Compliance Sweep, week of Oct 4, 2026

Treasury, Labor, and HHS published the final Transparency in Coverage rule October 6, effective December 7, 2026. For covered non-grandfathered plans and issuers, the public-disclosure amendments generally apply March 6, 2027, including network-level in-network rates, market-level out-of-network reporting, exclusions for unlikely provider-service combinations, and attestations. The allowed-amount threshold becomes 11 claims, with the specified six-month data window. Rate and allowed-amount files move to quarterly posting beginning April 1, 2027, the first calendar quarter after applicability, while prescription-drug files remain monthly. Prior-rule requirements continue until the applicable transition dates.

The contextual-file and website-footer provisions apply September 6, 2027, but their posting rules remain distinct: taxonomy and text files first post October 1, 2027 under the calendar-quarter rule, while the utilization file first posts July 1, 2028 and annually thereafter. The text file provides locations and contact information, with changes updated within seven calendar days, and footer links help users find disclosures. Separately, consumer cost-sharing information must be available by telephone on request, with the amended consumer-tool provisions applying to plan or policy years beginning on or after January 1, 2027 and the identified No Surprises Act treatment also reaching grandfathered coverage. The September applicability date therefore should not replace the utilization file's express later first-posting date.

The Treasury, Labor, HHS, and OPM correcting amendment published August 28 addresses typographical errors and omissions in the June 4 Federal Independent Dispute Resolution Operations final rule. It took effect August 28 and expressly applies the corrections beginning August 3, the underlying rule's effective date. The correction identifies missing payment-determination provisions and errors in selection, offer, and cross-reference text, and republishes HHS section 149.510(c) in full because the earlier regulatory text was incomplete.

The corrected offer provision generally requires each party's offer and supporting information within ten business days after final selection of the certified IDR entity. Where the Secretary determines the specified extenuating circumstances apply, the stated deadline instead runs from the eligibility determination. The offer identifies an out-of-network rate in dollars and as a percentage of the qualifying payment amount, with required contextual information. The parallel restored binding provision preserves exceptions for fraud or intentional material misrepresentation and the specified narrow judicial-review grounds. Those details concern the dispute process and its existing applicability date rather than a new opportunity to restart an elapsed deadline.

CDPH AFL 26-28 explains the SB 164 moratorium on initial home-health agency licenses and branch approvals beginning June 29, 2026, with its stated regulatory endpoint and unmet-need exception process. For applications pending on June 29, the letter required an intent to withdraw or the specified justification and documentation by October 9; it states that nonresponse results in automatic withdrawal. As of the October 11 edition, that response date has passed. The retained letter does not establish the disposition of any particular applicant's case.

Currently licensed agencies must submit information for their administrator, administrator designee, director of patient care services, and DPCS designee by March 31, 2027. The package includes the identified form, résumé, and list of facilities and agencies each person serves; changes require submission within ten business days, and a branch of a parent HHA is exempt from these management-information requirements. The separate five-year ownership-change restriction has continuity-of-care or financial-hardship-and-unmet-need exception routes. The moratorium also distinguishes service-area and branch changes from ordinary renewals and the identified other report-of-change applications.

California chaptered AB 1760 on August 31 as Chapter 167. The dentistry law replaces the prior subject-examination score threshold with a passing grade for a two-year reexamination exemption, but requires the entire examination to be retaken after three failed attempts at a section. It also clarifies foreign dental-school pathways and documentation for licensure without a California examination: qualifying out-of-state clinical practitioners and full-time faculty generally document 5,000 clinical hours within the preceding five years, while the specified out-of-state public-health nonclinical pathway uses an average of 40 hours a week for at least five years.

The auxiliary provisions add polishing and contouring existing amalgam restorations for registered dental assistants in extended functions licensed on or after January 1, 2010, under a licensed dentist's direct supervision, order, control, and full professional responsibility. Radiation-safety courses retain a minimum 32 hours, including eight didactic, 12 laboratory, and 12 clinical hours; distance learning is allowed for the didactic component, with technology disclosures and assistance. Previously approved courses retain approval until January 1, 2028, and must apply under the revised process to offer courses on or after that date. These specific permissions leave qualification and hands-on training conditions in place.

AB 2341 became Chapter 170 on August 31 and took immediate effect as an urgency statute. A local agency must translate emergency information when at least 5 percent of people in its jurisdiction speak English less than "very well." Once that trigger is met, each required language is identified by asking whether speakers of that language who speak English less than "very well" make up at least 5 percent of the jurisdiction's population that speaks English less than "very well." The second calculation therefore uses that population as its denominator, rather than the jurisdiction's entire population. Both calculations use American Community Survey data or an equally reliable source.

The law requires agencies to reassess the data every five years and provide translated information that is as comprehensive, actionable, and timely as the information supplied in English. Agencies must endeavor to use community members with relevant cultural and language skills, using native speakers of the relevant languages who also speak English fluently whenever feasible. The statutory local-agency definition covers cities, counties, cities and counties, and city or county departments; it does not make this formula a general private-hospital requirement. A separate state survey of a sample of local agencies begins January 1, 2027 and repeats every three years.

OCR's September 3 Dear Colleague letter clarifies Title VI and section 1557 protections when antisemitic conduct involves discrimination on a covered ground, including actual or perceived Jewish ancestry or ethnic characteristics or Israeli national origin. It addresses HHS-funded health care, education, training, research, and human-services operations, including conduct carried out through contractual or other arrangements. The letter distinguishes protected-status differential treatment from individualized clinical, safety, or operational judgments applied consistently, and preserves First Amendment protections in its discussion of antisemitism evidence.

The guidance also describes religious nondiscrimination in visitation at participating hospitals, critical access hospitals, and long-term care facilities, subject to appropriate restrictions. It addresses harassment and retaliation, and gives examples of reporting channels, documented responses, restored access, and follow-up to test whether measures work. OCR expressly describes physicians, staff, and trainees principally as program participants and does not assert general jurisdiction over employment discrimination. These are explanations and illustrative compliance measures under existing law, without a new implementation deadline or a rule that every offensive expression automatically establishes a civil-rights violation.

APL 26-014 addresses all health care service plans and reminds them of PBM licensing requirements under the identified statutes and All Licensee Letter 26-010. It directs plans to ensure every contracted PBM is licensed before January 1, 2027. Separately, plans had to submit an eFiling Report/Other on or before October 1, 2026, titled Contracted PBMs and Pharmacy Delegations, containing at least an Exhibit E-1. The letter's September issuance and already-elapsed filing date make this an implementation carryover for October 11 rather than a new filing announcement.

Exhibit E-1 must identify every currently contracted PBM and PBM whose contract will be effective January 1, 2027, the delegated functions for each, and whether the plan intends to keep contracting with it beyond January 1. The fourth item asks whether the plan has confirmed that each contracted PBM submitted a DMHC license application. Reporting application confirmation is distinct from ensuring actual licensure before January 1. The source establishes what plans had to submit and verify, without establishing that a particular plan filed, that its report was complete, or that a PBM's application resulted in a license.

AB 173, chaptered on September 18 as an immediately effective health budget law, changes the Medi-Cal enrollment framework. Under amended Welfare and Institutions Code section 14043.2, a disclosed affiliation within the previous five years with a person or entity that experienced a federally defined disclosable event requires denial or termination only if DHCS determines that it poses an undue risk of fraud, waste, or abuse. DHCS must apply the cited federal risk factors and may act even when an affiliation was fully and timely disclosed. Implementation of that section depends on all necessary federal approvals and available federal financial participation; the enactment does not establish that those conditions have been met. Statutorily defined legally protected health care activity, by its nature alone, does not constitute fraud, waste, or abuse or result in termination under the identified provisions.

The law also extends specified termination controls to preferred provisional and fully enrolled providers, alongside provisional providers. It authorizes evidence requests and unannounced site inspections; refusal of access is grounds for denial, suspension, or termination, and maildrops, nonoperational spaces, and virtual offices without a DHCS exemption do not satisfy the place-of-business requirement. Grounds tied solely to one location have a location-specific treatment. Separately, section 14043.36 makes a temporary suspension and number deactivation effective when DHCS sends notice, including email when an address is on file, and preserves the statutory appeal process. An investigation-based suspension is distinct from a finding that fraud occurred.

The official AB 1018 history retained for the October 11 edition ends with the August 30 action reading the bill a second time and ordering it to third reading. The displayed text is the August 28 Senate-amended proposal, without an enrollment or chapter action in that history. The proposal would regulate automated systems that profile people to make or facilitate consequential decisions, with health care, health insurance, employment, government benefits, and other listed services within its scope. The definition targets simplified outputs such as scores, classifications, or recommendations that assist or replace human discretion and materially affect people.

The proposal generally exempts HIPAA-regulated covered entities doing business in California and their business associates for services rendered to those entities. That exemption does not cover employment or employment-opportunity decisions, patient eligibility for financial assistance including discounted care, or the requirements of section 22756.2(a), which concern notice before a decision is finalized. Where applicable, developers would supply approved-use instructions and technical information, while deployers would provide notices and adverse-outcome information; deployers with more than 25 employees would provide the specified correction and appeal opportunities. The notice provisions have medical-emergency exceptions. Other exclusions address FDA-overseen devices and research and specified laboratory and manufacturing uses. These are proposed controls and exceptions, and do not displace restrictions under existing laws.

California chaptered AB 1199 on September 30 as Chapter 876. It changes Business and Professions Code section 2282 so covered hospitals' medical-staff rules provide for reappointments at least every three years, replacing the annual-or-biennial language identified in the legislative digest. The related physician-staff competency provision in section 2453 requires a satisfactory demonstration of the ability to perform surgical and other procedures at the original appointment and at least every three years afterward, rather than the prior two-year interval.

For general acute care and acute psychiatric hospitals, amended Health and Safety Code section 1275.6(e) places the competency-control responsibility on the governing body and medical staff, with demonstration before an appropriate medical-staff committee at original appointment and every three years thereafter. The same provision prohibits CDPH from requiring routine reappointments more frequently than every three years. The surrounding provisions continue to require competent, ethically qualified staff and periodic review of clinical experience using patient records. The interval change therefore leaves those continuing oversight responsibilities in place.

AB 1405 was chaptered September 9 as Chapter 178 and directs the Government Operations Agency to establish an AI Auditor Registry by January 1, 2029. Beginning that day, a person may not offer, sell, or conduct a covered AI audit without registration. An AI auditor is a person, partnership, or corporation assessing an AI system or model for a third party; a covered audit assesses internal controls, processes, or systems necessary for compliance with state law. The agency must issue registration numbers and publish registry information, with a statement that registration is not a state recommendation or endorsement.

Registered auditors must supply clients with reports addressing scope, results and their basis, relevant deficiencies, audit limitations, and material evidence or access gaps, with a signed and dated compliance statement. Reports and supporting documentation must be retained for at least ten years. The law also addresses conflicts, self-review, employment relationships, staff competence, and employee misconduct disclosures, and requires registration numbers on covered-audit advertising. Qualified public-accountancy professionals can satisfy specified reporting and independence requirements through applicable professional standards when the statutory conditions are met; that treatment does not remove the registration requirement.

