CA AB2448

Requires businesses that electronically store medical information to not only develop but also actively enable security protections for sensitive health data related to gender affirming care, abortion services, and contraception

Mandates limiting user access privileges to sensitive medical information only to authorized persons and preventing disclosure of this information to entities outside California

Requires segregation of medical records related to gender affirming care, abortion, and contraception from the rest of a patient's health record

Enables automatic disabling of access to segregated sensitive medical information by individuals and entities in other states

Expands the scope of an existing misdemeanor crime under the Confidentiality of Medical Information Act (CMIA), which applies when violations result in economic loss or personal injury to patients