California Code, Education Code - EDC § 89573

(a) Upon receiving a protected disclosure in writing, the administrator designated in accordance with established procedures of the California State University shall acknowledge receipt of the written disclosure to the complainant.  The administrator may conduct or cause to be conducted an investigative audit of the matter, and determine what action, if any, is necessary.

(b) The administrator shall issue a formal response to the complainant that contains a summary of the allegations, a summary of the investigation, whether the allegations were substantiated, and what actions, if any, were taken in response to the complaint.  This response shall be issued in a timely fashion and in a manner that is consistent with the privacy interests of each person who is involved in the situation addressed by the response.  This response shall be subject to disclosure in accordance with Division 10 (commencing with Section 7920.000) of Title 1 of the Government Code.

(c) The identity of the person providing the protected disclosure shall not be disclosed without the written permission of that person unless the disclosure is to a law enforcement agency that is conducting a criminal investigation or to the State Auditor.