Codify — Article

Establishes statewide California cancer registry with regional reporting and data controls

Creates a state-managed, population-based cancer incidence system using regional registries, new reporting duties, confidentiality rules, and an implementation/funding schedule due January 1, 2027.

The Brief

This bill directs the California Department of Public Health to build and maintain a statewide cancer incidence system organized around population-based regional cancer registries and an ongoing statewide reporting infrastructure. It authorizes the department to designate regional reporting areas, award contracts or grants to operate those registries, and requires providers and facilities in reporting areas to submit cancer cases to the department or its authorized representative.

The measure includes operational details that matter to implementers: it prescribes electronic reporting formats and a web portal for pathologists, creates billing and late‑fee mechanisms when the department must extract records, establishes confidentiality rules and controlled disclosure pathways for researchers and other registries, and obliges the director to deliver an implementation and funding schedule to the Legislature by January 1, 2027. Those features centralize surveillance while shifting some operational and compliance burdens onto providers and contractors.

At a Glance

What It Does

Requires the state director to establish and maintain a statewide cancer incidence reporting system built from population‑based regional registries; authorizes competitive contracts, grants, or other funding agreements to run regional registries and exempts those awards from a portion of the Public Contract Code. The bill mandates reporting by hospitals, clinicians, and pathologists (with specified electronic formats) and creates confidentiality and limited‑disclosure rules for registry data.

Who It Affects

State public health officials, regional cancer registries and prospective contractors, hospitals and outpatient treatment facilities in designated reporting areas, pathologists and pathology labs, and approved researchers or out‑of‑state registries that request data. Health IT teams and compliance officers will handle format, portal, and access‑control work.

Why It Matters

It centralizes California’s cancer surveillance in a legally structured statewide system that can improve incidence tracking and research, but it also creates new operational responsibilities, billing rights for the department, and procurement exceptions that affect procurement oversight and provider workloads.

More articles like this one.

A weekly email with all the latest developments on this topic.

Unsubscribe anytime.

What This Bill Actually Does

The bill tasks the state health director with building a statewide cancer incidence system composed of population‑based regional registries and a statewide reporting infrastructure. The department may draw geographic reporting areas and either run regional registries itself or award contracts, grants, or other funding agreements to agencies (for example, county health departments or nonprofit associations).

Those awards are explicitly carved out of Part 2 of Division 2 of the Public Contract Code, and contracts must include typical accountability terms such as financial reporting, audit, and asset disposition.

Reporting duties are broad. Hospitals and other facilities in designated reporting areas must report each cancer case in a department‑prescribed format; physicians and other treating practitioners must report unless the case has already been referred into a treatment facility.

Pathologists and pathology labs must report using College of American Pathologists protocols or another department‑approved standardized format and must submit reports electronically—either directly from electronic medical records or via a department web portal. If a reporting entity fails to provide data in the prescribed format, the department’s authorized representative may retrieve the records and report on the entity’s behalf and then seek reimbursement for the department’s costs.The bill sets payment and limited enforcement mechanics: entities averse to providing the prescribed format must reimburse the department for the cost of access and reporting within 60 days; unpaid balances may accrue a late fee up to 1.5 percent per month and the department may recover legal costs if it sues and prevails.

For willful refusal to grant access to identifying records, the bill authorizes fines up to $500 per day. At the same time, the law protects pathologists from being required to obtain missing patient demographic details beyond required cancer‑specific elements and forbids the department from imposing fines solely for pathologist noncompliance without an opportunity to cure.The statute makes collected data confidential, creates a controlled disclosure regime for qualified researchers and certain public health partners, and bars subpoena or compelled disclosure of registry information in legal proceedings.

Before receiving identifiable or confidential data, external researchers or registries must demonstrate confidentiality protections and, when applicable, institutional review board approval. The department must also keep an access log of who saw confidential data and why; that log itself is open to public inspection.

