CA AB1755

Extends the reporting deadline for healthcare facilities (clinics, health facilities, home health agencies, hospices) from 5 business days to 15 business days when reporting unlawful or unauthorized access to patient medical information to the Department of Public Health and affected patients.

Authorizes patient notifications to be made by alternative means including email (with prior written patient consent) instead of only to the patient's last known address.

Extends the reporting deadline for delayed law enforcement requests from 5 business days to 15 business days after the delay period ends, with law enforcement delays capped at 60 days (written request) or 30 days (oral request).

Increases daily penalty for late reporting from $100 per day with a $250,000 cap per event, and grants the Department of Public Health full discretion to consider all factors when determining whether to investigate violations.

Creates the Internal Departmental Quality Improvement Account to receive all penalties collected under this section and related provisions for use in the Licensing and Certification Program.