California to Regulate Health Care Chatbots in 2027

New legislation expands medical privacy protections to include consumer-facing AI health tools.

Updated on Oct. 29, 2026 in Artificial Intelligence

Isometric editorial illustration featuring a monolithic stack of modular server hardware, representing digital medical privacy infrastructure. — California will implement Assembly Bill 1979 in 2027, subjecting health care chatbots to the state's stringent medical confidentiality and clinical oversight laws. AI Illustration. Upload story photo >

Live Poll

Do you trust that artificial intelligence tools in clinical care will improve patient outcomes?

California will implement Assembly Bill 1979 on January 1, 2027, to bring health care chatbots under the state's existing medical confidentiality laws. The regulation mandates that health care facilities maintain independent clinical judgment when employing AI-driven support systems.

Why it matters

The law addresses the growing integration of AI in medicine by ensuring these digital tools meet established privacy standards and do not replace licensed clinical oversight. It formalizes the responsibilities of businesses offering AI diagnostic and information management services.

Assembly Bill 1979 classifies consumer-facing health care chatbots as health care providers under the Confidentiality of Medical Information Act. The law explicitly prohibits AI from performing clinical functions reserved for licensed professionals, with a narrow exemption for trainees.

The players

California

This state serves as the legislative jurisdiction for the newly enacted health care AI regulations.

The details

Health facilities must ensure that licensed medical providers maintain independent judgment when utilizing clinical decision support systems. Businesses offering AI chatbots for information management or diagnosis are now held to the same medical confidentiality standards as traditional providers.

January 1, 2027: The Act takes effect.

The Tech Race

This legislation builds upon the Confidentiality of Medical Information Act to codify privacy standards for rapidly evolving AI diagnostic tools. It marks a significant shift as California becomes one of the first states to legally classify health-focused AI as a provider.

Patients can expect enhanced privacy protections when interacting with medical chatbots after January 1, 2027. The law ensures that any AI tool providing diagnostic information remains under the oversight of a licensed professional rather than replacing them.

The takeaway

Patients should verify if their health chatbots provide AI-generated information under the oversight of a licensed human clinician. Users should remain cautious about sharing sensitive health data with digital tools until these new privacy protections take effect.