Finally, the law defines the cancers subject to reporting (broadly, malignant neoplasms with specific CNS tumor inclusions), preserves facility‑based registries, and directs the department to coordinate with regional registries to maximize available federal funding. An implementation and funding schedule must be submitted to the Legislature by January 1, 2027.

The Five Things You Need to Know

1

The director must deliver an implementation and funding schedule to the Legislature by January 1, 2027.

2

The department may award contracts, grants, or other funding agreements to operate regional registries and explicitly exempts those awards from Part 2 of Division 2 of the Public Contract Code.

3

If the department must access and reformat records because an entity failed to report in the prescribed format, it may bill that hospital or facility for costs and levy a late fee up to 1.5% per month on unpaid balances.

4

Pathologists must report diagnoses using College of American Pathologists protocols or a department‑approved format and submit reports electronically; the department cannot fine a pathologist for noncompliance without first providing notice and an opportunity to cure.

5

Registry data are confidential, cannot be subpoenaed or used as evidence in any proceeding, and may be disclosed only to approved researchers or public health partners under written agreements and (for researchers) with required human subjects protections.

Section-by-Section Breakdown

Every bill we cover gets an analysis of its key sections. Expand all ↓

Subdivision (a)

Statewide system requirement and reporting continuity

This section directs the director to establish a statewide system built from population‑based regional registries and to continue operating a statewide cancer reporting system. The key operational deadline is an implementation and funding schedule due to the Legislature by January 1, 2027 — a milestone the department must meet even before contracting or systems rollouts begin.

Subdivision (b)

Regional designations, contracting authority, and procurement exemption

The department may designate regional cancer incidence reporting areas and either operate registries or contract with agencies (health systems agencies, county health departments, nonprofits, etc.) to run them. The bill authorizes a competitive award process and explicitly exempts those awards from procurement rules in Part 2 of Division 2 of the Public Contract Code, while requiring standard contract terms (financial reporting, audits, monitoring of subgrantees, record retention, and termination clauses). That exemption shortens procurement formality but raises questions about oversight practices and the contracting model the department will use.

Subdivision (c)

Cancer designated as reportable disease

The director must designate cancer as a disease subject to mandatory reporting in any area where the system operates. Once designated, all cancers diagnosed or treated in the reporting area must be reported to the department or its authorized representative, creating a legal obligation on local providers within those areas to feed cases into the registry pipeline.

5 more sections
Subdivision (d)

Provider and pathology reporting mechanics and reimbursement for department access

Hospitals, treatment facilities, clinicians, and pathologists must report cases in department‑prescribed formats. Pathology reports should follow College of American Pathologists protocols or a department‑approved format and be submitted electronically via EMR integration or a department web portal. If an entity fails to report in the required format, the department’s authorized representative may extract and reformat the information and charge the entity for that work. The statute also protects pathologists from being required to secure demographic details beyond required cancer data elements and limits the department’s ability to levy fines against pathologists without notice and an opportunity to cure.

Subdivision (e)

Payment timing, late fees, and legal cost recovery

Entities billed by the department for its costs must pay within 60 days of demand. Past‑due balances may incur up to a 1.5 percent monthly late fee, and the department may recover additional costs if it sues and obtains judgment. The bill treats these payments as reimbursements of department costs and authorizes the department to collect them administratively or through litigation.

Subdivision (f)

Access to records and daily fine for willful refusal

All providers and facilities delivering diagnostic or treatment services for cancer must grant the department or its authorized representative access to records that identify cases or establish patient/tumor characteristics. Willful refusal to provide access carries fines up to $500 per day, with collected fines deposited into the General Fund. This gives the department a civil enforcement lever separate from the billing mechanism in subdivision (e).

Subdivision (g)

Confidentiality, controlled disclosures, and access logs

Data collected are confidential. The department and designated regional registries may use data for surveillance and may share only the minimal necessary information with approved researchers, out‑of‑state registries, federal agencies, or local health officers under written agreements and, for researchers, with institutional human subjects protections in place. The law bars subpoena or compelled disclosure of registry information in any tribunal and requires the department to maintain a publicable access register listing who accessed confidential information and why.

