AI compliance plan
Your AI compliance plan.
190 duties from 47 enacted laws in 1 state. Each one says who it falls on, when it starts and where in the law it comes from. The next start date is January 1, 2027.
The plan at a glance
190duties from 47 laws
42start in the next 90 days; the next on January 1, 2027
16laws let people sue over a violation
1law gives a set number of days to fix a violation before enforcement
Download CSV and calendar with Pro
Open as a checklist
Pro turns this plan into a spreadsheet for audit files and a calendar of every start date. The plan on this page stays open to everyone.
Already in effect 81 duties
These duties are in force today.
| Starts | Law | Who | What it requires | How often | Source |
|---|---|---|---|---|---|
| January 1, 2023 | California ban on deceptive candidate deepfakes within 60 days of an election (AB 730)Ends January 1, 2027 | Person, committee or other entity | Within 60 days of an election, do not distribute, with actual malice, materially deceptive media of a candidate meant to injure them or sway votes, unless disclosed as manipulated.Applies when: The candidate will appear on the ballot. The disclosure reads "This _____ has been manipulated" (image, video or audio) and must meet the size and timing rules in subdivision (b). | Ongoing | Elec. Code § 20010(a)-(b) |
| January 1, 2023 | California partial driving automation marketing law (SB 1398) | Vehicle manufacturer or dealer | Give the buyer or owner a distinct notice that names the feature and clearly describes its functions and limitations.Applies when: At delivery of a new passenger vehicle with a partial driving automation feature, or when an update or upgrade adds one. | Each time it happens | Veh. Code § 24011.5(a) |
| January 1, 2023 | California partial driving automation marketing law (SB 1398) | Vehicle manufacturer or dealer | Do not name or market a partial driving automation feature in language implying the vehicle is autonomous or has functionality the feature lacks.Applies when: Naming the feature and describing it in marketing materials. | Ongoing | Veh. Code § 24011.5(b) |
| January 1, 2023 | California partial driving automation marketing law (SB 1398) | Vehicle manufacturer | Give the dealer the information needed to provide the buyer notice, including specific recommended language for it.Applies when: Before delivering a passenger vehicle equipped with a partial driving automation feature to a dealer. | Each time it happens | Veh. Code § 24011.5(e) |
| January 1, 2025 | California AI in utilization review law (SB 1120) | Health care service plan or disability insurer | Ensure the tool bases determinations on the enrollee's own clinical history and circumstances, not solely on a group dataset, and does not supplant provider decisionmaking.Applies when: Any AI, algorithm or software tool used for prospective, retrospective or concurrent utilization review based on medical necessity. | Ongoing | Health & Saf. Code § 1367.01(k)(1)(A), (B), (D), (4) |
| January 1, 2025 | California AI in utilization review law (SB 1120) | Health care service plan or disability insurer | Do not let the tool deny, delay or modify care on medical necessity; only a licensed physician or competent licensed health professional may make that determination.Applies when: Every medical necessity determination. | Ongoing | Health & Saf. Code § 1367.01(k)(2) |
| January 1, 2025 | California AI in utilization review law (SB 1120) | Health care service plan or disability insurer | Ensure the tool does not discriminate, is fairly and equitably applied, does not cause harm, and that patient data is not used beyond its intended purpose.Applies when: Any covered tool. | Ongoing | Health & Saf. Code § 1367.01(k)(1)(E), (F), (J), (K) |
| January 1, 2025 | California AI in utilization review law (SB 1120) | Health care service plan or disability insurer | Keep the tool open to regulator inspection and audit, disclose its use and oversight in written policies, and periodically review and revise its performance, use and outcomes.Applies when: Any covered tool. | Ongoing | Health & Saf. Code § 1367.01(k)(1)(G), (H), (I) |
| January 1, 2025 | California AI political advertisement disclosure law (AB 2355) | Political committee | Include, clearly and conspicuously, the disclosure: Ad generated or substantially altered using artificial intelligence.Applies when: Any qualified political advertisement the committee creates, originally publishes or originally distributes. Display or speak it in the manner set by §§ 84504 to 84504.5. | Ongoing | Gov. Code § 84514(a) |