AB 1979 was chaptered September 30 as Chapter 854. A business offering a qualifying health care chatbot to help consumers manage information or diagnose, treat, or manage a medical condition is deemed a provider of health care for CMIA purposes, with corresponding confidentiality standards and improper-use or disclosure penalties. The definition covers a generative AI system with a natural-language interface that responds adaptively, is marketed as facilitating or supporting health services, and uses defined health information, including information collected, generated, or inferred by the chatbot. The CMIA classification does not itself confer provider status under other laws.

The new clinical-decision-support section requires covered facilities, clinics, and physician or group-practice offices to take reasonable steps to retain licensed providers' independent professional judgment. They may not deploy AI to independently perform a clinical function legally reserved to a licensee or to direct unlicensed personnel in performing it. The text preserves use by trainees in supervised study or training and excludes documentation and communication uses that do not apply professional judgment, such as record-update messages and reminders. Licensing-board jurisdiction and injunction remedies remain available within the statutory enforcement framework.

Chaptered September 18 as Chapter 299, AB 2311 permits a qualifying health care district or nonprofit corporation with a health care district as its sole corporate member to employ licensees and charge for their professional services. The entity must own or control a general acute care hospital meeting the statutory conditions. The hospital must have received a Distressed Hospital Loan Program award before January 1, 2025, or meet the greater-than-75-percent combined Medicare and Medi-Cal payer-mix test using the specified January 1, 2025 data. Under the payer-mix route, both the hospital and any health system to which it belongs must exceed the threshold.

The medical staff must affirmatively approve the employment under its bylaws, and neither the district, nonprofit, nor controlled hospital may direct the physician's professional judgment. Employed positions must add to rather than supplant the identified existing medical-staff positions, subject to mutually agreed contract amendments, and prospective employees must be offered contracting instead. Beginning in 2028, an entity using the exception must publish the specified annual recruitment-and-retention report by July 1. The employment authority ends January 1, 2037; the amended section has a separate July 2037 transition, so those dates serve different purposes.

California chaptered AB 2448 on September 27 as Chapter 607, amending Civil Code section 56.101. The change adds an express obligation to enable the specified capabilities, policies, and procedures for businesses described in section 56.06 that electronically store or maintain sensitive-service information on behalf of the listed health care entities or employers. The amended subdivision retains the earlier July 1, 2024 date in its text; that retained date should be distinguished from the enactment of the 2026 amendment rather than presented as a new future deadline.

The safeguards limit access privileges for gender-affirming care, abortion-related care, and contraception information to authorized persons; address disclosure and processing outside California in accordance with CMIA; segregate that information from the remainder of the record; and provide the ability to automatically disable out-of-state access to segregated information. Fees must comply with the cited federal information-blocking regulation. The subdivision expressly excludes contractors, health plans, and providers as those terms are defined in section 56.05, even though other confidentiality and electronic-record obligations remain in the surrounding statute.

California enacted AB 2562 on September 27 as Chapter 620. The amended certified-program provision adds a suicide prevention plan to the minimum contents of the operation manual, alongside admission and discharge, client rights, services, medications, and conduct policies. A separate amendment to the licensed residential-facility section requires the licensee to develop a suicide prevention plan. The two provisions address related programs through their respective certification and licensing frameworks.

For the residential suicide-prevention requirement, DHCS may issue a bulletin or all-county or all-provider letter after stakeholder input until regulations are promulgated, and must adopt those regulations by January 1, 2031. That date concerns the department's rulemaking, rather than a stated licensee filing deadline or permission to postpone all preparation until then. The surrounding statute retains distinct relapse-planning and overdose safeguards, including naloxone availability and trained on-site staff. Their existing requirements and separate implementation dates should not be conflated with the new suicide-prevention plan.

Chaptered September 27, AB 2598 requires general acute care hospitals and skilled nursing facilities to make a reasonable attempt to notify known next of kin after a death, including when a body is transferred to a hospital after death. The defined attempt is a documented, good-faith effort within 72 hours of death using available contact information. The law recognizes notification of the designated resident representative and a patient's prior written instruction against notifying next of kin as alternative ways to satisfy the identified requirement. If no next of kin can be located after the reasonable attempt, or either specified alternative is satisfied, the licensee must notify the county public administrator within two business days and supply available identifying information.

The penalties have different measurement rules. Failure to make the required next-of-kin attempt carries $200 per day, up to $50,000, measured from the time a reasonable attempt would take until next of kin actually knows of the death. Failure to notify the public administrator has a separate $200 daily penalty, also capped at $50,000, measured from the fifth business day after death until notification. A licensee may request the specified hearing within ten working days of receiving a penalty notice. The provisions preserve other civil remedies and exclude the identified deaths of people in state corrections custody, which follow separate Penal Code rules.

On September 18, DOJ announced two Justice Manual revisions addressing False Claims Act enforcement and the use of agency guidance in Department litigation. The first reinstates and builds on the Department's 2017 policy that sub-regulatory guidance cannot impose legal obligations beyond statute or regulation. DOJ frames the change around fair notice and enforcement of binding legal or contractual obligations. The retained source is the Department's announcement explaining the revisions, rather than an independently reviewed full text of each amended Manual section.

The second revision directs the Department to consider exercising dismissal authority when it declines intervention in a qui tam action and to revisit that assessment, where appropriate, as the litigation proceeds if it has not sought dismissal. DOJ says it will use the authority judiciously, emphasizing cases lacking factual or legal merit and the interests of the United States. Declining intervention therefore is not described as an automatic dismissal or an adjudication that the allegations lack merit. The policy announcement also does not state that existing statutory, regulatory, or contractual obligations cease to apply.

CMS issued State Operations Manual Transmittal 247 on September 18 with the same effective and implementation dates. The Appendix W revision follows the cited March 2026 survey memorandum and aligns interpretive guidance with emergency-services readiness requirements implemented July 1, 2025. Tag C-0896 addresses nationally recognized, evidence-based protocols for emergency patients, including obstetrical complications and immediate post-delivery care. The transmittal dates the guidance revision; it does not establish a new October grace period for the underlying condition of participation.

The guidance links protocols to the hospital's patient population and the scope and complexity of its services, with medical-staff and governing-body approval and access for responding staff. Adequate provisions include the equipment, supplies, medications, blood products, and personnel needed for emergency care. Surveyors examine whether written protocols contain required elements, whether staff use them, and whether the facility has the provisions to meet patient needs. The procedures include record review, staff interviews or demonstrations, equipment checks, and escalation or transfer when an emergency exceeds the CAH's capabilities; they direct surveyors to focus on documentation and protocol alignment rather than evaluate clinical judgment.

California enacted AB 2613 on September 18 as Chapter 306. Under amended Health and Safety Code section 1373.65, affected enrollees continue to receive provider-group or general acute care hospital termination notices by United States mail at least 60 days before termination. Plans must also deliver the notice by text or email when the enrollee has opted into electronic delivery and supplied the specified contact information. The section retains the block-transfer filing at least 75 days before termination and department review of the proposed notice, including its stated deemed-approval procedure.

If the plan reaches a renewed or replacement agreement after sending termination notices, it must submit the follow-up notice for department approval within five business days and send it within ten business days after approval. An agreement reached before the termination date preserves assignment; an agreement afterward triggers notice and the option to return. Mail remains required, with electronic delivery added for eligible opted-in enrollees. The section also retains defined notice populations and specific exceptions, and its 2025–2026 amendments do not apply to the listed Medi-Cal managed care contracts with DHCS.

California chaptered AB 1907 on September 14 as Chapter 204. Its replacement Government Code section 100503.4 becomes operative July 1, 2027 and directs Covered California to use an eligible individual's transferred account or complete SAWS application to enroll people determined eligible for Exchange financial assistance. Listed options include the lowest-cost silver plan, a plan covering other members of the modified-adjusted-gross-income household, the identified reduced-cost-sharing option for an eligible Indian, and an available plan offered by the person's previous managed care plan. The Exchange determines among the statutory options; the law does not establish that the future intake system has already launched.

Enrollment notices must arrive before coverage becomes effective and explain the selected plan, alternatives and deadlines, help with selection, the right not to enroll, appeal information, and how to effectuate coverage. Where a premium is due, instructions address paying by the deadline; where none is due, they address opting in. The premium due date cannot be earlier than the last day of the first enrollment month. Separate plan and insurer provisions require the listed enrollment periods and coverage dates except where inconsistent with the cited federal rule, in which case federal requirements apply.

California enacted AB 1983 on September 18 as Chapter 281, defining separate resale-conditioned and sequential-order repayable continuing-care contracts. Resale-conditioned amounts, including accrued interest, are due within 14 calendar days after resale or reoccupancy of the unit. Sequential-order amounts are due within 14 calendar days after enough money exists in the required dedicated repayment account to satisfy the contract's assigned sequence number. The account is exclusively for those repayments, and the statutory framework orders payment by terminated-contract sequence rather than treating every repayment as dependent on resale of that resident's unit.

For sequential contracts entered into on or after January 1, 2027, interest begins accruing 180 days after termination even if the account lacks sufficient funds. Accrual does not change the assigned number or payment priority, and principal and interest are paid through the sequence method when the contract reaches its turn. The provider must fund both before issuing repayment. Contract disclosures must explain the funding contingency, possible interest, and unchanged repayment priority; the law also requires the specified historical timing disclosures for the relevant contract type. Interest accrual does not itself make principal repayment due 180 days after termination.

California chaptered SB 16 on September 18 as Chapter 314. Amended Welfare and Institutions Code section 5121 requires each county behavioral health director to establish and implement procedures for professionals designated to perform section 5150 functions. Those procedures must address eligible licenses, disciplines and clinical experience; initial and ongoing training and testing; application and approval timeframes and renewal; and monitoring for compliance with law and county procedures. A complaint-responsive passive monitoring process can satisfy the identified monitoring requirement.

An emergency physician must be included among eligible practice disciplines, but the law expressly preserves the training, application, approval, and revocation process that applies to other eligible professionals. The definition covers a physician providing screening and treatment in a licensed general acute care hospital's emergency department. If a designation is denied or revoked, the county director must give the requester and affected person written reasons. The section preserves county criteria consistent with its terms and states that designated mobile-crisis team members and professional persons may not be barred from transporting a person taken into custody under section 5150.

California chaptered the health omnibus SB 1447 on September 14 as Chapter 238. Amended Health and Safety Code section 131370 requires specified entities to collect and report data as close to real time as possible by December 31, 2028 or within one year of official department notification, whichever is sooner. A local health department's qualifying surveillance system can transmit the entity's required data to the state instead, subject to the stated capacity and actual reporting conditions. The statute itself does not establish that a particular provider has received the notice that starts its earlier clock.