Subdivision (h)-(j)

Definitions, non‑preemption, and federal coordination

The bill defines reportable cancer to include all malignant neoplasms (excluding certain skin cancers) and enumerates CNS primary tumors that must be reported. It preserves the right of facilities to keep internal registries and instructs the department to coordinate with regional registries to maximize federal funding opportunities — an explicit nod to leveraging federal grant dollars for implementation and operations.

At scale

This bill is one of many.

Codify tracks hundreds of bills on Healthcare across all five countries.

Explore Healthcare in Codify Search →

Who Benefits and Who Bears the Cost

Every bill creates winners and losers. Here's who stands to gain and who bears the cost.

Who Benefits

  • State public health officials and policymakers — they gain a centralized, population‑based registry for incidence monitoring, trend analysis, and program evaluation, improving the state’s ability to target prevention and treatment resources.
  • Qualified cancer researchers and epidemiologists — the bill creates a legal pathway to request deidentified or limited data for approved studies, coupled with statutory confidentiality safeguards and an access agreement framework.
  • Regional cancer registries and nonprofit partners — entities that secure contracts or grants can expand capacity and formalize funding relationships to manage regional surveillance activities.
  • Patients and communities — improved, standardized incidence reporting should generate better public health intelligence about cancer rates and geographic disparities over time.

Who Bears the Cost

  • Hospitals and outpatient treatment facilities in designated reporting areas — they must report cases in prescribed formats, face potential reimbursement demands if the department must reformat records, and risk late fees and legal exposure if payments aren’t made.
  • Pathologists and pathology labs — the bill requires electronic submission in standardized formats and may impose workflow and IT integration costs even though it limits some demographic‑collection burdens.
  • Department of Public Health — the department must stand up infrastructure, run competitive awards, manage access controls and auditing, and is responsible for upfront costs unless the Legislature provides implementing funds.
  • Regional registries and contractor agencies — winning contracts brings revenue but also compliance, reporting, audit, and performance obligations that carry administrative cost and legal exposure.

Key Issues

The Core Tension

The central dilemma is balancing comprehensive, high‑quality cancer surveillance against provider burdens and privacy risk: the state needs granular, timely data to guide public health action, but obtaining and standardizing that data imposes costs on hospitals, labs, and the department, and concentrates sensitive information in a system that must be secured and transparently governed.

The bill trades centralization and data usability for new operational burdens and potential accountability gaps. Requiring standardized electronic submissions and providing a state portal will improve data quality, but the law also lets the department reformat records and bill providers for that work — a cost‑recovery mechanism that could create adversarial dynamics and may disproportionately affect hospitals with limited IT resources.

The procurement exemption for contracts and grants reduces procurement friction but removes a layer of statutory procurement oversight, increasing the importance of robust contract terms and departmental transparency.

Privacy protections are strong on paper — confidentiality, limits on disclosure, IRB requirements for researchers, and a ban on subpoenas — but significant details are left to implementation. The statute does not specify technical standards for encryption, access controls, deidentification, or retention periods; it also makes the access register open to public inspection, which could raise privacy or security questions if not carefully redacted or managed.

Enforcement is a mix of billing, late fees, and a daily fine for willful refusal to provide access, but monetary penalties are relatively modest and the bill limits immediate fines against pathologists, relying instead on notice and cure opportunities.

Finally, the department must produce an implementation and funding schedule by a specified date but the bill does not itself appropriate funds. Whether the department can move from schedule to secure, interoperable systems, equitable burden‑sharing across providers, and adequate contracting oversight will depend on the Legislature’s funding decisions and the department’s operational choices.

Try it yourself.

Ask a question in plain English, or pick a topic below. Results in seconds.