| January 1, 2025 | California AI voice robocall disclosure law (AB 2905) | Caller using an automatic dialing-announcing device | Before the recording plays, have a live, natural voice say what the call is and who is calling, ask for consent, and say if the message uses an artificial voice.Applies when: Every call placed with an automatic dialing-announcing device. | Each time it happens | Pub. Util. Code § 2874(a) |
| January 1, 2025 | California AI voice robocall disclosure law (AB 2905) | Caller using an automatic dialing-announcing device | Disconnect the device from the line when either party ends the call.Applies when: Every call placed with an automatic dialing-announcing device. | Each time it happens | Pub. Util. Code § 2874(b) |
| January 1, 2025 | California AI-generated child sexual abuse material: possession and distribution (AB 1831) | Person | Do not knowingly possess or control obscene digitally altered or AI-generated matter depicting what appears to be a minor engaging in or simulating sexual conduct.Applies when: Any such matter, in any format. | Ongoing | Penal Code § 311.11(a)(2) |
| January 1, 2025 | California AI-generated child sexual abuse material: possession and distribution (AB 1831) | Person | Do not produce, bring into California, or distribute, exhibit or exchange obscene AI-generated or digitally altered depictions of what appears to be a minor in sexual conduct.Applies when: Penalties differ by whether it is for commercial consideration, to adults, or to minors. | Ongoing | Penal Code § 311.2(b)-(d) |
| January 1, 2025 | California AI-generated child sexual abuse material: sending, producing and exploitation offenses (SB 1381) | Person | Do not send into California, or prepare, produce, duplicate or print to distribute, obscene matter containing AI-generated data depicting what appears to be a minor in sexual conduct.Applies when: Includes offering, distributing, exhibiting or exchanging such matter, with or without payment. | Ongoing | Penal Code § 311.1(a) |
| January 1, 2025 | California AI-generated child sexual abuse material: sending, producing and exploitation offenses (SB 1381) | Person | Do not knowingly develop, duplicate, print or exchange digitally altered or AI-generated matter depicting a person under 18 engaged in sexual conduct.Applies when: The matter need not be obscene. From January 1, 2027 (SB 1276), the duty also covers downloading, streaming or accessing such matter, and requires knowing it depicts a minor; unsolicited matter received without knowledge or consent is excluded. | Ongoing | Penal Code § 311.3(a)-(b) |
| January 1, 2025 | California CCPA personal information in AI systems (AB 1008) | Business | Treat personal information held in AI systems that can output it as personal information under the CCPA, applying the act's consumer-rights and disclosure duties to it.Applies when: When an AI system, compressed or encrypted file or metadata is capable of outputting a consumer's personal information. | Ongoing | Civ. Code § 1798.140(v)(4)(C) |
| January 1, 2025 | California Defending Democracy from Deepfake Deception Act (AB 2655) | Large online platform | Remove reported deceptive content showing a candidate, elections official or elected official doing or saying something they did not, within 72 hours of a report.Applies when: The content is reasonably likely to harm a candidate or falsely undermine confidence in results, is posted in the 120 days before an election (to 60 days after for elections officials), and the platform knows or recklessly disregards this.Blocked in court for Any provider of an interactive computer service as defined in 47 U.S.C. 230 (the order names Facebook, Instagram and YouTube); X Corp. and Rumble are also covered by a permanent injunction in the final judgment.. The Attorney General and Secretary of State may not enforce AB 2655 in its entirety against these providers. The order binds only those two officials and ends if an appeals court vacates the judgment. Kohls v. Bonta, No. 2:24-cv-02527-JAM-CKD (E.D. Cal.), Order on Stipulation Regarding AB 2655 Enforcement, Aug 28, 2025 | Each time it happens | Elec. Code § 20513(a)-(b), (e) |