Reporting-related penalties and licensing sanctions require the relevant data elements, transmission standards, and schedule to have been printed in the California Code of Regulations, plus notice to the affected person or facility at least six months before the claimed failure. The bill also retains a separate patient-safety plan framework for the identified health facilities, including a multidisciplinary committee, event reporting with anonymous options, corrective-action review, analysis of disparities, staff safety training, annual plan review, and biennial submission beginning in 2026. Those existing plan duties and the phased surveillance-data requirements are separate obligations with different triggers.

California enacted AB 1930 on September 26 as Chapter 468. A person or entity located, headquartered, incorporated, or otherwise doing business in California that receives the covered legal-process request generally must notify the Attorney General at least seven business days before producing records. The request must concern a civil, criminal, regulatory, or legislative investigation of abortion or gender-affirming services that constitute legally protected health care activity. The notice includes a copy of the request, with permitted confidentiality redactions, and the corresponding waiting rule applies unless an exception or shorter federal obligation controls.

Exceptions include a competent court's order, a request from a California state or local agency, a qualifying attestation, and records in which the protected-care information is incidental to the investigation. Attestations can address the specified lawful-use, California-illegality, or professional-discipline grounds, and recipients may rely on their representations. If federal law or an identified federal obligation requires a shorter response, notice may be contemporaneous with production and the text addresses best efforts to meet that federal deadline. The Attorney General can intervene or seek enforcement, including penalties for false attestations; those mechanisms require request-specific review rather than assuming every disclosure is forbidden.

California chaptered SB 934 on September 26 as Chapter 469. The amended definition addresses practices during mental-health services that seek to direct a patient toward a predetermined sexual orientation or gender identity outcome, regardless of the intended direction of change. It includes efforts to increase or reduce attractions toward a particular sex and efforts to suppress or constrain gender identity or expression. Sections 865.1 and 865.2 prohibit the defined efforts with patients under 18 and make attempted covered efforts unprofessional conduct subject to the relevant licensing entity's discipline.

The definition expressly excludes nondirective psychotherapy supporting coping, identity exploration, and self-understanding without a predetermined orientation or identity outcome. It also excludes age-appropriate responses to unlawful conduct or unsafe practices when they do not direct the patient toward a particular orientation or identity, and supportive care consistent with applicable standards that respects the patient's experienced and defined gender identity. The statutory mental-health-provider definition lists the identified licensed professions as well as specified associates, interns, trainees, and other California-designated professionals. The law therefore requires attention to the service, intended outcome, patient age, and practitioner category, rather than treating all identity-related counseling as prohibited.

California enacted SB 1023 on September 26 as Chapter 470. The amended plan and insurer provisions prohibit prior authorization or step therapy for medically necessary HIV-prevention antiretroviral drugs, drug devices, and drug products, including preexposure and postexposure prophylaxis. The therapeutic-equivalent exception remains: where FDA-approved equivalents exist, at least one must be available without those restrictions, but every equivalent need not be. The surrounding provisions also preserve the identified pharmacist furnishing, related testing, and reimbursement protections, with the stated network-benefit conditions.

For contracts and policies issued, amended, or renewed on or after January 1, 2027, an FDA-approved non-self-administered HIV-prevention drug, device, or product must be covered under both medical and prescription-drug benefits. When obtained through the prescription benefit, a health care provider acting within license scope must dispense and administer it. The sections exclude the specified specialized dental, mental-health-only, vision, and Medicare supplement arrangements. The plan section also preserves its Medi-Cal managed-care exception to the extent the services are excluded from the DHCS contract; that condition should not be restated as a universal exclusion of every Medi-Cal service.

California chaptered SB 1114 on September 26 as Chapter 471. The amendments restrict disclosure of covered SOGISC information in personally identifiable form outside California state or local government or its authorized agents, subject to the listed exceptions. Covered information includes specified data reasonably capable of revealing transgender or intersex status, such as certain combinations of identity and birth-sex information and gender-marker records. The framework names the covered state agencies and incorporates disclosure restrictions for the identified public postsecondary institutions; it does not create a universal private-provider demographic-collection mandate.

Exceptions include mandatory federal or interstate program agreements, warrants or orders enforceable in California, designated public-health functions, qualifying protected vendor services, permitted Information Practices Act disclosures, and specified Civil Rights Department activities. Identifiable sharing must be limited to the minimum required by the applicable exception. For shared state-federal systems, the separation and limited-sharing duties become operative for each agency when it notifies the Legislature that the necessary automation is complete. Separately, DSS must comply with the identified external-disclosure restrictions as early as possible, no later than January 1, 2028. The DSS dated phase and shared-system automation trigger apply to different statutory requirements.

California enacted AB 2150 on September 20 as Chapter 384. An employer operating in California that requires CPR certification training must also require the affected employees to complete an EMSA-approved online video module on naloxone and pay the training cost. The module is separate from the CPR curriculum and must cover overdose recognition, appropriate emergency response, and proper administration of naloxone or another approved opioid antagonist. EMSA approves content against those minimum standards; the section does not assign it ongoing employer-compliance monitoring or enforcement.

An employee's existing CPR, first-aid, or other training can satisfy the requirement when EMSA determines it meets or exceeds the minimum content and the employer retains documentation. Existing clinical staffing or an internal medication policy alone does not exempt an employer, but the equivalent-training route remains available. The statute expressly creates no independent duty, authorization, or expectation to administer naloxone and preserves scope-of-practice, medication-administration, and delegation rules. It establishes a training floor and preserves broader or more protective requirements under other rulemaking authorities, rather than treating this module as proof of compliance with every workplace standard.

California chaptered SB 1302 on September 20 as Chapter 429. Its amended nursing definition includes medication and therapeutic-agent administration under orders of nurse practitioners and certified nurse-midwives practicing under the cited statutory authorities, as well as directions of an APRN within that practitioner's authorized scope. The law also revises nursing-education controls, including simulation standards and conditional requests for reduced direct-care clinical hours when the specified emergency and placement conditions are met. Those requests retain evidence, educational-equivalence, duration, and approval safeguards, rather than providing a general waiver of clinical preparation.

For qualifying out-of-state nurse-practitioner transition-to-practice experience, BRN must identify states whose practice experience meets or exceeds the California requirements by January 1, 2028, maintain a website list, and review changes in those states. A separate January 1, 2029 provision requires continuing-education proof at license renewal, including completion documentation for the preceding renewal period or two years. These milestones address different Board and licensee functions; neither makes every nurse practitioner or APRN an unrestricted prescriber or removes the underlying qualification and practice-setting requirements.

In a September 25 release, California Attorney General Rob Bonta reaffirmed enforcement of disability civil rights and the right to live in appropriate integrated settings. The release reports that a September 23 order in Texas v. Kennedy accepted a requested resolution vacating references to community integration in specified Section 504 regulations, including the integration provision. It links that development to a June federal Office of Legal Counsel memorandum and the subsequent litigation resolution. Those descriptions are the California Attorney General's account; the retained evidence here is not an independent reading of the court's order.

The release separately invokes the ADA, Section 504, and the Supreme Court's Olmstead decision as the basis for the Attorney General's position that integration protections continue. It also describes California enforcement work, including August guidance to local jurisdictions about meaningful access during emergency preparedness, response, and recovery, and an ongoing Eaton Fire response investigation. The source does not establish the exact operative boundaries of the federal order for every provider or program. It expresses a continuing California enforcement position while reporting the separate federal regulatory development.

California chaptered SB 923 on September 27 as Chapter 482. Amended Civil Code section 1798.105 extends the deletion right to information collected from or about a consumer, closing the identified gap for third-party information. On a verifiable request, the section addresses deletion from the business's records and notification to service providers, contractors, and parties receiving sold or shared information, subject to its stated limits. For third-party data, a business may retain the deletion record and minimum data needed to keep the information deleted, without using it for another purpose.

Existing retention exceptions remain, including reasonably necessary contractual performance, security and integrity, debugging, specified research, and legal obligations. The amendment also changes request channels for a business operating exclusively online with a direct relationship with the consumer: it must provide email and an online method such as a form or portal. These are changes within the CCPA framework; the act does not itself make every health record subject to deletion or replace the analysis of applicable statutory exemptions. Its suppression permission is purpose-limited rather than a basis to continue general use of deleted third-party information.

California enacted AB 2011 on September 30 as Chapter 915. The amended plan and insurance sections require covered mental-health and substance-use-disorder benefits in large-group, small-group, and individual coverage to comply with MHPAEA and the specified federal rules, regulations, and guidance as they existed January 1, 2025. The reference date fixes the incorporated state-law standard rather than automatically following every later federal revision. The Legislature identifies nonquantitative treatment limitations and uncertainty from federal litigation as background to preserving parity protections.

Where a state provision conflicts with or materially differs from federal regulations, the responsible department must review it and collaborate with the other regulator to issue compliance guidance; that guidance is exempt from the identified Administrative Procedure Act process. The provisions also identify existing resources or sufficient appropriations as implementation funding routes. Legislative intent expressly distinguishes preserving and codifying parity protections from creating new benefit mandates or expanding required covered services. The retained law does not establish that either department has already completed its conflict review or issued the contemplated guidance.

California chaptered AB 1798 on September 30 as Chapter 897. The amended Insurance Code restricts life and disability insurers from cancelling, limiting, denying, or changing terms based on genetic-characteristic tests and from requesting or using genetic information for insurance purposes, subject to stated exceptions. The article defines disability insurance for this purpose to exclude health insurance, and its scope is therefore not interchangeable with a rule governing ordinary clinical genetic testing or every health-benefit claim. It expressly prohibits using or disclosing an individual's full genome.

The limited genetic-result exception requires authorized access to results already in the medical record, from a test that is not direct to consumer, to rule out an adverse finding, with informed written consent or the individual's provision of results. Separately, section 10148(h) preserves insurance decisions based on a present disease's manifestation, diagnosis, or treatment, including a medical-record diagnosis based on genetic testing. The text also addresses records needed solely to pay benefits or for therapeutic purposes and bars requiring a genetic test or asking whether the person or family were tested. These boundaries do not authorize full-genome use or disclosure.

HRSA's September 29 final guidelines implement the HOLD Act's prohibition on considering a transplant recipient's household income when determining a living donor's reimbursement eligibility. They apply to applications reviewed on or after September 30; earlier reviews follow the identified prior guidelines. The program reimburses qualifying nonmedical donation-related expenses, rather than purchasing organs or replacing every source of assistance. Reimbursement is unavailable where the specified state compensation, insurance, public health-benefit, or prepaid health-service sources can reasonably cover the expense.

The final framework gives highest priority to donors at or below 350 percent of the HHS poverty guidelines, with additional resource-dependent categories above 350 through 500 percent and hardship-waiver applicants above 500 through 750 percent. All three categories open at the start of a budget period, but lower-priority categories may close with notice if resources are insufficient. The final rules retain donor and transplant-center criteria, a recipient-related exemption for nondirected donors, documented hardship review, and a $6,000 total qualifying-expense cap. Removing the recipient-income test therefore leaves a donor-centered, funding-limited application and reimbursement process.

