California AI Regulations
California has moved on multiple fronts at once — automated decision-making rules, generative AI disclosure requirements, and employment-specific AI rules layered on top of the state's existing privacy regime.
California rarely legislates AI as a single statute; instead, AI-relevant obligations show up across several different bills and regulatory processes at once — automated decision-making technology (ADMT) regulations under the California Privacy Protection Agency, generative AI training-data and disclosure requirements, and AI-specific additions to the state's existing employment discrimination framework.
For a compliance program, this means California often can't be handled as a single checklist the way a more consolidated state statute can — it requires tracking multiple regulatory tracks that move on independent timelines.
Recently updated
regulations us california
California AI Regulations
Frequently asked questions
- Does California have one comprehensive AI law?
- No — California's approach is more fragmented than Colorado's single comprehensive statute. Obligations come from several sources: CPPA rulemaking on automated decision-making technology, specific generative AI disclosure statutes, and amendments to existing employment and privacy law.
- How does California's approach relate to its existing privacy law?
- Much of California's AI-relevant regulation flows through the California Consumer Privacy Act (CPPA) rulemaking process rather than a standalone AI statute, meaning companies already tracking CCPA/CPRA compliance need to extend that same tracking to cover ADMT-specific rules rather than treating AI compliance as a wholly separate program.