California has enacted a number of laws dealing with the security and use of health information technology systems.

Health care providers that use electronic records systems must have policies and procedures in place in order to safeguard the confidentiality of patient information and to prohibit any unauthorized access of such records.  A health care provider is required to use an offsite backup storage system and a way of ensuring that once data is entered into the system, it cannot be changed.  Once an electronic patient record has been created and stored, the provider may destroy the original hard copy.1

All insurance companies licensed in California are required to implement an information security program that protects consumer information.2  Its  patient records must be kept confidential and secured against any unauthorized access.3

Additionally, California law requires the state to utilize a Management Information System that includes a clinical decision support system in order to oversee and evaluate the quality of care given to Medicaid recipients and their access to services.4

The state has also enacted laws governing the implementation of the electronic health record incentive program through its Medicaid State Health Information Technology Plan.5