The California Attorney General announced conditional approval October 2 of the sale of St. Elizabeth Care Center, a 52-bed nonprofit skilled nursing facility in North Hollywood, from Providence Health System–Southern California to Ensign affiliates. The release states that Ensign had managed the facility since June 2025 under prior CDPH approval. It describes this as the California component of a broader proposed acquisition and identifies advance Attorney General approval as part of the nonprofit health-facility transaction framework. Conditional approval is distinct from evidence that the sale has closed.

The announced conditions run from seven to ten years and include Medicare and Medi-Cal participation, reserving at least 30 percent of skilled nursing beds for Medi-Cal beneficiaries, adequate acuity-based direct-care staffing, a full-time licensed administrator, safe transfers and discharges, and sufficient living space. Financial conditions address rent, affiliate payments, and debt, including Attorney General approval for rent increases above 2.5 percent. An Attorney General-appointed monitor oversees compliance. These are protections tailored to this transaction; the release does not establish the 30-percent bed term or each other condition as a universal rule for every skilled nursing facility sale.

California enacted AB 1776, the COMPETE Act, on September 30 as Chapter 826. New Business and Professions Code section 16731 prohibits the specified monopolization and monopsonization conduct, including attempts and maintenance, and requires plaintiffs to allege and prove substantial market power through direct or indirect evidence. Courts must use the identified California Supreme Court analytical framework. The act also emphasizes competition for workers and distinguishes anticompetitive conduct from market power lawfully gained through superior products, services, or business acumen.

Only the Attorney General or a district attorney may initiate a section 16731 action, and the new violation generally cannot serve as a private Unfair Competition Law predicate; the clause preserves other actions outside this section. A defined California small-business exclusion requires independent ownership and operation, the stated location and officer conditions, no more than 100 employees with affiliates, and average annual receipts no greater than $10 million over the preceding three years. The section also preserves conduct within specified government-granted and supervised authority. These limits qualify the new public-enforcement pathway rather than immunizing all concentrated businesses or creating a new private single-firm claim.

The approved amendment to 22 CCR 97046.4(a) replaces four with eight months after a skilled nursing facility's fiscal year-end for its annual consolidated financial report. The retained approval package includes the marked amended clause, OAL's August 12 approval, and the Secretary of State's August 12 filing stamp. Both the approval notice and HCAI's regulation index identify October 1, 2026 effectiveness. The amendment changes the fiscal-year-based submission interval; it does not repeal the annual report or create a single statewide calendar-date filing deadline.

California enacted SB 503 on September 30 as Chapter 857. Business and Professions Code section 22758 requires developers and deployers to make reasonable efforts to identify covered clinical decision support with known or reasonably foreseeable biased-impact risk. Developers must make reasonable mitigation efforts and provide an intended-use and risk statement plus documentation addressing training data, available demographic representativeness, performance evaluation, limitations, data governance, outputs, and monitoring recommendations. The information is due on request or initial sale, whichever is earlier, and as applicable with material updates.

Deployers must regularly monitor identified systems and take reasonable, proportionate mitigation steps. An entity serving both roles need not generate the specified documentation for internal use when consistent information is readily available, but that exception does not erase the statement, monitoring, or mitigation duties. Covered tools aid clinical timing, diagnosis, or treatment; specified scheduling, education, preparation, and payment activities are excluded to the extent their independent performance requires no professional license. Compliance supplements other AI laws and is expressly unavailable as a defense to unlawful-discrimination claims.

California enacted AB 1637 on September 27 as Chapter 536. New Business and Professions Code section 2266.1 places responsibility for physician patient notes on the authoring physician, regardless of clinical setting. Patient notes include notes, after-visit summaries, diagnoses, and treatment plans. The section generally reserves editing to the authoring physician, which makes authorship and the kind of record entry material to the permission analysis rather than establishing that any user with EHR access may revise a physician's documentation.

Three exceptions qualify that rule. A scribe, medical assistant, or other authorized person may act under delegated authority. A physician may add to the notes after care transfers to that physician; this clause expressly concerns additions. A physician may also edit notes of a trainee, postgraduate licensee, intern, resident, or postdoctoral fellow whom that physician supervises. These provisions preserve particular delegated and supervisory workflows without granting unrestricted rewriting authority to every subsequent treating professional or administrative user.

California enacted AB 1854 on September 27 as Chapter 485. Its Penal Code amendments prohibit arrest of a person whom the Governor has declined to surrender and extend protected-care arrest, cooperation, and out-of-state subpoena safeguards regardless of the patient's location when the activity is lawful in California. The public-agency federal noncooperation provision applies to the extent federal law permits. The section preserves investigation of criminal activity in California, while restricting sharing procedure information to enforce another state's protected-care law.

The legal-process controls now include California corporations providing financial services to the public, alongside the specified electronic communication and remote-computing providers. Covered requests need a sworn declaration establishing either no protected-care connection or a qualifying patient-initiated proceeding actionable similarly in California. The section preserves unrelated valid process and specified written requests by the investigation's subject. Attorney General enforcement can seek $10,000 for a first and $15,000 for subsequent intentional, knowing, willing, or reckless violations of the disclosure rule; false declarations have a separate $15,000 penalty. These conditions require request-specific review rather than treating every demand as categorically unenforceable.

California enacted AB 1696 on September 27 as Chapter 484. Health and Safety Code section 1317.1(n) removes the identified physician-supervision requirements for a licensed nurse-midwife in a labor and delivery unit, obstetric triage, or dedicated emergency obstetric evaluation unit. The nurse-midwife must be providing care authorized by and consistent with Business and Professions Code section 2746.5, or be specifically requested by the treating physician to provide obstetric consultation. This is a defined exception within the emergency-services, consultation, and stabilization framework.

The amended framework does not expand licensed practice scope or require transfers or admissions conflicting with EMTALA or the Lanterman-Petris-Short Act. A parallel exception appears in the special Stanford Hospital and Lucile Packard arrangement for patients with active-labor conditions. That arrangement retains an agreement to accept affected patients without nonclinical discrimination, a safe-transfer assessment, the patient's right to refuse, and prompt transport with a specially trained escort. The supervision amendment therefore does not by itself remove the surrounding facility, transfer, or professional-practice conditions.

California enacted SB 1323 on September 27 as Chapter 698. The amended Health and Safety Code section 24250 requires visitor-monitoring, documentation, and reception procedures and a notice to authorities at the designated main public entrance. The notice states the limits on immigration-enforcement access to nonpublic areas, including state or federal law and valid physical judicial warrants or court orders. Personnel must immediately escalate access and patient-information requests, and provide legal documents for management, administration, or counsel review. The mandatory procedure and notice terms apply until January 1, 2030, when the replacement restores the stated feasibility qualifier and encouraged notice.

Section 24251 continues to require nonpublic designation of treatment, care, and protected-information discussion areas, with mapping and signage encouraged. It restricts immigration-enforcement entry absent the stated legal exception or qualifying judicial authority, calls for witnessed and documented denials to the extent possible, and requires staff and relevant volunteers to receive response instructions. The added instruction concerns requests by a person in immigration custody to notify family or a designated support person of the current location. The January 2030 replacement omits that added instruction while retaining core nonpublic-area and escalation safeguards; the sunset is not a repeal of every patient-access protection.

California enacted SB 626 on September 30 as Chapter 973. Practitioners providing prenatal, postpartum, or perinatal care must ensure screening is offered or appropriately performed; a positive screen requires an offered or completed clinical evaluation, and a practitioner who diagnoses the condition must offer or provide treatment within scope. Referral to a practitioner authorized to screen, evaluate, diagnose, and treat can satisfy these duties. Emergency services and care are excepted. The defined condition concerns pregnancy or postpartum, follows the referenced clinical guidelines, and applies regardless of pregnancy outcome, including gender-diverse birthing people.

Plans and insurers must include one or more screenings during pregnancy and postpartum, use scope-appropriate clinical guidelines, coordinate positive-screen follow-up through existing programs, and retain compliance documentation. Delegated coordination must meet the specified existing-contract or statutory arrangements; the coordination paragraph expressly creates no new benefit. Specialized arrangements are generally excluded, with the identified professional behavioral-health exceptions, and Medicare supplement policies are excluded. Medi-Cal plan application depends on necessary federal approvals and available federal participation, while DHCS quality measures remain controlling. Encouraged drug, doula, and training measures should not be restated as new mandatory benefits.

California enacted SB 1088 on September 27 as Chapter 677. The amended POLST framework requires patient preferences and medical indications, with signatures from the patient or authorized representative and a qualifying clinician. Specified independently practicing nurse practitioners may sign under their cited authority; physician assistants and other referenced nurse practitioners sign under physician supervision and lawful scope. Representative execution is limited by capacity or the specified effective-authority designation. A POLST is distinct from an advance health care directive, and neither care nor admission may depend on completing or refusing a POLST or prehospital DNR order.

Electronic signatures suffice for required signatures. Qualifying requests executed under another jurisdiction's law or California law are enforceable to the same extent as valid California requests, and providers without contrary knowledge may presume validity and nonrevocation. The framework retains the medically ineffective or contrary-to-accepted-standards exception, capacity-based revocation and alternative-treatment rights, and the rule favoring the most recent conflicting order or instruction. Forms printed after January 1, 2027 must contain the specified representative acknowledgment about known desires and best interests. This express printing milestone is separate from ordinary statutory effectiveness.

California enacted AB 2292 on September 28 as Chapter 734. New Unemployment Insurance Code section 2708(h) prohibits a physician or practitioner from charging a person an administrative fee to complete a required certificate form. The prohibition also covers administrative fees for subsequent recertification examinations and forms required to maintain continued disability-benefit eligibility. Actual medical services connected to an examination may still be billed, with applicable copayments, coinsurance, and deductibles, if the charges are consistent with comparable medical services and are not imposed solely for form completion.

The underlying section uses treating-practitioner certificates to establish medical eligibility for initial and continuing periods, and separately specifies evidence for leave to care for a family member with a serious health condition. For a claimant's own condition, the required certificate addresses diagnosis or symptoms, medical facts, disability, and expected duration; the family-care certificate addresses the condition and needed participation in care. Those retained requirements explain why the administrative-fee restriction matters to access to benefit documentation. The amendment neither removes medical certification nor makes every clinical examination connected to a claim free of charge.

California enacted AB 1331 as Chapter 851. It generally prohibits using workplace surveillance tools to monitor employees in workplace bathrooms absent a court order and permits employees to leave possessed tools outside. The leave-behind right has a legal-availability exception; one-time entry-and-exit checks and voluntary carriage are addressed separately. Required identification, safety, or secured-access devices qualify for the stated exception only if they record no audio or video and have no physically embedded or attached AI. The act preserves monitoring required by the identified laws and regulations, and its defined tool category excludes smoke/carbon-monoxide detectors and automatic body-screening weapon detectors.

