SB 536 creates a statutory framework requiring insurers and licensed rating organizations to share information with specified California government agencies when investigating suspected workers’ compensation insurance fraud. It obligates insurers to notify local district attorneys, the Department of Insurance Fraud Division, and—when premium fraud is suspected—the Employment Development Department, using a department‑prescribed reporting form and stating the factual basis for the suspicion.
The bill also makes EDD both a provider and a recipient of investigative records: EDD must release claimant and employer records to authorized agencies on written request and, upon certain conditions, provide detailed payroll summaries to insurers or rating organizations. The measure caps the insurer’s time to produce records at 60 days, requires confidentiality protections and limits onward disclosure, and imposes quarterly cost reimbursement to EDD for furnishing payroll information.
Together, these rules tighten interagency cooperation while carving out privacy and legal exceptions.
At a Glance
What It Does
SB 536 requires insurers or their agents and licensed rating organizations to notify designated public agencies when they know or reasonably suspect a person committed workers’ compensation insurance fraud, and to supply requested records. It also directs the Employment Development Department to release claimant and employer records to authorized agencies and to provide payroll detail to insurers on written request if the request is narrowly tailored and tied to a workers’ compensation investigation.
Who It Affects
Primary actors are California workers’ compensation insurers and their agents, licensed rating organizations, the Employment Development Department, local district attorneys, and the Department of Insurance Fraud Division; employers and claimants will be indirect subjects because their payroll, application, medical, and claim records are eligible for disclosure.
Why It Matters
The bill removes procedural friction to cross‑agency fraud investigations by standardizing notice, specifying data types that may be shared, imposing a 60‑day production deadline, and creating a cost‑recovery path for EDD—changes that will speed investigations but raise privacy and compliance tradeoffs for insurers, EDD, employers, and claimants.
More articles like this one.
A weekly email with all the latest developments on this topic.
What This Bill Actually Does
SB 536 rewrites who can share what records in California workers’ compensation fraud probes and when. It obligates insurers and licensed rating organizations, upon written request from an authorized governmental agency, to hand over any relevant records they possess that the agency deems important to a specific investigation.
When an insurer knows or reasonably believes someone committed fraud relating to a workers’ compensation claim, policy, or application, the insurer (or its authorized agent) must notify the local district attorney, the Department of Insurance’s Fraud Division, and—if premium fraud is implicated—the Employment Development Department; the insurer must explain the factual basis for its suspicion and use a department‑prescribed reporting form.
The bill makes clear that information received by an authorized agency under this authority can be shared, upon request, with other authorized agencies so long as doing so would not violate federal law or compromise an investigation. SB 536 imposes a production deadline: an insurer or rating organization must provide requested information within a reasonable time but no later than 60 days from the date the duty to produce arose.
It also preserves the separate authority created by the initial provision allowing agencies to request material.On the EDD side, SB 536 requires the department, on written request, to release claimant‑level unemployment and disability application and claim forms, supporting medical records and documentation, employer returns filed under the Unemployment Insurance Code, benefit payment checks, and any documentation that identifies a claimant (SSN, address, phone). Conversely, EDD must provide insurers, agents, or rating organizations with detailed payroll information and summary totals if the requester specifies the needed data and EDD determines it’s consistent with a workers’ compensation investigation.
That payroll data must be released confidentially, cannot be repurposed for certain marketing or underwriting uses, and cannot be shared with law enforcement except under defined fraud‑referral pathways or as part of a request consistent with the law.Finally, the bill requires insurers, agents, or rating organizations requesting payroll data to reimburse EDD quarterly for the department’s actual direct costs of producing those records. Throughout, SB 536 builds in caveats: federal law or circumstances that would compromise an investigation block disclosure, and agencies must obtain EDD approval before forwarding EDD records to an entity not otherwise authorized under specific federal or state privacy provisions.
The Five Things You Need to Know
Insurers and licensed rating organizations must notify the local district attorney, Department of Insurance Fraud Division, and, for premium fraud, the Employment Development Department when they know or reasonably believe someone committed workers’ compensation insurance fraud.
Insurers must use a reporting form prescribed by the Department of Insurance and state the factual basis for any suspected fraud in their notice.
An insurer or rating organization must provide records requested by an authorized governmental agency within a reasonable time but no later than 60 days after the duty to produce arises.
EDD must release claimant application and claim forms, supporting medical records, employer UI returns, benefit payment checks, and identifying documentation to authorized agencies on written request, and may provide payroll summary totals to insurers if EDD approves the request.
Insurers, agents, or rating organizations that request payroll information from EDD must reimburse EDD quarterly for the department’s actual, direct costs of producing that information.
Section-by-Section Breakdown
Every bill we cover gets an analysis of its key sections.
Mandatory production of insurer records on written request
This subsection requires an insurer, its authorized agent, or a licensed rating organization to release any or all relevant information that an authorized governmental agency deems important for a specific workers’ compensation fraud investigation when that agency sends a written request. Practically, this flips the default toward disclosure: insurers can no longer decline simply because data are proprietary—the statute conditions production on the agency’s declaration that the records are relevant.
