An employer that is an insurance institution, insurance agent, or insurance support organization subject to the Insurance Information and Privacy Protection Act, Article 6.6 (commencing with Section 791) of Part 2 of Division 1 of the Insurance Code, shall not be deemed to have violated Section 56.20 by disclosing medical information gathered in connection with an insurance transaction in accordance with that act.
Ca. Civ. Code § 56.27