15. Appendix B: June 2022 HIPAA Reassessment Results

The Center for Data Insights and Innovation (CDII) is authorized by state statute to coordinate and monitor Health Insurance Portability and Accountability Act (HIPAA) compliance by all California State entities within the executive branch of government covered or impacted by HIPAA. To help ensure full compliance with HIPAA, CDII conducted a reassessment with all State Departments in February and March 2022.

Note the asterisk (*) means the entity was added to the list per the 2022 review.

Covered Entities and Business Associates

Subject to CDII oversight (including compliance reviews)

List Number	Organization
1	Aging, Department of (CDA)
2	Cal State East Bay*
3	Cal State Fullerton*
4	Cal State Long Beach*
5	Cal State Los Angeles*
6	Cal State Northridge*
7	Cal State San Bernardino*
8	California Maritime Academy*
9	Chico State*
10	Corrections and Rehabilitation (CDCR), Department of / California Correctional Health Care Services (CCHCS)
11	CSU San Marcos*
12	Developmental Services, Department of (DDS)
13	Forestry and Fire Protection (Cal Fire), Department of
14	Fresno State*
15	General Services, Department of (DGS)
16	Health Care Services, Department of (DHCS)
17	Prison Industry Authority, California (Cal PIA)
18	Public Employees Retirement System (CalPERS), California
19	Public Health, Department of (CDPH)
20	Sacramento State*
21	San Diego State*
22	San Francisco State*
23	San Jose State*
24	Social Services, Department of (CDSS)
25	Sonoma State*
26	State Hospitals, Department of (DSH)
27	Systems Integration, Office of (OSI)
28	Technology, Department of (CDT)
29	Veterans Affairs, Department of (CalVET)

---

Impacted Entities

Impacted by State and/or Federal regulations and laws related to health information privacy (non-HIPAA)

Please reference California Health and Safety Code 1302023 (et seq.) CDII’s revised statutory authority includes oversight of organizations subject to non-HIPAA health information privacy laws and regulations. CDII is developing a compliance program for non-HIPAA entities to address these other state and federal privacy laws not included in the current HIPAA compliance program. The organizations included in this list will be subject to that newly created program.

1	Alcoholic Beverage Control Appeals Board
2	Alcoholic Beverage Control, Department of
3	Business, Consumer Services and Housing Agency
4	Cal Poly Pomona
5	Cal Poly San Luis Obispo
6	California Energy Commission
7	California Institute for Regenerative Medicine
8	Cannabis Control Appeals Panel
9	Cemetery and Funeral Bureau
10	Central Valley Flood Protection Board
11	Child Support Services, Department of
12	Commission on Peace Officer Standards and Training
13	Community Services and Development, Department of
14	Conservation Corps, California
15	Conservation, Department of
16	Contractors' State License Board
17	CSU Bakersfield
18	CSU Channel Islands
19	CSU Dominquez Hills
20	CSU Monterey Bay
21	Delta Stewardship Council
22	Dental Board of California
23	Dental Hygiene Board of CA
24	Department of Cannabis Control
25	Department of Financial Protection and Innovation
26	Department of Health Care Access and Information (formally OSHPD)
27	Developmental Disabilities, State Council on
28	Education, Western Interstate Committee for Higher (WICHE)
29	Emergency Medical Services Authority
30	Employment Development Department
31	Employment Training Panel
32	Environmental Protection Agency
33	Equalization, Board of
34	Fair Employment and Housing Department
35	Fair Political Practices Commission
36	Fi$Cal (Financial Information System for California)
37	Fish and Wildlife, Department of
38	Franchise Tax Board
39	Gambling Control Commission
40	Governor's Office of Business and Economic Development
41	Health Benefit Exchange, Covered California - California
42	High-Speed Rail Authority
43	Horse Racing Board, California
44	Housing Finance Agency
45	Human Resources, CalHR - Department of
46	Humboldt Poly Technic
47	Industrial Relations, Department of
48	Inspector General, Office of
49	Insurance, Department of (Insurance Commissioner)
50	Justice, Department of (Attorney General)
51	Lottery, California State
52	Mandates, Commission on State
53	Medical Board of California
54	Motor Vehicles, Department of
55	Natural Resources Agency
56	New Motor Vehicle Board
57	Office of Law Enforcement Support
58	Office of Tax Appeals
59	Personnel Board, State
60	Physical Therapy Board of California
61	Planning and Research, Governor's Office of
62	Podiatric Medicine, Board of
63	Prison Industry Authority, California
64	Public Defender, State
65	Public Employment Relations Board
66	Public Utilities Commission, California
67	Real Estate, Department of
68	Registered Nursing, Board of
69	Resources Recycling and Recovery, Department of (CalRecycle)
70	Security and Investigative Services, Bureau of
71	Sierra Nevada Conservancy
71	Stanislaus State
73	State Coastal Conservancy
74	State Controller’s Office
75	State Lands Commission
76	State Water Resources Control Board
77	Tax and Fee Administration, Department of
78	Teacher Credentialing, Commission on
79	Teachers' Retirement Board
80	Toxic Substances Control, Department of
81	Transportation, Department of
82	Unemployment Insurance Appeals Board
83	Victim Compensation Board
84	Water Resources, Department of
85	Workforce Development Board