CA AB352

Requires businesses that electronically store medical information to develop capabilities and policies by July 1, 2024, to limit access to and segregate records related to abortion, gender affirming care, and contraception, and to prevent disclosure of such information outside California.

Prohibits health care providers, health care service plans, contractors, and employers from sharing medical information identifying individuals seeking lawful abortion or abortion-related services with out-of-state agencies or federal law enforcement, with limited exceptions for valid patient authorization, payment processing, accreditation, and bona fide research.

Excludes health information related to abortion and abortion-related services from automatic sharing through the California Health and Human Services Data Exchange Framework.

Provides liability protection for health care providers working diligently in good faith to comply with these requirements before January 31, 2026.

Does not prohibit cooperation with investigations of activities that are crimes under California law or compliance with valid California court orders and federal law that preempts state law.