| January 1, 2025 | California Defending Democracy from Deepfake Deception Act (AB 2655) | Large online platform | Identify and remove identical or substantially similar reposts of content the platform previously removed under the chapter.Applies when: During the same removal periods.Blocked in court for Any provider of an interactive computer service as defined in 47 U.S.C. 230 (the order names Facebook, Instagram and YouTube); X Corp. and Rumble are also covered by a permanent injunction in the final judgment.. The Attorney General and Secretary of State may not enforce AB 2655 in its entirety against these providers. The order binds only those two officials and ends if an appeals court vacates the judgment. Kohls v. Bonta, No. 2:24-cv-02527-JAM-CKD (E.D. Cal.), Order on Stipulation Regarding AB 2655 Enforcement, Aug 28, 2025 | Each time it happens | Elec. Code § 20513(c) |
| January 1, 2025 | California Defending Democracy from Deepfake Deception Act (AB 2655) | Large online platform | Label reported deceptive content "This _____ has been manipulated and is not authentic" within 72 hours, with a click-through explanation.Applies when: Covers content outside the removal window or in ads and election communications, during the six months before an election (to 60 days after for election administration content).Blocked in court for Any provider of an interactive computer service as defined in 47 U.S.C. 230 (the order names Facebook, Instagram and YouTube); X Corp. and Rumble are also covered by a permanent injunction in the final judgment.. The Attorney General and Secretary of State may not enforce AB 2655 in its entirety against these providers. The order binds only those two officials and ends if an appeals court vacates the judgment. Kohls v. Bonta, No. 2:24-cv-02527-JAM-CKD (E.D. Cal.), Order on Stipulation Regarding AB 2655 Enforcement, Aug 28, 2025 | Each time it happens | Elec. Code § 20514 |
| January 1, 2025 | California Defending Democracy from Deepfake Deception Act (AB 2655) | Large online platform | Give California residents an easy way to report content for removal or labeling, and respond to each report within 36 hours describing any action taken.Applies when: Always.Blocked in court for Any provider of an interactive computer service as defined in 47 U.S.C. 230 (the order names Facebook, Instagram and YouTube); X Corp. and Rumble are also covered by a permanent injunction in the final judgment.. The Attorney General and Secretary of State may not enforce AB 2655 in its entirety against these providers. The order binds only those two officials and ends if an appeals court vacates the judgment. Kohls v. Bonta, No. 2:24-cv-02527-JAM-CKD (E.D. Cal.), Order on Stipulation Regarding AB 2655 Enforcement, Aug 28, 2025 | Ongoing | Elec. Code § 20515(a) |
| January 1, 2025 | California Protecting Our Kids from Social Media Addiction Act (SB 976) | Operator of an addictive internet-based service or application | Do not provide an addictive feed to a user you actually know is a minor unless you have verifiable parental consent.Applies when: The service offers an addictive feed as a significant part of what it provides. | Ongoing | Health & Safety Code § 27001(a)(1)(A), (a)(2) |
| January 1, 2025 | California Protecting Our Kids from Social Media Addiction Act (SB 976) | Operator of an addictive internet-based service or application | Use information collected to determine age or verify parental consent only for compliance, and delete it immediately after that use unless law requires keeping it.Applies when: Whenever age or parental consent is checked under this chapter. | Ongoing | Health & Safety Code § 27001(b) |
| January 1, 2025 | California Protecting Our Kids from Social Media Addiction Act (SB 976) | Operator of an addictive internet-based service or application | Do not send notifications to a known minor from midnight to 6 a.m., or 8 a.m. to 3 p.m. on school-year weekdays, without verifiable parental consent.Applies when: User's local time; school-year weekdays are Monday to Friday, September through May. From 2027 this covers users not reasonably determined to be adults.Blocked in court. A federal court preliminarily enjoined the Attorney General from enforcing this duty in December 2024; California did not appeal that part, as the Ninth Circuit noted. NetChoice v. Bonta, No. 25-146 (9th Cir.); N.D. Cal. No. 5:24-cv-07885, Sep 9, 2025 | Ongoing | Health & Safety Code § 27002(a) |
