connected aircraft, national-security, military, space or defense-operation exceptions. AB 1331 also expressly preserves uses required by the listed federal or existing state laws and regulations.

California enacted SB 947 on September 30, adding Labor Code provisions that become operative July 1, 2027. An employer may not use an automated decision system to violate labor, safety, employment or civil-rights law, infer protected status, or predict and take adverse action for exercising legal rights. Discipline or termination cannot rely solely on an ADS. If the employer primarily relies on its output, a human must corroborate the decision using input data or other relevant information. An uncorroborated output, or one the reviewer finds inaccurate, incomplete or misleading, cannot be used for that decision. The definition covers qualifying computational outputs that assist or replace human discretion and materially affect people, with listed exclusions such as calculators, databases, firewalls and access-management tools.

When primary ADS reliance leads to discipline or termination, the employer must give a separate plain-language postuse notice when communicating the decision. The notice must explain the reliance and human corroboration, identify a human contact and the employee’s data-description right, and state the retaliation prohibition. An employee may request a meaningful, objective description of their own data used by the ADS, with other people’s information anonymized. A collective bargaining exception requires an explicit clear waiver, specified employment terms and protection from algorithmic management; collective bargaining coverage alone is insufficient. The law also preserves applicable CalPrivacy automated-decisionmaking regulations despite its limited protection against duplicate state notices and provides a narrow federally required defense-related exception.

California enacted AB 1609 on September 28, adding customer service chatbot rules for private businesses with more than $500 million in national gross annual revenue that provide goods and services to California customers. A covered business may not represent a chatbot as human and must clearly disclose its artificial identity in the interaction medium when a reasonable person is likely to be misled. During regular business hours it must provide a simple way to request a human customer service agent on its customer service platforms. The law requires a good-faith effort either to connect within 15 minutes or provide a specific appointment within one business day, with a separate one-business-hour callback option for businesses subject to the cited pharmacy regulation. The enactment is the event reported here; the applicable commencement of these provisions must be confirmed separately.

Good-faith duties also address later waits of more than 15 minutes and cumulative waits or escalation queues exceeding one hour. The section does not impose the 15-minute connection rule on email, web contact forms or voicemail and does not require a new communication platform beyond those made available as of January 1, 2027. The hospital exception covers communications related to providing, administering, paying for or coordinating healthcare, including scheduling, clinical services, billing and associated operations; it is not a general exemption for every health-technology business. Other exclusions include exclusive employee or business-to-business lines, specified compliant utility services and consumer reporting agencies. The law provides public-prosecutor enforcement, no private right of action, and an exception for inability to comply caused by specified circumstances beyond reasonable control or extraordinary emergencies.

California enacted AB 2561 on September 27, adding Business and Professions Code sections 22710 and 22711. An operating system or application may not undo a user’s affirmative configuration of a privacy setting without consent, except as required by state or federal law, court order or a subpoena in an individual case or proceeding. A privacy setting is a user-configurable option in an application’s privacy or similarly labelled menu governing collection, use, sharing, disclosure, retention or processing of personal information. The application definition covers software, mobile and desktop programs collecting, processing or storing personal information about a user in California and providing the specified privacy controls. Consent and personal information use the cited CCPA definitions. The enactment is the event reported here; the applicable commencement of these provisions must be confirmed separately.

The law does not freeze every service design or require continued collection of information. It permits discontinuing services or applications, stopping collection, use, retention or sharing, or ceasing to offer privacy options if the change complies with the section or meets its protective alternatives. Those alternatives maintain the existing protections for information collected before the change or increase privacy by reducing collection, use, sharing or retention. The operative distinction is between undoing an affirmative user choice without a lawful basis and making a permitted change that preserves or improves the relevant protection.

