All state entities affected by HIPAA shall comply with the decisions of the director in achieving compliance with HIPAA.
Source:
Section 130311, https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=HSC§ionNum=130311..