Court Rules
All enforcement actions
SettlementCritical Risk

California Attorney General $49 Million Settlement with Kaiser for Illegal Disposal of Hazardous Waste, Medical Waste, and Protected Patient Information

Kaiser Foundation Health Plan, Inc. and Kaiser Foundation Hospitals (collectively Kaiser)September 8, 2023California Attorney General

Penalty Amount

$49,000,000

Consumers Affected

7,700

Summary

California Attorney General Rob Bonta, alongside six county district attorneys, announced a $49 million settlement with Kaiser Foundation Health Plan, Inc. and Kaiser Foundation Hospitals resolving allegations of unlawful disposal of hazardous waste, medical waste, and protected health information at Kaiser’s California facilities. Undercover inspections of 16 Kaiser facilities found hundreds of hazardous and medical waste items, plus over 10,000 paper records containing personal information of more than 7,700 patients in unsecured, publicly accessible dumpsters. The settlement requires Kaiser to pay $49 million total, implement enhanced compliance measures, and retain an independent auditor for five years to conduct regular waste and programmatic compliance audits.

Remedy

Kaiser will pay a total of $49 million, comprising $37.513 million in civil penalties, $4.832 million in attorneys’ fees and costs, and $4.905 million for supplemental environmental projects. Kaiser must spend $3.5 million at its California facilities on enhanced environmental compliance measures within five years of the final judgment, or pay an additional $1.75 million in civil penalties. Kaiser must retain an independent third-party auditor approved by the Attorney General and district attorneys for five years, who will conduct at least 520 trash compactor audits and 40 programmatic field audits annually to evaluate compliance with waste disposal and PHI protection laws. Kaiser must also modify operating procedures, conduct regular internal trash audits, and implement staff training to improve compliance with waste and PHI disposal requirements.

Monetary PenaltyInjunctionAudit RequirementCompliance Program

Contract Impact

In-house legal teams at healthcare providers should review vendor agreements with medical, hazardous, and solid waste disposal providers to ensure they mandate compliant disposal of protected health information (PHI) and regulated waste, including secure destruction of paper records and adherence to HIPAA and state waste laws. Business Associate Agreements (BAAs) with vendors handling PHI must be updated to include explicit disposal protocols for PHI, audit rights for the covered entity, and breach notification clauses requiring immediate notice of any improper PHI disposal. Facilities management, janitorial, and trash hauling agreements should be reviewed to prohibit disposal of PHI or regulated waste in unsecured public dumpsters, and to require staff training on proper waste segregation. All vendor agreements should include clauses allowing the entity to conduct regular trash audits to verify compliance, and service agreements with third-party compliance auditors should mandate annual programmatic and waste compactor audits. Additionally, internal policies and vendor contracts should require documented operating procedures for waste handling, storage, and disposal to prevent future violations.

Contract Search Terms

medical waste disposalprotected health information disposalhazardous waste compliancePHI destruction requirementswaste audit clauseHIPAA disposal safeguardspatient record destructionenvironmental compliance audit

Laws Cited

California Hazardous Waste Control LawCalifornia Medical Waste Management ActCalifornia Confidentiality of Medical Information ActCalifornia Customer Records LawCalifornia Unfair Competition LawHIPAA (Health Insurance Portability and Accountability Act of 1996)

Violation Types

Entity Details

Entity

Kaiser Foundation Health Plan, Inc. and Kaiser Foundation Hospitals (collectively Kaiser)

Industry

Healthcare

Official Sources

Source Evidence

Entity Name
"settlement with Kaiser Foundation Health Plan, Inc., and Kaiser Foundation Hospitals (collectively “Kaiser”)"
Fine Amount
"Kaiser will be liable for a total of $49 million"
Fine Amount
"Will pay $47.250 million. That amount includes $37,513,000 in civil penalties; $4,832,000 in attorneys’ fees and costs; and $4,905,000 for supplemental environmental projects."
Fine Amount
"Must pay an additional $1.75 million in civil penalties if, within 5 years of the entry of the final judgment, Kaiser has not spent $3.5 million at its California facilities to implement enhanced environmental compliance measures to ensure compliance with relevant provisions of the law that are alleged to have been violated."
Laws Cited
"Kaiser’s unlawful disposals are alleged to violate California’s Hazardous Waste Control Law, Medical Waste Management Act, Confidentiality of Medical Information Act, Customer Records Law, and Unfair Competition Law."
Laws Cited
"The disposals are also alleged to violate the federal Health Insurance Portability and Accountability Act of 1996, known as HIPAA."

Related Enforcement Actions

CA

Nexstar Media Group, Inc. and Tegna Inc.

California Attorney General Rob Bonta, joined by attorneys general from seven other states, filed a lawsuit to block the $6.2 billion merger between Nexstar Media Group and Tegna Inc. The lawsuit alleges the merger violates Section 7 of the Clayton Act by reducing competition in local TV markets, leading to higher prices, less local news, and job losses.

CA

U.S. Department of Education

California Attorney General Rob Bonta filed a lawsuit against the U.S. Department of Education to block the expansion of IPEDS data collection requiring colleges to submit race-linked student data. The lawsuit argues the demand is arbitrary, capricious, and burdensome, and could enable costly partisan investigations. A multistate coalition co-led the challenge.

CA

Live Nation

California Attorney General Rob Bonta and a coalition of state attorneys general announced they will continue their antitrust lawsuit against Live Nation/Ticketmaster after the U.S. Department of Justice settled the case. The states aim to hold Live Nation accountable for anticompetitive conduct that harms consumers, artists, and venues in the live music industry.

CA

Ford Motor Company

$376K

The California Privacy Protection Agency (CalPrivacy) settled with Ford Motor Company requiring the company to pay a $375,703 fine and change its practices. Ford violated the CCPA by requiring consumers to complete an email verification step before they could opt-out of the sale and sharing of their personal information collected through digital properties and connected vehicle services. In addition to the fine, Ford must provide easy methods to submit opt-out requests with minimal steps, audit its tracking technologies, and ensure compliance with opt-out preference signals including Global Privacy Control.

CA

GoFundMe

California Attorney General Rob Bonta, co-leading a bipartisan coalition of 21 attorneys general and charitable regulators, sent a letter to GoFundMe demanding the platform remove all plagiarized donation web pages for over 1.4 million charities, disclose information about donations, and ensure pages do not outrank official charity sites in search results. The action follows reports that GoFundMe used charities' information without consent and engaged in deceptive solicitations, violating state charitable solicitation and consumer protection laws.

CA

U.S. Department of Health and Human Services

California Attorney General Rob Bonta sent a letter to the U.S. Department of Health and Human Services opposing a proposed rule that would eliminate model card requirements for AI tools in healthcare, warning that such rollbacks could lead to biased and unsafe healthcare decisions by reducing transparency.