1326.3.
(a) For purposes of this section, the following definitions apply:(1) “Personal records” means the original, any copy of books, documents, other writings, or electronic data pertaining to a consumer and that are maintained by any “witness” that is any of the following:
(A) A physician, dentist, ophthalmologist, optometrist, chiropractor, physical therapist, psychotherapist, as defined in Section 1010 of the Evidence Code, acupuncturist, podiatrist, veterinarian, veterinary hospital, veterinary clinic, pharmacist, pharmacy, hospital, medical center, clinic, radiology or MRI center, or clinical or diagnostic laboratory.
(B) A state or national bank, state or federal association, as defined in Section 5102 of the Financial Code, state or federal credit union, trust company, anyone authorized by this state to make or arrange loans that are secured by real property, security brokerage firm, insurance company, title insurance company, underwritten title company, escrow agent licensed pursuant to Division 6 (commencing with Section 17000) of the Financial Code or exempt from licensure pursuant to Section 17006 of the Financial Code, or institution of the Farm Credit System, as specified in Section 2002 of Title 12 of the United States Code.
(C) An attorney or accountant.
(D) A telephone corporation that is a public utility, as defined in Section 216 of the Public Utilities Code.
(E) A private or public preschool, elementary
school, secondary school, or postsecondary school, as described in Section 76244 of the Education Code.
(F) An interactive computer service or access software provider, as defined in Section 230(f) of Title 47 of the United States Code.
(2) “Consumer” means any individual, partnership of five or fewer persons, association, or trust that has transacted business with, or has used the services of, the witness or for which the witness has acted as agent or fiduciary.
(3) “Subpoenaing party” means the person or persons causing a subpoena duces tecum to be issued or served in connection with any criminal prosecution or proceeding pursuant to this code, but shall not include the state or local agencies described in Section 7465 of the Government Code, or any entity provided for under Article VI of the California
Constitution in any proceeding maintained before an adjudicative body of that entity pursuant to Chapter 4 (commencing with Section 6000) of Division 3 of the Business and Professions Code.
(4) “Deposition officer” means a person who meets the qualifications specified in Section 2020.420 of the Code of Civil Procedure.
(b) Prior to the date called for in the subpoena duces tecum for the production of personal records, the subpoenaing party shall serve or cause to be served on the consumer whose records are being sought a copy of the subpoena duces tecum, of the affidavit supporting the issuance of the subpoena, if any, and of the notice described in subdivision (e), and proof of service as indicated in paragraph (1) of subdivision (c). This service shall be made as follows:
(1) To the consumer personally, or at his
or her last known address, or in accordance with Chapter 5 (commencing with Section 1010) of Title 14 of Part 2 of the Code of Civil Procedure, or, if he or she is a party, to his or her attorney of record. If the consumer is a minor, service shall be made on the minor’s parent, guardian, conservator, or similar fiduciary, or if one of them cannot be located with reasonable diligence, then service shall be made on any person having the care or control of the minor or with whom the minor resides or by whom the minor is employed, and on the minor if the minor is at least 12 years of age.
(2) Not less than 21 days prior to the date for production specified in the subpoena duces tecum, plus the additional time provided by Section 1013 of the Code of Civil Procedure if service is by mail.
(3) At least 10 days prior to service upon the custodian of the records, plus the additional time
provided by Section 1013 of the Code of Civil Procedure if service is by mail.
(c) Prior to the production of the records, but not less than 21 days prior to the date for production specified in the subpoena duces tecum, the subpoenaing party shall do either of the following:
(1) Serve or cause to be served upon the witness and the prosecuting authority a proof of personal service or of service by mail attesting to compliance with subdivision (b).
(2) Furnish the witness and the prosecuting authority a written authorization to release the records signed by the consumer under oath or by the consumer’s attorney of record. The witness may presume that any attorney purporting to sign the authorization on behalf of the consumer acted with the consent of the consumer, and that any objection to release of records is waived.
The witness may require additional, reasonable proof of identity or ownership by the consumer of the account for which personal records are sought.
(d) A subpoena duces tecum for the production of personal records shall be served in sufficient time to allow the witness a reasonable time, as provided in Section 2020.410 of the Code of Civil Procedure, to locate and produce the records or copies thereof.
