A California deposition subpoena for business records lets a party in a pending California lawsuit compel a non-party business to produce documents, without requiring any witness from the business to appear and testify. The authority is California Code of Civil Procedure (CCP) 2020.410, and the mechanics are strict: the right form, personal service with a witness fee, advance notice to any consumer whose records are involved, a compliance date that satisfies two separate minimums, and delivery through a named deposition officer rather than directly to you.
What the Subpoena Can Reach
The device is built for documentary discovery from third parties. A plaintiff in a car-accident case can use it to pull treatment records from the defendant’s doctor. An employer defending a wage claim can use it to pull deposit history from the plaintiff’s bank. The business holding the records has no voluntary obligation to turn them over, so the subpoena supplies the compulsion.
Scope is broad but not unlimited. CCP 2020.410 requires the subpoena to either specifically describe each item or “reasonably particularize” each category of records. In Calcor Space Facility, Inc. v. Superior Court (1997) 53 Cal.App.4th 216, the Court of Appeal held that generalized demands unsupported by evidence of at least potential evidentiary value are not permitted. Requests for “any and all documents” are the fastest route to a quashed subpoena.
Privacy adds a second limit. Article I, Section 1 of the California Constitution protects privacy explicitly, and courts weigh that right against the need for discovery. Medical files, therapy notes, and financial records routinely trigger a balancing analysis the California Supreme Court formalized in Facebook, Inc. v. Superior Court (Touchstone) (2020) 10 Cal.5th 329, which looks at overbreadth, intrusion, availability from other sources, and burden on the third party.
Who Issues It and How It Gets Served
Under CCP 2020.210, the subpoena can originate two ways. An attorney of record for any party may sign and issue it directly, with no involvement from the clerk. Alternatively, the court clerk will issue a signed, sealed, otherwise blank subpoena to any party who requests one, and the party fills it in before service. Self-represented litigants use the clerk route because they cannot sign subpoenas themselves.
Service must be personal. CCP 2020.220 requires that when the recipient is an organization, the papers go to an officer, director, custodian of records, or authorized agent. Any adult non-party can serve, though a professional process server is the safer choice when proof of service may be contested later.
Tender the Witness Fee at Service
This step gets missed often enough to be worth flagging on its own. CCP 2020.230(b) requires that service of a business records subpoena be accompanied by payment of the witness fee specified in Evidence Code Section 1563(b)(6), whether or not the business asks for it. If you skip the fee, the custodian has grounds to refuse production outright.
What the Subpoena Must Contain
California uses Judicial Council Form SUBP-010 for a deposition subpoena commanding production of business records. The form captures the case caption, the court where the action is pending, the name and address of the deposition officer who will receive the records, and the description of what you want.
The description is where most fights start. CCP 2020.410(a) requires that each item be specifically described or each category reasonably particularized. You do not need to know internal file numbers only the business would know, but the custodian has to be able to identify what to pull.
If you want electronically stored information, say so and specify the format. CCP 2020.410(a) requires a format designation when a particular one is wanted. Without it, the business can hand over records in whatever format it ordinarily maintains, which may be unusable. For emails, spreadsheets, and databases, asking for native format or searchable PDF with metadata heads off later disputes.
Two Deadlines, Not One
The compliance date on the subpoena cannot be earlier than 20 days after issuance or 15 days after service, whichever is later. Both clocks run, and both must expire. If you issue on day one but do not serve until day ten, production has to be at least 15 days after day ten, not 20 days after day one. When service is by mail within California, CCP 1013 adds five calendar days.
Consumer Notice When Personal Records Are Involved
When the subpoenaed records are personal records of a “consumer” as defined in CCP 1985.3, you have to notify that consumer before the business can produce anything. The requesting party serves a notice on the consumer along with a copy of the subpoena, at least five days before the subpoena is served on the business if delivered personally, or at least ten days before if mailed within California. The notice tells the consumer what records are being sought, from whom, and that they have the right to object.
The business has no incentive to protect the consumer’s privacy on its own, so the consumer needs lead time to file a written objection or a motion to quash before the production date. Skipping or botching consumer notice makes the subpoena vulnerable to being quashed entirely.
How the Records Actually Get Produced
Records subpoenaed under CCP 2020.410 do not come to you directly. Under CCP 2020.430, the custodian delivers a true, legible, and durable copy, together with a custodian-of-records affidavit under Evidence Code Section 1561, only to the deposition officer named in the subpoena. Mailed or delivered copies must be in a sealed envelope. If the deposition officer visits the business instead, the custodian can either allow copying of originals during business hours or hand over copies on payment of reasonable copying costs.