| January 1, 2025 | California Protecting Our Kids from Social Media Addiction Act (SB 976) | Operator of an addictive internet-based service or application | Give verified parents a setting to block access and notifications during hours they choose, on by default from midnight to 6 a.m.Applies when: The user is a minor with a verified parent. | Ongoing | Health & Safety Code § 27002(b)(1) |
| January 1, 2025 | California Protecting Our Kids from Social Media Addiction Act (SB 976) | Operator of an addictive internet-based service or application | Give verified parents a daily time limit on the addictive feed, set by default to one hour a day.Applies when: The user is a minor with a verified parent. | Ongoing | Health & Safety Code § 27002(b)(2) |
| January 1, 2025 | California Protecting Our Kids from Social Media Addiction Act (SB 976) | Operator of an addictive internet-based service or application | Give verified parents a setting that hides like counts and other feedback on media in the feed, on by default.Applies when: The user is a minor with a verified parent.Blocked in court. The Ninth Circuit held this default setting likely unconstitutional and sent the case back with instructions to enjoin its enforcement. NetChoice v. Bonta, No. 25-146 (9th Cir.); N.D. Cal. No. 5:24-cv-07885, Sep 9, 2025 | Ongoing | Health & Safety Code § 27002(b)(3) |
| January 1, 2025 | California Protecting Our Kids from Social Media Addiction Act (SB 976) | Operator of an addictive internet-based service or application | Give verified parents a way to make the default feed non-personalized, using no information about the child except age or minor status.Applies when: The user is a minor with a verified parent. | Ongoing | Health & Safety Code § 27002(b)(4) |
| January 1, 2025 | California Protecting Our Kids from Social Media Addiction Act (SB 976) | Operator of an addictive internet-based service or application | Give verified parents a private-mode setting, on by default, so only connected users can view or respond to the child's posts.Applies when: The user is a minor with a verified parent. | Ongoing | Health & Safety Code § 27002(b)(5) |
| January 1, 2025 | California Protecting Our Kids from Social Media Addiction Act (SB 976) | Operator of an addictive internet-based service or application | Do not withhold, degrade or charge more for any product, service or feature because a user or parent uses these rights or protections.Applies when: A user or parent uses a right or protection in this chapter. An operator may choose not to serve minors. | Ongoing | Health & Safety Code § 27004(a) |
| January 1, 2025 | California Protecting Our Kids from Social Media Addiction Act (SB 976) | Operator of an addictive internet-based service or application | Publicly disclose each year the number of minor users, how many have parental consent for an addictive feed, and how many have the parental controls on.Applies when: Each year.Blocked in court. A federal court preliminarily enjoined the Attorney General from enforcing this duty in December 2024; California did not appeal that part, as the Ninth Circuit noted. NetChoice v. Bonta, No. 25-146 (9th Cir.); N.D. Cal. No. 5:24-cv-07885, Sep 9, 2025 | Every year | Health & Safety Code § 27005 |
| January 1, 2025 | California crime of creating and sharing realistic fake intimate images (SB 926) | Person 18 or older | Do not create and distribute a realistic computer-generated or digital intimate image of an identifiable person when you know or should know it will cause serious emotional distress.Applies when: The image would lead a reasonable person to believe it is authentic, and the person shown suffers serious emotional distress. | Ongoing | Penal Code § 647(j)(4)(A)(ii) |
| January 1, 2025 | California deceased personality digital replica law (AB 1836) | Person using a deceased personality's digital replica | Get prior consent from the person or persons who hold the deceased personality's rights before producing, distributing or making available the digital replica.Applies when: Use of a digital replica of a deceased personality's voice or likeness in an expressive audiovisual work or sound recording, outside the listed exceptions. | Ongoing | Civ. Code § 3344.1(a)(2)(A)(i), (c) |
