AI compliance checklist

The AI compliance checklist, built from the laws themselves.

Every item below is a duty an enacted state AI law sets out, written in plain English and tied to the section of law it comes from. 1235 items from 326 laws in 50 states, grouped by state and law. Filter to your states and topics, tick items off as you go, and print it for your files.

Read from official legal texts by AI Laws by State Last checked November 15, 2026 How we verify Information, not legal advice

State Topic Clear

190 items for your choices

0 of 190 ticked. Ticks are saved in this browser only.

See it as a dated plan Download as CSV with Pro

California

190 items from 47 laws

California AI auditor registration law (AB 1405)

Chapter 178, Statutes of 2026 (AB 1405), approved September 9, 2026; adds Government Code §§ 11549.80-11549.86. Enforced by: Government Operations Agency, which may investigate, remove an auditor from the registry and refer to the Attorney General; the California Board of Accountancy for licensed accountants.. Checked November 11, 2026.

AI auditor: Do not offer, sell or conduct a covered AI audit unless registered with the Government Operations Agency. Starts January 1, 2029 · Ongoing · Applies when: Beginning January 1, 2029. · Gov. Code § 11549.82.5

AI auditor: Provide the agency the listed registration information, including the laws audited under, certifications, and a standard operating procedure; update it within 90 days of a material change. Starts January 1, 2029 · Ongoing · Applies when: At registration and after any change that materially affects the published information. · Gov. Code § 11549.83(a), (b)

AI auditor: Conduct covered AI audits in accordance with widely recognized industry standards appropriate to the system or model, where such standards are available. Starts January 1, 2029 · Ongoing · Applies when: Every covered AI audit by a registered auditor. · Gov. Code § 11549.83(c)

AI auditor: Give the auditee a signed, dated report covering scope, results, deficiencies and remedies, adherence to internal safety protocols, and the audit's limitations. When triggered · Each time it happens · Applies when: Each covered AI audit. · Gov. Code § 11549.83(d)(1)

AI auditor: Keep the information given to auditees and the documentation supporting audit results for at least 10 years. Starts January 1, 2029 · Ongoing · Applies when: Every covered AI audit. · Gov. Code § 11549.83(e)

AI auditor: Stay independent of the auditee: no impairing interests, no auditing your own work, no job talks during the audit, no staff recently employed there on the subject. Starts January 1, 2029 · Ongoing · Applies when: Every covered AI audit. The staffing bar covers the preceding 12 months. Reasonable audit fees alone are not a prohibited interest. · Gov. Code § 11549.83(f)(1)

AI auditor: Do not prevent or retaliate against employees who report noncompliance to the Attorney General, the Labor Commissioner or the agency's misconduct mechanism. Starts January 1, 2029 · Ongoing · Applies when: When the employee has reasonable cause to believe the auditor is out of compliance with the chapter. · Gov. Code § 11549.83(g)

AI auditor: Display the registration number clearly and conspicuously on all advertising that offers or solicits covered AI audit services. Starts January 1, 2029 · Ongoing · Applies when: All advertising materials for covered AI audit services. · Gov. Code § 11549.83.5

California AI autonomy defense law (AB 316)

Chapter 672, Statutes of 2025 (AB 316), approved October 13, 2025; adds Civil Code § 1714.46. Enforced by: Courts, in the civil action where the defense would be raised.. Checked November 11, 2026.

Defendant who developed, modified or used AI: Do not assert as a defense that the artificial intelligence autonomously caused the harm to the plaintiff. Starts January 1, 2026 · Ongoing · Applies when: Any action alleging that AI the defendant developed, modified or used caused harm to the plaintiff. · Civ. Code § 1714.46(b)

California AI clinical decision support and health care chatbot law (AB 1979)

Chapter 854, Statutes of 2026 (AB 1979), approved September 30, 2026; adds Business and Professions Code § 22758.5 and amends Civil Code §§ 56.05 and 56.06. Enforced by: For the clinical provisions: the Medical Board of California or Osteopathic Medical Board for physicians, and health professional licensing boards by injunction. For chatbot businesses: the medical privacy law's remedies, including patient suits and public enforcement.. Checked November 11, 2026.

Health facility, clinic or physician practice: Take reasonable steps so a licensed provider keeps the ability to exercise independent professional judgment whenever care is informed by a clinical decision support system. Starts January 1, 2027 · Ongoing · Applies when: Patient care informed by the output of a clinical decision support system. · Bus. & Prof. Code § 22758.5(a)

Health facility, clinic or physician practice: Do not use AI to direct or supervise unlicensed personnel in a clinical function that requires a license, or to perform such a function independently. Starts January 1, 2027 · Ongoing · Applies when: Any tool, system or device that includes artificial intelligence. · Bus. & Prof. Code § 22758.5(b)(1)

Business offering a health care chatbot: Keep medical information to the same confidentiality standards as a health care provider under the Confidentiality of Medical Information Act. Starts January 1, 2027 · Ongoing · Applies when: A business that offers a health care chatbot to a consumer; it is deemed a provider of health care for that Act only. · Civ. Code § 56.06(f), (g)

California AI in utilization review law (SB 1120)

Chapter 879, Statutes of 2024 (SB 1120); Health and Safety Code § 1367.01(k) and Insurance Code § 10123.135(j). Enforced by: Department of Managed Health Care (health plans) and the Insurance Commissioner (disability insurers).. Checked November 11, 2026.

Health care service plan or disability insurer: Ensure the tool bases determinations on the enrollee's own clinical history and circumstances, not solely on a group dataset, and does not supplant provider decisionmaking. Starts January 1, 2025 · Ongoing · Applies when: Any AI, algorithm or software tool used for prospective, retrospective or concurrent utilization review based on medical necessity. · Health & Saf. Code § 1367.01(k)(1)(A), (B), (D), (4)

Health care service plan or disability insurer: Do not let the tool deny, delay or modify care on medical necessity; only a licensed physician or competent licensed health professional may make that determination. Starts January 1, 2025 · Ongoing · Applies when: Every medical necessity determination. · Health & Saf. Code § 1367.01(k)(2)

Health care service plan or disability insurer: Ensure the tool does not discriminate, is fairly and equitably applied, does not cause harm, and that patient data is not used beyond its intended purpose. Starts January 1, 2025 · Ongoing · Applies when: Any covered tool. · Health & Saf. Code § 1367.01(k)(1)(E), (F), (J), (K)

Health care service plan or disability insurer: Keep the tool open to regulator inspection and audit, disclose its use and oversight in written policies, and periodically review and revise its performance, use and outcomes. Starts January 1, 2025 · Ongoing · Applies when: Any covered tool. · Health & Saf. Code § 1367.01(k)(1)(G), (H), (I)

California AI independent verification organizations law (SB 813)

Chapter 179, Statutes of 2026 (SB 813), approved September 9, 2026; adds Government Code §§ 8898-8898.4. Enforced by: Government Operations Agency, through suspension or termination of the IVO designation.. Checked November 11, 2026.

Independent verification organization (IVO): Submit an annual report to the agency and the Legislature summarizing standards and methodologies and any changes to governance, funding or application information. When triggered · Every year · Applies when: Annually, and no sooner than 12 months after initial designation. · Gov. Code § 8898.3(a)

Independent verification organization (IVO): Describe the character and justification of any redaction in published documents, and keep the unredacted information for five years. When triggered · Each time it happens · Applies when: When the IVO redacts documents to protect trade secrets, cybersecurity, public safety or national security, or to comply with law. · Gov. Code § 8898.3(b), (c)

Independent verification organization (IVO): Do not accept payment terms that condition any payment, or its amount, on the results of the assessment. When triggered · Ongoing · Applies when: Stated as a designation criterion the agency must consider. Payment at reasonable market rates from the assessed party is allowed. · Gov. Code § 8898.1(c)(2)(C)

California AI political advertisement disclosure law (AB 2355)

Chapter 260, Statutes of 2024 (AB 2355), approved September 17, 2024; adds Government Code § 84514. Enforced by: Fair Political Practices Commission.. Checked November 11, 2026.