California enacted AB 2009 on September 27, revising plasma-center licensing and personnel rules. A change in the person in charge of biologics production need not automatically revoke a plasma collection center’s license if the owner or representative gives CDPH written notice within five days and the licensee files the replacement application within 30 days. The notice must identify the departed person, departure date, interim designee’s name and qualifications, anticipated duration and owner or representative signature. A qualified interim designee may serve no more than 30 calendar days, and the center may not operate without medical-director supervision. Failure to file the replacement application within 30 days requires revocation, subject to an additional 30-day extension CDPH may grant for good cause. The enactment is the event reported here; the applicable commencement of these provisions must be confirmed separately.

Plasma centers and auxiliaries must be directed by a licensed physician and surgeon with at least three months of plasma-center methods experience or training and other applicable qualifications. Medical directors may establish screening and donor-suitability protocols and delegate health-service duties to other licensed professionals under the department-approval, scope and supervision conditions; the provision does not expand professional scope. For paid whole-blood or component donors, identification may include photographic identification from another state, a federal agency or tribal government as well as the specified DMV identification. The law also adds supervising medical-director proficiency in digital refractometers to the testing framework and clarifies that licensed source-plasma donation centers are not blood bank depositories.

California enacted AB 2321 on September 30 to amend six Labor Code provisions governing occupational safety investigations and consequences. New section 6314(f) makes willful resistance, prevention, impediment or interference with specified inspection and investigative duties, or willful violation of a related court order, a misdemeanor. The surrounding provisions provide access on presentation of credentials at reasonable times and within reasonable limits, allow an inspection warrant where permission is refused or circumstances justify not seeking it, and authorize evidence-preservation orders. Amended section 6425 extends the public-offense provision for willful safety violations to violations causing serious injury, illness or exposure, alongside death or permanent or prolonged bodily impairment. The enactment is the event reported here; the applicable commencement of these provisions must be confirmed separately.

The Bureau of Investigations must investigate specified serious incidents, including accidents with serious injury, illness or exposure for which Cal/OSHA issues a willful-violation citation, and must document policies for deciding whether to investigate or refer cases for prosecution. The division must establish routine or automated transmission of incident information to the bureau. Amended section 6409.2 expands emergency-agency notifications to serious exposures and requires notification of the district attorney, while the division must notify the bureau and appropriate prosecutor regardless of how it learns of the accident. Section 6322 permits protected inspection information to be shared with law enforcement or prosecutors for an investigation or prosecution, with the statutory confidentiality framework retained.

California enacted AB 2405 on September 30, adding Welfare and Institutions Code section 5150.3 under the ordinary January 1, 2027 effective-date rule. A peace officer transporting a person for a section 5150 assessment must use the closest appropriate designated facility, geographically or by travel time, or the closest appropriate emergency department when that is the appropriate destination. The officer may consider an affirmatively expressed patient preference if it does not unreasonably delay care or excessively deviate from the closest appropriate destination. Written local behavioral-health diversion, transportation and destination policies or agreements remain available, and the section excludes CDCR and California Correctional Health Care Services.

AB 2318, enacted September 29, separately adds Penal Code section 832.11. It prohibits law enforcement from denying, delaying, obstructing or failing to facilitate medical access for a person under its control when access is safe and reasonable and a qualified professional has been requested or is present and willing to care. It excludes specified CDCR custody. When a present and willing professional is denied or delayed, law enforcement must document the basis within 72 hours to the extent doing so does not compromise an ongoing investigation or officer safety, including the narrative and available evidence, and provide the report to the designated oversight route. This is an officer documentation duty, not a hospital’s 72-hour filing rule.

California enacted AB 883 on September 27, amending Civil Code section 1798.99.86 to replace specified 45-day deletion-mechanism periods with 30 days. The chaptered text requires a data broker to access the mechanism at least once every 30 days, process qualifying deletion requests and delete covered information within 30 days, and treat unverifiable requests as sale-or-sharing opt-outs within that period. It also requires directions to associated service providers and contractors. Following a deletion, recurring deletion is at least every 30 days unless the consumer requests otherwise or an exception applies, and new information generally cannot be sold or shared without the consumer’s request or a statutory basis. The enactment is the event reported here; the applicable commencement of these provisions must be confirmed separately.

