Investigative consumer reporting agency shall not furnish report to employer, court, insurance, or landlord if it includes medical information unless consumer consents.
"Medical information" means information on a person's medical history or condition obtained directly or indirectly from a licensed physician, medical practitioner, hospital, clinic, or other medical or medically related facility.
Each agency shall maintain in its records only personal information which is relevant and necessary to accomplish a purpose of the agency required or authorized by the California Constitution or statute or mandated by the federal government.
An agency that collects personal information, including electronically, must maintain the source(s) in accessible form to the data subject unless the source is the data subject or she or he has received a copy of the source document.
An agency that collects personal information, including electronically, must maintain the source(s) in accessible form to the data subject unless the source is the data subject that has received a copy.
Each agency that collects personal information shall provide the following notice: the name of the agency/division requesting the information; the contact information of the agency official responsible for the system of records and who shall, upon request, inform an individual regarding the location of his or her records and the categories of any persons who use the information in those records; the legal authority for the maintenance of the information; whether submission of such information is mandatory or voluntary; the consequences of not providing all or any part of the requested informat
Agencies shall maintain records with accuracy, relevance, timeliness, and completeness to the maximum extent possible when records are used to make a determination about the individual. When records are transferred outside of state government, the agency shall update, correct, withhold, or delete any inaccurate or untimely portion of the record.
Agencies must establish rules for persons involved in the design, development, operation, disclosure, or maintenance of records containing personal information. Agencies must instruct persons involved as to the established rules and the requirements of this chapter.
Each agency shall establish appropriate and reasonable administrative, technical, and physical safeguards to ensure compliance with the IPA, to ensure the security and confidentiality of records, and to protect against anticipated threats or hazards to security.
