California Civil Code 1798.146: deidentified patient information outside the CCPA (Cal. Civ. Code 1798.146(a)(4))
Patient information de-identified to the HIPAA standard is outside the CCPA, and loses that exemption if it is re-identified.
Dated 17 Oct 2026Source checked 17 Oct 2026Basis: primary text
In the source's own words
“(i) It is deidentified in accordance with the requirements for deidentification set forth in Section 164.514 of Part 164 of Title 45 of the Code of Federal Regulations. (ii) It is derived from patient information that was originally collected, created, transmitted, or maintained by an entity regulated by the Health Insurance Portability and Accountability Act, the Confidentiality Of Medical Information Act, or the Federal Policy for the Protection of Human Subjects, also known as the Common Rule.”
Where it was read
Figures it counts in
It is shown on its own, not counted into a figure.
Cited in this guide