Federal HIPAA + California CMIA + CCPA

Website Compliance in California

HIPAA + California CMIA + CCPA/CPRA compliance — the three layers California healthcare practices actually need.

3 Cities served
CMIA + CCPA State law in force
1981 (CMIA) / 2020 (CCPA) Law enacted
Yes Private right of action

California is home to over 120,000 physicians and tens of thousands of dental, chiropractic, and allied health practices — the largest concentration in the country.

CMIA + CCPA · Enacted 1981 (CMIA) / 2020 (CCPA)

Why Federal HIPAA Alone Isn't Enough in California

California has the oldest and strictest medical privacy law in the country (CMIA) layered on top of the broadest consumer privacy law (CCPA/CPRA). Healthcare practices here face a three-way compliance obligation: HIPAA + CMIA + CCPA.

Key provisions that affect your website

  • CMIA covers a broader range of health data than HIPAA, including data held by non-HIPAA entities
  • Statutory damages of $1,000 per violation plus actual damages and attorney's fees
  • CCPA/CPRA gives California residents the right to know, delete, and correct personal data
  • Patients can sue you directly — no government complaint required
  • Data broker registration and opt-out compliance required for practices that share data
Market context

California healthcare is the largest market in the US — and also the most litigated. Healthcare-specific class actions have grown 300% since 2020. Practices that fall behind on state compliance pay a disproportionate price here.

What you get

How we help practices in California

Free compliance audit

We map every third-party tool on your site against HIPAA and CMIA + CCPA, flag BAA gaps, and deliver a prioritized remediation list.

Request audit

Healthcare website plans

Ongoing support tailored to California's regulatory environment — not a generic web agency package.

See plans

Specialty niches

Dedicated compliance playbooks for dental, chiropractic, and physical therapy practices.

Browse industries

Ready to get HIPAA + CMIA + CCPA-ready in California?

Get a free compliance audit and find out exactly where your website stands. No obligation, no surprises - just a clear report you can act on.

Get Free Compliance Audit