AB 1883, Chapter 853, separately prohibits AI workplace tools used on employees to recognize, infer, or predict emotional state or collect defined neural data. It expressly permits safety uses and tools outside that description. Both acts authorize Labor Commissioner and public-prosecutor enforcement and up to $500 per violation, with additional remedies; AB 1883 bars recovering both its employee statutory penalty and civil penalty for the same violation. Their aerospace and national-security-related exemptions are limited to covered operations where tool use is reasonably necessary for a federal statute, regulation, or binding federal contract. These are conditional protections covering public and private employment, rather than a prohibition on every employee-monitoring system.

California enacted SB 947, Chapter 859, on September 30, 2026, with its workplace protections becoming operative July 1, 2027. The law covers automated decision systems that assist or replace human decisions and materially affect people, including systems using statistical models or data analytics, not just artificial intelligence. Ordinary databases, spam filters and several other listed tools are excluded. Employers cannot rely solely on an automated system to discipline or terminate an employee. When they primarily rely on its output, a human must corroborate the decision using the underlying data or other relevant information. Output that cannot be corroborated, or that the human reviewer finds inaccurate, incomplete or misleading, cannot be used for that decision.

Primary reliance also gives the employee a right to request a meaningful objective description of their own data used by the system, with other people’s information anonymized. The employer must give the affected employee a separate, plain-language written notice when informing them of the disciplinary or termination decision; using an automated tool in any way does not by itself trigger that notice. A collective-bargaining exception requires a clear express waiver, specified employment terms and protection from algorithmic management. Applicable California privacy-agency rules remain relevant for employers covered by the CCPA. A separate exception covers aircraft development for use in the national airspace or development of products or services for national security, military, space or defense purposes, only where the system’s use is required or reasonably necessary under a federal statute, regulation or binding contract.

California enacted AB 1609 on September 28 as Chapter 733. It covers private businesses with more than $500 million in national gross annual revenue serving California customers under its account-address definition. A covered chatbot must not be represented as human and needs a clear disclosure in the interaction medium when a reasonable person is likely to be misled. During defined regular business hours, available service platforms must offer a simple way to request a human agent. Good-faith efforts must provide connection within 15 minutes or a specific appointment within one business day, with a separate qualifying pharmacy callback route.

The act also sets good-faith initial and cumulative hold limits and specified telephone-number posting, while excepting email, contact-form, and voicemail requests from the 15-minute response rule and preserving existing channel choices. Hospital communications directly related to health care delivery, administration, coordination, or payment are expressly exempt, as are exclusive business lines, identified compliant utility services, and consumer reporting agencies. The service definition excludes the specified free-option offerings, and uncontrollable unforeseen or extraordinary emergencies excuse inability to comply. Public prosecutors enforce the chapter, with maximum $5,000 initial and $10,000 subsequent civil penalties; it creates no private action.

California enacted AB 2561 on September 27 as Chapter 478. New Business and Professions Code section 22711 prohibits an operating system or application from undoing a user's affirmative privacy-setting configuration without consent, except as required by state or federal law, court order, or an individual-case subpoena. Covered settings are user-configurable choices in a privacy or similarly labeled menu governing personal-information collection, use, sharing, disclosure, retention, or processing. The application definition concerns programs that handle California users' personal information and offer the defined controls.

The section permits a business to discontinue services or applications, stop handling personal information, or cease offering privacy options when the change complies with the rule or preserves existing protections for previously collected information or increases privacy by reducing the specified handling. That exception makes the effect of a product change on information protections important, alongside whether the user consented. The short act adds this protection for affirmative choices; it does not itself require a particular new setting, a recurring filing, or permanent support for every discontinued application.

California enacted AB 2009 on September 27 as Chapter 570. A plasma collection center avoids automatic revocation for a change in its biologics-production lead only if the owner or representative provides the specified signed written notice within five days and submits the replacement application within 30 days. A qualified interim lead may serve no more than 30 calendar days with notice, and the licensee may not operate without medical-director supervision. Failure to submit the replacement application requires revocation, subject to a department-granted additional 30-day good-cause extension. The exception does not generally excuse address or ownership changes.

Paid-donor identification can include qualifying photographs issued by another state, a federal agency, or tribal government as well as DMV identification. Medical directors may authorize and supervise specified screenings and health services by department-approved licensed professionals within their scope, without expanding that scope. The refractometer provisions retain training, physically onsite supervision, quality control, and competency evaluation, while requiring medical-director proficiency and limiting unrelated experience demands for plasma-only services. The law also distinguishes licensed source-plasma donation centers from blood-bank depositories and specifies physician licensure and experience for the identified leadership roles.

California enacted AB 2321 on September 30 as Chapter 936. Willfully resisting or interfering with the specified Cal/OSHA inspection duties or related court orders becomes a misdemeanor, while the section retains reasonable inspection limits, credentials, warrant procedures, and evidence-preservation authority. The Bureau of Investigations must investigate serious-injury, illness, or exposure accidents with willful citations as well as its other defined categories. Serious-violation reports involving one to four affected employees require review and investigation when criminal violations may have occurred. Required cases proceed to prosecutors unless legally sufficient criminal evidence is lacking.

The act expands immediate agency notifications for serious exposures and directs routine transmission, written case-review procedures, documented nonreferral reasons, and legislative reporting. Specified confidential material may be shared with law enforcement or prosecutors for an investigation or prosecution, with trade-secret protections retained. Section 6425 extends the existing public offense to willful safety violations causing serious injury, illness, or exposure, alongside death and permanent or prolonged impairment. Those causation and willfulness elements distinguish criminal exposure from every workplace injury. The notification duties identify responding agencies and Cal/OSHA responsibilities; they should not be recast as a newly uniform provider filing clock.

California enacted AB 2405 on September 30 as Chapter 939. A peace officer transporting a person for Section 5150 assessment must use the closest appropriate designated facility, geographically or by time, measured from where custody began; if an emergency department is most appropriate, the corresponding closest-appropriate rule applies. Officers may consider an affirmatively expressed facility preference, but it must not unreasonably delay care or excessively deviate from the closest appropriate destination. Written local diversion, transport, and destination agreements remain permissible. The section excludes CDCR and California Correctional Health Care Services.

AB 2318, enacted September 29 as Chapter 747, makes it unlawful for officers to deny, delay, obstruct, or fail to facilitate medical evaluation or treatment when access is safe and reasonable and a medical professional has been requested or is present and willing to care. CDCR custody or detention is excluded, and the definition reaches federal officers only to the extent federal law permits. When a willing clinician is present but access is denied or delayed, the 72-hour documentation and oversight-reporting requirements apply subject to the ongoing-investigation and officer-safety qualification. Those are law-enforcement duties, with possible administrative discipline, rather than a new hospital 72-hour submission requirement.

California enacted AB 883 on September 27 as Chapter 507. The amended deletion-mechanism section requires covered brokers to access the system at least every 30 days, process requests and delete qualifying information within 30 days, and direct corresponding service-provider and contractor action. Unverifiable deletion requests become sale/sharing opt-outs under the stated limits, and recurring deletion follows the 30-day cadence. Although the amended section retains its original August 1, 2026 start language, the new amendment's ordinary effectiveness is January 1, 2027; that retained historical reference should not be treated as proof that the shortened interval governed before enactment.

Existing statutory exceptions permit specified necessary or exempt retention, restrict use of retained information, and qualify recurring deletion and later sale/sharing. Independent third-party audits begin January 1, 2028 and recur every three years, with retained materials and response to agency requests. A separate section operative July 1, 2027 requires identified public bodies to notify elected officials and judges about deletion requests and permits Attorney General, county-counsel, or city-attorney actions on their behalf, including possible punitive relief for willful violations. Those provisions do not eliminate the deletion exceptions or make every health care organization a covered broker.

The October 8 CMS/CDC proposed rule CMS-3478-P would treat qualified personnel's secure remote review of laboratory data, results, live imaging, and digital images as activity under the primary testing laboratory's CLIA certificate. The virtual-access definition excludes cytology, and the proposed compliance-certificate provision excludes provider-performed microscopy certificates. The primary director would remain responsible for testing, including virtual work, and the laboratory would supply CMS with its virtual-access staff list on request. The proposal describes codifying and updating prior enforcement-discretion arrangements; it does not by itself change an existing certificate or authorize a new practice.

A separate proposal would allow digital images of slides in gynecologic cytology proficiency testing so testing can align with the laboratory's primary methodology. Approved programs would need systems to monitor testing integrity. Other proposed changes address personnel qualifications, digital record preservation, reporting, certificate administration, and enforcement; the document presents these as proposals rather than completed regulatory changes. The Federal Register notice requests comments by December 7, 2026 using CMS-3478-P. That comment date is a participation deadline, not a laboratory compliance date or a general permission for remote cytology screening.

FTC warns 24 large health-services companies about potentially unfair or deceptive pricing for planned nonemergency care. Its release describes patients committing to treatment without enough information to compare costs. The letters address existing duties; they do not adjudicate violations by every recipient.

CMS transparency compliance is no safe harbor from FTC Act section 5. The release identifies omitted physician/facility fees, incomplete treatment-course prices, and inaccurate amounts as concerns. Its unfairness analysis retains substantial-injury, reasonable-avoidability, and countervailing-benefit conditions, including whether price information was reasonably available before care.

FDA published three codification orders October 6 for hereditary-cancer sequencing, adjunct hyperoxia monitoring, and nonthermal mechanical ultrasound ablation, and three October 9 for home-collected nonviral STI specimens, over-the-counter infant pulse/oxygen monitoring, and hematopoietic cell enrichment. The orders take effect on their October publication dates, while each classification was applicable on its stated 2023 De Novo date. They establish Class II categories and special controls; they do not newly classify every related technology on the same October date or authorize every possible clinical indication.

The controls preserve different clinical boundaries. Hereditary-cancer sequencing is prescription testing that aids predisposition assessment, not screening, prenatal testing, or standalone diagnosis. Hyperoxia monitoring is adjunctive and warns against relying on output without arterial-blood-gas confirmation. Mechanical ultrasound ablation requires injury, monitoring, and failure safeguards and labeling that no specific disease treatment was evaluated. Home STI specimens are collected by lay users but tested in clinical laboratories with validated collection, transport, and instructions. Infant monitors require performance across confounders, validation of any alarms, and caregiver comprehension. Cell-enrichment kits support later diagnostic assays, require end-user validation, and do not themselves diagnose or enumerate cells. Those category-specific uses and evidence controls remain central to implementation.

FDA withdrew Amneal celecoxib ANDA 208833 on October 9 after the applicant's request and waived hearing; the notice describes unresolved bioequivalence-data concerns and reports that the products had never been commercially manufactured. A separate 37-ANDA notice withdraws approval November 9, including each application's strengths or forms omitted from its table. Its inventory provision permits dispensing stock on that date only until depletion, expiration, or other violation, whichever comes first. Those application-specific actions do not withdraw every manufacturer's version of the named ingredient.

