State entities may adopt emergency regulations in accordance with the Administrative Procedure Act (Chapter 3.5 (commencing with Section 11340) of Part 1 of Division 3 of Title 2 of the Government Code) to implement HIPAA requirements set forth in final federal regulations. This authority shall terminate one year after the last final rule for HIPAA is issued by the federal government. The adoption of emergency regulations described in this section shall be deemed to be an emergency and necessary for the immediate preservation of the public peace, health and safety, or general welfare. An emergency regulation adopted under this section shall remain in effect for not more than two years.
Source:
Section 130315, https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=HSC§ionNum=130315..