California patient rights under state health law give you more control over your medical information, records, and care than federal law alone provides, and several key numbers changed for 2026. The cap on noneconomic malpractice damages now sits at $470,000 for injury cases and $650,000 for wrongful death. Medical records must be made available for inspection within five working days. Telehealth flexibilities for controlled-substance prescribing continue through the end of the year. What follows is what those rules mean when you walk into a clinic, log into a video visit, get an unexpected bill, or believe a provider harmed you.
Privacy of Your Medical Information
California layers state protections on top of HIPAA. The Confidentiality of Medical Information Act (CMIA) bars healthcare providers, health plans, and their contractors from sharing your medical information without written authorization, with limited exceptions for treatment coordination, legal proceedings, and public health reporting.1California Legislative Information. California Civil Code 56.10 – Disclosure of Medical Information by Providers It defines “medical information” broadly to include individually identifiable data in electronic or physical form.
The practical difference from HIPAA is enforcement. CMIA lets patients sue directly for damages when their information is improperly disclosed. HIPAA relies primarily on agency enforcement rather than private lawsuits, so a California patient has a remedy in their own hands that federal law alone doesn’t give them.
Health data collected outside a clinic gets a separate layer. When fitness apps, genetic testing services, and health-tracking platforms hold your personal health data, the California Consumer Privacy Act (CCPA) applies. You can request access to your data, demand deletion, and opt out of its sale.2State of California – Department of Justice – Office of the Attorney General. Attorney General Bonta Emphasizes Health Apps Legal Obligation to Protect Reproductive Health Information Voters approved the California Privacy Rights Act in 2020, which amended the CCPA and created the California Privacy Protection Agency to investigate and penalize violations.3State of California – Department of Justice – Office of the Attorney General. California Consumer Privacy Act
Getting Your Medical Records
Under Health and Safety Code Section 123110, any adult patient or authorized representative can ask to inspect their records, and the provider must allow that inspection within five working days. If you request copies instead, the provider has 15 days to transmit them.4California Legislative Information. California Health and Safety Code 123110
Providers may charge a reasonable, cost-based fee for copies. For paper records the fee cannot exceed $0.25 per page, or $0.50 per page for records copied from microfilm, plus labor, supplies, and postage. A provider cannot refuse to hand over records because you have an outstanding bill for healthcare services. Withholding records over unpaid medical bills is prohibited, and willful violations can lead to disciplinary action or fines up to $100.4California Legislative Information. California Health and Safety Code 123110 The copying fee itself must be paid before the provider is required to produce the copies, so there is a difference between owing money for the visit and owing for the duplication work.
Emergency Room Rights
If you show up at a hospital emergency department, federal law protects you regardless of your insurance status, ability to pay, or immigration status. The Emergency Medical Treatment and Labor Act (EMTALA) applies to roughly 98% of U.S. hospitals and requires any hospital with a dedicated emergency department to provide a medical screening examination to anyone who requests one.5National Center for Biotechnology Information. EMTALA and Patient Transfers The screening cannot be delayed while staff check your insurance or ask about payment.
If the screening reveals an emergency medical condition, the hospital must stabilize you before discharge or transfer. An emergency condition includes any acute symptoms severe enough that the absence of immediate treatment could reasonably be expected to cause serious harm to your health, serious impairment of bodily functions, or serious organ dysfunction. Pregnant patients experiencing contractions are also covered when transfer could threaten the health of the mother or unborn child.5National Center for Biotechnology Information. EMTALA and Patient Transfers
Hospitals with 100 or more beds face fines exceeding $133,000 per violation, and smaller hospitals face fines over $66,000. Individual physicians who refuse to treat or stabilize a patient with an emergency condition can also be fined, and both hospitals and physicians risk exclusion from Medicare for repeated violations.6Centers for Medicare and Medicaid Services. Certification and Compliance for the Emergency Medical Treatment and Labor Act
Surprise Medical Bills
A surprise bill usually shows up when you get care from an out-of-network provider without choosing to, often at an in-network hospital where the anesthesiologist, radiologist, or surgeon turns out to be out-of-network. California addressed this early through AB 72, which protects patients from balance billing for non-emergency services at in-network facilities. The federal No Surprises Act, in effect since January 2022, added broader protections covering emergency services, air ambulance providers, and out-of-network care at in-network facilities.
If you have group or individual health insurance, the No Surprises Act protects you from surprise bills for emergency services from out-of-network providers, and from out-of-network charges for supplemental care at in-network facilities. Your cost-sharing is limited to what you would have paid if the provider were in-network.7Consumer Financial Protection Bureau. What Is a Surprise Medical Bill and What Should I Know About the No Surprises Act The provider and your health plan resolve the remaining payment through a federal independent dispute resolution process, which keeps you out of the middle.
If you’re uninsured or self-pay, providers must give you a good-faith cost estimate before treatment. If the final bill exceeds the estimate by $400 or more, you can dispute the charges through a separate resolution process within 120 days of receiving the bill.7Consumer Financial Protection Bureau. What Is a Surprise Medical Bill and What Should I Know About the No Surprises Act One caveat worth knowing: out-of-network providers may ask you to sign a notice and consent form waiving these protections for certain scheduled non-emergency services. You aren’t required to sign, and you shouldn’t if you had no real choice of provider.
