California AB 3030: Generative AI Disclosure in Health Care Communications
Issued by
California State Legislature
- September 30, 2026 · Correction — Identified the law (AB 3030), corrected the start date to 1 January 2025, the covered providers, the reviewed-message exemption, and the enforcing agencies (fact-check finding). (Cody Maxwell)
- October 1, 2026 · Correction — Rewrote the practical steps, newsletter hook, search description, and audience fields to match the entry's corrected content. (Cody Maxwell)
California AB 3030 has applied since 1 January 2025. Health facilities, clinics, and physician offices must tell patients when generative AI writes communications about their clinical information, and explain how to reach a human. Messages reviewed by a licensed provider are exempt.
Applies To
Overview
AB 3030 (Chapter 848, Statutes of 2024) added section 1339.75 to the Health and Safety Code. It was signed on 28 September 2024 and has applied since 1 January 2025. It covers health facilities, clinics, physician offices, and group practices that use generative AI to communicate patient clinical information. That means information about a patient's health status, not administrative matters such as scheduling or billing. Each such communication needs a disclaimer that generative AI produced it. It also needs clear instructions for reaching a human provider or other appropriate person. Placement depends on the format. Written messages show the disclaimer at the start, and chat or video shows it throughout. Audio gives it verbally at the start and end. Communications read and reviewed by a licensed or certified health care provider are exempt. The State Department of Public Health enforces the law for licensed health facilities and clinics. The Medical Board of California and the Osteopathic Medical Board of California handle physicians. Health plans are not covered.
Key Requirements
- •Applies to health facilities, clinics, physician offices, and group practices using generative AI for patient clinical information.
- •Include a disclaimer that generative AI produced the communication.
- •Include clear instructions for contacting a human health care provider or other appropriate person.
- •Place the disclaimer by format: at the start of written messages, throughout chat and video, and at the start and end of audio.
- •Communications read and reviewed by a licensed or certified provider are exempt, as are administrative messages.
- •In force since 1 January 2025, enforced by the Department of Public Health and the medical boards.
What Your Organization Must Do
- →Map every patient communication channel where generative AI drafts clinical information messages.
- →Add a disclaimer that generative AI produced the message, placed as the law requires by format.
- →Include clear instructions in each covered message for reaching a human provider or appropriate person.
- →Document which communications a licensed or certified provider reads and reviews, since those are exempt.
- →Update vendor contracts for patient portals and record systems to require disclosure-ready outputs.
- →Brief clinical and marketing teams that privacy notices alone do not satisfy the per-message disclaimer.
Playbook Guidance
Step-by-step implementation guidance for compliance teams.
Frequently Asked Questions
- Which healthcare providers must comply with AB 3030?
- Health facilities, clinics, physician offices, and group practices in California. Health plans are not covered. The duty has applied since 1 January 2025.
- Does the AB 3030 disclosure requirement apply to AI tools embedded in third-party patient portal or EHR vendor platforms?
- Yes, if the tool generates a covered communication on the provider's behalf, the provider still owes the disclosure. Vendor contracts should require disclosure-ready outputs and allocate responsibility for misses.
- Is it sufficient to disclose AI use in a general privacy notice or terms of service?
- No, the disclaimer must appear in each covered communication, placed by format. Communications reviewed by a licensed provider are exempt, and so are administrative messages such as scheduling or billing.
- What specific information must appear in a compliant AB 3030 disclosure?
- A statement that generative AI produced the communication. It also needs clear instructions for contacting a human health care provider, employee, or other appropriate person.
- What enforcement agency oversees AB 3030?
- The Department of Public Health enforces it for licensed health facilities and clinics, using existing powers. The Medical Board and the Osteopathic Medical Board handle physicians. The Department of Managed Health Care has no role.
- How does AB 3030 compare to other state AI disclosure requirements for healthcare?
- AB 3030 is narrow: it covers generative AI messages about clinical information and requires a disclaimer and a human contact. Multi-state providers should track similar bills in other states.