Political committee: Include, clearly and conspicuously, the disclosure: Ad generated or substantially altered using artificial intelligence. Starts January 1, 2025 · Ongoing · Applies when: Any qualified political advertisement the committee creates, originally publishes or originally distributes. Display or speak it in the manner set by §§ 84504 to 84504.5. · Gov. Code § 84514(a)

California AI voice robocall disclosure law (AB 2905)

Chapter 316, Statutes of 2024 (AB 2905); amends Public Utilities Code § 2874. Enforced by: California Public Utilities Commission, on complaint or its own motion.. Checked November 11, 2026.

Caller using an automatic dialing-announcing device: Before the recording plays, have a live, natural voice say what the call is and who is calling, ask for consent, and say if the message uses an artificial voice. Starts January 1, 2025 · Each time it happens · Applies when: Every call placed with an automatic dialing-announcing device. · Pub. Util. Code § 2874(a)

Caller using an automatic dialing-announcing device: Disconnect the device from the line when either party ends the call. Starts January 1, 2025 · Each time it happens · Applies when: Every call placed with an automatic dialing-announcing device. · Pub. Util. Code § 2874(b)

California AI-generated child sexual abuse material: possession and distribution (AB 1831)

Chapter 926, Statutes of 2024 (AB 1831), approved September 29, 2024; amends Penal Code §§ 311, 311.2, 311.11 and 311.12. Enforced by: Criminal prosecution; the sections do not name the prosecuting office. A web search on November 15, 2026 found no court ruling blocking these provisions.. Checked November 15, 2026.

Person: Do not knowingly possess or control obscene digitally altered or AI-generated matter depicting what appears to be a minor engaging in or simulating sexual conduct. Starts January 1, 2025 · Ongoing · Applies when: Any such matter, in any format. · Penal Code § 311.11(a)(2)

Person: Do not produce, bring into California, or distribute, exhibit or exchange obscene AI-generated or digitally altered depictions of what appears to be a minor in sexual conduct. Starts January 1, 2025 · Ongoing · Applies when: Penalties differ by whether it is for commercial consideration, to adults, or to minors. · Penal Code § 311.2(b)-(d)

California AI-generated child sexual abuse material: sending, producing and exploitation offenses (SB 1381)

Chapter 929, Statutes of 2024 (SB 1381), approved September 29, 2024; amends Penal Code §§ 311.1, 311.3, 311.4 and 312.3. Enforced by: Criminal prosecution; the sections do not name the prosecuting office. A web search on November 15, 2026 found no court ruling blocking these provisions.. Checked November 15, 2026.

Person: Do not send into California, or prepare, produce, duplicate or print to distribute, obscene matter containing AI-generated data depicting what appears to be a minor in sexual conduct. Starts January 1, 2025 · Ongoing · Applies when: Includes offering, distributing, exhibiting or exchanging such matter, with or without payment. · Penal Code § 311.1(a)

Person: Do not knowingly develop, duplicate, print or exchange digitally altered or AI-generated matter depicting a person under 18 engaged in sexual conduct. Starts January 1, 2025 · Ongoing · Applies when: The matter need not be obscene. From January 1, 2027 (SB 1276), the duty also covers downloading, streaming or accessing such matter, and requires knowing it depicts a minor; unsolicited matter received without knowledge or consent is excluded. · Penal Code § 311.3(a)-(b)

California CCPA personal information in AI systems (AB 1008)

AB 1008 (2023-2024), Chapter 802, Statutes of 2024; Civ. Code § 1798.140(v)(4). Enforced by: California Privacy Protection Agency (administrative fines) and the Attorney General (civil penalties and injunctions).. Checked November 15, 2026.

Business: Treat personal information held in AI systems that can output it as personal information under the CCPA, applying the act's consumer-rights and disclosure duties to it. Starts January 1, 2025 · Ongoing · Applies when: When an AI system, compressed or encrypted file or metadata is capable of outputting a consumer's personal information. · Civ. Code § 1798.140(v)(4)(C)

California Defending Democracy from Deepfake Deception Act (AB 2655)

Chapter 261, Statutes of 2024 (AB 2655), approved September 17, 2024; Elections Code §§ 20510-20520. Enforced by: The Attorney General, a district attorney or a city attorney (§ 20516); a candidate, elected official or elections official who reported the content (§ 20515(b)). See the court_block on each duty.. Checked November 15, 2026.

Large online platform: Remove reported deceptive content showing a candidate, elections official or elected official doing or saying something they did not, within 72 hours of a report. Starts January 1, 2025 · Each time it happens · Applies when: The content is reasonably likely to harm a candidate or falsely undermine confidence in results, is posted in the 120 days before an election (to 60 days after for elections officials), and the platform knows or recklessly disregards this. · Elec. Code § 20513(a)-(b), (e)Blocked in court for Any provider of an interactive computer service as defined in 47 U.S.C. 230 (the order names Facebook, Instagram and YouTube); X Corp. and Rumble are also covered by a permanent injunction in the final judgment.. The Attorney General and Secretary of State may not enforce AB 2655 in its entirety against these providers. The order binds only those two officials and ends if an appeals court vacates the judgment. Kohls v. Bonta, No. 2:24-cv-02527-JAM-CKD (E.D. Cal.), Order on Stipulation Regarding AB 2655 Enforcement, Aug 28, 2025

Large online platform: Identify and remove identical or substantially similar reposts of content the platform previously removed under the chapter. Starts January 1, 2025 · Each time it happens · Applies when: During the same removal periods. · Elec. Code § 20513(c)Blocked in court for Any provider of an interactive computer service as defined in 47 U.S.C. 230 (the order names Facebook, Instagram and YouTube); X Corp. and Rumble are also covered by a permanent injunction in the final judgment.. The Attorney General and Secretary of State may not enforce AB 2655 in its entirety against these providers. The order binds only those two officials and ends if an appeals court vacates the judgment. Kohls v. Bonta, No. 2:24-cv-02527-JAM-CKD (E.D. Cal.), Order on Stipulation Regarding AB 2655 Enforcement, Aug 28, 2025

Large online platform: Label reported deceptive content "This _____ has been manipulated and is not authentic" within 72 hours, with a click-through explanation. Starts January 1, 2025 · Each time it happens · Applies when: Covers content outside the removal window or in ads and election communications, during the six months before an election (to 60 days after for election administration content). · Elec. Code § 20514Blocked in court for Any provider of an interactive computer service as defined in 47 U.S.C. 230 (the order names Facebook, Instagram and YouTube); X Corp. and Rumble are also covered by a permanent injunction in the final judgment.. The Attorney General and Secretary of State may not enforce AB 2655 in its entirety against these providers. The order binds only those two officials and ends if an appeals court vacates the judgment. Kohls v. Bonta, No. 2:24-cv-02527-JAM-CKD (E.D. Cal.), Order on Stipulation Regarding AB 2655 Enforcement, Aug 28, 2025

Large online platform: Give California residents an easy way to report content for removal or labeling, and respond to each report within 36 hours describing any action taken. Starts January 1, 2025 · Ongoing · Applies when: Always. · Elec. Code § 20515(a)Blocked in court for Any provider of an interactive computer service as defined in 47 U.S.C. 230 (the order names Facebook, Instagram and YouTube); X Corp. and Rumble are also covered by a permanent injunction in the final judgment.. The Attorney General and Secretary of State may not enforce AB 2655 in its entirety against these providers. The order binds only those two officials and ends if an appeals court vacates the judgment. Kohls v. Bonta, No. 2:24-cv-02527-JAM-CKD (E.D. Cal.), Order on Stipulation Regarding AB 2655 Enforcement, Aug 28, 2025

California autonomous vehicle emergency response and remote operation law (SB 1246)

Chapter 1021, Statutes of 2026 (SB 1246), approved September 30, 2026; Vehicle Code § 38751 (new version), § 38754 and §§ 38800-38807; Penal Code § 13519.18. Enforced by: A city attorney or county counsel, by civil action, for violations within its jurisdiction; the DMV through deployment permits (§ 38803(c)). A violation of Chapter 3 is not a crime.. Checked November 15, 2026.

