The California Department of Public Health (CDPH) has issued a new All Facilities Letter (AFL) informing healthcare facilities of adopted regulations effective July 1, 2021. These regulations clarify how administrative penalties for violations of medical information breaches will be assessed and specify reporting requirements and procedures that healthcare facilities must follow. The base penalty amount is $15,000, and the penalty may be adjusted based on factors described in the adopted regulations. Healthcare facilities are required to report a medical information breach to CDPH no later than 15 days after the breach has been detected, with delays in reporting potentially resulting in additional administrative penalties. Facilities must also provide specific information to each patient whose information was breached. Non-compliance may result in further penalties. Healthcare facilities should update any policies and procedures as appropriate in response to these new regulations.

Summaries are generataed using AI. Check important information.