Other notices correct prior withdrawal lists: Navinta ANDAs 207366, 212957, and 218638 and dimethyl-fumarate ANDA 210285 remain approved after timely requests to preserve them. The Oxandrin correction instead confirms that the identified oxandrolone ANDAs were also withdrawn for safety or effectiveness and are removed from the Orange Book. Separately, pralidoxime autoinjector 600 mg/2 mL and LASIX oral solution 10 mg/mL were determined not withdrawn for safety or effectiveness, preserving qualifying generic-reference pathways subject to other requirements. These distinctions separate approval withdrawal, corrected retained approval, and commercial discontinuation rather than infer a recall or universal therapeutic-equivalence result.

OHCA's October 9 notice opens comments on adding healthcare-associated infection measures to its quality and equity set. The Advisory Committee is scheduled to discuss the proposal October 14 at 10 a.m., with both in-person and virtual participation. Written comments must reach the Office by 5 p.m. November 8. The notice describes publication and consultation on a proposed update, rather than final adoption of the additional measures.

The accompanying memo proposes Clostridioides difficile infection, catheter-associated urinary tract infection, central line-associated bloodstream infection, and methicillin-resistant Staphylococcus aureus measures. It links the proposal to patient-safety monitoring while hospitals work toward spending targets and to alignment with other state initiatives. OHCA says it will use publicly reported CDPH or CDC results to build on existing reporting. The proposal therefore concerns adding performance measures; the memo does not establish a separate new provider data-submission process for these four measures.

HCAI's official index identifies the October 8 progressive-enforcement regulations, PIP submission guide, and spending-performance manual as drafts for informal comments through October 30. The proposed regulations cover payers, integrated systems, physician organizations, and hospitals. They describe preliminary excess-growth determinations, a 45-calendar-day response from notice, technical assistance, testimony, improvement plans, and penalties. The proposed PIP submission period likewise runs 45 calendar days from the Office's notice requiring a plan, rather than from publication of these drafts.

The draft guide says proposed and approved PIPs would be posted publicly, with a process to request confidential treatment of supporting information. Plans would address reasons for spending growth, goals, activities, milestones, consumer affordability, evaluation, and balancing measures. The measurement manual separately describes payer medical/nonmedical spending and hospital inpatient/outpatient unit-spending calculations adjusted for case mix or visit intensity. These linked documents explain proposed evaluation and enforcement mechanics; they do not make the consultation deadline an operational PIP due date or establish that every draft provision has been approved.

OIG's report issued September 2 and posted September 4 examines CMS oversight of state agencies using contract surveyors for nursing-home surveys. It found that CMS had issued guidance on contracting practices but did not monitor whether states implemented controls achieving the guidance's objectives. All 14 surveyed states that used contractors could improve policies and procedures for meeting the federal requirements. OIG describes the resulting risk as insufficient assurance that contractor surveyors meet those requirements, not a determination that every contractor-conducted survey is invalid.

The recommendations ask CMS to add employee-versus-contractor status to iQIES records for survey personnel and confirm that state agencies have policies and procedures ensuring contractor compliance, for example through annual state-agency assessments. CMS concurred with both. The retained recommendation entries show open, unimplemented status and an expected March 1, 2027 update. Those entries address agency oversight and follow-up; they do not impose a March provider submission, announce completed CMS implementation, or automatically set aside existing survey findings.

The September 2 Federal Register notice establishes a single agency-wide comparison of HHS grant-payment records in the Payment Management System with Treasury's Do Not Pay Working System. The stated purpose is to prevent or identify improper payments and support related recovery activity. The notice sets effectiveness 30 days after publication through September 10, 2029, and invited comments through October 2. That comment opportunity has elapsed for the October 11 edition; the program concerns grant payments disbursed through PMS, rather than a general edit of Medicare claims.

When a potentially matching record is found, Do Not Pay identifies the relevant database to the submitting HHS system, and the grantor agency reviews the information to decide whether further action is needed. A no-match response is also available. The notice lists identifiers that may be used where applicable, including names, taxpayer and entity identifiers, NPIs, contact details, and banking or payment-tracking information, and identifies the underlying systems of records. The described match is therefore an input to eligibility or recovery review, not itself a final finding that a recipient is ineligible or owes a specified amount.

In a September 1 memorandum opinion, OLC concludes that "State" in PRWORA section 404 includes all component agencies of a state participating in the identified TANF or SSI arrangements, rather than only the agency administering the benefit program. It withdraws the 1998 opinion that adopted the narrower reading. DOJ's September 2 announcement describes the opinion as prospective: states will not face retroactive penalties for past reliance on that earlier interpretation, and federal agencies may use the advice in future grant agreements and compliance processes.

The opinion also discusses what it means for a state to know an individual is not lawfully present, rejecting a formal removal order as the only possible basis and identifying examples of actual knowledge. Its reporting interpretation is tied to state participation, component-agency status, and the statutory knowledge standard. It does not itself establish that every private health care provider is a state component or resolve every interaction with medical-privacy obligations. Those limits distinguish the opinion's legal conclusion from an entity-specific determination that a particular patient record must be disclosed.

CalPrivacy Enforcement Advisory 2026-01 describes observed failures to provide true and correct annual data-broker registration information. The advisory explains that businesses operating as data brokers in the prior year must register by January 31, pay the fee, and make the specified disclosures. It highlights categories such as reproductive-health, location, citizenship, and biometric information, and recipient categories including governments, law enforcement, foreign actors, and generative-AI developers. Its point is accuracy about actual prior-year activity, not a finding that every health-related business qualifies as a broker.

The agency describes a $200 administrative fine for each day of failure to register as required and explains that incorrect information can trigger that exposure; the Delete Act does not distinguish an inadvertent mistake from an intentional misrepresentation for the accuracy requirement. The advisory uses hypothetical scenarios to illustrate inventory, recipient, and rights-request-metric questions. It expressly reserves case-by-case enforcement and states that advisories do not establish substantive policy or rights, provide legal advice, or offer alternative relief or a safe harbor. The statutes and regulations control if interpretations conflict.

The September 1 USPS final rule became effective October 4, 2026, requiring Free Matter parcels for blind and other eligible physically handicapped persons to bear both an Intelligent Mail package barcode and an Intelligent Mail matrix barcode. The amended preparation standard expressly covers outbound parcels and returns, with preparation under the cited Domestic Mail Manual provisions. USPS explains that tracking and better processing visibility support delivery and that the required hazardous-material service-type coding improves transportation safety.

The rule distinguishes three fee issues. Free Matter pieces remain exempt from the Hazmat Handling Fee, but commercial mailers remain subject to the Hazmat Noncompliance Fee for undeclared or improperly labeled hazardous material. Commercial parcels failing the unique-barcode requirements can also incur the Package Quality Noncompliance Fee. These rules apply within the existing Free Matter eligibility framework, rather than granting every shipment postage-free status. For the October 11 edition, the barcode date has passed and the amendment is an implementation carryover rather than a future October 4 task.

The September 18 chaptered AB 175 makes its replacement community resource development framework in Welfare and Institutions Code section 4418.25 operative October 1. DDS must establish annual plan policies and procedures in coordination with regional centers, covering both transitions from restrictive settings and the needs of individuals already living in the community. Plans provide dedicated funding for comprehensive assessments and identified transition costs. Regional centers must tell DDS about specialty resources developed with plan funds and make those resources available to other regional centers.

The assessment must include the individual and regional center, with family or authorized representatives where appropriate, and identify community services, supports, and residential options. Regional centers must give relevant clients' rights advocates at least 30 days' notice of an individual program plan meeting that will discuss the assessment or an update; an advocate may participate unless the individual objects. DDS must update the Legislature by April 1 annually and publish the update after applying privacy-protecting deidentification guidelines. That is a department reporting obligation. The new section expressly preserves plan-related agreements, promissory notes, deeds of trust, approvals, and related documents in effect or pending as of October 1.

California chaptered AB 1575 on September 27 as Chapter 525. The Legislative Counsel's digest describes a terminology revision across the Lanterman Developmental Disabilities Services Act: "consumer" becomes "person eligible for regional center services," other terminology is updated, and gender language is removed. The amended sections span regional-center administration, assessments, individual program planning, services and supports, and related rights and oversight. The law also revises the identified early-intervention provisions of the Government Code.

The revised definition in Welfare and Institutions Code section 4512 continues to connect a person eligible for regional center services to the statutory definition of developmental disability. The same section retains the individual program plan process for determining necessary services and supports, based on the individual's needs and preferences and, when appropriate, those of the family. It expressly says the services-and-supports definition does not authorize a new or different service unless that service is in the person's individual program plan. The updated label consequently should not be read as a separate expansion of eligibility or a new service entitlement.

AB 1703 was chaptered September 27 as Chapter 543, with its new practice and title restrictions operative January 1, 2028. The replacement Business and Professions Code section 2053.5 adds osteopathic manipulative treatment to the services that cannot use the disclosure-based exception to specified unauthorized-practice prohibitions. It defines that treatment as the therapeutic application of manually guided forces to alleviate somatic dysfunction. The text expressly preserves the practice of California-licensed health professions and massage services authorized by California law; the existing version of the exception remains until the 2028 transition.

New section 2453.3 separately prohibits a person who is not licensed by the Osteopathic Medical Board of California from using "doctor of osteopathy" or "D.O." It also prohibits using "osteopath" in a way that implies the person holds the specified osteopathic or physician license when offering or providing services to treat a medical or physical condition. A violation is a misdemeanor. The title rule and the treatment restriction therefore address different conduct, and both carry the express January 1, 2028 operative date.

California enacted SB 1410 on September 18 as Chapter 327. It changes the written email-address change-notification period from ten to 12 business days for the covered adult community-care and residential-care applicants and licensees, including residential care facilities for the elderly. The amended provisions continue to require an email address of record with the Department of Social Services and written notice of a change. This is a change-triggered deadline, measured in business days, within the existing licensing framework. The act does not add a recurring email filing or prescribe a new submission technology. Each of its four amended provisions applies to the specified facility licensing category.

FDA's September 29 notice withdraws approval of NDA 010401 for MYSOLINE primidone suspension, 250 mg per 5 mL, held by FHTA LLC. Approval and all amendments and supplements are withdrawn as of that date after the holder agreed and waived its opportunity for a hearing. The action follows FDA's earlier determination that this suspension had been withdrawn from sale for safety or effectiveness reasons; it is not a newly announced class-wide withdrawal of primidone.

The notice traces the suspension's discontinuation to 2001, when antimicrobial-effectiveness testing raised microbial-contamination concerns, particularly Pseudomonas aeruginosa. FDA had explained that reintroduction would require reformulation, appropriate preservative acceptance criteria, passing testing, and evidence of safety and effectiveness, and that no new formulation had then been approved. In June 2026, the holder chose withdrawal rather than a hearing. The resulting notice makes interstate distribution of the specified suspension without an approved application unlawful; the product name, concentration, and NDA identify the action's scope.

FDA's final order effective September 30 codifies the vascular-autograft flushing and storage-solution classification in 21 CFR 876.4100. The classification was applicable October 4, 2023, when FDA issued the underlying De Novo order following review of the DuraGraft request. The generic device is used during a surgical procedure to maintain vascular-graft cell viability and structural integrity during short-term storage at room temperature. Class II treatment combines general and special controls; the order expressly states that FDA has not exempted this device type from 510(k) premarket notification.