Autonomous vehicle manufacturer: Reserve or contract enough communications capacity for the maximum number of concurrent remote assistance or teleoperation sessions your capacity planning identifies. Starts July 1, 2028 · Ongoing · Applies when: Manufacturers operating under a testing or deployment permit. · Veh. Code § 38751(b)(1)(D) as added by SB 1246

Autonomous vehicle manufacturer: Staff and assign remote drivers or remote assistants so they can immediately respond to every call or incident for which their support is requested. Starts July 1, 2028 · Ongoing · Applies when: Except where vehicle connectivity fails because of broader telecommunications failures outside the manufacturer's control. · Veh. Code § 38751(b)(1)(D) as added by SB 1246

Autonomous vehicle manufacturer: Acknowledge receipt of an emergency geofencing message to the requesting official within two minutes. Starts July 1, 2028 · Each time it happens · Applies when: Each emergency geofencing message from an emergency response official. · Veh. Code § 38751(d)(5) as added by SB 1246

Autonomous vehicle manufacturer: Use only remote drivers located in the United States who hold a valid California driver's license of the appropriate class with required endorsements. Starts July 1, 2028 · Ongoing · Applies when: Any remote driver. · Veh. Code § 38754(a)

Autonomous vehicle manufacturer: Immediately dispatch local incident technicians after a crash or incident immobilizing a vehicle or obstructing traffic, or on request from an emergency official or 911 dispatch. Starts July 1, 2028 · Each time it happens · Applies when: Each such incident or request. · Veh. Code § 38801(a)(1), (b)(1)

Autonomous vehicle manufacturer: In a fleetwide emergency or system failure, immediately notify affected local jurisdictions and dispatch, and deploy technicians where vehicles cannot be remotely recovered. Starts July 1, 2028 · Each time it happens · Applies when: A failure that may create a traffic hazard or impede emergency response. · Veh. Code § 38801(a)(2)

Autonomous vehicle manufacturer: For commercial vehicles without manual controls, ensure remote staff can put the vehicle in neutral, move it as directed, or turn it off and keep it stationary. Starts July 1, 2028 · Ongoing · Applies when: The DMV may not permit deployment of a vehicle that does not comply. · Veh. Code § 38803(a), (c)

Autonomous vehicle manufacturer: If a commercial autonomous vehicle cannot be relocated remotely, immediately dispatch a local incident technician or a tow operator as an emergency official requests. Starts July 1, 2028 · Each time it happens · Applies when: Each such vehicle. · Veh. Code § 38803(b)

Autonomous vehicle manufacturer: Keep records of technician response times and of responses to fleetwide failures, emergencies, immobilizations, obstructions, crashes and official requests; give them to the DMV quarterly. Starts July 1, 2028 · Ongoing · Applies when: Ongoing; the DMV publishes quarterly summary statistics by manufacturer. · Veh. Code § 38805(a)-(b), (d)

California autonomous vehicle emergency response law (AB 1777)

Chapter 682, Statutes of 2024 (AB 1777); Vehicle Code §§ 38750 (amended), 38751, 38752 and 38753. Enforced by: Department of Motor Vehicles, through permits: it may not renew, reinstate or expand a permit's operational design domain unless the manufacturer certifies full compliance with § 38751(b).. Checked November 14, 2026.

Manufacturer of autonomous vehicles: Keep a dedicated emergency response phone line, free to public agencies, open to emergency officials whenever any of your autonomous vehicles is on a public road. Starts July 1, 2026 · Ongoing · Applies when: Operating under a DMV testing or deployment permit. · Veh. Code § 38751(b)(1)(A)

Manufacturer of autonomous vehicles: Continuously monitor every vehicle and staff the line so a remote human operator who can immobilize or move the vehicle answers within 30 seconds. Starts July 1, 2026 · Ongoing · Applies when: Operating under a DMV testing or deployment permit. · Veh. Code § 38751(b)(1)(B), (C)

Manufacturer of autonomous vehicles: Equip each vehicle with a two-way voice device so nearby emergency officials reach a remote operator within 30 seconds who can immobilize or move it. Starts July 1, 2026 · Ongoing · Applies when: Operating under a DMV testing or deployment permit. Does not apply to commercial motor vehicles of 10,001 pounds or more, except passenger transportation vehicles. · Veh. Code § 38751(b)(2)

Manufacturer of autonomous vehicles: Give police and firefighters access to any in-vehicle override system in emergencies, and train them on it, reviewing and updating the training regularly. Starts July 1, 2026 · Ongoing · Applies when: The vehicle has an override that lets someone physically present move it. Operating under a DMV testing or deployment permit. Does not apply to commercial motor vehicles of 10,001 pounds or more, except passenger transportation vehicles. · Veh. Code § 38751(b)(3)

Manufacturer of autonomous vehicles: Within two minutes of an emergency geofencing message from an emergency response official, direct your fleet to leave or avoid the identified area. Starts July 1, 2026 · Each time it happens · Applies when: An emergency response official sends an emergency geofencing message. · Veh. Code § 38751(d)(1), (2)

Manufacturer of autonomous vehicles: Within 30 business days of an official's notice that they want to issue geofencing messages, give them everything needed to send them and for you to respond. Starts July 1, 2026 · Each time it happens · Applies when: An emergency response official gives notice that it wishes to begin issuing emergency geofencing messages. · Veh. Code § 38751(d)(3)

Manufacturer of autonomous vehicles: Send the DMV any notice of autonomous vehicle noncompliance issued by a peace officer within 72 hours, or within the time the DMV sets. When triggered · Each time it happens · Applies when: A peace officer issues a notice for a traffic violation while the autonomous technology is engaged. Operative only once the DMV adopts its regulations on these notices. · Veh. Code § 38752(c), (e)

California ban on deceptive candidate deepfakes within 60 days of an election (AB 730)

Chapter 493, Statutes of 2019 (AB 730), Elections Code § 20010, as amended by AB 972 (Chapter 745, Statutes of 2022). Enforced by: The candidate shown, by civil action. A web search on November 15, 2026 found no court ruling blocking § 20010.. Checked November 15, 2026. Ends January 1, 2027.

Person, committee or other entity: Within 60 days of an election, do not distribute, with actual malice, materially deceptive media of a candidate meant to injure them or sway votes, unless disclosed as manipulated. Starts January 1, 2023 · Ongoing · Applies when: The candidate will appear on the ballot. The disclosure reads "This _____ has been manipulated" (image, video or audio) and must meet the size and timing rules in subdivision (b). · Elec. Code § 20010(a)-(b)

California ban on toys with companion chatbots (SB 867)

Chapter 189, Statutes of 2026 (SB 867), approved September 10, 2026; amends Business and Professions Code § 22601 and adds § 22604.5 (Companion Chatbots chapter, §§ 22601-22606). Enforced by: Private civil action by a person who suffers injury in fact; the chapter names no public enforcer.. Checked November 11, 2026.