Mandatory reporting and standardized form
When an insurer knows or reasonably believes a fraudulent act occurred, it must notify specified public entities (local DA, DOI Fraud Division, and EDD for premium fraud) and may notify other agencies. The insurer must state the basis for its suspicion and use a Department‑prescribed form. The provision creates an affirmative duty to report and to document the factual predicate for that report, which will feed prosecutors’ and EDD’s intake and triage processes.
Interagency sharing, confidentiality limits, and production timeline
Information received under (a), (b), or (e) may be shared with other authorized agencies upon request unless federal law or investigation integrity prohibits it. The statute caps supplier response time at 60 days, a concrete compliance deadline that insurers and rating organizations must build into their records teams’ workflows; the confidentiality proviso preserves existing federal privacy constraints and investigatory safeguards.
EDD disclosures to authorized agencies — scope of records
EDD must release to authorized agencies, on written request, a broad set of claimant and employer records relevant to fraud probes, including unemployment/disability claim forms, supporting medical records, employer returns, benefit checks, and documents that identify claimants. The subsection also requires agencies to get EDD approval before forwarding these records to entities not already authorized under federal or state privacy rules, which preserves a limited gatekeeping role for EDD.
EDD release of payroll detail to insurers and cost recovery
EDD shall provide payroll summary totals and detailed payroll information to insurers, agents, or rating organizations upon written request if the requester specifies the needed data and EDD determines it’s consistent with a workers’ compensation fraud investigation. The statute bars secondary use in certain privacy contexts, restricts sharing with law enforcement except via prescribed fraud‑referral channels, and requires quarterly reimbursement to EDD for actual direct costs—creating a transactional, fee‑for‑service model for payroll data access.
This bill is one of many.
Codify tracks hundreds of bills on Employment across all five countries.
Explore Employment in Codify Search →Who Benefits and Who Bears the Cost
Every bill creates winners and losers. Here's who stands to gain and who bears the cost.
Who Benefits
- Local district attorneys — Receive standardized, documented tips and relevant records faster, improving triage and evidence collection for workers’ compensation fraud prosecutions.
- Department of Insurance Fraud Division — Gains statutory affirmation of its role and more direct access to insurer records and insurer‑stated bases for suspicion, simplifying investigative starts.
- Employment Development Department investigators — Obtain claimant and employer records and payroll data useful for detecting premium and benefit fraud, and receive cost reimbursement for producing payroll information.
- Insurers and licensed rating organizations (investigative units) — Gain access to EDD payroll and claimant records that can substantiate suspicious activity, reducing the time and expense of independent record gathering.
- Compliance and fraud analysts — Benefit from a prescribed reporting form and a 60‑day production deadline that standardize workflows and make evidence timelines predictable.
Who Bears the Cost
- Insurers and licensed rating organizations — Must implement procedures to identify suspected fraud, complete prescribed forms, assemble and produce records within 60 days, and manage legal review to avoid improper disclosures.
- Employment Development Department operations — Must process more disclosure requests, prepare payroll and claimant files for transfer under confidentiality constraints, and absorb administrative overhead that reimbursement may not fully cover.
- Employers — Face increased scrutiny and potential audits as EDD payroll data and employer UI returns become easier for insurers and agencies to access and compare against claims.
- Claimants — Experience greater exposure of medical records and identifying information during investigations, raising privacy and reputational risk if safeguards fail.
- Small insurers or rating organizations — May face disproportionate compliance burden compared with larger firms because of the resource demands of timely production and reporting.
Key Issues
The Core Tension
SB 536 resolves the tension between swift fraud detection and data privacy by privileging disclosure to authorized investigators, but in doing so it forces a trade‑off: faster, broader information flows improve enforcement but increase the risk of overcollection, privacy breaches, and uneven burden on smaller insurers and on EDD unless accompanied by precise rules, funding for compliance, and technical safeguards.
SB 536 strengthens investigative capacity by lowering information‑sharing barriers, but that design sits on several fragile assumptions. The statute repeatedly defers to federal law and investigatory integrity as limits on disclosure, yet it does not define how conflicts between state record requests and federal restrictions (for example, disclosure limits under Title 20 of the Code of Federal Regulations) will be resolved in practice.
Agencies and insurers will need operational rules for handling partial disclosures, redactions, and litigation risk when EDD or insurers err on the side of release.
The bill’s confidentiality and reuse restrictions are important but not self‑enforcing. For example, payroll data from EDD are prohibited from certain downstream uses and from being shared with law enforcement except through narrow paths; administering those limits requires audit trails, access controls, and interagency MOUs that the statute does not fund or standardize.
Cost recovery for EDD is limited to ‘‘actual, direct costs’’ and paid quarterly, which may leave the department bearing up‑front processing costs or disputes about what is ‘‘direct.’u200b'' The statutory language—terms like "relevant information" and "reasonably believes"—creates room for broad interpretation, which will produce variation in reporting rates and enforcement across insurers and counties.
Try it yourself.
Ask a question in plain English, or pick a topic below. Results in seconds.