| January 1, 2025 | California digital replica contract law (AB 2602) | Party contracting for an individual's services | Include a reasonably specific description of the intended uses of the digital replica, or the provision is unenforceable for new performances.Applies when: The provision lets a digital replica replace in-person work and the individual had neither legal counsel nor a union agreement covering digital replicas. | Ongoing | Lab. Code § 927(a) |
| January 1, 2025 | California generative AI patient communications law (AB 3030) | Health facility, clinic or physician practice | Include a disclaimer that generative AI produced the communication: at the start of letters and emails, throughout chats and video, and verbally at the start and end of audio.Applies when: Generative AI communications to patients about clinical information that no licensed provider has read and reviewed. | Ongoing | Health & Saf. Code § 1339.75(a)(1) |
| January 1, 2025 | California generative AI patient communications law (AB 3030) | Health facility, clinic or physician practice | Include clear instructions for how the patient can contact a human health care provider, an employee of the facility or practice, or another appropriate person.Applies when: The same generative AI patient communications. | Ongoing | Health & Saf. Code § 1339.75(a)(2) |
| January 1, 2025 | California sexually explicit deepfake reporting law for social media (SB 981) | Social media platform | Provide a reasonably accessible way for California residents with an account to report sexually explicit digital identity theft.Applies when: Always, for reporting users who are California residents with an account. | Ongoing | Bus. & Prof. Code § 22671(a) |
| January 1, 2026 | California AI autonomy defense law (AB 316) | Defendant who developed, modified or used AI | Do not assert as a defense that the artificial intelligence autonomously caused the harm to the plaintiff.Applies when: Any action alleging that AI the defendant developed, modified or used caused harm to the plaintiff. | Ongoing | Civ. Code § 1714.46(b) |
| January 1, 2026 | California common pricing algorithm law (AB 325, Cartwright Act) | Person using or distributing a common pricing algorithm | Do not use or distribute a common pricing algorithm as part of a contract, combination or conspiracy to restrain trade or commerce.Applies when: Any use or distribution, including selling, licensing or providing access by subscription. | Ongoing | Bus. & Prof. Code § 16729(a), (d)(4) |
| January 1, 2026 | California common pricing algorithm law (AB 325, Cartwright Act) | Person using or distributing a common pricing algorithm | Do not coerce another person to set or adopt a price or commercial term recommended by the algorithm for the same or similar products or services in California.Applies when: Any use or distribution of a common pricing algorithm. | Ongoing | Bus. & Prof. Code § 16729(b) |
| January 1, 2026 | California companion chatbot law (SB 243) | Operator | Give a clear and conspicuous notification that the companion chatbot is artificially generated and not human.Applies when: When a reasonable person interacting with the chatbot would be misled to believe they are interacting with a human. | Ongoing | Bus. & Prof. Code § 22602(a) |
| January 1, 2026 | California companion chatbot law (SB 243) | Operator | Maintain a protocol for preventing suicidal ideation, suicide or self-harm content, including referring users who express these to crisis services; publish protocol details on its website.Applies when: Required before a companion chatbot may engage with users. | Ongoing | Bus. & Prof. Code § 22602(b) |
| January 1, 2026 | California companion chatbot law (SB 243) | Operator | For known minors: disclose the AI; by default remind the user every three hours to take a break and that the chatbot is not human; guard against sexual content.Applies when: When the operator knows the user is a minor; the reminder is due at least every three hours of continuing interaction, and the operator must take reasonable measures against visual sexually explicit material and against telling the minor to engage in such conduct. In force through December 31, 2026; SB 1119 removes this subdivision from January 1, 2027. | Ongoing | Bus. & Prof. Code § 22602(c) (as added by Stats. 2025, Ch. 677) |
| January 1, 2026 | California companion chatbot law (SB 243) | Operator | Use evidence-based methods for measuring suicidal ideation.Applies when: In operating the platform and preparing the annual report. | Ongoing | Bus. & Prof. Code § 22603(d) |