The section retains exceptions for information reasonably necessary for the listed CCPA purposes or exempt under the cited provisions; retained information is restricted to those purposes, including a ban on repurposing it for marketing. New section 1798.99.86.5 assigns specified public bodies notice duties so elected officials and judges can use the mechanism and authorizes the Attorney General, county counsel or a city attorney to seek civil relief on their behalf. A willful violation can support punitive damages. That separate section becomes operative July 1, 2027. Its date should not be substituted for the distinct broker-interval amendment or the older dates retained in section 1798.99.86.

OIG issued its audit on September 2 and posted it September 4, finding that CMS did not adequately oversee state survey agencies’ use of contract surveyors for nursing homes. The audit describes increased contractor reliance amid staffing shortages and survey backlogs. Although CMS issued a memo on contracting practices during the audit period, it did not monitor whether state procedures achieved the guidance’s objectives. All 14 surveyed states using contract surveyors could improve policies and procedures to meet those guidelines.

OIG recommended adding employee-versus-contractor classification to CMS’s quality improvement and evaluation system and confirming state controls that ensure contract surveyors meet federal requirements. CMS concurred with both recommendations. The report links weak monitoring to increased risk of inadequate controls, rather than declaring every contractor survey invalid or every state noncompliant in the same way. These are agency oversight recommendations and background for survey administration, without a new facility deadline in the audit itself.

HHS’s September 2 Privacy Act notice establishes an agency-wide matching program for HHS grants paid through its Payment Management System. The comparison with Treasury’s Do Not Pay Working System is intended to identify and prevent improper payments and support related recovery activity. The notice states effectiveness 30 days after publication and a program end of September 10, 2029. The published October 2 comment deadline has passed as of this October 4 edition; this article retains the program for operational assessment without presenting that comment opportunity as still open.

The matching uses applicable identifiers, potentially including names, taxpayer numbers, Unique Entity Identifiers, NPIs, addresses and payment-related data, drawn from the listed systems of records. A potential match is returned to the submitting HHS system with the relevant source database identified; the grantor then reviews the information to decide whether further action is needed. A no-match response is also contemplated. The notice describes the statutory and OMB waiver framework for this matching program. A match is not itself an automatic adverse determination, and the scope is HHS grant payments rather than a general edit to Medicare claims.

In a September 1, 2026 memorandum to HHS counsel, the Justice Department's Office of Legal Counsel withdrew its 1998 interpretation of state reporting duties under section 404 of the Personal Responsibility and Work Opportunity Reconciliation Act. OLC now reads a participating 'State' to include all component agencies, rather than only the agency administering the relevant TANF or SSI program. The opinion describes statutory reporting of identifying information about people the state knows are not lawfully present, at least four times annually and upon request for the cited TANF requirement. This is OLC's executive-branch interpretation of funding conditions, not evidence that every private health provider acquired a general patient-reporting obligation.

The opinion also rejects limiting knowledge to a formal removal order and discusses examples of actual knowledge and deliberate avoidance of readily available information. It addresses potential conflicts with privacy rules through its reading of PRWORA, making legal review of specific information and entities important before changing disclosure workflows. Its final section expressly makes the interpretation prospective: it cannot retroactively alter TANF or SSI agreements entered under the prior opinion, and OLC says funds should not be clawed back where states followed then-existing executive interpretations. Public entities therefore need to examine participation, agreement timing, component-agency status and implementing agency instructions together. The opinion's legal position should be recorded as such while those operational questions are resolved.

CalPrivacy's Enforcement Division issued Advisory 2026-01 on September 3, 2026, emphasizing that data brokers must provide true and correct annual registration information. The advisory says the Delete Act does not distinguish accidental reporting errors from intentional misrepresentations and warns of a $200 fine for each day incorrect information appears in the registry. It connects accuracy to consumers' ability to understand who collected their information, where it went and how to exercise privacy rights, including through the DROP deletion platform. The document reports enforcement observations and explains existing statutory and regulatory requirements; it does not announce a newly enacted registration scheme.