Person (toy manufacturer or seller): Do not manufacture, sell, exchange, possess for sale, or offer for sale or exchange to any retailer a toy that includes a companion chatbot. Starts January 1, 2027 · Ongoing · Applies when: Any toy, meaning a physical product for play by children under 16, from January 1, 2027 until the section is repealed on January 1, 2031. · Bus. & Prof. Code § 22604.5(a)

California clinical decision support bias law (SB 503)

Chapter 857, Statutes of 2026 (SB 503), approved September 30, 2026; adds Business and Professions Code Division 8, Chapter 25.3, § 22758. Enforced by: The law does not name one. Checked November 11, 2026.

Developer and deployer: Make reasonable efforts to identify clinical decision support systems with a known or reasonably foreseeable risk of biased impacts in health programs or activities. Starts January 1, 2027 · Ongoing · Applies when: Systems developed for use by deployers. · Bus. & Prof. Code § 22758(a)(1)

Developer: Make reasonable efforts to mitigate the known or reasonably foreseeable risk of biased impacts from the identified systems. Starts January 1, 2027 · Ongoing · Applies when: Identified clinical decision support systems. · Bus. & Prof. Code § 22758(a)(2)

Developer: Give deployers a statement of intended uses and risks, plus documentation on training data, evaluation, data governance, expected outputs, bias risks and recommended use and monitoring. When triggered · Each time it happens · Applies when: On request or at the initial sale, whichever is earlier, and on release of material updates. Recognized industry standards or impact assessments may be used. · Bus. & Prof. Code § 22758(a)(3)-(5)

Deployer: Regularly monitor the identified systems and take reasonable and proportionate steps to mitigate the known or reasonably foreseeable risk of biased impacts. Starts January 1, 2027 · Ongoing · Applies when: Identified clinical decision support systems in use. · Bus. & Prof. Code § 22758(a)(8)

California common pricing algorithm law (AB 325, Cartwright Act)

Chapter 338, Statutes of 2025 (AB 325), approved October 6, 2025; adds Business and Professions Code §§ 16729 and 16756.1. Enforced by: Attorney General and district attorneys, by criminal prosecution or civil action; any person injured in business or property, by civil action.. Checked November 11, 2026.

Person using or distributing a common pricing algorithm: Do not use or distribute a common pricing algorithm as part of a contract, combination or conspiracy to restrain trade or commerce. Starts January 1, 2026 · Ongoing · Applies when: Any use or distribution, including selling, licensing or providing access by subscription. · Bus. & Prof. Code § 16729(a), (d)(4)

Person using or distributing a common pricing algorithm: Do not coerce another person to set or adopt a price or commercial term recommended by the algorithm for the same or similar products or services in California. Starts January 1, 2026 · Ongoing · Applies when: Any use or distribution of a common pricing algorithm. · Bus. & Prof. Code § 16729(b)

California companion chatbot law (SB 243)

Chapter 677, Statutes of 2025 (SB 243); Business and Professions Code Division 8, Chapter 22.6, §§ 22601-22606; § 22602 amended by SB 1119 (Chapter 190, Statutes of 2026). Enforced by: Private civil action by a person who suffers injury in fact; the chapter names no public enforcer.. Checked November 11, 2026.

Operator: Give a clear and conspicuous notification that the companion chatbot is artificially generated and not human. Starts January 1, 2026 · Ongoing · Applies when: When a reasonable person interacting with the chatbot would be misled to believe they are interacting with a human. · Bus. & Prof. Code § 22602(a)

Operator: Maintain a protocol for preventing suicidal ideation, suicide or self-harm content, including referring users who express these to crisis services; publish protocol details on its website. Starts January 1, 2026 · Ongoing · Applies when: Required before a companion chatbot may engage with users. · Bus. & Prof. Code § 22602(b)

Operator: For known minors: disclose the AI; by default remind the user every three hours to take a break and that the chatbot is not human; guard against sexual content. Starts January 1, 2026 · Ongoing · Applies when: When the operator knows the user is a minor; the reminder is due at least every three hours of continuing interaction, and the operator must take reasonable measures against visual sexually explicit material and against telling the minor to engage in such conduct. In force through December 31, 2026; SB 1119 removes this subdivision from January 1, 2027. · Bus. & Prof. Code § 22602(c) (as added by Stats. 2025, Ch. 677)

Operator: Report annually to the Office of Suicide Prevention: crisis-referral notifications issued in the prior calendar year and protocols on suicidal ideation; include no user identifiers or personal information. Starts July 1, 2027 · Every year · Applies when: Each year beginning July 1, 2027. · Bus. & Prof. Code § 22603(a), (b)

Operator: Use evidence-based methods for measuring suicidal ideation. Starts January 1, 2026 · Ongoing · Applies when: In operating the platform and preparing the annual report. · Bus. & Prof. Code § 22603(d)

Operator: Disclose on the application, browser or other access format that companion chatbots may not be suitable for some minors. Starts January 1, 2026 · Ongoing · Applies when: Any companion chatbot platform made available to a user in California. · Bus. & Prof. Code § 22604

California crime of creating and sharing realistic fake intimate images (SB 926)

Chapter 289, Statutes of 2024 (SB 926), approved September 19, 2024; Penal Code § 647(j)(4)(A)(ii). Enforced by: Criminal prosecution; the section does not name the prosecuting office. A web search on November 15, 2026 found no court challenge.. Checked November 15, 2026.

Person 18 or older: Do not create and distribute a realistic computer-generated or digital intimate image of an identifiable person when you know or should know it will cause serious emotional distress. Starts January 1, 2025 · Ongoing · Applies when: The image would lead a reasonable person to believe it is authentic, and the person shown suffers serious emotional distress. · Penal Code § 647(j)(4)(A)(ii)

California customer service chatbot law (AB 1609)

Chapter 733, Statutes of 2026 (AB 1609), approved and filed September 28, 2026; adds Business and Professions Code Division 8, Chapter 22.6.1, §§ 22625-22629. Enforced by: A public prosecutor (the chapter does not define the term).. Checked November 11, 2026.

Large private business: Do not represent that a customer service chatbot is a human. Starts January 1, 2027 · Ongoing · Applies when: Any customer service chatbot interaction. · Bus. & Prof. Code § 22626(a)

Large private business: Clearly and conspicuously disclose, in the medium the chatbot uses, that it is artificially generated and not human. Starts January 1, 2027 · Ongoing · Applies when: When a reasonable person interacting with the chatbot is likely to be misled to believe they are interacting with a human. · Bus. & Prof. Code § 22626(b), (c)

Large private business: During at least regular business hours, provide on every customer service platform a simple feature that lets customers ask to connect to a customer service agent. Starts January 1, 2027 · Ongoing · Applies when: All platforms through which the business provides customer service, including online chat and telephone. Commonly understood commands, prompts, menu choices or verbal requests suffice. · Bus. & Prof. Code § 22627(a)

Large private business: Make a good faith effort to connect the customer to an agent within 15 minutes, or give a specific appointment within one business day for an agent to call. When triggered · Each time it happens · Applies when: After a customer requests an agent through the feature. A business subject to 16 C.C.R. § 1707.2 may instead return a call within one business hour. · Bus. & Prof. Code § 22627(b)

Large private business: Make a good faith effort to keep any hold or wait after connection to 15 minutes, and cumulative hold, wait and escalation time to one hour. When triggered · Each time it happens · Applies when: After a customer is connected to a customer service agent. · Bus. & Prof. Code § 22627(c)

Large private business: Post the telephone customer service number clearly and conspicuously on its website. Starts January 1, 2027 · Ongoing · Applies when: A business that serves California customers through online platforms and has a telephone customer service platform. · Bus. & Prof. Code § 22627(d)

California data broker registration law, AI disclosure amendments (SB 361)

Chapter 466, Statutes of 2025 (SB 361), approved October 8, 2025; amends Civil Code §§ 1798.99.82, 1798.99.84 and 1798.99.86. Enforced by: California Privacy Protection Agency, by administrative action.. Checked November 11, 2026.