| January 1, 2026 | California companion chatbot law (SB 243) | Operator | Disclose on the application, browser or other access format that companion chatbots may not be suitable for some minors.Applies when: Any companion chatbot platform made available to a user in California. | Ongoing | Bus. & Prof. Code § 22604 |
| January 1, 2026 | California data broker registration law, AI disclosure amendments (SB 361) | Data broker | Register with the California Privacy Protection Agency, pay the fee, and provide the listed information.Applies when: On or before January 31 following each year in which the business meets the definition of data broker. | Every year | Civ. Code § 1798.99.82(a), (b) |
| January 1, 2026 | California data broker registration law, AI disclosure amendments (SB 361) | Data broker | State in the registration whether it shared or sold consumers' data to a developer of a GenAI system in the past year.Applies when: Each annual registration. The same applies to data shared or sold to a foreign actor, the federal government, other states or law enforcement. | Every year | Civ. Code § 1798.99.82(b)(2)(O)-(S) |
| January 1, 2026 | California deepfake pornography liability law (AB 621) | Person who creates or discloses the material | Do not create and disclose, or disclose, digitized sexually explicit material of a person you know or should know did not consent or was a minor.Applies when: Any intentional disclosure to the public. | Ongoing | Civ. Code § 1708.86(b)(1), (2) |
| January 1, 2026 | California deepfake pornography liability law (AB 621) | Deepfake pornography service operator | Hold the depicted person's express written consent; without it the operator is presumed to know the person did not consent.Applies when: Whenever the service creates digitized sexually explicit material. Disclaimers and terms banning nonconsensual use are not a defense. | Ongoing | Civ. Code § 1708.86(c)(1), (e) |
| January 1, 2026 | California digitally altered real estate images law (AB 723) | Real estate broker or salesperson | Include a reasonably conspicuous statement, on or next to the image, that it has been altered, with a link, URL or QR code to the original, unaltered image.Applies when: Any advertisement or promotional material for the sale of real property that includes a digitally altered image. | Ongoing | Bus. & Prof. Code § 10140.8(a)(1) |
| January 1, 2026 | California digitally altered real estate images law (AB 723) | Real estate broker or salesperson | Include the unaltered versions of the images in the posting, or a link to a public website that clearly identifies them.Applies when: When the advertisement is posted on a website the broker, salesperson or their agent controls. | Ongoing | Bus. & Prof. Code § 10140.8(a)(2) |
| January 1, 2026 | California generative AI training data transparency law (AB 2013) | Developer | Post on its website documentation about the data used to train each generative AI system or service made publicly available to Californians.Applies when: By January 1, 2026, and before each later time a system, service or substantial modification released on or after January 1, 2022 is made publicly available. | Each time it happens | Civ. Code § 3111 |
| January 1, 2026 | California generative AI training data transparency law (AB 2013) | Developer | Include a high-level dataset summary: sources or owners, purpose, data point counts and types, IP status, licensing, personal and aggregate consumer information, cleaning, collection period, first-use dates, synthetic data.Applies when: Each posted documentation; the statutory list of twelve items is not exhaustive. | Each time it happens | Civ. Code § 3111(a)(1)-(12) |
| January 1, 2026 | California law against AI posing as a licensed health professional (AB 489) | Developer or deployer of an AI system | Do not use, in an AI system's advertising or functionality, protected terms, letters or phrases that indicate a health care license the system does not hold.Applies when: Any existing law that reserves a professional title or term now applies to AI developers and deployers. | Ongoing | Bus. & Prof. Code § 4999.9(b) |
| January 1, 2026 | California law against AI posing as a licensed health professional (AB 489) | Developer or deployer of an AI system | Do not use terms, letters or phrases that indicate or imply the AI's care, advice, reports or assessments come from a licensed human health care professional.Applies when: Advertising or functionality of an AI or generative AI system, program or device. | Ongoing | Bus. & Prof. Code § 4999.9(c) |
