There are broad protections under both California and federal law for the confidentiality of medical information. As a general rule, medical information may not be disclosed absent the patient’s consent documented in writing by an authorization form signed by the patient or the patient’s legal representative. Generally, the only exceptions to this rule involve disclosures pursuant to subpoena, search warrant, court order, mandatory reporting obligations, and circumstances where the law expressly allows for disclosure within the physician’s discretion.