Data broker: Register with the California Privacy Protection Agency, pay the fee, and provide the listed information. Starts January 1, 2026 · Every year · Applies when: On or before January 31 following each year in which the business meets the definition of data broker. · Civ. Code § 1798.99.82(a), (b)

Data broker: State in the registration whether it shared or sold consumers' data to a developer of a GenAI system in the past year. Starts January 1, 2026 · Every year · Applies when: Each annual registration. The same applies to data shared or sold to a foreign actor, the federal government, other states or law enforcement. · Civ. Code § 1798.99.82(b)(2)(O)-(S)

Data broker: Access the state deletion mechanism at least every 45 days and delete requesting consumers' personal information within 45 days of receiving a request. Starts August 1, 2026 · Ongoing · Applies when: Beginning August 1, 2026. Also direct service providers and contractors to delete. · Civ. Code § 1798.99.86(c)(1)

Data broker: Process an unverifiable deletion request as an opt-out of sale or sharing within 45 days. When triggered · Each time it happens · Applies when: When the data broker denies a deletion request because it cannot be verified. · Civ. Code § 1798.99.86(c)(1)(B)

Data broker: Keep deleting the consumer's personal information at least every 45 days, and do not sell or share new personal information about them. Starts August 1, 2026 · Ongoing · Applies when: After a consumer's deletion request has been processed, unless the consumer requests otherwise. · Civ. Code § 1798.99.86(d)

Data broker: Undergo an independent third-party audit of compliance every three years, keep the report six years, and give it to the agency within five business days of a written request. Starts January 1, 2028 · Ongoing · Applies when: Beginning January 1, 2028. · Civ. Code § 1798.99.86(e)

California deceased personality digital replica law (AB 1836)

Chapter 258, Statutes of 2024 (AB 1836), approved September 17, 2024; amends Civil Code § 3344.1. Enforced by: The injured party, by civil action: the persons who hold the deceased personality's rights.. Checked November 11, 2026.

Person using a deceased personality's digital replica: Get prior consent from the person or persons who hold the deceased personality's rights before producing, distributing or making available the digital replica. Starts January 1, 2025 · Ongoing · Applies when: Use of a digital replica of a deceased personality's voice or likeness in an expressive audiovisual work or sound recording, outside the listed exceptions. · Civ. Code § 3344.1(a)(2)(A)(i), (c)

California deceptive candidate media law, extended to 2031 (AB 686)

Chapter 334, Statutes of 2026 (AB 686), approved September 19, 2026; amends Elections Code § 20010 and Code of Civil Procedure § 35. Enforced by: The candidate whose voice or likeness appears in the media, by civil action.. Checked November 11, 2026.

Person, committee or entity distributing candidate media: Do not distribute, with actual malice, materially deceptive audio or visual media of a candidate, intending to injure the candidate's reputation or deceive voters. Starts January 1, 2027 · Ongoing · Applies when: Within 60 days of an election at which the candidate will appear on the ballot, unless the media carries the required disclosure. · Elec. Code § 20010(a)

Person, committee or entity distributing candidate media: To distribute such media lawfully, include the disclosure that the image, video or audio has been manipulated, in the required size, duration or spoken form. Starts January 1, 2027 · Ongoing · Applies when: Visual: easily readable and no smaller than the largest other text; video: for the full duration. Audio: at the start, end and every two minutes. · Elec. Code § 20010(b)

California deceptive election media law, 2026 rewrite (AB 502)

Chapter 333, Statutes of 2026 (AB 502), approved September 19, 2026, urgency statute; amends Elections Code § 20012. Enforced by: The depicted individual, a candidate or committee in the election, or an elections official, by civil action. A federal court permanently enjoined enforcement of the 2024 version of this section against the plaintiffs in Kohls v. Bonta; this rewrite followed.. Checked November 11, 2026.

Person, committee or entity distributing election content: Do not, with malice, knowingly distribute materially deceptive content of a candidate or elected official that would be material to a voter's decisions or to public confidence in an election. Starts September 19, 2026 · Ongoing · Applies when: During the 30 days before an election in California. For candidates, an election in which the candidate is running. · Elec. Code § 20012(b)(1)(A), (C), (c)(1), (2)

Person, committee or entity distributing election content: Do not, with malice, knowingly distribute materially deceptive content of an elections official, or of voting machines, ballots or voting sites, that is material to public confidence in an election. Starts September 19, 2026 · Ongoing · Applies when: From 30 days before an election in California through 38 days after it. · Elec. Code § 20012(b)(1)(B), (D), (c)(3)

Person, committee or entity distributing election content: Do not remove a required manipulation disclosure, or knowingly republish the content without it. Starts September 19, 2026 · Ongoing · Applies when: During the same time periods, for content a candidate published of themselves with the disclosure. · Elec. Code § 20012(b)(3)

California deepfake pornography liability law (AB 621)

Chapter 673, Statutes of 2025 (AB 621), approved October 13, 2025; amends Civil Code § 1708.86. Enforced by: The depicted individual by civil action, and public prosecutors: the Attorney General, city attorneys, county counsel and district attorneys.. Checked November 11, 2026.

Person who creates or discloses the material: Do not create and disclose, or disclose, digitized sexually explicit material of a person you know or should know did not consent or was a minor. Starts January 1, 2026 · Ongoing · Applies when: Any intentional disclosure to the public. · Civ. Code § 1708.86(b)(1), (2)

Deepfake pornography service operator: Hold the depicted person's express written consent; without it the operator is presumed to know the person did not consent. Starts January 1, 2026 · Ongoing · Applies when: Whenever the service creates digitized sexually explicit material. Disclaimers and terms banning nonconsensual use are not a defense. · Civ. Code § 1708.86(c)(1), (e)

Service provider to a deepfake pornography service: Take all necessary steps to stop providing the enabling services within 30 days of receiving the evidence. When triggered · Each time it happens · Applies when: After a depicted person or public prosecutor submits evidence, with the required details, through the provider's prominently displayed customer service email or designated process. · Civ. Code § 1708.86(c)(2)

California digital replica contract law (AB 2602)

Chapter 259, Statutes of 2024 (AB 2602), approved September 17, 2024; adds Labor Code § 927. Enforced by: The law does not name one. Checked November 11, 2026.

Party contracting for an individual's services: Include a reasonably specific description of the intended uses of the digital replica, or the provision is unenforceable for new performances. Starts January 1, 2025 · Ongoing · Applies when: The provision lets a digital replica replace in-person work and the individual had neither legal counsel nor a union agreement covering digital replicas. · Lab. Code § 927(a)

California digital replica law (SB 1111)

Chapter 862, Statutes of 2026 (SB 1111), approved September 30, 2026; amends Civil Code § 3344 and adds Penal Code § 540. Enforced by: The injured person, by civil action; prosecutors for the Penal Code offenses.. Checked November 11, 2026.

