CMIA Compliance for Gyms and Service Providers in California

Posted by Catherine Chukwueke | Aug 06, 2025

In California, businesses, including gyms and similar establishments, have specific obligations towards customers with known serious medical conditions. These obligations are primarily governed by the Confidentiality of Medical Information Act (CMIA) and the use of liability waivers. This post explores these obligations, focusing on the confidentiality and privacy requirements under the CMIA, the role of liability waivers, and the implications for businesses.

Confidentiality and Privacy Obligations Under the CMIA

The Confidentiality of Medical Information Act (CMIA) is a critical piece of legislation in California that mandates the protection of medical information. Under the CMIA, businesses that possess medical information about their customers are required to maintain its confidentiality. This includes any information that a business might have about a customer's medical condition, such as a gym knowing that a customer has seizures.

Requirements to Protect Confidentiality

The CMIA imposes strict requirements on businesses to safeguard medical information. Companies must implement appropriate measures to ensure that such information is not disclosed without the customer's consent. This includes both physical and electronic safeguards to prevent unauthorized access to medical records.

Consequences of Improper Disclosure

Improper disclosure of medical information can have severe consequences for businesses. Under the CMIA, unauthorized disclosure can lead to significant legal penalties, including fines and potential lawsuits. Businesses found in violation of the CMIA may face civil penalties, and individuals affected by the breach may seek damages for any harm caused by the disclosure.

Liability Waivers and Their Interaction with CMIA Obligations

Many gyms and similar businesses use liability waivers to protect themselves from claims related to injuries or incidents that occur on their premises. These waivers are designed to limit the business's liability by having customers acknowledge the risks associated with certain activities.

The Role of Liability Waivers

Liability waivers are common in the fitness industry and serve as a contractual agreement between the business and the customer. By signing a waiver, customers typically agree not to hold the business liable for injuries resulting from ordinary negligence.

Interaction with CMIA Obligations

While liability waivers can provide some protection against claims, they do not absolve businesses of their obligations under the CMIA. The confidentiality of medical information remains a separate and distinct obligation. Businesses must ensure that their liability waivers do not inadvertently lead to the disclosure of medical information, as this could result in a violation of the CMIA.

Implications for Businesses

The obligations under the CMIA and the use of liability waivers have significant implications for businesses. Maintaining the confidentiality of medical information is not only a legal requirement but also a critical component of building trust with customers.

Importance of Maintaining Confidentiality

Businesses must prioritize the protection of medical information to avoid legal repercussions and maintain customer trust. Implementing robust privacy policies and training staff on the importance of confidentiality can help businesses comply with the CMIA.

Potential Legal Consequences

Failure to adhere to CMIA obligations can result in substantial legal consequences. Businesses may face lawsuits, financial penalties, and reputational damage if they fail to protect customer medical information. Therefore, it is essential for businesses to understand their obligations and take proactive steps to ensure compliance.

California companies, particularly those in the fitness industry, must navigate the complex landscape of confidentiality obligations under the CMIA and the use of liability waivers. By understanding and adhering to these requirements, businesses can protect themselves from legal risks and foster a trustworthy relationship with their customers.

Disclaimer: This post is for informational purposes only and does not constitute legal advice or create an attorney-client relationship.

About the Author

Catherine Chukwueke

Catherine (“Cathy”) Chukwueke is the Managing Attorney at the Law Office of Catherine Chukwueke, where she supports California clients with business law and employment law guidance, from formation and contracts to workplace compliance and policies. She also provides estate planning services designed to help clients protect their families, their assets, and their legacies.

Practical legal guidance for California businesses and families.

Schedule a Consultation

Call me at 310-213-7711 or schedule a consultation online.

Menu