California Code, Civil Code - CIV § 56.14

A provider of health care, health care service plan, or contractor that discloses medical information pursuant tothe authorizations required by this chapter shall communicate to the person or entity to which it discloses the medical information any limitations in the authorization regarding the use of the medical information.  No provider of health care, health care service plan, or contractor that has attempted in good faith to comply with this provision shall be liable for any unauthorized use of the medical information by the person or entity to which the provider, plan, or contractor disclosed the medical information.