Person using another's name, voice or likeness commercially: Get the person's prior consent, or a parent's or guardian's for a minor, before using their name, voice or likeness, including a digital replica, on products or in advertising. Starts January 1, 2027 · Ongoing · Applies when: Any knowing use on or in products, merchandise or goods, or for advertising, selling or soliciting purchases. · Civ. Code § 3344(a)(1), (f)

Person using another's name, voice or likeness commercially: Remove, recall or stop publishing the material within two business days of being served with a court order, unless the order says otherwise. When triggered · Each time it happens · Applies when: After a court grants an order under Code of Civil Procedure § 527(c) requiring removal or recall. · Civ. Code § 3344(a)(2)

Any person: Do not use a digital replica with the intent to impersonate another; it counts as false impersonation under the Penal Code. Starts January 1, 2027 · Ongoing · Applies when: Any Penal Code offense in which false impersonation of another is an element, including §§ 528.5, 529 and 530. · Pen. Code § 540

California digitally altered real estate images law (AB 723)

Chapter 497, Statutes of 2025 (AB 723), approved October 10, 2025; adds Business and Professions Code § 10140.8, amended by AB 2025 (Chapter 572, Statutes of 2026). Enforced by: The law does not name one. Checked November 11, 2026.

Real estate broker or salesperson: Include a reasonably conspicuous statement, on or next to the image, that it has been altered, with a link, URL or QR code to the original, unaltered image. Starts January 1, 2026 · Ongoing · Applies when: Any advertisement or promotional material for the sale of real property that includes a digitally altered image. · Bus. & Prof. Code § 10140.8(a)(1)

Real estate broker or salesperson: Include the unaltered versions of the images in the posting, or a link to a public website that clearly identifies them. Starts January 1, 2026 · Ongoing · Applies when: When the advertisement is posted on a website the broker, salesperson or their agent controls. · Bus. & Prof. Code § 10140.8(a)(2)

California digitally altered rental listing images law (AB 2025)

Chapter 572, Statutes of 2026 (AB 2025), approved September 27, 2026; adds Civil Code § 1940.11 and amends Business and Professions Code § 10140.8. Enforced by: The law does not name one. Checked November 11, 2026.

Person advertising a rental: Include a reasonably conspicuous disclosure, on or next to the image, that the image has been altered. Starts January 1, 2027 · Ongoing · Applies when: Any advertisement or promotional material for rental of real property that includes a digitally altered image. · Civ. Code § 1940.11(b)(1)

Person advertising a rental: Include the unaltered versions of the images in the posting, or a link, URL or QR code to a public website that clearly identifies them. Starts January 1, 2027 · Ongoing · Applies when: The same advertisements, except images or renderings not originally created with a capture device. · Civ. Code § 1940.11(b)(2)

California generative AI law for attorneys and arbitrators (SB 574)

Chapter 858, Statutes of 2026 (SB 574), approved September 30, 2026; adds Business and Professions Code § 6068.1 and Code of Civil Procedure §§ 180 and 1282.1, amends Code of Civil Procedure § 128.7. Enforced by: Courts, by sanctions for filings that violate the citation rule; the attorney duties sit in the State Bar Act, whose discipline provisions were not read.. Checked November 11, 2026.

Attorney: Do not delegate the practice of law to generative artificial intelligence. Starts January 1, 2027 · Ongoing · Applies when: Always. · Bus. & Prof. Code § 6068.1(a)(2)

Attorney: Do not enter confidential, personal identifying or other nonpublic information into a generative AI system unless access to it is restricted to the attorney and authorized persons bound to confidentiality. Starts January 1, 2027 · Ongoing · Applies when: When using generative AI to assist in the practice of law. · Bus. & Prof. Code § 6068.1(a)(3)(A)

Attorney: Take reasonable steps to verify the accuracy of generative AI outputs, including all case and statutory citations, and correct any erroneous or hallucinated output. Starts January 1, 2027 · Ongoing · Applies when: When using generative AI to assist in the practice of law. · Bus. & Prof. Code § 6068.1(a)(3)(B)

Attorney: Disclose the use of generative AI to the court for all documents submitted to the court. Starts January 1, 2027 · Each time it happens · Applies when: When generative AI was used. The attorney must also consider disclosure when it is used to create content provided to the public. · Bus. & Prof. Code § 6068.1(a)(3)(C)

Attorney: Personally verify every citation in a brief, pleading, motion or other paper filed in court, including any citation provided by generative AI. Starts January 1, 2027 · Each time it happens · Applies when: Any paper filed in any court. · Code Civ. Proc. § 128.7(b)(2)

Arbitrator: Do not delegate any part of the decisionmaking process to a generative AI tool. Starts January 1, 2027 · Ongoing · Applies when: Always. · Code Civ. Proc. § 1282.1(b)(1)

Arbitrator: Do not rely on AI-generated information from outside the record without first disclosing it to the parties and, as far as practical, letting them comment. Starts January 1, 2027 · Each time it happens · Applies when: Whenever an arbitrator would rely on information generated by generative AI outside the record. · Code Civ. Proc. § 1282.1(b)(2)

California generative AI patient communications law (AB 3030)

Chapter 848, Statutes of 2024 (AB 3030); Health and Safety Code § 1339.75. Enforced by: Facility and clinic licensing enforcement under the Health and Safety Code (in practice the State Department of Public Health), and the Medical Board of California or Osteopathic Medical Board for physicians.. Checked November 11, 2026.

Health facility, clinic or physician practice: Include a disclaimer that generative AI produced the communication: at the start of letters and emails, throughout chats and video, and verbally at the start and end of audio. Starts January 1, 2025 · Ongoing · Applies when: Generative AI communications to patients about clinical information that no licensed provider has read and reviewed. · Health & Saf. Code § 1339.75(a)(1)

Health facility, clinic or physician practice: Include clear instructions for how the patient can contact a human health care provider, an employee of the facility or practice, or another appropriate person. Starts January 1, 2025 · Ongoing · Applies when: The same generative AI patient communications. · Health & Saf. Code § 1339.75(a)(2)

California generative AI training data transparency law (AB 2013)

Chapter 817, Statutes of 2024 (AB 2013); Civil Code Division 3, Part 4, Title 15.2, §§ 3110-3111; § 3111 amended by AB 1170 (Chapter 67, Statutes of 2025). Enforced by: The law does not name one. Checked November 11, 2026.

Developer: Post on its website documentation about the data used to train each generative AI system or service made publicly available to Californians. Starts January 1, 2026 · Each time it happens · Applies when: By January 1, 2026, and before each later time a system, service or substantial modification released on or after January 1, 2022 is made publicly available. · Civ. Code § 3111

Developer: Include a high-level dataset summary: sources or owners, purpose, data point counts and types, IP status, licensing, personal and aggregate consumer information, cleaning, collection period, first-use dates, synthetic data. Starts January 1, 2026 · Each time it happens · Applies when: Each posted documentation; the statutory list of twelve items is not exhaustive. · Civ. Code § 3111(a)(1)-(12)

California law against AI posing as a licensed health professional (AB 489)

Chapter 615, Statutes of 2025 (AB 489), approved October 11, 2025; adds Business and Professions Code Division 2, Chapter 15.5, §§ 4999.8-4999.9. Enforced by: The appropriate health care professional licensing board or enforcement agency.. Checked November 11, 2026.

Developer or deployer of an AI system: Do not use, in an AI system's advertising or functionality, protected terms, letters or phrases that indicate a health care license the system does not hold. Starts January 1, 2026 · Ongoing · Applies when: Any existing law that reserves a professional title or term now applies to AI developers and deployers. · Bus. & Prof. Code § 4999.9(b)

Developer or deployer of an AI system: Do not use terms, letters or phrases that indicate or imply the AI's care, advice, reports or assessments come from a licensed human health care professional. Starts January 1, 2026 · Ongoing · Applies when: Advertising or functionality of an AI or generative AI system, program or device. · Bus. & Prof. Code § 4999.9(c)

California partial driving automation marketing law (SB 1398)

Chapter 308, Statutes of 2022 (SB 1398), approved September 13, 2022; adds Vehicle Code § 24011.5. Enforced by: The law does not name one. Checked November 11, 2026.

