California Health Care Services AI Act Disclosure Requirements
CA-HCSAI · California State Legislature
California law requires healthcare providers that use generative AI to communicate with patients to disclose that the communication was AI-generated and to provide clear instructions for reaching a human representative. The requirement applies to covered health care service providers operating in California. It is intended to ensure patients are not misled about the nature of the entity they are interacting with when seeking health information or services.
Overview
The California Health Care Services AI Act Disclosure Requirements establish a binding obligation on healthcare providers in California to notify patients when generative AI is used in patient-facing communications, including messages, responses, and related interactions. Covered entities must disclose the AI-generated nature of the communication and supply patients with a readily accessible pathway to contact a human staff member or representative. The law is part of a broader trend of state-level AI transparency mandates targeting high-stakes consumer contexts, particularly in healthcare where patient reliance on communications can have clinical consequences. Enforcement is presumed to fall under existing California health care regulatory oversight, potentially including the Department of Managed Health Care and the California Department of Public Health, though specific penalty structures should be confirmed against the enacted text. Several other states are actively evaluating analogous requirements covering clinical decision support tools and automated insurance claims adjudication. Enterprises operating multi-state health care operations should monitor parallel legislative developments that may impose additional or overlapping obligations.
Key Requirements
- •Disclose to patients when any patient-facing communication is generated or substantially produced by generative AI
- •Provide clear, accessible instructions within the communication for how the patient can contact a human representative
- •Disclosure must be present at the point of the AI-generated communication, not solely in general terms of service or privacy notices
- •Applies to healthcare providers subject to California jurisdiction that deploy generative AI in patient communication workflows
- •Compliance required as of January 1, 2026, for covered entities
- •Note: specific penalty amounts and enforcement agency authority should be verified against the enacted statutory text, as confidence in granular details is medium
Who It Affects
Effective Date
2026-01-01