California enacts AB 1979 extending CMIA to health care chatbots and imposing AI guardrails in clinical care

Qué ocurrió

California enacted AB 1979, extending the Confidentiality of Medical Information Act to consumer‑facing health care chatbots and requiring them to meet the same standards as traditional providers. The law also mandates health facilities to ensure licensed providers retain independent clinical judgment when AI‑based clinical decision support systems are used, and prohibits AI tools that enable unlicensed personnel to perform clinical functions.

Por qué es importante para la confianza y el cumplimiento

• Its status is signed. It is enacted but may not be in force yet. Check the effective date before planning around it.
• The law expands medical privacy protections to AI chatbots and sets new safeguards on AI use in clinical settings, impacting providers and tech firms.
• Takes effect January 1, 2027.

Who is affected

Recommended actions

1. Check that privacy notices describe the practices this addresses.
2. Inventory AI or automated decision systems in scope and their assessments.
3. Confirm handling of sensitive data categories meets the stricter rules.