The advisory's examples go beyond a broker's name and contact details. They ask brokers to reconcile categories such as precise geolocation, reproductive health, citizenship, biometrics and SOGI information, and recipient categories such as government bodies, foreign actors and generative-AI developers. Other examples address changes in customer types and consistency of rights-request metrics. These questions support a comparison between the filed registration and actual collection, sales, sharing and request records for the prior year. The advisory expressly provides no safe harbor, does not establish substantive rights or policy, and leaves case-by-case enforcement decisions to the division; the statutes and regulations control if interpretations conflict.

USPS’s September 1 final rule becomes effective October 4, 2026, requiring Free Matter parcels for eligible blind or physically disabled users to bear an Intelligent Mail package barcode and an Intelligent Mail matrix barcode. The amended DMM requirement expressly covers outbound and return parcels and specifies unique barcode preparation under the cited standards. USPS describes tracking, processing visibility and appropriate hazardous-material service codes as purposes of the change.

The rule also clarifies that Free Matter pieces are exempt from the Hazmat Handling Fee. Commercial mailers remain subject to the Hazmat Noncompliance Fee for undeclared or improperly labelled hazardous material and the Package Quality Noncompliance Fee for failure to meet the unique-barcode requirements. These are separate fee and preparation questions: free postage or a handling-fee exemption does not establish that a commercial parcel meets barcode or hazardous-material standards.

California enacted AB 175 on September 18 as an immediately effective developmental-services budget measure. Replacement Welfare and Institutions Code sections 4418.25 and 4679 become operative October 1, 2026, recasting the community placement framework as annual community resource development planning. DDS must establish policies with regional centers addressing statewide priorities, community resources and people moving from restrictive settings or needing supports in the community. Dedicated assessment and transition funding remains linked to individual needs, and the new assessment provisions identify who receives the assessment and notice of relevant individual program plan meetings.

When funding is available, DDS guidelines must address person-centered planning and culturally and linguistically appropriate services. Regional-center proposals require quantitative justification and a plan to monitor development and outcomes; DDS reviews, negotiates and approves them for feasibility and reasonableness. Approved plans and funded projects have public-posting requirements, and centers report quarterly on project progress. The law preserves existing or pending placement and resource-development funding agreements and related documents as of October 1. It also contains a conditional section coordinating amendments with AB 2414 and appropriates $1.5 million for early-intervention federal grant awards, so not every section shares the planning provisions’ timing.

California enacted AB 1575 on September 27, revising terminology across the Lanterman Developmental Disabilities Services Act and related early-intervention provisions. The Legislative Counsel digest describes the change as replacing “consumer” with “person eligible for regional center services,” updating other terms and removing gendered language. The act continues to operate through DDS contracts with regional centers and individual program planning for people with developmental disabilities. The terminology revision should therefore be read against the existing service framework. The enactment is the event reported here; the applicable commencement of these provisions must be confirmed separately.

The amended early-intervention provisions continue to address multidisciplinary evaluation, family assessment and participation, and individualized family service plans for eligible infants and toddlers. For example, Government Code section 95016 retains family-directed voluntary family assessment and an opportunity for family participation in eligibility and service decisions. Section 95020 continues to use an individualized family service plan in place of the listed alternative plans. These provisions illustrate why updating labels and communications is different from creating a new benefit or removing the eligibility and planning conditions already governing services.

California enacted AB 1703 on September 27 with the relevant new restrictions operative January 1, 2028. The replacement Business and Professions Code section 2053.5 adds osteopathic manipulative treatment to the activities outside the disclosure-based exception to specified unauthorized medical-practice provisions. It defines that treatment as the therapeutic application of manually guided forces to alleviate somatic dysfunction. The provision expressly preserves practice of a California-licensed healthcare profession and massage services authorized by California law.

