United States · compare states
Alabama and California: health record laws compared
Alabama and California, side by side on the seven questions, with the laws read October 3, 2026. They give different answers on getting a copy, right to sue and AI in care, and the same answer on everything else we could compare. We can't compare health information exchange (not checked in Alabama).
The seven questions, side by side
"Differs" marks a question where the answers are not the same; "same" marks one where they are. "Can't compare" means at least one answer was not checked; a not-checked answer is not a no. Where a question has a map, the small square shows the color each column has on it. Each citation opens that state's page, with the law quoted, dated and linked. There is no total and no rank: the questions are on different scales, and some have no best answer.
| Question | Alabama | California |
|---|---|---|
| Health data outside HIPAADo apps and wearables need your OK before sharing health data?same | Opt-inYes, at least for some businesses. A law in force requires your OK before they use or share your health data (opt-in).Another law is signed and takes effect May 1, 2027.Ala. Code § 8-43-3(a)(3) (Act 2024-384, § 3); Ala. Code § 8-43-5(1) (Act 2024-384, § 5) | Opt-inYes, at least for some businesses. A law in force requires your OK before they use or share your health data (opt-in).Another law is signed and takes effect January 1, 2027.Cal. Civ. Code § 56.06(d); Cal. Civ. Code § 56.10(a) |
| Getting a copyDo you get a copy faster or free in some cases?differs | Free copy in some casesIn one way: a free copy in at least one case.Ala. Admin. Code r. 540-X-9-.10; Ala. Code § 12-21-6.1 (Act 94-609) | Faster, and free in some casesYes, both. A deadline shorter than 30 days, and a free copy in at least one case.Cal. Health & Safety Code § 123110(b)(1); Cal. Health & Safety Code § 123110(d)(1) |
| Health information exchangeCan you say no to sharing through a health information exchange (a network that passes records between doctors)?can't compare | Can't compare: not checked AL page | No general choiceNo general choice. Sharing through the exchange follows HIPAA's rules, and no state rule or exchange policy offers a general choice.Cal. Health & Safety Code § 130290(a); Cal. Civ. Code § 56.10(c)(1) |
| Are some sensitive records, like mental health or HIV, given extra rules? These answers record whether a rule exists and what it says. They say nothing about whether any care is legal or available. | ||
| Reproductive health recordssame | Has a ruleYes. A law in force has a specific rule on keeping these records confidential or on who may see them.Ala. Code § 22-9A-13(b)(5) (Act 2012-363) | Has a ruleYes. A law in force has a specific rule on keeping these records confidential or on who may see them.Another law is signed and takes effect January 1, 2027.Cal. Civ. Code § 56.108(a); Cal. Civ. Code § 56.101(c) |
| Mental health recordssame | Has a ruleYes. A law in force has a specific rule on keeping these records confidential or on who may see them.Ala. Code § 22-56-4(b)(6) (Act 95-744); Ala. Code § 34-26-2 (Act 97-387) | Has a ruleYes. A law in force has a specific rule on keeping these records confidential or on who may see them.Cal. Welf. & Inst. Code § 5328(a) |
| HIV recordssame | Has a ruleYes. A law in force has a specific rule on keeping these records confidential or on who may see them.Ala. Code § 22-11A-54 (Act 91-120); Ala. Code § 22-11A-22 (Act 87-574) | Has a ruleYes. A law in force has a specific rule on keeping these records confidential or on who may see them.Cal. Health & Safety Code § 120980(a) |
| Genetic recordssame | Has a ruleYes. A law in force has a specific rule on keeping these records confidential or on who may see them.Ala. Code § 8-43-3(c) (Act 2024-384, § 3) | Has a ruleYes. A law in force has a specific rule on keeping these records confidential or on who may see them.Cal. Civ. Code § 56.181(a)(2) |
| Right to sueCan you sue if your records are misused?differs | No right to sueNo. Only the attorney general or a regulator can enforce these laws.Another law is signed and takes effect May 1, 2027.Ala. Code § 8-38-9(a)(1) (Act 2018-396, § 9); Ala. Code § 8-43-6(b) (Act 2024-384, § 6) | Yes, in generalYes. You can sue over unlawful collection, use or sharing of medical records or health data in general.Cal. Civ. Code § 56.36(b); Cal. Civ. Code § 56.35 |
| Breach noticeMust you be told if health data leaks in a breach?same | Medical and insurance dataYes. The breach notice law covers both medical information and health insurance information.Ala. Code § 8-38-2(6)a.4. (Act 2018-396, § 2); Ala. Code § 8-38-2(6)a.5. (Act 2018-396, § 2) | Medical and insurance dataYes. The breach notice law covers both medical information and health insurance information.Cal. Civ. Code § 1798.82(h); Cal. Civ. Code § 1798.82(a)(2)(A) |
| AI in careAre there rules for AI used in your care?differs | 1 of 3 rulesOne of the three rules is in force. A licensed clinician decides, not AI alone.Ala. Code § 27-1-17.2(b)(3) (Act 2026-589, § 1); Ala. Code § 27-1-17.2(c)(1) (Act 2026-589, § 1) | 3 of 3 rulesAll three rules are in force. You must be told when AI is used in your care. A licensed clinician decides, not AI alone. You can reach a human, or have a human review the decision.Another law is signed and takes effect January 1, 2027.Cal. Health & Safety Code § 1339.75(a)(1); Cal. Health & Safety Code § 1339.75(a)(2) |
Not legal advice. This records what each law said on the date we read it. Laws and court orders change. State laws add to the federal floor. The United States score in the world index rates only federal law and national systems, so these state profiles do not change it.
Compare other states
All 50 states and Washington, DC, question by question
Built by SuperTruth, which checks whether a record can be trusted before an AI acts on it. About SuperTruth · How we used AI
Health Record Rights Index by SuperTruth. Research tool, not legal advice. Text CC BY 4.0.