California Department of Aging Privacy Policy Statement

The California Department of Aging ("CDA" or "Department") is committed to promoting and protecting the privacy rights of individuals as enumerated in Article 1 of the California Constitution, the Information Practices Act of 1977, and other state and federal laws.

It is the policy of CDA to safeguard the privacy of personal information collected or maintained by the Department.

For a copy of CDA's NOTICE OF PRIVACY PRACTICES click here.

CDA’s information management practices are governed by the requirements of the following authorities and all other laws pertaining to information privacy:

  • 45 CFR section 205.50 (Safeguarding Information for the Financial Assistance Programs)
  • California Government Code section 11015.5
  • California Health and Safety Code section 1500 et seq.
  • California Civil Code section 1798 et seq. (The Information Practices Act)
  • California Government Code section 7920 et seq. (The California Public Records Act)
  • California Welfare and Institutions Code section 10850
  • Statewide Administrative Manual (SAM) section 5310 et seq.
  • Statewide Information Management Manual (SIMM) sections 5310 - A & B.

CDA follows these principles in collecting and managing personal information:

  • CDA collects personal information on individuals only as allowed by law to administer programs serving some of California's most vulnerable residents. Any subsequent use of the information shall be limited to and consistent with the fulfillment of those purposes; and/or to make disclosures as required or authorized by law.

    Personal information, as defined in the Information Practices Act, is information that identifies or describes an individual, including, but not limited to, name, Social Security number, physical descriptions, home address, home telephone number, education, financial matters, medical or employment history, e-mail address, or Internet Protocol (IP) address.

  • CDA collects personal information directly from individuals who use one or more of the CDA web sites to obtain services. Collection of this information is required to deliver the specific services, but use of these services is voluntary.
  • CDA does not disclose personal information. Personal information may not be disclosed, made available, or otherwise used for a purpose other than those specified, except with the consent of the subject of the personal information, or as required or directed by law or regulation.
  • CDA only collects personal information that is necessary and appropriate for the type of services requested. When filling out an online form or survey, CDA strives to provide notice of the general uses of information held by CDA.
  • CDA protects personal information. The Department takes precautions and security measures to protect the personal information collected or maintained by CDA against loss, unauthorized access, use, modification, or disclosure.
  • CDA tells people who provide personal information about their right to review that information. Individuals who provide personal information to CDA have the right to review the information for accuracy and completeness and to request corrections or deletions. Please note, however, that electronically collected personal information is exempt from requests made under the Public Records Act (see below). For personal information access requests, please send an email to CDA’s Communications team at and/or call (916) 419-7500.
  • CDA collects electronic information from people who visit our Internet website. If an individual simply browses our Internet website, CDA automatically collects the domain name or Internet Protocol address that relates to the machine used to access the CDA website, the type of browser and operating system used, the date and time when the website is visited, web pages displayed, and any forms that are uploaded. We do not collect home, business or e-mail addresses, or account information from persons who simply browse our Internet website. CDA collects personal information about individuals through our website only if an individual provides such information to the Department voluntarily through forms or surveys. Electronically collected personal information is exempt from requests made under the Public Records Act.
  • CDA uses Google Analytics to help understand how visitors interact with the CDA websites to improve each website. You can read Google’s security and privacy policies for Google Analytics. You can choose not to have your data used by Google Analytics by downloading its opt-out browser add-on. Selecting to opt out will not interfere with your ability to use the web site.
  • CDA requests personal information to better inform site visitors about programs and resources. CDA maintains this information on a secure server. We will not distribute or sell any electronically collected personal information about you to any third party without your written consent. CDA only uses personal information for reasons stated in the privacy policy, or as described at the time of collection, except with your consent or as authorized by law. The information that we request may include your name, e-mail address, or your username and password. We also request confidential provider information such as the provider SSN/TIN, Payee NPI, or a copy of a vendor contract or authorizing letter. We may use your information to help you learn about your claim status, register you for a webinar or tutorial, or to help you perform a secure transaction. When you provide us with personal information, cookies upload to your device to identify you and save your login information. You can delete the cookies after your browser session. If you choose not to submit the information the web site requests, you will be unable to access certain functions, however, you will still be able to use the site.
  • In certain instances, CDA partners with DHCS to oversee Medi-Cal waiver services. For DHCS’ privacy policy statement, please visit:
  • CDA is committed to maintaining the privacy and security of your electronically collected personal information. CDA employs security and privacy protections to protect your data. Controls include data encryption. They include requiring employees to wear badges. They also include taking physical security measures in and around our facilities.
  • CDA will provide additional information on our privacy policy if requested. For questions about our privacy policy or policy compliance you may contact:

    California Department of Aging
    Attention: CDA Privacy Officer
    2880 Gateway Oaks Drive, Suite 200
    Sacramento, CA 95833
    Phone (916) 419-7500
    FAX (916) 928-2267
    TTY (800) 735-2929

For more general information about online privacy and security, please see the California Department of Justice’s Online Privacy page.

This CDA privacy policy statement does not apply to web sites that you access from this site. When you leave the CDA web site to access a different web site, you become subject to that site’s privacy policy and practices. The privacy policy should be posted on the site’s home page.

California Department of Aging
Privacy Policy Statement
Effective: December 2022
Revised: December 2022

*This privacy policy statement is subject to change without notice.