Compliance SweepBack to stories →
← Back to stories

AB 1979 regulates healthcare chatbot functions and confidentiality

AB 1979 brings qualifying consumer health chatbots within California medical-confidentiality requirements and protects licensed judgment in AI-informed clinical care. The September 30 law bars autonomous performance of functions reserved to licensed professionals while preserving specified supervised training and documentation or communication uses.

Illustrative artwork. Fictional scene, not a photograph of the people or events in this story.

What happened

AB 1979 was chaptered September 30 as Chapter 854. A business offering a qualifying health care chatbot to help consumers manage information or diagnose, treat, or manage a medical condition is deemed a provider of health care for CMIA purposes, with corresponding confidentiality standards and improper-use or disclosure penalties. The definition covers a generative AI system with a natural-language interface that responds adaptively, is marketed as facilitating or supporting health services, and uses defined health information, including information collected, generated, or inferred by the chatbot. The CMIA classification does not itself confer provider status under other laws.

The new clinical-decision-support section requires covered facilities, clinics, and physician or group-practice offices to take reasonable steps to retain licensed providers' independent professional judgment. They may not deploy AI to independently perform a clinical function legally reserved to a licensee or to direct unlicensed personnel in performing it. The text preserves use by trainees in supervised study or training and excludes documentation and communication uses that do not apply professional judgment, such as record-update messages and reminders. Licensing-board jurisdiction and injunction remedies remain available within the statutory enforcement framework.

Scope and timing

Authority status
Final
Applicability
Potentially applicable
Audience
Health systems, Provider networks, Health-tech
Jurisdiction
California
Recorded date
2027-01-01
Date type
effective

Why it matters

Health care chatbot operators may become subject to California medical-information rules, and clinical organizations may need controls that preserve licensed professionals’ independent judgment when decision-support systems inform care.

Sources

Complete edition and supplemental material

This finding in the complete approved report →

Regulatory horizons, CIA trends and implementation trackers remain in the full report.

Read the entire Compliance Sweep report →

← Return to stories

Privacy preferences

Where enabled for this site, Cloudflare Web Analytics can send page-use and performance measurements to Cloudflare. This panel provides information and does not turn analytics on or off.

This panel stores no tracking choice and does not change your tool saves, screening, resets, reports or exports. Other sites have separate settings.

Read Privacy & Cookies