{"page":"/blog/california-cmia-health-data-advertising","modified":"2026-11-10","license":"https://creativecommons.org/licenses/by/4.0/","columns":["Data holder","Data","Main California law","Notes"],"rows":[["Hospital, clinic or licensed professional","Patient information","CMIA (and HIPAA for PHI)","CCPA excluded to the extent handled as medical information, 1798.146"],["Pharmaceutical company","Medical information it holds or derived from a provider","CMIA","\"Pharmaceutical company\" is named in 56.05(j) and (n)"],["App that maintains medical information for the user","Medical information in the app","CMIA, as a deemed provider","56.06(b)"],["Mental health or reproductive health app or site","Application information","CMIA, as a deemed provider","56.06(d)-(e)"],["Health publisher or general retailer","Browsing, purchases, inferences about health","CCPA","Sensitive personal information if collected and analyzed concerning health, 1798.140(ae)"],["Ad platform receiving data from any of the above","Whatever it receives","Depends on its role and the source","A CMIA source's disclosure needs authorization, 56.10(a)"]],"sourceUrls":[["https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV&sectionNum=1798.146"],["https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV&sectionNum=56.05"],["https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV&sectionNum=56.06"],["https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV&sectionNum=56.06"],["https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV&sectionNum=1798.140"],["https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV&sectionNum=56.10"]]}