Vehicle manufacturer or dealer: Give the buyer or owner a distinct notice that names the feature and clearly describes its functions and limitations. Starts January 1, 2023 · Each time it happens · Applies when: At delivery of a new passenger vehicle with a partial driving automation feature, or when an update or upgrade adds one. · Veh. Code § 24011.5(a)

Vehicle manufacturer or dealer: Do not name or market a partial driving automation feature in language implying the vehicle is autonomous or has functionality the feature lacks. Starts January 1, 2023 · Ongoing · Applies when: Naming the feature and describing it in marketing materials. · Veh. Code § 24011.5(b)

Vehicle manufacturer: Give the dealer the information needed to provide the buyer notice, including specific recommended language for it. Starts January 1, 2023 · Each time it happens · Applies when: Before delivering a passenger vehicle equipped with a partial driving automation feature to a dealer. · Veh. Code § 24011.5(e)

California rules for AI-drafted police reports and their vendors (SB 524)

Chapter 587, Statutes of 2025 (SB 524), approved October 10, 2025; adds Penal Code § 13663. Enforced by: The law does not name one. Checked November 15, 2026.

Contracted vendor: Do not share, sell or otherwise use information a law enforcement agency provides for AI processing, except for that agency's purposes or under a court order. Starts January 1, 2026 · Ongoing · Applies when: Applies to data the agency provides to be processed by the vendor's report-drafting AI. · Penal Code § 13663(d)(1)

Law enforcement agency: Keep a policy requiring AI-drafted reports to name each AI program used, state they were written fully or partly with AI, and carry the preparer's verifying signature. Starts January 1, 2026 · Ongoing · Applies when: Any official report generated fully or partly with AI. The required statement reads "This report was written either fully or in part using artificial intelligence." · Penal Code § 13663(a)

Law enforcement agency: Keep the AI-generated first draft for as long as the official report is kept. Starts January 1, 2026 · Ongoing · Applies when: Any report created fully or partly with AI. · Penal Code § 13663(b)(1)

Law enforcement agency: Keep an audit trail, for as long as the official report is kept, identifying who used AI to create the report and any video or audio used. Starts January 1, 2026 · Ongoing · Applies when: Any first draft or official report generated with AI. · Penal Code § 13663(c)

California sexually explicit deepfake reporting law for social media (SB 981)

Chapter 292, Statutes of 2024 (SB 981), approved September 19, 2024; adds Business and Professions Code §§ 22670-22671. Enforced by: The law does not name one. Checked November 11, 2026.

Social media platform: Provide a reasonably accessible way for California residents with an account to report sexually explicit digital identity theft. Starts January 1, 2025 · Ongoing · Applies when: Always, for reporting users who are California residents with an account. · Bus. & Prof. Code § 22671(a)

Social media platform: Confirm receipt of the report within 48 hours, and send a written status update within seven days of that confirmation. When triggered · Each time it happens · Applies when: Each report received through the mechanism. · Bus. & Prof. Code § 22671(b)

Social media platform: Temporarily block the reported material from public view while the report is being decided. When triggered · Each time it happens · Applies when: Each report, pending the platform's determination. · Bus. & Prof. Code § 22671(d)(1)

Social media platform: Decide within 30 days of the confirmation whether there is a reasonable basis to believe the report; up to 60 days from the report if delayed beyond its control. When triggered · Each time it happens · Applies when: Each report. If delayed, give the reporting user written notice within 48 hours of knowing the delay is likely. · Bus. & Prof. Code § 22671(c)

Social media platform: Immediately remove the material from public view. When triggered · Each time it happens · Applies when: When the platform determines there is a reasonable basis to believe the reported material is sexually explicit digital identity theft. · Bus. & Prof. Code § 22671(d)(2)

California social media child sexual abuse material reporting law (AB 1946)

Chapter 185, Statutes of 2026 (AB 1946); amends Civil Code §§ 3273.65, 3273.66, 3273.67 and 3345.1. Enforced by: California Attorney General, district attorneys, city attorneys and county counsel, by civil action for penalties and injunctive relief; depicted individuals may also sue for damages.. Checked November 14, 2026.

Social media platform: Give California residents a clear, conspicuous, reasonably accessible way to report child sexual abuse material, including AI-made intimate depictions of minors and non-encrypted direct messages, without dark patterns. Starts January 1, 2027 · Ongoing · Applies when: Applies to every covered platform. · Civ. Code § 3273.66(a), as amended by AB 1946 § 2

Social media platform: Collect enough information to contact the reporting user, and contact them in writing by the method they choose, such as text message or email. Starts January 1, 2027 · Each time it happens · Applies when: A California resident reports material through the platform's mechanism. · Civ. Code § 3273.66(b)(1), (c)

Social media platform: Have a person review a report when the material has no established or known hash match to child sexual abuse material and is not otherwise blocked. Starts January 1, 2027 · Each time it happens · Applies when: A California resident reports material through the platform's mechanism. · Civ. Code § 3273.66(b)(2)

Social media platform: Within 48 hours, permanently block reported material that is reasonably believed to be child sexual abuse material on the platform, and make reasonable efforts to block other copies. Starts January 1, 2027 · Each time it happens · Applies when: The report has enough basic identifying information, such as an account identifier, to locate the material. A platform may not require any specific piece of information. · Civ. Code § 3273.66(d)

Social media platform: Within 72 hours, confirm in writing what action was taken, the update schedule, and whether the report went through hash matching and human review. Starts January 1, 2027 · Each time it happens · Applies when: A California resident reports material through the platform's mechanism. · Civ. Code § 3273.66(e)

Social media platform: Within seven days, send a final written determination: blocked as child sexual abuse material, not such material, or not on the platform. Starts January 1, 2027 · Each time it happens · Applies when: A California resident reports material through the platform's mechanism. · Civ. Code § 3273.66(f), (g)

Social media platform: If circumstances beyond your control cause delay, notify the reporting user in writing within 48 hours of knowing, and finish the required steps within 10 days of the report. Starts January 1, 2027 · Each time it happens · Applies when: The platform cannot meet the deadlines because of circumstances beyond its reasonable control. · Civ. Code § 3273.66(h)

Social media platform: Restore the reporting mechanism whenever it is unavailable or not working. Starts January 1, 2027 · Each time it happens · Applies when: The reporting mechanism is down or not functioning. · Civ. Code § 3273.66(i)

California student data AI training prohibition (AB 1159)

Chapter 182, Statutes of 2026 (AB 1159), approved September 10, 2026; amends Business and Professions Code §§ 22584 and 22586, adds §§ 22585, 22586.1 and Chapter 22.2.6 (§ 22587 et seq.). Enforced by: Pupils and students who suffer actual damages, or their parents or guardians, by individual or class action; a copy of the complaint goes to the Attorney General.. Checked November 11, 2026.

K-12 education technology operator: Do not knowingly use covered information, including persistent unique identifiers, to train a generative AI system or service or develop an AI system. Starts January 1, 2027 · Ongoing · Applies when: Covered information created or gathered by the operator's site, service or application. · Bus. & Prof. Code § 22584(b)(5)

Preschool education technology operator: Do not knowingly use covered information, including persistent unique identifiers, to train a generative AI system or service or develop an AI system. Starts January 1, 2027 · Ongoing · Applies when: Covered information created or gathered by the operator's site, service or application. · Bus. & Prof. Code § 22586(b)(5)

Higher education education technology operator: Do not knowingly use covered information, including persistent unique identifiers, to train a generative AI system or service or develop an AI system. Starts July 1, 2027 · Ongoing · Applies when: Covered information created or gathered by the operator's site, service or application. · Bus. & Prof. Code § 22587(b)(5)

California synthetic performer advertising disclosure law (SB 1050)

Chapter 246, Statutes of 2026 (SB 1050), approved September 16, 2026; adds Business and Professions Code § 17610. Enforced by: Attorney General, district attorneys, county counsel and city attorneys under the false advertising law; also enforceable under the Unfair Competition Law.. Checked November 11, 2026.