The special controls require clinical adverse-event data and specified additional outcomes for coronary-bypass uses, nonclinical testing of graft viability and integrity at labeled storage conditions, and evaluation of visible and nonvisible particulates. They also address chemical-component stability over shelf life, biocompatibility, and sterility. Labeling must state maximum storage time, point-of-care additives, visual particulate inspection, final-solution stability, and supporting clinical and nonclinical results. These requirements define the regulated category and its evidence, rather than authorizing every surgical storage solution or dispensing with product-specific regulatory review.

California enacted SB 993 on September 27 as Chapter 668. The four amended Board of Behavioral Sciences notice sections generally require the practitioner's full filed name, license or registration number, type, and expiration date when services begin. A safety-based exception permits discretion over those identifying fields in acute psychiatric hospitals, correctional treatment centers, and settings providing mental-health services to incarcerated people under local, state, or federal correctional authority. It covers the specified marriage and family therapy, educational psychology, clinical social work, and professional clinical counseling categories, rather than every clinical profession or outpatient setting.

The employing entity or agency must authorize that discretion. The setting must maintain an established process through which the client can request and obtain enough identification to file a board complaint, disclose that process in the notice, and preserve the notice in the client record. The underlying board-complaint notice remains required in at least 12-point type before services or as soon as practicably possible afterward, and delivery must be documented. Withholding information from the initial notice therefore does not permit blocking complaint access or dispensing with the notice and records requirements.

California enacted SB 526 on September 27 as Chapter 491. A corporation may use the affiliate pathway on behalf of at least one qualifying primary-care clinic with five immediately preceding years of valid, unrevoked, unsuspended licensure, no specified repeated or uncorrected immediate-jeopardy history, and no pending suspension or revocation. The application needs a board officer's, chief executive's, or executive director's signature. Parent and affiliate must share the specified nonprofit ownership, board, officers, medical direction, and clinical standards, and the parent cannot itself be an affiliate. The completed package and fee remain necessary.

A qualifying clinic may also apply to relocate through this route; CDPH may approve and issue an updated license without first surveying onsite. Before a parent closes, the corporation must request a qualifying replacement parent, with unchanged corporate-file material protected from unnecessary resubmission. The section retains 30 days from a completed affiliate application and seven days after approval for license issuance, and requires particularized written grounds if conditions are unmet and ordinary processing applies. Changes must use department forms, and CDPH remains free to conduct licensing inspections. These distinctions preserve conditional approval and inspection authority rather than promising automatic licensure for every move.

California enacted AB 1864 on September 30 as Chapter 852. Covered manufacturers may not produce benchtop nucleic-acid synthesis equipment in California or sell or deliver it to a California customer without adhering to the referenced framework and publicly posting the required attestation. Providers face parallel conditions for synthetic nucleic acids subject to screening. The incorporated framework is solely the September 2024 version; federal revisions and successors do not automatically change it without legislative amendment. Framework provisions using should become requirements, while encouraged provisions remain recommendations.

Provisions that the framework states take effect only on or after October 13, 2026 have no effect under this chapter before October 13, 2027. That express deferral is separate from ordinary effectiveness of the California statute. The chapter does not regulate a customer's activities when the customer is neither a covered provider nor manufacturer, including the enumerated research, therapeutic, and manufacturing uses; dual-role entities remain covered for their provider or manufacturer activities. Severity-dependent civil penalties can reach $5,000 per continuing day and are recoverable only in an Attorney General civil action. The act does not itself establish a particular supplier's compliance.

California enacted SB 354 on September 27 as Chapter 481, with the new insurance privacy article operative July 1, 2028. It addresses covered licensees, surplus-line insurers, reinsurers, and their relevant service providers in personal, family, or household insurance. The framework includes stand-alone privacy notices with specified exceptions, recorded consent and revocation, access and correction/deletion procedures, and accessible rights-request channels. Consent rules distinguish activities requiring opt-in or allowing opt-out from processing reasonably necessary for an insurance transaction or legally required; the act does not make every insurance use contingent on an optional consent.

Section 791.01 generally excludes CMIA-governed health care providers and HIPAA-governed covered entities and business associates, but restores coverage for a disability insurer licensed to transact health insurance outside Knox-Keene regulation. Other exclusions and conditional producer provisions limit particular duties. Section 791.24 requires vendor diligence and written processing, security, reporting, assistance, and subcontracting terms, with its stated temporary-service and producer qualifications; that section applies to contracts executed, amended, or renewed after July 1, 2028. The Commissioner must develop model compliance regulations. These future requirements do not establish that a particular entity is covered or that those regulations already exist.

California enacted SB 849 on September 27 as Chapter 654. Amended Business and Professions Code section 2307(i)(1)(A) prohibits reinstating a certificate surrendered while a board accusation alleging the specified patient sexual abuse, misconduct, relations, or exploitation was pending. The surrendered-license clause turns on the pending accusation at surrender; it does not require a later adjudicated misconduct finding or criminal conviction. A general statement that all surrendered certificates become eligible after an ordinary waiting period would miss that prohibition.

Section 2307 otherwise retains petition procedures and minimum periods for specified surrender, revocation, illness, and probation situations, together with restrictions during criminal sentences and pending disciplinary process. The nonreinstatement subsection separately covers board-found misconduct revocations, specified patient-related convictions, and qualifying sex-offender registration, and retains its narrow exception for registration solely from the identified misdemeanor indecent-exposure conviction. Those distinct grounds and exceptions require accurate primary-source disciplinary characterization; neither the act nor this historical source establishes the status or guilt of an individual applicant.

California enacted SB 329 on September 27 as Chapter 646. For a complaint within its jurisdiction about a covered licensed alcohol/drug recovery or treatment facility or certified program, DHCS must assign an analyst within ten days after receipt. It must complete the investigation within 120 days after assignment unless, as the department determines, other state-agency assistance or additional resources are needed. For complaints outside its jurisdiction, DHCS must provide written notice, including electronically, to the extent feasible. These statutory periods govern department processing rather than prescribing a new ten-day response deadline for every provider.

DHCS must retain investigation records, including cases unfinished after 120 days. Starting July 1, 2027 and each July 1 thereafter, its website must report the preceding year's investigation totals and types and how many exceeded the completion period. The act authorizes a single licensing or certification fee increase commensurate with reasonable reporting costs; it does not set a new dollar amount or establish that DHCS has imposed it. This reporting milestone and the resource-based completion exception should remain separate from actual case-specific records requests or enforcement outcomes.

California enacted SB 989 as Chapter 667. In addition to filing directly, a qualifying first responder who believes an individual meets or likely meets CARE criteria may ask the county behavioral health agency where the individual resides or is found to file. The request includes identifying and contact information if available and other required information. The agency must complete review and decide whether to petition within 30 business days, then notify the referring responder of the outcome and whether criteria were met. DHCS must develop a referral form and procedural guidance and include request data in annual reporting; a referral does not itself establish eligibility.

SB 1242, Chapter 687, addresses information from original petitioners in the specified resident/family categories after the county becomes successor petitioner. Subject to applicable confidentiality laws, those petitioners may supply relevant condition, treatment, housing, safety, service-engagement, and plan information; the CARE team must receive, review, and document relevant submissions without requiring respondent consent to receive them. Courts may consider the information for the stated care-process purposes. Submission does not create party status or rights to direct treatment, obtain discovery, receive protected information, inspect confidential records, or attend confidential proceedings. Existing consent and expressly authorized participation boundaries remain.

California enacted SB 1047 on September 30 as Chapter 1000. Amended Health and Safety Code section 103871 expressly includes frontotemporal degeneration alongside ALS in the incidence-and-prevalence collection system, and adds other dementias to the nonexclusive disease examples. The department must designate reportable diseases and provide the specified website, association, and Medical Board notice at least 90 days before requiring information. The chapter now sunsets January 1, 2032 rather than its prior 2028 endpoint. Those enactment and sunset facts do not establish a newly activated reporting date for every listed condition.

The retained framework requires diagnosing or treating providers and facilities to report each covered case in the department-prescribed format. It permits departmental access and cost recovery if a facility does not report properly, and provides civil penalties for willfully refusing relevant record access. Information collected is confidential except as the chapter otherwise permits. Implementation is expressly limited to available funds. Actual disease designations, notice dates, formats, and funding implementation therefore remain necessary to determine a particular provider's reporting responsibilities; the law alone does not prove that every potential dementia category is newly reportable immediately.

California enacted SB 1209 on September 30 as Chapter 1017. Insurance Code section 734.1(c) requires an examined company to correct identified violations of applicable statutes, regulations, referenced statutory accounting principles, and other legally binding rules. Failure to adopt necessary correction within the timeframe agreed with the Commissioner or designee can incur up to $20,000 per failure, determined by the specific corrective-action category. The existing report transmission, rebuttal, and adoption periods remain part of examination review; they do not establish a single 30-day correction deadline for every finding.

Companies may request additional 30-calendar-day or greater approved good-cause extensions, but requests can be denied for bad faith or lack of a good-faith compliance effort. Enforcement uses an order to show cause stating charges and potential liability, a hearing at least 30 days after service, and an order if the charges are justified, with administrative and judicial review protections retained. For the specified agents and brokers, proportionality and operational scale and complexity enter penalty assessment. These provisions create a structured remediation and adjudication pathway rather than making each report recommendation an immediately assessed fine.

California enacted the insurance omnibus SB 1206 on September 27 as Chapter 685. Insurance Code section 805 makes a license inactive when Secretary of State status is suspended, dissolved, forfeited, terminated, canceled, or surrendered, barring activities requiring the Commissioner's license until active status is restored. Accident and health or sickness agency organizations also enter the specified natural-person endorsement rules: changes require immediate electronic application or notice, and removal of the last named natural person makes the organization's license inoperative, with deficiencies requiring correction for reactivation and renewal.

The estate certificate-of-convenience categories now include qualifying accident and health or sickness agent estates, with separate executor/administrator, surviving spouse or heir, and conservator conditions. The amended framework also requires written reporting of specified background changes within 30 days after learning of them and complete responses to covered Commissioner inquiries within 21 days after communication. Responses must address every issue and include requested records, with licensing consequences for failure. These agency and responsible-person provisions are the health-insurance-relevant portion of a wider investment, licensing, and other-insurance-lines omnibus, rather than new clinical licensing rules.

California enacted SB 690 on September 30 as Chapter 976. New Penal Code section 637.2(d) permits only the Attorney General to bring an action under that section against a private actor for a section 638.51 violation alleged to arise from conduct on an internet website, online application, or mobile application. The amendment expressly applies to pending claims in actions commenced within two years before its operative date. The trigger therefore depends on the defendant, underlying section, online conduct, and claim timing rather than simply whether a case involves website technology.

