Cal. Health & Safety Code § 120440
(a) For the purposes of this chapter, the following definitions shall apply:
(b)
(1) Local health officers may operate immunization information systems pursuant to their authority under Section 120175, in conjunction with the Immunization Branch of the State Department of Public Health. Local health officers and the State Department of Public Health may operate these systems in either or both of the following manners:
(c) Notwithstanding Sections 49075 and 49076 of the Education Code, Chapter 5 (commencing with Section 10850) of Part 2 of Division 9 of the Welfare and Institutions Code, or any other law, unless a refusal to permit recordsharing is made pursuant to subdivision (e), health care providers, and other agencies, including, but not limited to, schools, childcare facilities, service providers for the California Special Supplemental Nutrition Program for Women, Infants, and Children (WIC), health care plans, foster care agencies, and county human services agencies, shall disclose the information set forth in paragraphs (1) to (13), inclusive, from the patient’s medical record, or the client’s record, to local health departments operating countywide or regional immunization information and reminder systems and the State Department of Public Health. With respect to the information set forth in paragraph (13), a health care provider is only required to disclose information that is voluntarily provided by the patient or client. A health care provider shall not disclose any information set forth in paragraph (13) relating to any patient or client who is under 18 years of age. Local health departments and the State Department of Public Health may disclose the information set forth in paragraphs (1) to (13), inclusive, to each other and, upon a request for information pertaining to a specific person, to health care providers taking care of the patient and to the Medical Board of California and the Osteopathic Medical Board of California. Local health departments and the State Department of Public Health may disclose the information in paragraphs (1) to (7), inclusive, and paragraphs (9) to (12), inclusive, to schools, childcare facilities, county human services agencies, and family childcare homes to which the person is being admitted or in attendance, foster care agencies in assessing and providing medical care for children in foster care, and WIC service providers providing services to the person, health care plans arranging for immunization services for the patient, and county human services agencies assessing immunization histories of dependents of CalWORKs participants, upon request for information pertaining to a specific person. Determination of benefits based upon immunization of a dependent CalWORKs participant shall be made pursuant to Section 11265.8 of the Welfare and Institutions Code. The following information shall be subject to this subdivision:
(d)
(1) Health care providers, local health departments, and the State Department of Public Health shall maintain the confidentiality of information listed in subdivision (c) in the same manner as other medical record information with patient identification that they possess. These providers, departments, and contracting agencies are subject to civil action and criminal penalties for the wrongful disclosure of the information listed in subdivision (c), in accordance with existing law. They shall use the information listed in subdivision (c) only for the following purposes:
(2) Schools, childcare facilities, family childcare homes, WIC service providers, foster care agencies, county human services agencies, and health care plans shall maintain the confidentiality of information listed in subdivision (c) in the same manner as other client, patient, and pupil information that they possess. These institutions and providers are subject to civil action and criminal penalties for the wrongful disclosure of the information listed in subdivision (c), in accordance with existing law. They shall use the information listed in subdivision (c) only for those purposes provided in subparagraphs (A) to (D), inclusive, of paragraph (1) and as follows:
(e) A patient or a patient’s parent or guardian may refuse to permit recordsharing. The health care provider administering immunization and any other agency possessing any patient or client information listed in subdivision (c), if planning to provide patient or client information to an immunization system, as described in subdivision (b), shall inform the patient or client, or the parent or guardian of the patient or client, of the following:
(f)
(h)
(1) Upon request of the patient or client, or the parent or guardian of the patient or client, in writing or by other means acceptable to the recipient, a local health department or the State Department of Public Health that has received information about a person pursuant to subdivision (c) shall do all of the following:
(j)
(k) For purposes of supporting immunization information systems, the State Department of Public Health shall assist the Immunization Branch of the State Department of Public Health in both of the following: