CA SB456

Amends the California Consumer Privacy Act of 2018 to add exceptions for medical information and protected health information governed by the Confidentiality of Medical Information Act and the Health Insurance Portability and Accountability Act (HIPAA).

Extends the CCPA exemption to include information collected by covered entities or business associates, providers of health care, and information collected as part of clinical trials subject to federal human subject protection requirements.

Clarifies that definitions of "medical information," "provider of health care," "business associate," "covered entity," and "protected health information" shall apply from specified state and federal regulations.

Does not require businesses to reidentify or link information that is not maintained as personal information, and preserves rights and freedoms of other consumers.