California expands protections for records and testimony involving protected health care
Oct 4, 2026 edition · GC-2026-0125 · Published 2026-10-04 · Version 2 · Final
AB 1930 creates an Attorney General notice and waiting-period process for specified legal demands involving California-protected abortion or gender-affirming care, subject to defined exceptions.
What happened
California chaptered AB 1930 on September 26, 2026. Civil Code section 1798.309 addresses California-connected persons and entities receiving subpoenas, discovery requests or other legal-process requests in investigations concerning abortion or gender-affirming health care that qualifies as legally protected activity. Unless exempt, the recipient must notify the Attorney General at least seven business days before producing records and wait at least that long after notice. The notice includes the request, with identifying or confidential information redacted as permitted or required. A shorter deadline required by federal law or another federal obligation, including a contract, grant requirement or Medicare condition of participation, permits notice no later than production. The law's ordinary effective date is January 1, 2027; the September signature is not evidence that the new process was already operative on October 4.
The notice requirement does not apply to court-ordered requests, California state or local agency requests, qualifying attestations, or protected-care information incidental to the investigation. Attestations can establish that information will not support liability for care lawful in California, or identify California unlawful conduct or professional-discipline grounds under investigation, and recipients may rely on the attestation's representations. The Attorney General may intervene in protective litigation and seek enforcement, including penalties for false attestations and specified culpable violations. Protected activity excludes unprofessional conduct and violations of California antidiscrimination law. The provision establishes a defined request-review and escalation process; it is not a blanket prohibition on all disclosures or a separate warrant rule.
Scope and timing
- Authority status
- Final
- Applicability
- Directly applicable
- Audience
- Health systems, Provider networks
- Jurisdiction
- California
- Recorded date
- 2027-01-01
- Date type
- effective
Why it matters
Legal, privacy and records teams must distinguish covered investigations from exceptions and preserve shorter federal response duties while preparing the notice and production controls.
Recommended action
Prepare the January 1, 2027 request-review process with Legal and Privacy. Capture the investigation's purpose, California connection, protected-care scope, applicable exemption or attestation, federal deadline and Attorney General notice date before authorizing production.
Sources
- AB 1930, bill historyOfficial · California Legislature · 2026-09-26 · Source review 2026-09-27
- AB1930 chaptered text, retained official rendered documentOfficial · California Legislature · 2026-09-26 · Source review 2026-10-15
- Official Assembly 2023-24 Constitution, Article IV section 8Official · California Legislature · Source review 2026-10-14
Complete edition and supplemental material
This finding in the complete approved report →Regulatory horizons, CIA trends and implementation trackers remain in the full report.
Read the entire Compliance Sweep report →