California Code, Penal Code - PEN § 13778.3

(a) For purposes of this section, the following terms shall have the following meaning:

(b) A state or local government employee, person or entity contracted by a state or local government, or person or entity acting on behalf of a local or state government shall not cooperate with or provide information to any individual, including a bondsman or person authorized, pursuant to subdivision (a) of Section 1299.02, to apprehend, detain, or arrest a fugitive admitted to bail in another state, or out-of-state agency or department regarding any legally protected health care activity or otherwise expend or use time, moneys, facilities, property, equipment, personnel, or other resources in furtherance of any investigation or proceeding that seeks to impose civil or criminal liability or professional sanctions upon a person or entity for any legally protected health care activity that occurred in this state or that would be legal if it occurred in this state.

(c) This section does not prohibit compliance with a valid, court-issued subpoena, warrant, wiretap order, pen register trap and trace order, or other legal process which does not relate to a law seeking to impose civil or criminal liability or professional sanctions for a legally protected health care activity, or in response to the written request of a person who is the subject of such an investigation or proceeding, to the extent necessary, in each case, to fulfill such request.

(d) Any out-of-state subpoena, warrant, wiretap order, pen register trap and trace order, legal process, or request from any law enforcement agent or entity shall include an affidavit or declaration under penalty of perjury that the discovery is not in connection with an out-of-state proceeding relating to any legally protected health care activity unless the out-of-state proceeding meets all of the following requirements:

(e) A state court, judicial officer, court employee or clerk, or authorized attorney shall not issue a subpoena pursuant to any other state's law unless it includes the affidavit or declaration defined in subdivision (d).

(f) A California corporation that provides electronic communication services or remote computing services to the general public shall not comply with an out-of-state subpoena, warrant, wiretap order, pen register trap and trace order, other legal process, or request by a law enforcement agent or entity seeking records that would reveal the identity of the customers using those services, data stored by, or on behalf of, the customer, the customer's usage of those services, the recipient or destination of communications sent to or from those customers, or the content of those communications, unless the out-of-state subpoena, warrant, wiretap order, pen register trap and trace order, other legal process, or request from law enforcement includes the affidavit or declaration defined in subdivision (d).  A corporation subject to this subdivision is entitled to rely on the representations made in the affidavit or declaration.