Advertiser: Include a clear and conspicuous disclosure that the advertisement includes a synthetic performer, in wording substantially similar to the two statutory phrases. Starts January 1, 2027 · Ongoing · Applies when: An advertisement that prominently includes a synthetic performer. Sample wording: this performance features a synthetic performer, or no human performer is depicted. · Bus. & Prof. Code § 17610(b), (c)

Advertising medium: Remove, disable or stop disseminating the advertisement in California as soon as commercially reasonable and technically feasible, and stop accepting payment for it. When triggered · Each time it happens · Applies when: After being served with a court order finding the advertisement violates the law or enjoining its creator, with information sufficient to identify it. · Bus. & Prof. Code § 17610(e)

California technological displacement notice law (SB 951, amending Cal-WARN)

Chapter 860, Statutes of 2026 (SB 951), approved September 30, 2026; amends Labor Code §§ 1400.5 and 1401 and adds § 1402.7 (California WARN Act, Labor Code §§ 1400-1408). Enforced by: Labor Commissioner; affected employees, local governments and employee representatives may sue.. Checked November 11, 2026.

Employer: Give 60 days' written notice before a mass layoff, relocation or termination to affected employees, the Employment Development Department, the local workforce board and local chief elected officials. When triggered · Each time it happens · Applies when: Any mass layoff, relocation or termination at a covered establishment. · Lab. Code § 1401(a)

Employer: State at the top that the notice is for a technology displacement; list the number, occupations and locations of affected jobs, the functions automated and the type of technology. When triggered · Each time it happens · Applies when: When the layoff, relocation or termination is caused in whole or substantial part by an AI system or other automated technology replacing or automating positions. · Lab. Code § 1401(d)(1)

Employer: Include in every notice the federal WARN elements, the workforce board's contact and rapid-response description, CalFresh information, and a working employer email and telephone number. When triggered · Each time it happens · Applies when: Every notice under the chapter. If the employer coordinates services, it must arrange them within 30 days of the notice. · Lab. Code § 1401(b), (c), (e), (f)

California workplace automated decision systems law (SB 947)

Chapter 859, Statutes of 2026 (SB 947), approved September 30, 2026; adds Labor Code Division 2, Part 5.5.5, §§ 1520-1526.7. Enforced by: Labor Commissioner (investigation, citation and civil action) and public prosecutors.. Checked November 11, 2026.

Employer: Do not use an ADS to violate labor, safety, employment or civil rights laws, to infer an employee's protected status, or to predict and punish workers for exercising legal rights. Starts July 1, 2027 · Ongoing · Applies when: Any use of an automated decision system on workers. · Lab. Code § 1522(a)

Employer: Do not rely solely on an ADS when making a disciplinary or termination decision. Starts July 1, 2027 · Ongoing · Applies when: Any disciplinary or termination decision. · Lab. Code § 1522(b)(1)

Employer: Have a human corroborate the decision using the data behind the ADS output or other supporting information; do not use output that cannot be corroborated or is inaccurate or misleading. When triggered · Each time it happens · Applies when: When the employer primarily relies on ADS output for a disciplinary or termination decision. · Lab. Code § 1522(b)(2), (c)

Employer: Give the affected employee a written, plain-language, stand-alone post-use notice when informing them of the decision. When triggered · Each time it happens · Applies when: When the employer primarily relied on an ADS for a disciplinary or termination decision. The notice states the reliance, the human review, a human contact and the anti-retaliation rule. · Lab. Code § 1524

Employer: On the employee's request, provide a meaningful, objective description of the employee's own data used by the ADS, anonymizing other people's personal information. When triggered · Each time it happens · Applies when: When the employer primarily used an ADS for a disciplinary or termination decision and the employee asks. · Lab. Code § 1522(d), (e)

Employer: Do not discharge, demote, suspend or otherwise retaliate against an employee for using rights under the part, filing a complaint or cooperating in an investigation. Starts July 1, 2027 · Ongoing · Applies when: Any employee exercising or attempting to exercise rights under the part. · Lab. Code § 1526

California workplace surveillance tools law (AB 1883)

Chapter 853, Statutes of 2026 (AB 1883), approved September 30, 2026; adds Labor Code Division 2, Part 5.8, §§ 1580-1583. Enforced by: Labor Commissioner (investigation, citation and civil action) and public prosecutors; an employee may also recover the penalty.. Checked November 11, 2026.

Employer: Do not use an AI workplace surveillance tool on employees to recognize, infer or predict an individual's emotional state. Starts January 1, 2027 · Ongoing · Applies when: Any workplace surveillance tool that uses artificial intelligence. · Lab. Code § 1581(a)(1)

Employer: Do not use an AI workplace surveillance tool on employees to collect neural data. Starts January 1, 2027 · Ongoing · Applies when: Any workplace surveillance tool that uses artificial intelligence. · Lab. Code § 1581(a)(2)

California zero-emission requirement for light-duty autonomous vehicles (SB 500)

Chapter 277, Statutes of 2021 (SB 500), approved September 23, 2021; Vehicle Code § 38750(j). Enforced by: The law does not name one. Checked November 15, 2026.

Autonomous vehicle deployment permit holder: From January 1, 2030, operate model year 2031 or later autonomous vehicles under 8,501 pounds under a deployment permit only if they are zero-emission vehicles. Starts January 1, 2030 · Ongoing · Applies when: Vehicles operated under a DMV deployment permit, to the extent federal law allows. · Vehicle Code § 38750(j)(1)

Also check: 36 other enacted AI laws in your state are not yet mapped duty by duty: AB 1651, AB 2392, AB 2504, AB 2839, AB 302, AB102, AB107, AB1215, AB1766, AB1792, AB2071, AB2212, AB2713, AB2876, AB2885, AB602, AB853, AB96, AB972, AB979, ACR215, SB 1159, SB1000, SB101, SB1216, SB1276, SB1288, SB241, SB253, SB36, SB47, SB480, SB896, SB928, SCR17, SJR6.

Get an email when California AI bills change

We’ll email you when AI bills in California are introduced or change status (at most one alert email a day), plus our weekly digest.

We’ll send a confirmation link first; nothing else is sent until you confirm. Unsubscribe anytime. See past weekly issues. Need alerts for specific bills only? Per-bill alerts come with Pro.

Information, not legal advice. This checklist summarizes what the official texts of the laws listed say. It does not decide whether a law applies to your organization; that turns on facts such as your size, your role as a developer or deployer, and how you use AI. Laws change, and courts and regulators can read them differently. Check the official text linked with each item and talk to a qualified lawyer before acting. Using this page does not create an attorney-client relationship. See our terms of service.

Where the items come from

Each item is one duty from an enacted law, read from the official text on the legislature’s or state’s own website. 265 of the 326 laws have also been read a second time to confirm every date, threshold, penalty and enforcer. Each item names who the duty falls on, when it starts, how often it recurs and the section it comes from, with a link.

Where a law is silent, the checklist says so rather than guessing. A law that is repealed or replaced on a known date shows that end date and drops off afterward. The list is rebuilt from these records every time the page loads.

Want the same duties ordered by start date, with penalties and enforcers side by side? Use the compliance plan builder. For AI in hiring specifically, see the AI hiring compliance checklist. To report an error, use the corrections page.

Session Expired

The AI compliance checklist, built from the laws themselves.

190 items for your choices

California

Get an email when California AI bills change

Where the items come from