(a) All state entities subject to HIPAA shall complete an assessment, in a form specified by the office to determine the impact of HIPAA on their operations.
(b) All state entities shall cooperate with the office to determine whether they are subject to HIPAA, including, but not limited to, providing a completed assessment as prescribed by the office.
(Amended by Stats. 2016, Ch. 30, Sec. 14. (SB 833) Effective June 27, 2016.)