A timing rule protects the consumer. The custodian cannot release records to the deposition officer before the date and time specified in the subpoena. The form itself must display a boldface legend: “Do not release the requested records to the deposition officer prior to the date and time stated above.”
The business is entitled to recover reasonable copying costs under Evidence Code Section 1563(b), and the requesting party pays. Budget for this when subpoenaing hospitals or financial institutions, where volume adds up quickly.
Medical, Substance-Abuse, and Financial Records
A valid California subpoena does not sweep aside federal privacy law. For medical records, the HIPAA Privacy Rule at 45 CFR 164.512(e) permits a healthcare provider to comply with a subpoena (as opposed to a court order) only if one of two conditions is met: the requesting party provides satisfactory assurance that the patient has been notified and given a chance to object, or the requesting party has sought a qualified protective order limiting further use. Satisfactory assurance means a written statement showing a good-faith notification attempt and either expiration of the objection period or resolution of any objections.
Substance-abuse treatment records carry stronger protection under 42 CFR Part 2. A standard subpoena is not enough; the requesting party generally needs a specific court order after showing that no other means of obtaining the information would be effective.
Financial records implicate the Gramm-Leach-Bliley Act, which restricts how financial institutions share consumer information. 15 U.S.C. ยง 6802(e)(8) permits disclosure to comply with a properly authorized subpoena or judicial process. Banks and credit unions typically comply with a valid California subpoena, but their legal departments scrutinize it closely, and they will push back on broad requests or on any irregularity in the CCP 1985.3 consumer notice.
Objecting or Moving to Quash
Different challengers have different paths.
Consumer Objections
A consumer who is a party to the lawsuit can file a motion to quash or modify the subpoena under CCP 1987.1 before the production date, giving notice to the witness and deposition officer at least five days before production is due. A nonparty consumer can serve a written objection on the requesting party, the witness, and the deposition officer stating the specific grounds. Once the custodian receives either a motion notice or a written objection, the records cannot be released without a court order or agreement of all affected parties.
After a written objection, the requesting party has 20 days to file a motion to enforce. That motion must include a declaration showing a reasonable and good-faith attempt at informal resolution with the consumer or the consumer’s attorney.
Challenges by the Business or Other Third Parties
The business or any affected third party can also move to quash or modify under CCP 1987.1. Courts have broad discretion: quash entirely, narrow the scope, impose protective conditions, or order compliance on modified terms. The statute authorizes protection against “unreasonable or oppressive demands, including unreasonable violations of the right of privacy.” Common grounds are overbreadth, irrelevance, undue burden, and privilege.
Meet and Confer First
Before any discovery motion, CCP 2016.040 requires a meet-and-confer declaration. The parties must have actually spoken by phone, videoconference, or in person. A single letter does not satisfy the rule. Courts impose monetary sanctions for failing to meet and confer in good faith even when the underlying motion has merit.
What Happens If a Business Ignores a Subpoena
A business that ignores a valid subpoena without objecting or seeking protection faces several layers of exposure. CCP 2020.240 allows the court to hold the deponent in contempt, which can bring fines and, in serious cases, jail. CCP 1992 adds a $500 statutory forfeiture payable to the aggrieved party, plus actual damages caused by the noncompliance.
In the underlying case, the requesting party can seek discovery sanctions under CCP 2023.030: issue sanctions (certain facts deemed established), evidence sanctions (certain evidence barred), and, in severe cases, terminating sanctions. CCP 2023.050 authorizes an automatic $1,000 monetary sanction for certain discovery abuses, on top of anything else the court orders.
Records Held in Another State
When the records sit with an out-of-state business, California’s version of the Uniform Interstate Depositions and Discovery Act, codified at CCP 2029.100 through 2029.900, provides a streamlined route. You submit the original or a true copy of the California subpoena (the “foreign subpoena”) to the clerk of the superior court in the county of the other state where the records are located, with an application for a local subpoena containing the same terms. The clerk then issues a local subpoena for service on the out-of-state business. The process works in reverse when a California business is served with a domesticated out-of-state subpoena.
Submitting the foreign subpoena is not a court appearance, so you generally do not need local counsel or pro hac vice admission just to request it. If the subpoena is challenged and you have to appear in the foreign court to enforce it, you will likely need an attorney licensed there at that point.