California AB 3030 + SB 1120 Are Active FQHC AI Compliance Triggers — Disclosure + Consent + UM Restrictions in Effect
A May 2026 Holland & Knight legal review highlights two California laws that are now operational compliance triggers for any FQHC running AI: (1) AB 3030 — mandatory patient disclosure plus explicit consent before AI is used in care; (2) SB 1120 — restrictions on AI in utilization management and prior-authorization decision-making (human clinician must make the final medical-necessity call). Compliance obligations apply now to any FQHC running AI scribes (Abridge, Nabla, Suki, Heidi), AI patient-outreach (Artera Squads, healow Genie), or AI-assisted UM/prior-auth (eClinicalWorks AI Workbench). Federal preemption push is underway in Washington but no enacted preemption yet. Pairs with already-tracked CHAI/NACHC Medicaid-eligibility AI Best Practice Guides — CHAI gives the governance scaffolding, AB 3030 + SB 1120 are the legal floor. Strategic implication: FQHC CIOs and Compliance Officers should audit current AI deployments for AB 3030 patient-disclosure scripts and SB 1120 UM-decision pathways before mid-2026.
Key takeaways
- AB 3030 requires patient disclosure + explicit consent before AI is used in care
- SB 1120 requires human clinician to make final medical-necessity call in UM/prior-auth decisions
- Action item: audit AI scribe, patient-outreach, and UM workflows for AB 3030 + SB 1120 compliance now
Primary source
Holland & KnightFQHC Talent. (2026, May 26). California AB 3030 + SB 1120 Are Active FQHC AI Compliance Triggers — Disclosure + Consent + UM Restrictions in Effect. Primary source: Holland & Knight. Retrieved May 30, 2026, from https://www.fqhctalent.com/intel/ca-ab-3030-sb-1120-ai-compliance-active-2026
More in Risk & Compliance
Jul 5
Section 1557 Language Access Annual Notice Year 1 Anniversary — July 5, 2026 Compliance Window
May 21
HHS Launches AERO — AI Re-Scores 5 Years of Audit Data for Every $1M+ Grantee, Including FQHCs
May 20
HRSA Section 504 Disability Rule — Medical Equipment Accessibility Deadline Aug 2026 (Distinct from WCAG Track)
May 18
HHS OCR Reorganizes Into 3 Program Divisions — New Health Information Privacy, Data & Cybersecurity Division Signals Sustained FQHC Breach Enforcement