Cal. BPC § 4434
This is the official text of Cal. BPC § 4434, part of California’s Business and Professions Code — regulates business practices and professional/occupational licensing - contractors, doctors, cosmetologists, real estate agents, and dozens of other licensed professions.
Not legal advice. This page reproduces the official text of a government statute for reference only. Laws change, and how a statute applies depends on your specific facts. For advice about your situation, consult a licensed attorney in your state.
Official statutory text
(a) Except as otherwise prohibited by state or federal law, an entity conducting a pharmacy audit shall keep confidential any information collected during the course of the audit and shall not share any information with any person other than the carrier, pharmacy benefit manager, or third-party payer for which the audit is being performed. An entity conducting a pharmacy audit shall have access only to previous audit reports relating to a particular pharmacy conducted by or on behalf of the same entity. Nothing in this subdivision shall be construed to authorize access to information that is otherwise prohibited by law. Nothing in this subdivision shall be construed to prohibit any employer, trust fund, government agency, or any other entity for which the audit is being performed from disclosing its general opinions or conclusions regarding the business practices of the pharmacy based on the audit.
(b) An entity that is not a carrier or pharmacy benefit manager and that is conducting a pharmacy audit on behalf of a carrier or pharmacy benefit manager shall, prior to conducting the audit, notify the pharmacy in writing that the entity and the carrier or pharmacy benefit manager have executed a business associate agreement or other agreement as required under state and federal privacy laws.
(c) An entity conducting a pharmacy audit shall, prior to leaving a pharmacy at the end of an onsite portion of the audit, provide the pharmacist in charge with a complete list of records reviewed to allow the pharmacy to account for disclosures as required by state and federal privacy laws.
(b) An entity that is not a carrier or pharmacy benefit manager and that is conducting a pharmacy audit on behalf of a carrier or pharmacy benefit manager shall, prior to conducting the audit, notify the pharmacy in writing that the entity and the carrier or pharmacy benefit manager have executed a business associate agreement or other agreement as required under state and federal privacy laws.
(c) An entity conducting a pharmacy audit shall, prior to leaving a pharmacy at the end of an onsite portion of the audit, provide the pharmacist in charge with a complete list of records reviewed to allow the pharmacy to account for disclosures as required by state and federal privacy laws.
Status: in_force · Read it on the official government site
Need a lawyer in California?
Find a California lawyer
About this page: Statute text is reproduced from official government publishers via the
Open US Law dataset
(Vaquill AI, snapshot v2026.08, CC BY 4.0). Primary legislative text like this is public domain under the government-edicts doctrine
(Georgia v. Public.Resource.Org, 2020). We link every section back to its official source so you can verify it independently.