New section 2453.3 also begins January 1, 2028. A person not licensed by the Osteopathic Medical Board may not use “doctor of osteopathy” or “D.O.” and may not use “osteopath” in the specified manner implying board licensure when offering or providing treatment for a medical or physical condition. A violation is a misdemeanor. The amended section 2053.5 keeps the existing statutory framework in place until its 2028 replacement, so the signature date is not the operative date of the new osteopathic restrictions.

California enacted SB 1410 on September 18, amending several community-care licensing provisions under the ordinary January 1, 2027 effective-date rule. Health and Safety Code sections 1509.56 and 1509.6 require adult community-care applicants or licensees to maintain an email address of record and notify the department in writing of the address and a change within 12 business days. The amended residential-care provision in section 1568.023 uses the same written-notification period. The change concerns the licensing address of record rather than a general deadline for all organizational email updates.

Section 1569.15 retains the broader application and change-reporting framework for residential care facilities for the elderly and separately places email changes on the 12-business-day clock. Other applicant-information changes retain their own periods, including specified 30-calendar-day duties and different rules for certain out-of-state facility information. A licensee with several facilities may also have distinct consolidated-notice provisions. The email rule therefore needs its own trigger and evidence without replacing every other licensing-change deadline.

FDA’s September 29 notice withdraws approval of NDA 010401 for FHTA’s MYSOLINE primidone suspension, 250 mg/5 mL, effective that day. The holder agreed and waived a hearing. The suspension had been discontinued in 2001 after antimicrobial-effectiveness testing raised concern about potential microbial contamination, particularly Pseudomonas aeruginosa. In January 2026 FDA had already determined that this suspension was withdrawn from sale for safety or effectiveness reasons.

The notice recounts FDA’s view that reintroduction would require reformulation, appropriate preservative criteria correlated with antimicrobial testing, and demonstration of the revised product’s safety and effectiveness. FDA asked the holder about reformulation or agreed withdrawal in June, and the holder chose withdrawal without a hearing. Distribution of the specified suspension in interstate commerce without an approved application is unlawful. This is a product-and-application-specific approval action, not an announcement of a new recall of all primidone products or a conclusion about every formulation.

FDA’s September 30 final order adds 21 CFR 876.4100 for flushing and storage solution used to maintain vascular-graft cell viability and structural integrity during short-term room-temperature storage in surgery. The order is effective September 30, 2026, while the underlying De Novo classification was applicable October 4, 2023. FDA explains that it is now codifying that class II classification, following review of the DuraGraft request, because special controls together with general controls can provide reasonable assurance of safety and effectiveness.

The controls require clinical adverse-event data, nonclinical evidence of graft preservation and particulate performance, shelf-life stability, biocompatibility and sterility. Coronary bypass indications require evaluation of the specified cardiac events, graft occlusion and mortality. Labeling must state maximum storage duration, additives, inspection for particulates, final-solution stability and summaries of supporting evidence. FDA did not exempt the category from 510(k) notification. These requirements apply to the defined vascular-autograft solution type, rather than every surgical storage fluid, and class II status is not a blanket release from premarket requirements.

California enacted SB 993 on September 27, revising client notice provisions for marriage and family therapy, educational psychology, clinical social work and professional clinical counseling under the ordinary January 1, 2027 effective-date rule. The normal notice includes the practitioner’s board-filed full name, license or registration number, type and expiration date, together with the board complaint information. The amendment permits discretion about some or all of those identifying details for individual safety concerns in acute psychiatric hospitals, correctional treatment centers and the other specified settings serving people under correctional authority.

The discretion requires authorization from the employing entity or agency, an established means for the client to request and obtain enough identifying information to file a board complaint, disclosure of that process in the notice, and preservation of a notice copy in the client record. Delivery of the notice must still be documented, and the board complaint notice remains. The exception is tied to setting and safety conditions; it is not general permission for every therapist to withhold identity or prevent a client from making a complaint.

