Cal. Lab. Code § 3762
(c) An insurer, third-party administrator retained by a self-insured employer pursuant to Section 3702.1 to administer the employer’s workers’ compensation claims, and those employees and agents specified by a self-insured employer to administer the employer’s workers’ compensation claims, are prohibited from disclosing or causing to be disclosed to an employer, any medical information, as defined in Section 56.05 of the Civil Code, about an employee who has filed a workers’ compensation claim, except as follows: