California is updating its health care regulatory framework to address the rapid integration of artificial intelligence in clinical environments. With the passage of Assembly Bill No. 3030 (AB 3030), the state has established clear disclosure standards for health care entities using generative AI to communicate clinical information to patients. The law establishes mandatory requirements to protect patient transparency and preserve the human element in medical care. AB 3030 took effect January 1, 2025.
This legislation creates structured guidelines for patient interactions, mandating prominent disclaimers whenever generative AI generates clinical communications, while ensuring patients always have a direct path to reach human health care personnel.
However, health care providers and facility managers must understand the exact scope of this mandate: AB 3030 specifically applies to patient communications containing clinical information that have not been read and reviewed by a human licensed or certified health care provider. It exempts AI-generated content that undergoes human practitioner review prior to delivery.
Here is a breakdown of the key requirements under the law and what they mean for California’s health care landscape.
Required Disclaimers Across Media Types
First and foremost, the law requires health facilities, clinics, solo physician offices, and group practice offices using generative AI for clinical patient communications to provide clear disclaimers indicating that generative AI generated the content.
The statute establishes specific standards for how these disclaimers must be displayed based on the delivery format:
- Written Physical and Digital Media (Letters, Emails, Occasional Messages): The disclaimer must appear prominently at the beginning of each communication.
- Continuous Online Interactions (Chat-based Telehealth): The disclaimer must be prominently displayed throughout the interaction.
- Audio Communications: The disclaimer must be provided verbally at both the start and the end of the interaction.
- Video Communications: The disclaimer must be prominently displayed throughout the interaction.
In addition to the AI disclaimer, every covered communication must include clear instructions explaining how a patient can contact a human health care provider, facility employee, or other appropriate staff member.
Key Definitions Under AB 3030
To ensure compliance, practitioners must understand how the bill defines specific terms:
- Artificial Intelligence: An engineered or machine-based system that varies in its level of autonomy and that can, for explicit or implicit objectives, infer from the input it receives how to generate outputs that can influence physical or virtual environments. This is the baseline definition; the law’s operative disclosure requirement is triggered specifically by the narrower “generative” subset below.
- Generative Artificial Intelligence: Artificial intelligence that can generate derived synthetic content, including text, images, videos, audio, and other digital formats.
- Patient Clinical Information: Information relating to a patient’s health status. The statute explicitly clarifies that this term does not include administrative or business communications, such as appointment scheduling, billing, or general clerical matters.
- Health Care Provider: A person licensed or certified under Division 2 (commencing with Section 500) of the Business and Professions Code.
- Covered Entities: Health facilities, licensed clinics, solo physician offices, and group practice offices (defined as practices where two or more physicians are organized as a partnership, professional corporation, or non-profit).
The Human Review Exception: What It Means for Providers
While this law introduces strict disclosure obligations, it includes an important exception for AI-assisted communications that maintain a human in the loop.
Under Section 1339.75(b), if a communication is generated by generative AI but is subsequently read and reviewed by a human licensed or certified health care provider, the disclaimer and human-contact instructions are not required.
This distinction reinforces the legislative intent: to prevent patients from mistaking automated AI interactions for direct human care, while allowing clinical staff to utilize AI tools internally to draft clinical messages, provided a licensed or certified provider reviews the message before it reaches the patient.
Enforcement Mechanisms and Oversight
Failure to comply with AB 3030 carries regulatory consequences tailored to the facility or provider type:
- Licensed Health Facilities: Violations are subject to standard state department enforcement mechanisms under Health and Safety Code Article 3 (commencing with Section 1275).
- Licensed Clinics: Violations are enforced under Health and Safety Code Article 3 (commencing with Section 1225).
- Physicians: Violations fall under the disciplinary jurisdiction of the Medical Board of California or the Osteopathic Medical Board of California, as appropriate.
Looking Ahead
AB 3030 establishes California as a leading jurisdiction in regulating the clinical applications of artificial intelligence. By balancing tech-driven efficiency with clear patient disclosure, the state aims to maintain public trust in digital health care delivery.
Because these obligations directly impact workflow systems, patient portals, and automated messaging tools, California health care facilities, medical practices, and individual providers should evaluate their existing communication software, update internal workflows, and train staff to ensure complete compliance with the law. If your practice uses AI-assisted patient messaging, schedule a consultation with the Lengea Law team to review your disclosures and workflows.
This article is intended for general informational purposes only and does not constitute legal advice. Because the rules governing AI-generated patient communications, health care disclosure requirements, and related compliance obligations vary by facility type and continue to evolve, practices should consult qualified healthcare regulatory counsel regarding their specific operations.