California enacted SB 526 on September 27, amending Health and Safety Code section 1218.1 under the ordinary January 1, 2027 effective-date rule. A clinic corporation may use the affiliate application for an additional primary-care site or mobile unit when the qualifying parent has held a valid, unrevoked and unsuspended license for the immediately preceding five years, has no specified repeated or uncorrected immediate-jeopardy violations and faces no pending suspension or revocation. The application may be signed by a board officer, chief executive officer or executive director. Parent and affiliate must meet the listed common nonprofit ownership, board, corporate officer, medical-director and clinical-policy conditions; the parent cannot itself be an affiliate.

The law also provides a qualifying relocation route and a process to establish another parent before the old parent closes, preserving required parent qualifications and avoiding unchanged corporate-file resubmissions. Applications still require the identified supporting materials, including applicable construction and fire clearance, site agreements and hospital transfer information. CDPH must issue the license within the specified completed-application and approval periods, and must give particular written reasons when an application fails the affiliate conditions and moves to the ordinary process. The section does not prevent a licensing inspection. Those agency processing provisions should not be described as a universal clinical service-start deadline.

California enacted AB 1864 on September 30, adding Health and Safety Code sections 24200-24204. A covered manufacturer may not produce benchtop nucleic-acid synthesis equipment in California or sell or deliver it to a California customer without following the specified screening framework and publicly posting its compliance attestation. A provider faces parallel duties for synthetic nucleic acids subject to screening. Definitions of manufacturer, provider, customer, equipment and screened nucleic acids come from the National Science and Technology Council framework as revised in September 2024. Later federal revisions do not automatically change the version incorporated into this state law. The enactment is the event reported here; the applicable commencement of these provisions must be confirmed separately.

The law makes framework provisions using “should” mandatory for covered providers and manufacturers, while “encouraged” remains a recommendation. Provisions the framework states take effect only on or after October 13, 2026 have no effect under this chapter before October 13, 2027. Violations can draw Attorney General civil actions and penalties up to $5,000 per continuing day, depending on severity. Customer activities, including listed medical and pharmaceutical research and production uses, are not regulated by this chapter when the customer is not also acting as a provider or manufacturer. A clinical or research laboratory’s purchase therefore does not itself establish manufacturer status.

California enacted SB 354 on September 27 to revise the Insurance Information and Privacy Protection Act, with the new article operative July 1, 2028. The framework governs qualifying insurance licensees, surplus-line insurers, reinsurers and third-party service providers processing or sharing consumer information for the business of insurance. It introduces stand-alone privacy notices, privacy-rights notices for continuing relationships, consent requirements, limits on processing and sharing, written retention policies and schedules, and processes for access, correction, amendment or deletion. Service-provider contracts must govern the processing and sharing performed on behalf of covered insurance entities.

The entity and transaction limits are material. Section 791.01 generally excludes CMIA-governed healthcare providers and HIPAA-governed covered entities and business associates, including from the third-party-service-provider definition. It nevertheless applies to the specified disability insurer licensed for health insurance that is not regulated as a Knox-Keene health plan. The article generally addresses personal, family or household insurance information and contains additional financial-institution, producer and intermediary conditions. A standard privacy notice is generally due within 21 calendar days of first collection, processing or sharing, with specified exceptions and transition rules for existing relationships. These future obligations require scope analysis before copying one uniform notice or rights process across a health enterprise.

California enacted SB 849 on September 27, amending Business and Professions Code section 2307. The board may not reinstate a certificate surrendered while an accusation was pending alleging sexual abuse, misconduct or relations with a patient under section 726, or sexual exploitation under the cited section 729 definition. The revised trigger focuses on surrender during a pending accusation rather than requiring the surrender itself to establish the misconduct. It is therefore important to preserve the distinction between an allegation in a board proceeding and a criminal conviction. The enactment is the event reported here; the applicable commencement of these provisions must be confirmed separately.

