Bill Text

PDF |Add To My Favorites |Track Bill | print page

AB-2402 Cannabis: personal information.(2017-2018)

SHARE THIS:share this bill in Facebookshare this bill in Twitter
Date Published: 04/09/2018 09:00 PM
AB2402:v98#DOCUMENT

Amended  IN  Assembly  April 09, 2018

CALIFORNIA LEGISLATURE— 2017–2018 REGULAR SESSION

Assembly Bill No. 2402


Introduced by Assembly Member Low

February 14, 2018


An act to amend Section 26162.5 of, and to add Section 26161.5 to to, the Business and Professions Code, relating to cannabis.


LEGISLATIVE COUNSEL'S DIGEST


AB 2402, as amended, Low. Cannabis: personal information.
The Medicinal and Adult-Use Cannabis Regulation and Safety Act, among other things, provides for the licensure and regulation of commercial cannabis activity, including cultivation, manufacturing, distribution, and retail sale. Existing law requires licensees to maintain specified records of commercial cannabis transactions and prohibits a licensee from disclosing information contained in a physician’s recommendation. transactions.
Existing law requires information identifying the names of patients, their medical conditions, or the names of their primary caregivers received and contained in records kept by the Bureau of Cannabis Control for the purposes of administering the act to be maintained in accordance with state law relating to patient access to his or her health records, the Confidentiality of Medical Information Act, and other state and federal laws relating to confidential patient information, and provides that this information is confidential and exempt from disclosure under the California Public Records Act, except as specified. Existing law deems information contained in a physician’s recommendation to use cannabis for medical purposes to be “medical information” within the meaning of the Confidentiality of Medical Information Act, and prohibits a licensee from disclosing this information, except as specified.
Existing law, the Confidentiality of Medical Information Act, prohibits providers of health care, health care service plans, contractors, employers, and 3rd-party administrators, among others, from disclosing medical information, as defined, without the patient’s written authorization, subject to certain exceptions, as specified. A violation of the act resulting in economic loss or personal injury to a patient is a misdemeanor and subjects the violating party to liability for specified damages and administrative fines and penalties.
This bill would prohibit a licensee from disclosing a consumer’s personal information, as defined, to a 3rd party, except to the extent necessary to allow responsibility for payment to be determined and payment to be made or if the consumer has consented to the licensee’s disclosure of the personal information. The bill would prohibit a licensee from discriminating against a consumer or denying a consumer a product or service because he or she has not provided consent to authorize the licensee to disclose the consumer’s nonpublic personal information to a 3rd party not directly related to the transaction.
The bill would further deem identification cards issued to qualified patients to be “medical information” within the meaning of the Confidentiality of Medical Information Act, and would prohibit a licensee from disclosing that information, except as specified. By expanding the scope of a crime, the bill would impose a state-mandated local program.
The California Constitution requires the state to reimburse local agencies and school districts for certain costs mandated by the state. Statutory provisions establish procedures for making that reimbursement.
This bill would provide that no reimbursement is required by this act for a specified reason.
Vote: MAJORITY   Appropriation: NO   Fiscal Committee: YES   Local Program: NOYES  

The people of the State of California do enact as follows:


SECTION 1.

 Section 26161.5 is added to the Business and Professions Code, to read:

26161.5.
 (a) A licensee shall not disclose a consumer’s personal information to a third party, except to the extent necessary to allow responsibility for payment to be determined and payment to be made or if the consumer has consented to the licensee’s disclosure of the personal information. This section does not prohibit the disclosure of nonpublic personal information to authorized employees of the State of California or a city, county, or city and county to perform official duties pursuant to this division or a local ordinance.
(b) A licensee shall not discriminate against a consumer, or deny a consumer a product or service, because the consumer has not provided consent, pursuant to subdivision (a), to authorize the licensee to disclose the consumer’s nonpublic personal information to a third party not directly related to the transaction.
(c) For purposes of this section, “personal information” has the same meaning as defined in subdivision (d) of Section 1798.81.5 of the Civil Code.
(d) This section provides greater protection to personal information than that provided by Section 1798.81.5 of the Civil Code, which does not apply to licensees under this division pursuant to paragraph (5) of subdivision (e) of Section 1798.81.5 of the Civil Code.

SEC. 2.

 Section 26162.5 of the Business and Professions Code is amended to read:

26162.5.
 Information(a) Identification cards issued pursuant to Section 11362.71 of the Health and Safety Code are hereby deemed “medical information” within the meaning of the Confidentiality of Medical Information Act (Part 2.6 (commencing with Section 56) of Division 1 of the Civil Code) and shall not be disclosed by a licensee except as necessary for authorized employees of the State of California or any city, county, or city and county to perform official duties pursuant to this chapter, or a local ordinance.
(b) Information contained in a physician’s recommendation issued in accordance with Article 25 (commencing with Section 2525) of Chapter 5 of Division 2 and received by a licensee, including, but not limited to, the name, address, or social security number of the patient, the patient’s medical condition, or the name of the patient’s primary caregiver is hereby deemed “medical information” within the meaning of the Confidentiality of Medical Information Act (Part 2.6 (commencing with Section 56) of Division 1 of the Civil Code) and shall not be disclosed by a licensee except as necessary for authorized employees of the State of California or any city, county, or city and county to perform official duties pursuant to this chapter, or a local ordinance.

SEC. 3.

 No reimbursement is required by this act pursuant to Section 6 of Article XIII B of the California Constitution because the only costs that may be incurred by a local agency or school district will be incurred because this act creates a new crime or infraction, eliminates a crime or infraction, or changes the penalty for a crime or infraction, within the meaning of Section 17556 of the Government Code, or changes the definition of a crime within the meaning of Section 6 of Article XIII B of the California Constitution.