California Code, Health and Safety Code - HSC § 1364.5

(a) On or before July 1, 2001, every health care service plan shall file with the director a copy of their policies and procedures to protect the security of patient medical information to ensure compliance with the Confidentiality of Information Act (Part 2.6 (commencing with Section 56) of Division 1 of the Civil Code). Any amendment to the policies and procedures shall be filed in accordance with Section 1352.

(b) On and after July 1, 2001, every health care service plan shall, upon request, provide to enrollees and subscribers a written statement that describes how the contracting organization or health care service plan maintains the confidentiality of medical information obtained by and in the possession of the contracting organization or the health care service plan.

(c) The statement required by subdivision (b) shall be in at least 12-point type and meet the following requirements:

(d) On and after July 1, 2001, every health care service plan shall include in its evidence of coverage or disclosure form the following notice, in 12-point type:

A STATEMENT DESCRIBING (NAME OR PLAN OR “OUR”) POLICIES AND PROCEDURES FOR PRESERVING THE CONFIDENTIALITY OF MEDICAL RECORDS IS AVAILABLE AND WILL BE FURNISHED TO YOU UPON REQUEST.