Health care providers: medical information.

(1) Existing law provides for the licensing and regulation of clinics, health facilities, home health agencies, and hospices by the State Department of Public Health. Existing law requires these entities to prevent unlawful or unauthorized access to, and use or disclosure of, a patient's medical information. A violation of these provisions is a crime. Existing law requires these entities to report an instance of unlawful or unauthorized access to, and use or disclosure of, a patient's medical information to the department and to the affected patient or patient's representative, as prescribed, within 5 business days of its detection, except that an entity is required to delay compliance with…