Compliance SweepBack to stories →
← Back to stories

AB 1854 strengthens protected healthcare legal process safeguards

AB 1854 broadens California safeguards for legally protected health care regardless of the patient's location and adds covered financial-service corporations to legal-process disclosure controls. Declarations, patient-initiated proceeding exceptions, federal-law limits, and specified enforcement standards qualify the protections.

What happened

California enacted AB 1854 on September 27 as Chapter 485. Its Penal Code amendments prohibit arrest of a person whom the Governor has declined to surrender and extend protected-care arrest, cooperation, and out-of-state subpoena safeguards regardless of the patient's location when the activity is lawful in California. The public-agency federal noncooperation provision applies to the extent federal law permits. The section preserves investigation of criminal activity in California, while restricting sharing procedure information to enforce another state's protected-care law.

The legal-process controls now include California corporations providing financial services to the public, alongside the specified electronic communication and remote-computing providers. Covered requests need a sworn declaration establishing either no protected-care connection or a qualifying patient-initiated proceeding actionable similarly in California. The section preserves unrelated valid process and specified written requests by the investigation's subject. Attorney General enforcement can seek $10,000 for a first and $15,000 for subsequent intentional, knowing, willing, or reckless violations of the disclosure rule; false declarations have a separate $15,000 penalty. These conditions require request-specific review rather than treating every demand as categorically unenforceable.

Scope and timing

Authority status
Final
Applicability
Potentially applicable
Audience
Health systems, Provider networks, Health-tech
Jurisdiction
California
Recorded date
2027-01-01
Date type
effective

Why it matters

Out-of-state process requires consistent escalation and careful scope analysis.

Sources

Complete edition and supplemental material

This finding in the complete approved report →

Regulatory horizons, CIA trends and implementation trackers remain in the full report.

Read the entire Compliance Sweep report →

← Return to stories

Privacy preferences

Where enabled for this site, Cloudflare Web Analytics can send page-use and performance measurements to Cloudflare. This panel provides information and does not turn analytics on or off.

This panel stores no tracking choice and does not change your tool saves, screening, resets, reports or exports. Other sites have separate settings.

Read Privacy & Cookies