Privacy Office Home Page

Privacy Office

Privacy Office Lock and Key logo Welcome to the Department of Health Care Services' (DHCS) Privacy Office website.

Learn more about privacy issues, rules and regulations, legislation, the DHCS Privacy Office and other helpful resources. The Privacy Office oversees the California Department of Health Services (DHCS) compliance with state and federal privacy laws, including the Health Insurance Portability and Accountability Act (HIPAA) and the Information Practices Act (IPA). The Privacy Office team of a Privacy Officer and privacy analysts works with other state agencies and contractors who are DHCS Business Associates to facilitate compliance with the HIPAA Privacy Rule, found at 45 CFR, Parts 160 and 164 and California privacy laws, and to safeguard Protected Health Information (PHI).

The Privacy Office investigates and resolves privacy complaints and breaches involving
unauthorized disclosures of PHI. The Privacy Office also:

Advises personnel on privacy laws and regulations.
Conducts privacy training.
Works with DHCS programs.
Develops privacy Policies and Procedures.
Manages HIPAA Notices of Privacy Practices.
Prepares Business Associate and Trading Partner agreements.
Audits DHCS programs for privacy compliance.

California Medicaid Privacy Law:

California Welfare and Institutions Code, section 14100.2 mandates that:

Medi-Cal program information is confidential.
May be used or disclosed "for purposes directly connected with the administration of the Medi-Cal program."
Purposes directly connected to Medi-Cal administration include: determining eligibility and reimbursement, providing services to recipients, conducting or assisting investigations, prosecutions or proceedings related to Medi-Cal, Third Party Liability activities, audits and legislative investigations.
It is a misdemeanor to disclose Medi-Cal data in violation of this law.
State Statute