Telehealth Rules
California defines telehealth broadly to include real-time video interactions, phone consultations, and asynchronous store-and-forward transmissions where patient data is sent to a provider for later review. Under Business and Professions Code Section 2290.5, providers must obtain and document your consent before delivering care through telehealth.8California Legislative Information. California Code BPC 2290.5 – Telehealth The standard of care is identical whether you’re seen in person or remotely.
Assembly Bill 744 requires private health plans and Medi-Cal to reimburse telehealth visits at the same rate as equivalent in-person services. This payment parity rule applies to contracts issued, amended, or renewed since January 2021.9California Legislative Information. California Assembly Bill 744 – Health Care Coverage: Telehealth Insurers can still impose network restrictions, so verify that a particular telehealth provider is in-network before the visit.
One narrower rule affects any California patient who receives controlled-substance prescriptions by video. Federal rules normally require an in-person evaluation before a provider can prescribe controlled substances. Since the pandemic, the DEA has maintained temporary flexibilities allowing practitioners to prescribe Schedule II through V controlled medications after a video telehealth encounter without a prior in-person visit. That extension remains in effect through December 31, 2026.10U.S. Drug Enforcement Administration. DEA Extends Telemedicine Flexibilities to Ensure Continued Access to Care Audio-only encounters are more limited and apply mainly to Schedule III through V medications used for opioid use disorder treatment. The flexibilities could expire or change if the DEA finalizes permanent rules.
A boundary worth flagging: providers treating California patients must hold a California license. The state doesn’t participate in the Interstate Medical Licensure Compact, so a doctor licensed only in another state generally can’t legally see you by telehealth.11Medical Board of California. Telehealth
Advance Directives
California’s Health Care Decisions Law lets any adult create an advance healthcare directive spelling out wishes for medical treatment if you become unable to communicate. The statutory form under Probate Code Section 4701 has two parts: a power of attorney for healthcare, which names a trusted person to make decisions on your behalf, and a set of written instructions covering topics like life-sustaining treatment and pain relief.12California Legislative Information. California Probate Code 4701
To be valid, the directive must be signed and dated, then either witnessed by two qualified people or acknowledged before a notary. Witnesses cannot be the person named as your healthcare agent, your healthcare provider, or an employee of your provider. At least one witness must also not be related to you by blood, marriage, or adoption and must not stand to inherit from your estate. Patients in skilled nursing facilities face an added requirement: a patient advocate or ombudsman designated by the State Department of Aging must serve as a witness.12California Legislative Information. California Probate Code 4701
You can fill out either part of the form or both. Naming a healthcare agent gives that person broad authority whenever you can’t decide for yourself. The written instructions section documents your preferences about specific scenarios even if you haven’t appointed anyone. Hospitals and other Medicare- and Medicaid-participating facilities are required under the federal Patient Self-Determination Act to inform you of your right to create these documents upon admission.
Medical Malpractice: Caps, Deadlines, and Comparative Fault
Medical malpractice claims in California are governed by the Medical Injury Compensation Reform Act (MICRA), first enacted in 1975 and substantially updated by Assembly Bill 35, which took effect in 2023. The original $250,000 cap on noneconomic damages, unchanged for nearly 50 years, has been replaced with a phased increase schedule.13California Legislative Information. AB-35 Civil Damages: Medical Malpractice
For cases resolved in 2026, the noneconomic damages cap is $470,000 for injury cases and $650,000 for wrongful death cases. These caps increase by $40,000 and $50,000 respectively each January 1 until they reach $750,000 (injury) and $1,000,000 (wrongful death) in 2034, after which annual inflation adjustments begin. Economic damages like medical expenses and lost wages remain uncapped.
To win a claim, you must show that the provider owed a duty of care, fell below accepted medical standards, and directly caused harm. Courts rely heavily on expert testimony to establish what a competent provider would have done in the same situation. California follows a pure comparative negligence rule, so a patient who is partially responsible for their own injury can still recover damages, though the award is reduced by their percentage of fault.14Justia. CACI No. 405 – Comparative Fault of Plaintiff
Filing Deadlines
Missing the statute of limitations is one of the most common ways malpractice claims die before they start. California gives you whichever is shorter: three years from the date of injury, or one year from the date you discovered (or should have discovered) the injury.15California Legislative Information. California Code of Civil Procedure 340.5 In practice, most cases must be filed within one year of discovering the problem, but the three-year outer limit applies even if you genuinely didn’t know about the injury. The only exceptions that extend the three-year cap are fraud, intentional concealment by the provider, or a foreign object left in the patient’s body. Children have different rules: a minor’s claim must be filed within three years of the alleged wrongful act, but children under six get until their eighth birthday if that provides more time.
Where to File a Complaint
Several agencies share enforcement of California health law, and knowing which one handles your issue speeds things up. The Medical Board of California handles physician licensing and investigates misconduct complaints, from malpractice to substance abuse. The California Board of Registered Nursing oversees RN licensing and certifies nurse practitioners under AB 890.16California Board of Registered Nursing. Assembly Bill 890 The Board of Pharmacy regulates pharmacist practice.
On facility and insurance issues, the California Department of Public Health regulates healthcare facilities and enforces public health laws. The Department of Managed Health Care oversees health plans and handles patient complaints about coverage denials, including disputes tied to surprise billing protections. If you believe your rights have been violated, file a complaint with the board or department that regulates the party involved.