SB 83 amends Health and Safety Code §11831.5 to change what the State Department of Health Care Services (DHCS) must show on its public website and what operators must disclose to clients. The bill requires DHCS to (1) clearly note that notices issued to recovery residences for violations of Section 11834.30 are not included on the department’s probationary/suspension/revocation list and (2) post, via a prominent homepage link, an identification and short summary for each violation the department issues to the facilities and programs covered by the existing list.
The measure tightens public transparency around licensing enforcement while explicitly directing DHCS to avoid posting information that would violate state or federal privacy protections. Operators who fail to include the required website/intake disclosure remain subject to penalties under the existing enforcement provision (Section 11831.7).
At a Glance
What It Does
SB 83 directs DHCS to add two things to its public website: a clear, visible notice that certain recovery-residence notices under Section 11834.30 are excluded from the department’s disciplinary list, and a navigable, prominently linked database of identification and summary information for each violation the department issues to covered facilities and programs.
Who It Affects
Licensed alcoholism and drug abuse recovery or treatment facilities, certified alcohol and other drug programs, recovery residences as defined in §11833.05, DHCS (website and compliance teams), and legal/compliance officers who maintain intake forms and public-facing disclosures.
Why It Matters
The bill moves California from a limited public disciplinary roll toward more granular public reporting of enforcement actions, creating new reputational and compliance risks for providers while placing operational and legal burdens on DHCS to publish accurate, privacy-compliant summaries.
More articles like this one.
A weekly email with all the latest developments on this topic.
What This Bill Actually Does
SB 83 builds on an existing requirement that operators of licensed alcoholism or drug-abuse recovery/treatment facilities and certified alcohol and other drug programs include a disclosure — on both their internet website and intake paperwork — directing people to DHCS’s public list of facilities with probationary status, suspensions, revocations, or notices of operation in violation of law. The bill keeps that operator-level disclosure rule and adds two obligations for DHCS’s public website.
First, DHCS must place, in an easy-to-see location and font, a specific statement making it clear that notices issued to recovery residences for violations of Section 11834.30 are not part of the department’s probationary/suspension/revocation list. That is an explicit carve-out intended to prevent the public list from being read as inclusive of those particular notices.Second, DHCS must create and maintain a separate, prominently linked page reachable from the department’s homepage that identifies and summarizes each violation it has issued for the same set of facilities and programs covered by the public disciplinary list.
For each posted violation the department must provide who received it, the statutory or regulatory citation, a short explanation of the basis for the violation, the date it was issued, and any other non‑private information needed for the public to identify the entity and understand the grounds for the action.Finally, the bill instructs DHCS to implement these posting requirements in a way that protects privacy rights under state and federal law, and it preserves the existing penalty mechanism: operators who omit the required disclosure on websites or intake forms remain subject to penalties under §11831.7. In practice, the statute shifts DHCS’s workload toward publishing and curating enforcement summaries while exposing providers to more discoverable enforcement history.
The Five Things You Need to Know
DHCS must post a clearly visible statement on the disciplinary list page that notices to recovery residences for violations of §11834.30 are not included in that list.
DHCS must add a prominent, easily navigable homepage link to a page that identifies and summarizes every violation it issues to the facilities and programs covered by §11831.5.
Each posted violation summary must include: the name of the entity or person, a citation to the governing statute/regulation/standard, a summary of the department’s decision, the issuance date, and any other non‑private identifying information DHCS deems necessary.
Operators must continue to put the DHCS disclosure on their public website and intake forms; failing to do so exposes them to penalties under §11831.7.
DHCS is explicitly required to avoid posting information that would violate state or federal privacy protections, creating an implementation constraint on how much detail the department can publish.
Section-by-Section Breakdown
Every bill we cover gets an analysis of its key sections.
Operator disclosure requirement and recovery‑residence exclusion
This subsection reiterates the longstanding requirement that licensed facilities and certified programs include a DHCS‑link disclosure on their websites and intake paperwork. SB 83 adds a mandatory, conspicuous statement on the DHCS list page that notices issued to recovery residences for violations of §11834.30 are not on that list. Practically, operators must continue the same disclosure, but the department must alter the public list page to prevent misinterpretation about recovery‑residence notices.
