Cal. Business and Professions Code § 22954

(a) Any cigarette or tobacco products distributor or wholesaler as defined in Sections 30011 and 30016 of the Revenue and Taxation Code, and licensed under Article 1 (commencing with Section 30140) of Chapter 3 of Part 13 of Division 2 of the Revenue and Taxation Code or Article 3 (commencing with Section 30155) of Chapter 3 of Part 13 of Division 2 of the Revenue and Taxation Code, and any cigarette vending machine operator granted a seller’s permit under the Sales and Use Tax Law (Part 1 (commencing with Section 6001) of Division 2 of the Revenue and Taxation Code), shall annually provide to the State Department of Health Services, the names and addresses of those persons to whom they provide tobacco products, including, but not limited to, dealers as defined in Section 30012 of the Revenue and Taxation Code, for the purpose of identifying retailers of tobacco to ensure compliance with this division. (b) Cigarette vending machine operators granted a seller’s permit under the Sales and Use Tax Law (Part 1 (commencing with Section 6001) of Division 2 of the Revenue and Taxation Code), shall annually provide to the department their name and the address of each location where cigarette vending machines are placed, in order to ensure compliance with this division. (c) The data provided, pursuant to this section, shall be deemed confidential official information by the department and shall be exempt from disclosure under the California Public Records Act (Division 10 (commencing with Section 7920.000) of Title 1 of the Government Code).