The surrounding section retains its general damages and injunctive-action framework subject to the new exception, including the rule that actual damages need not be shown, and preserves the referenced Civil Code title. The short act amends section 637.2 rather than repealing the underlying pen-register/trap-and-trace provision or granting general authority to collect health information. Its reach into particular pending litigation or other statutory causes requires separate analysis. The source supports a defined enforcement-pathway change, without establishing that patient tracking, disclosures, or consent practices automatically comply with other law.

California enacted AB 2030 on September 28 as Chapter 720. The act prohibits selling, offering, or promotional giveaways of covered nonprescription diet pills and dietary supplements to people in California under 18, with a prescription exception. Coverage turns on labeling, marketing, or other representation for weight loss or muscle building, with specified ingredients, claims, seller displays, and categorization among factors courts may consider. Pharmacies and online vendors are included in the retail definition; the act does not classify every supplement or every clinical prescription as prohibited.

Retail identification checking and optional access controls accompany the restriction. Delivery sellers must use the specified independent database-based identity and age verification, adult-signature delivery with government photo identification, or both; the statute limits seller possession, control, or alteration of the verification database. Attorney General, county-counsel, or city-attorney enforcement can seek injunctions and up to $500 per violation, with prevailing-plaintiff fees and cumulative remedies. The section excludes people 18 or older and qualifying minors with a prescription. These scope and verification distinctions matter before treating an ordinary age confirmation or unrelated nutrition product as meeting the statutory rule.

FDA's final order effective October 6 removes the federal-drug-testing exception from the existing partial premarket-notification exemptions for 14 specified Class II toxicology test-system categories. The change follows the May proposal and public comments and extends the exemption to qualifying federal testing programs. It concerns whether a 510(k) submission is needed for the defined device and intended use, rather than reclassifying these systems out of Class II or declaring every drug-testing product exempt.

The amended classifications retain employment- or insurance-testing-only use and the corresponding labeling statement, together with the general limitations in 21 CFR 862.9. A device exceeding those limits still needs premarket notification. FDA explains that other applicable requirements, including federal testing-program standards where applicable, remain distinct from the 510(k) exemption. Thus the exemption should be assessed against the particular classification, intended use, technology, and labeling, without assuming permission for broader clinical testing or treating exemption as product-specific FDA clearance.

DEA's final determination published October 9 revokes exempt-prescription status for listed butalbital products whose NDCs are inactive because they are unavailable or the original applicant no longer exists. The determination takes effect November 9, 2026 and removes the identified entries from the exemption table. DEA expressly says the action does not affect exempt products with active NDCs. Product identity and table status therefore matter before translating this action into dispensing or inventory changes.

The source identifies butalbital as a Schedule III barbiturate and explains the historical exemption for certain combinations intended to reduce abuse potential. Of 189 listed products, DEA identified 160 inactive NDCs and confirmed with FDA that they were no longer marketed before proposing removal. It describes this action as having no practical effect on those unavailable products. That rationale should remain distinct from a conclusion that all currently marketed combinations lose their exemption, or that a new application or product inherits exemption solely because it contains the same ingredients.

DEA published an October 9 correcting amendment to the August 12 temporary scheduling order for O-desmethyltramadol, also called O-DSMT or desmetramadol. The correction adds the omitted isomers, esters, ethers, salts, and salts of those derivatives to 21 CFR 1308.11(h)(88), with controlled-substance code 9667. DEA explains that the prior order intended derivative coverage but omitted the correct codified wording. This is a correction to the entry rather than the initial placement of the named substance into Schedule I.

The DATES provision makes the amendment effective October 9, 2026 until August 12, 2028 and applicable beginning August 12, 2026. Those three dates describe different aspects of the temporary action and should remain distinct when comparing historical products or records. The retained rule establishes the corrected chemical scope and timing; it does not identify a particular supplier's product, establish an entity's authorization, or determine whether a specific transaction complies with controlled-substance requirements. Product analysis must use the actual named substance and derivative language rather than only a shorthand marketing name.

CMS Transmittal 249 revises State Operations Manual Exhibit 286, the Hospital, Critical Access Hospital, and Rural Emergency Hospital Database Worksheet, effective and implemented October 9. CMS identifies streamlined information collection and inclusion of REHs as the changes. The worksheet is completed by the State Agency surveyor as an internal tool and should not be given to a provider to complete independently. Surveyors may work jointly with facility staff but must verify the information with the hospital, CAH, or REH.

The worksheet records facility type, emergency services, accreditation, licensed beds and procedure rooms, training affiliations, co-location, off-site locations, and affiliated-provider identifiers. Asterisked fields are mandatory, and the survey kit cannot upload to the national database until required entries are complete. This upload condition concerns the survey process, rather than a new universal provider submission date. The transmittal also limits its revision date to new red italicized material; the presence of an older instruction in the reproduced exhibit does not establish that CMS newly adopted that instruction on October 9.

The October 6 notice requests information on behalf of the Federal Interagency Committee on Emergency Medical Services about implementing prehospital blood-transfusion programs nationwide. NHTSA invites public, private, governmental, academic, and professional perspectives on barriers and potential solutions across state, local, tribal, and territorial EMS systems. Comments are due November 5. The notice expressly states that the RFI is for information gathering and planning and is not a request for proposals or invitation for bids.

The questions connect transfusion capability with emergency dispatch, trauma care, blood banking, and reliable logistics. They seek views on automated crash notification, structured pre-arrival instructions, linkage of NEMSIS and trauma-registry data, military/civilian cooperation, cold-chain management, and EMS education. The stated 2028 national goals provide a planning framework for that feedback, including broader transfusion access and outcome measurement. They do not themselves award funding, establish a new clinical authorization, or order every EMS agency to implement a transfusion program by that year.

Attorney General Bonta says a multistate coalition submitted comments the previous day opposing proposed Head Start changes. The October 6 statement identifies screening timelines, early disability support, and service coordination. It describes objections to a proposal, rather than an operative amendment.

The statement also identifies proposed reductions in health and mental-health services, an English-only requirement, and a reduction of the administrative-cost cap from 15 percent to 5 percent. The attorneys general argue that removing standards would reduce services and increase burdens on programs. Those predicted effects remain attributed criticisms; the comment letter itself does not repeal current screening or referral requirements.

FDA's October 9 draft-guidance notice addresses retail food establishments and restaurants above the existing small-operation exemption. That exemption uses food sold or provided averaging no more than $250,000 annually over the prior three years, on a rolling basis and adjusted for inflation from 2020. The draft instead describes intended enforcement discretion for operations above $250,000 through $1 million on the same basis. FDA states that the guidance creates no rights and is nonbinding; November 23 comments are requested before work begins on the final version.

A separate notice announces a November 6 virtual public meeting from noon to 3:30 p.m. Eastern on challenges and possible solutions for lot-level traceability. The discussion concerns possible flexibilities and implementation experience, rather than adoption of every suggestion summarized in the notice. Speakers must register by October 26, general registration closes November 5, and written meeting comments are due December 6. Same-day registration is unavailable, and oral presentations cannot use slides. Those meeting dates are distinct from the draft-guidance comment deadline and from the underlying rule's enforcement timing.

DOL's October 8 rate notice raises the EO 13658 minimum from $13.65 to $14.05 per hour and the associated tipped cash wage from $9.55 to $9.85, beginning January 6, 2027. The notice applies to covered work on or in connection with specified federal contracts entered January 1, 2015 through January 29, 2022, provided they were not renewed or extended on or after January 30, 2022. An exercised option can be such an extension. January 6 is the express effective date, rather than an inferred January 1 annual change.

For tipped workers, the lower cash figure is not permission for total compensation below the EO 13658 minimum. When a contractor takes a tip credit, tips must supply at least the difference between the cash wage and the full required minimum; the contractor must raise cash pay if tips fall short. The notice's discussion of the later executive order and its revocation does not remove the older order's contract-date limits. These rates therefore require a contract-specific coverage assessment rather than application to all healthcare employees or every organization receiving federal payments.

FDA's October 9 notice submits an expanded-access information-collection revision for OMB review, with comments due November 9. In Form 3926 Field 6, the investigational-drug-name element would be replaced by the planned treatment-initiation date, and the FDA review-division element would identify the office/review division if known. Field 9's heading would specify follow-up or additional submissions only. FDA says accompanying instructions will be revised upon OMB approval, rather than describing approval as already completed.

The collection supports licensed physicians requesting individual-patient treatment access to investigational products for serious or immediately life-threatening conditions when no comparable satisfactory alternative is available. The notice permits continued use of Form 3926 or Form 1571 to satisfy the identified IND submission requirements. A physician-signed Form 3926 with the Field 10.a authorization box checked is treated as the specified waiver request under 21 CFR 312.10. These form procedures do not themselves grant treatment access or replace the separate clinical and regulatory criteria governing an expanded-access decision.

HHS's October 8 release describes a NIH clinic opened October 5 to evaluate health problems reported after vaccination, proposed Medicare reimbursement for physician VAERS reports, EHR capture of vaccine-related adverse events, and CDC reporting-system modernization. The reimbursement statement is expressly a proposal. HHS also announces an EHR requirement but provides no operative certification clause or adoption date in the release. Reports of suspected adverse events are described as information for investigation and safety signals, rather than proof that vaccination caused every reported condition.

The retained official interoperability listing identifies the transfusion/vaccination adverse-event FHIR guide as a balloted draft in pilot use and the clinical-research backport as final with feedback requested. Both are marked not federally required. The separate July 14 CMS PFS fact sheet describes proposed 2027 policies and does not establish the announced VAERS reporting service. These sources leave the announcement's detailed implementation unresolved as of this edition; they do not supply a current service code, rate, effective billing date, or immediate certification deadline.

The download page shows an October 9 update for September 2026 files. OIG explains that filenames describe prior-month actions. The complete database contains exclusions in effect and removes reinstated persons; monthly supplements contain only that month's changes.

Replacement and supplementation are alternative maintenance strategies. OIG directs complete-database users not to apply supplements as well. Profile corrections record changes such as addresses, rather than verification. Because downloadable files omit Social Security numbers, OIG directs specific-person/entity verification to its online search.

The direct final rule amends regulations for byproduct, source, and special nuclear material to expand specified licensing exemptions. It is scheduled to take effect December 21 unless significant adverse comments received by November 4 cause withdrawal, which NRC would announce in the Federal Register. A companion proposed rule uses the same November 4 comment date, and comments on the direct final rule also count toward that proposal. This conditional procedure matters when describing the rule's status on October 11.

For byproduct quantities, revised Schedule B points to appendix C to 10 CFR part 20, with exceptions retained in 30.71(b): 10 microcuries each for cadmium-109, iridium-192, and zirconium-93, plus the specified 0.1-microcurie floor for other non-alpha-emitting material. NRC connects the update with research, academic, industrial, and medical uses and separately limits expanded DOE-contractor exemptions to defined activities and controls. These provisions do not exempt all clinical nuclear-medicine activities. Applicable material, quantity, contractual conditions, and Agreement State requirements must still be distinguished.