Regulatory Watch  /  California  /  New law
High impactNew lawSigned

California enacts AB 1979 extending CMIA to health care chatbots and imposing AI guardrails in clinical care

California enacted AB 1979, extending the Confidentiality of Medical Information Act to consumer‑facing health care chatbots and requiring them to meet the same standards as traditional providers. The law also mandates health facilities to ensure licensed providers retain independent clinical judgment when AI‑based clinical decision support systems are used, and prohibits AI tools that enable unlicensed personnel to perform clinical functions.

Why it matters: The law expands medical privacy protections to AI chatbots and sets new safeguards on AI use in clinical settings, impacting providers and tech firms.

Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.

Sources
California Law Extends CMIA Protections to Health Care Chatbots and Enacts New Guardrails on AI Use in Clinical Care
Hunton Privacy & Cybersecurity Law Blog · primary source · Oct 29, 2026
Details
JurisdictionCalifornia
RegulatorCA AG
LegislatureCalifornia State Legislature
LawCalifornia Confidentiality of Medical Information Act
BillAB 1979
StatusSigned
PublishedOctober 29, 2026
EffectiveJanuary 1, 2027
Topicsprivacy, health, ai governance, automated decision making
Datapersonal, health, sensitive