The section retains separate bars for a revocation based on a board finding of the listed conduct and specified patient-related convictions or sex-offender registration, with the stated misdemeanor-registration exception. General reinstatement or penalty-modification procedures remain elsewhere in the section, including minimum waiting periods, verified recommendations and review of rehabilitation. Those ordinary petition routes do not remove the specific prohibition in subdivision (i). The provision also retains the separate restrictions on considering petitions while criminal sentences or board accusations are pending.

California enacted SB 329 on September 27, adding Health and Safety Code sections 11832.121 and 11834.11. For complaints within its jurisdiction concerning a certified alcohol or other drug program or licensed recovery or treatment facility, DHCS must assign an analyst within 10 days of receipt. When a complaint is outside its jurisdiction, the department must, to the extent feasible, notify the complainant in writing, including electronically, that it does not investigate that complaint type. The investigation must be completed within 120 days of assignment unless DHCS determines it needs assistance from other state agencies or additional resources. The enactment is the event reported here; the applicable commencement of these provisions must be confirmed separately.

Both provisions require DHCS to maintain investigation records, including cases unfinished after 120 days. Beginning July 1, 2027, and each July 1 thereafter, the department must publish an annual report covering the previous year’s investigations, their types and the number not completed within 120 days. DHCS may impose a single certification or licensure fee increase commensurate with the reasonable cost of preparing and maintaining the report. The 10-day, 120-day and annual-report provisions belong to the agency; they do not create a universal new provider filing or response period.

California enacted SB 989 and SB 1242 on September 27, with general provisions under the ordinary January 1, 2027 effective-date rule. New Welfare and Institutions Code section 5974.5 allows a qualifying first responder to ask the appropriate county behavioral-health agency to file a CARE petition, in addition to filing directly. The request includes available identifying and contact details and department-specified information. Within 30 business days the county must review it and determine whether to file, then notify the responder whether a petition was filed and whether the person met CARE criteria. The department must develop the referral form and guidance and include request data in the annual report.

Amended section 5977(b)(6)(B)(v) allows an original petitioner described in section 5974(a) or (b) to provide information about matters including the respondent’s condition, functioning, treatment history and housing, subject to applicable state and federal confidentiality law. The CARE team must receive, review and document relevant information, and the court may consider it under the specified rules; respondent consent is not needed merely to receive the qualifying petitioner’s information. Submission does not confer party status or a right to direct care, obtain discovery, access confidential records or protected health information, attend confidential proceedings or otherwise participate without consent except as law expressly provides. Section 5977(b)(6)(C) separately limits other original petitioners to attendance and a statement at the merits hearing, without ongoing rights. Receiving qualifying petitioner information is therefore different from disclosing the respondent’s records back to that person.

California enacted SB 1047 on September 30, amending Health and Safety Code sections 103871 and 103871.2. CDPH’s neurodegenerative data-collection system must include frontotemporal degeneration, alongside ALS, and the statutory category may include other dementias in addition to the other listed diseases. The law extends the chapter’s repeal date to January 1, 2032. The system remains a means of determining incidence and prevalence rather than a new clinical diagnostic standard. The enactment is the event reported here; the applicable commencement of these provisions must be confirmed separately.

The reporting framework directs CDPH to designate the diseases required to be reported and to notify physicians, hospitals and the Medical Board at least 90 days before requiring information. Providers diagnosing or treating a covered case must report it in the department’s prescribed format. If a facility does not report in that format, the department can obtain and report the information and recover its costs; willful refusal of the specified record access can draw daily civil penalties. Collected information remains confidential except as the chapter provides, and implementation is limited to available funding. The enactment alone does not establish that every FTD case became immediately reportable on signing.

California enacted SB 1209 on September 30, amending Insurance Code section 734.1. An examined company must correct violations of applicable statutes, regulations, referenced statutory accounting principles and other legally binding rules identified in an examination or operational report. Failure to take the required corrective action within the timeframe agreed with the commissioner or designee can result in up to $20,000 for each failure, determined per specific category of corrective action requested. The obligation is tied to legally binding requirements, not an assumption that every informal observation has the same legal status. The enactment is the event reported here; the applicable commencement of these provisions must be confirmed separately.

