Health information.

(1) Existing law establishes provisions for the licensing and certification of clinics, health facilities, home health agencies, and hospices under the jurisdiction of the State Department of Public Health. Existing law requires these entities to prevent unlawful or unauthorized access to, and use or disclosure of, a patient's medical information, and authorizes the department to assess administrative penalties for violations. Existing law also requires these entities to report instances of unlawful or unauthorized access to, and use or disclosure of, a patient's medical information to the department and to the affected patient or patient's representative, as prescribed, within 5 days of…