Enforcement for missing operator disclosure
Subdivision (b) makes clear that failing to include the required disclosure is a violation subject to penalties under §11831.7. That keeps the bill from being merely advisory: operators risk enforcement action for omission, so compliance teams and web teams need to confirm intake packets and sites reflect the mandated language and link.
Required content and placement for posted violation summaries
This provision obligates DHCS to post, via a prominent homepage link, an identification and concise summary for each violation the department issues to covered facilities and programs. The statute specifies minimum fields — name, citation, summary, date, and ‘any other information’ needed for public recognition — which forces DHCS to define internal standards about what ‘other information’ is appropriate and how to present it consistently.
Privacy constraint and implementation standard
Subdivision (d) directs DHCS to balance transparency and privacy: the department must provide sufficient information to protect the public while refraining from publishing information that violates state or federal privacy laws. That language creates a legal boundary DHCS must interpret operationally, including redaction policies, review workflows, and possible legal vetting before publication.
This bill is one of many.
Codify tracks hundreds of bills on Healthcare across all five countries.
Explore Healthcare in Codify Search →Who Benefits and Who Bears the Cost
Every bill creates winners and losers. Here's who stands to gain and who bears the cost.
Who Benefits
- People seeking treatment and their families — they get easier access to enforcement histories and can better vet programs before engaging or referring services, reducing the chance of choosing a program with documented violations.
- Referrers and case managers (county behavioral health, clinicians, SUD navigators) — can use the posted violation summaries as a screening tool when making placements or contracts.
- Consumer‑protection and watchdog organizations — gain a public, searchable source of enforcement summaries that supports monitoring, reporting, and advocacy efforts.
- Local governments and contracting agencies — obtain clearer evidence when deciding whether to fund or contract with a licensed program, because violations will be more discoverable.
Who Bears the Cost
- DHCS — must design, host, and maintain a searchable, navigable violations page, build legal review and redaction processes, and bear the staffing and technical costs of ongoing curation and appeals handling.
- Licensed facilities and certified programs — face reputational risk from publicly posted summaries and must ensure their websites and intake forms include the required disclosure; they may also incur legal and communications costs responding to published allegations.
- Legal/compliance teams and records officers — will spend more time managing public records, defending the accuracy of posted summaries, responding to takedown or correction requests, and ensuring privacy compliance.
- Recovery residences and operators of communal living arrangements — although notices for §11834.30 are excluded from the disciplinary list, those operators may still face separate notices and public confusion about what is and isn’t published, potentially creating indirect reputational or operational burdens.
Key Issues
The Core Tension
The central tension is between the public’s interest in transparent, actionable information about who violates licensing rules and the equally legitimate need to protect individuals’ and entities’ privacy and due process: publishing more detail helps consumers and referrers but risks premature reputational harm, privacy breaches, and increased administrative and legal burdens on DHCS and providers.
SB 83 forces DHCS into a difficult line-drawing exercise. The statute requires posting enough detail for the public to identify who was cited and why, but it also forbids publishing information that violates privacy protections.
That creates practical questions: what counts as minimal identifying information versus protected personal data; how to redact records without stripping meaningful context; and whether summaries can be precise enough to be useful without becoming legally risky. DHCS will need tight internal rules and legal review, and smaller agencies may struggle to staff those functions.
A second implementation risk is accuracy and timing. Posting summaries will amplify any errors or provisional enforcement decisions.
The statute does not specify whether DHCS should post only final, adjudicated violations or also interim determinations; it simply requires summaries of “each violation the department has issued.” If DHCS posts preliminary enforcement actions, providers could suffer reputational harm prior to appeal or resolution. Conversely, limiting publication to final actions reduces the informational value to the public.
The bill’s silence on timing and appeals increases litigation and editorial risk for DHCS and the cited entities.
Finally, the statute’s carve‑out for recovery‑residence notices under §11834.30 introduces potential inconsistency: similar misconduct adjudicated under different statutory provisions could be published in one place but excluded in another, producing confusion for the public and uneven incentives for regulators. The interaction between the new posting mandate and other confidentiality regimes (including HIPAA, state privacy law, and juvenile‑oriented protections) remains underdefined and will require interagency legal guidance and clear operational policies.
Try it yourself.
Ask a question in plain English, or pick a topic below. Results in seconds.