A company may request additional 30-calendar-day extensions or longer extensions approved for good cause, including circumstances beyond its control or demonstrated good-faith efforts. The commissioner may deny a request made without good faith or adequate effort. If the commissioner has reason to believe the duty was violated and proceedings serve the public interest, an order to show cause must state the charges, potential liability and hearing notice. The hearing is at least 30 days after service and follows the specified administrative process, with review rights preserved. Penalties and implementation orders follow if the charges are justified, and these powers supplement other enforcement authority.

California enacted SB 1206 on September 27. Amended Insurance Code section 805 makes a license inactive when the Secretary of State lists the licensee as dissolved, forfeited, terminated, canceled or surrendered, as well as suspended. The entity may not conduct activity requiring an Insurance Commissioner license until restored to active Secretary of State status. Section 1661 adds accident and health or sickness agent organizations to the requirement to file an immediate prescribed electronic application or notice when changing the natural persons transacting under the organization’s license. Under amended section 1712.5, removing or terminating the last named natural person makes that organizational license inoperative until deficiencies are corrected. The enactment is the event reported here; the applicable commencement of these provisions must be confirmed separately.

Related provisions require changes in contact or background information to be reported within their stated 30-day periods. Background information expressly includes restitution orders and fine or monetary-penalty orders, excluding late fees. Section 1736.5 requires a complete written response to a commissioner inquiry to be received no later than 21 days after the inquiry was communicated, covering licensing, retention, renewal and specified investigations; requested records must be included. The measure contains many other insurance subjects, including property and public-adjuster provisions, so the provisions relevant to a health insurance agency should be identified by license type rather than applied to all clinical operations.

California enacted SB 690 on September 30 to amend Penal Code section 637.2. The new subdivision (d) allows only the Attorney General to bring an action under that section against a private actor for a section 638.51 violation alleged to arise from conduct on an internet website, online application or mobile application. The underlying section otherwise provides specified damages and injunctive actions for invasion-of-privacy violations. The amendment is therefore focused on a particular statutory cause of action, type of alleged violation, defendant and online context. The enactment is the event reported here; the applicable commencement of these provisions must be confirmed separately.

The final text applies the limitation retroactively to pending claims in actions commenced within two years before the legislation’s operative date. It does not supply a calendar date for that lookback merely by stating the September signature date. Section 637.2 also preserves the cited Civil Code title, and the amendment does not generally repeal confidentiality or consent duties for patient information. A narrowed private litigation route should not be treated as a determination that a tracking technology is lawful or that every other claim has been eliminated.

California enacted AB 2030 on September 28, adding Health and Safety Code section 109030. A person may not sell, offer or give away as a retail or wholesale promotion a covered over-the-counter diet pill or dietary supplement for weight loss or muscle building to a person under 18 in California. The definitions focus on products labelled, marketed or otherwise represented for those purposes and include retail pharmacies and remote vendors. Retail establishments face the specified valid-identification check, and the text permits limiting access to prevent unauthorized purchases. Courts may consider ingredients, claims, imagery, grouping and store or online categorization when evaluating a product’s represented purpose. The enactment is the event reported here; the applicable commencement of these provisions must be confirmed separately.

Delivery sellers must not accept an order without either or both of the specified verification routes: checking the purchaser’s name, date of birth and residential address against an eligible independent database, or using shipment requiring an adult signature and government photographic identification. The verification database cannot be controlled or altered by the seller. The section excludes a person under 18 with a prescription for the covered pill or supplement and does not apply to adults. Public officials may seek injunctions and civil penalties up to $500 per violation, with prevailing-plaintiff fees and cumulative remedies. The product and prescription limits matter before extending a retail rule to clinical treatment.