CCPA-1798.146-06
Data Governance
1798.146
Business associates must handle patient information like medical/PHI for exemption
Description
Business associates of covered entities must maintain, use, and disclose patient information in the same manner as medical information or protected health information to qualify for CCPA exemption
Full Analysis & Evidence Requirements
Sign in to view the full obligation text, AI-generated applicability analysis, evidence checklists, and compliance mapping.
Sign In to ViewRelated Obligations
CCPA-1798.146-01
Conformity
Comply with deidentification requirements for patient information exemption
CCPA-1798.146-02
Conformity
Ensure deidentified information derives from regulated entity patient data
CCPA-1798.146-03
Requirement
Apply data privacy laws to reidentified information
CCPA-1798.146-04
Conformity
Conduct research in accordance with applicable ethics and privacy rules
CCPA-1798.146-05
Data Governance
Maintain patient information consistent with medical/PHI standards for exemption
Map this obligation to your AI systems
ReguLume automatically maps regulatory obligations to your system inventory, identifies compliance gaps, and generates remediation plans.
Get Started