Rev. & Tax. Code, § 19548.5

(a) (1) The Franchise Tax Board may, upon request, disclose to the California Health Benefit Exchange, the State Department of Health Care Services, the Managed Risk Medical Insurance Board, and county departments and agencies, returns or return information described in paragraph (2) in the records of the Franchise Tax Board, through information sharing agreements or data interfaces, to verify or determine eligibility of an individual for Medi-Cal benefits, the Healthy Families Program, the Access for Infants and Mothers Program, health benefits, tax credits, health insurance subsidies, or cost-sharing reductions through the Exchange.

(2) The returns and return information that may be disclosed pursuant to this section is limited to the following:

(A) Information necessary to validate or make the eligibility determination, including wages, withholdings, identifying information, and credits.

(B) The demographic information of any taxpayer.

(C) Tax refund information of any taxpayer.

(3) In addition to the penalties under this article for unauthorized use or disclosure of the information disclosed pursuant to this section by any deputy, agent, clerk, officer, or employee of any agency receiving information pursuant to this section, any information received from the Franchise Tax Board as a result of this section shall be subject to the information sharing and confidentiality requirements in paragraph (8) of subdivision (a) of Section 100504 of the Government Code.

(b) (1) This section shall not be construed to supersede the requirements and protections in the California Right to Financial Privacy Act under Chapter 20 (commencing with Section 7460) of Division 7 of Title 1 of the Government Code in obtaining information in possession of any financial institution.

(2) This section shall not be construed to supersede or replace or in any way modify any privacy and information security requirements and protections in federal and state law regarding protected health information or personally identifiable information, including, but not limited to, the federal Health Insurance Portability and Accountability Act (HIPAA), the Information Practices Act of 1977 (Chapter 1 (commencing with Section 1798) of Title 1.8 of Part 4 of Division 3 of the Civil Code), Section 14100.2 of the Welfare and Institutions Code, and any other state or federal laws that are intended to, or have the effect of, protecting individual privacy and information security in any circumstance.

(c) The Franchise Tax Board may require reimbursement for costs incurred in providing information specified in this Section.