Civil Code § 56.27

56.27.

An employer that is an insurance institution, insurance agent, or insurance support organization subject to the Insurance Information and Privacy Protection Act, Article 6.6 (commencing with Section 791) of Part 2 of Division 1 of the Insurance Code, shall not be deemed to have violated Section 56.20 by disclosing medical information gathered in connection with an insurance transaction in accordance with that act.