Cal. Welf. & Inst. Code § 14045

(a) A provider shall not submit a reimbursement request to the Medi-Cal program containing a beneficiary’s social security number if the department has issued that beneficiary a Medi-Cal beneficiary identification card containing a beneficiary number with the issuance date included in that number.
(b) This section shall not apply to the submission of a request by a provider for beneficiary eligibility.
(c) In order to reduce medical fraud and the black market for stolen social security cards, the State Department of Health Care Services may establish an automated HIPAA-compliant system using HIPAA transactions whereby all providers can access a beneficiary’s identification card number for submitting reimbursement requests.
(d) When the provider makes a good faith effort to obtain a recipient’s beneficiary identification card number, this section shall not apply to the following types of services, or the following provider types, until the time that the department is able to establish a system described in subdivision (c):
1. (1) A hospital licensed pursuant to Chapter 2 (commencing with Section 1250) of Division 2 of the Health and Safety Code.
2. (2) A long-term health care facility, as defined in Section 1418 of the Health and Safety Code.
3. (3) A primary care clinic that is licensed pursuant to subdivision (a) of Section 1204 of the Health and Safety Code.
4. (4) Emergency medical transportation services.
5. (5) A hospital-based physician.