(e) (1) Every copy of the subpoena duces tecum and affidavit, if any, served on a consumer or his or her attorney in accordance with subdivision (b) shall be accompanied by a notice, in a typeface designed to call attention to the notice, indicating all of the following:
(A) Records about the consumer are being sought from the witness named on the subpoena.
(B) If the consumer objects to the witness furnishing the records to the party seeking the records, the consumer must file papers with the court or serve a written objection as provided in subdivision (g) prior to the date specified for production on the subpoena.
(C) If the party who is seeking the records will not agree in writing to cancel or limit the subpoena, an attorney should be consulted about the consumer’s interest in protecting his or her rights of privacy.
(2) If a notice of taking of deposition is also served, that other notice may be set forth in a single document with the notice required by this subdivision.
(f) A subpoena duces tecum for personal records shall not be valid if either of the following apply:
(1) The personal records being sought are maintained by a telephone corporation that is a public utility, as defined in Section 216 of the Public Utilities Code, and the subpoena duces tecum does not include a consent to release signed by the consumer whose records are requested, as required by Section 2891 of the Public Utilities Code.
(2) The personal records being sought are maintained by, and the subpoenaed witness is, an interactive computer service or access software provider, as defined in Section 230(f) of Title 47 of the United States Code, and the court makes any of the following findings:
(A) The subpoena duces tecum does not include a written authorization to release the records that complies with paragraph (2) of subdivision (c) or proof of service attesting to compliance with subdivision (b).
(B) The subpoenaing party has not exhausted all other reasonable means for obtaining the personal records.
(C) The personal records described in the subpoena duces tecum are not relevant and material to the underlying proceeding.
(D) The need for the personal records does not outweigh the constitutional and statutory rights of the consumer to personal privacy.
(g) Any consumer whose personal records are sought by a subpoena duces tecum and who is a defendant in the criminal proceeding in which the subpoena duces tecum is served, or the witness upon whom the subpoena duces tecum is served, may, prior to the date for production, bring a motion under Section 1987.1 of the Code of Civil Procedure to quash or modify the subpoena duces tecum. Notice of the
bringing of that motion shall be given to the witness and deposition officer at least five days prior to production. The failure to provide notice to the deposition officer shall not invalidate the motion to quash or modify the subpoena duces tecum, but may be raised by the deposition officer as an affirmative defense in any action for liability for improper release of records.
Any other consumer whose personal records are sought by a subpoena duces tecum, or the witness upon whom the subpoena duces tecum is served, may, prior to the date of production, serve on the subpoenaing party, the witness, and the deposition officer, a written objection that cites the specific grounds on which production of the personal records should be prohibited.
No witness or deposition officer shall be required to produce personal records after receipt of notice that the motion has been brought by a consumer, or after receipt of a written
objection from a consumer, except upon order of the court in which the prosecution or proceeding is pending or by agreement of the parties, witnesses, and consumers affected.
The party requesting a consumer’s personal records may bring a motion under Section 1987.1 of the Code of Civil Procedure to enforce the subpoena within 20 days of service of the written objection. The motion shall be accompanied by a declaration showing a reasonable and good faith attempt at informal resolution of the dispute between the party requesting the personal records and the consumer or the consumer’s attorney.
(h) Upon good cause shown, and if the rights of witnesses and consumers are preserved, a subpoenaing party shall be entitled to obtain an order shortening the time for service of a subpoena duces tecum or waiving the requirements of subdivision (b) when due diligence by the subpoenaing party has been shown.
(i) Nothing contained in this section shall be construed to apply to any subpoena duces tecum that does not request the records of any particular consumer or consumers, and that requires a custodian of records to delete all information that would in any way identify any consumer whose records are to be produced.
(j) Failure to comply with this section shall be sufficient basis for the witness to refuse to produce the personal records sought by a subpoena duces tecum.
(k) If personal records are produced by an interactive computer service or access software provider in accordance with subdivisions (b), (c), and (f), and are accompanied by a declaration under Section 1561 of the Evidence Code, no witness need appear to testify or otherwise authenticate the records.