| January 1, 2026 | California rules for AI-drafted police reports and their vendors (SB 524) | Contracted vendor | Do not share, sell or otherwise use information a law enforcement agency provides for AI processing, except for that agency's purposes or under a court order.Applies when: Applies to data the agency provides to be processed by the vendor's report-drafting AI. | Ongoing | Penal Code § 13663(d)(1) |
| January 1, 2026 | California rules for AI-drafted police reports and their vendors (SB 524) | Law enforcement agency | Keep a policy requiring AI-drafted reports to name each AI program used, state they were written fully or partly with AI, and carry the preparer's verifying signature.Applies when: Any official report generated fully or partly with AI. The required statement reads "This report was written either fully or in part using artificial intelligence." | Ongoing | Penal Code § 13663(a) |
| January 1, 2026 | California rules for AI-drafted police reports and their vendors (SB 524) | Law enforcement agency | Keep the AI-generated first draft for as long as the official report is kept.Applies when: Any report created fully or partly with AI. | Ongoing | Penal Code § 13663(b)(1) |
| January 1, 2026 | California rules for AI-drafted police reports and their vendors (SB 524) | Law enforcement agency | Keep an audit trail, for as long as the official report is kept, identifying who used AI to create the report and any video or audio used.Applies when: Any first draft or official report generated with AI. | Ongoing | Penal Code § 13663(c) |
| January 1, 2026 | CaliforniaTransparency in Frontier Artificial Intelligence Act (TFAIA) | Large frontier developer | Write, implement, comply with and publish on its website a frontier AI framework covering the ten topics the statute lists.Applies when: Applies to the developer's frontier models. Topics include standards, risk thresholds, mitigations, third-party assessment, weight security, incident response, governance and internal-use risk. | Ongoing | Bus. & Prof. Code § 22757.12(a) |
| January 1, 2026 | CaliforniaTransparency in Frontier Artificial Intelligence Act (TFAIA) | Large frontier developer | Review and, as appropriate, update the framework at least once a year; publish any materially modified framework and a justification within 30 days.Applies when: Annually, and whenever the framework is materially modified. | Every year | Bus. & Prof. Code § 22757.12(b) |
| January 1, 2026 | CaliforniaTransparency in Frontier Artificial Intelligence Act (TFAIA) | Large frontier developer | Send the Office of Emergency Services a summary of any assessment of catastrophic risk from internal use of its frontier models every three months.Applies when: Or on another reasonable schedule the developer specifies in writing to the Office, with written updates as appropriate. | Ongoing | Bus. & Prof. Code § 22757.12(d) |
| January 1, 2026 | CaliforniaTransparency in Frontier Artificial Intelligence Act (TFAIA) | Frontier developer | Do not make a materially false or misleading statement about catastrophic risk from its frontier models or its management of that risk.Applies when: Any statement, except one made in good faith that was reasonable under the circumstances. | Ongoing | Bus. & Prof. Code § 22757.12(e)(1)(A), (2) |
| January 1, 2026 | CaliforniaTransparency in Frontier Artificial Intelligence Act (TFAIA) | Large frontier developer | Do not make a materially false or misleading statement about implementing or complying with its frontier AI framework.Applies when: Any statement, except one made in good faith that was reasonable under the circumstances. | Ongoing | Bus. & Prof. Code § 22757.12(e)(1)(B), (2) |
| January 1, 2026 | CaliforniaTransparency in Frontier Artificial Intelligence Act (TFAIA) | Frontier developer | Do not adopt or enforce a rule, policy or contract that prevents a covered employee from making protected disclosures, and do not retaliate for them.Applies when: Disclosures to the Attorney General, a federal authority, a supervisor or an investigating colleague about a specific and substantial catastrophic-risk danger or a violation of the Act. | Ongoing | Lab. Code § 1107.1(a), (b) |
| January 1, 2026 | CaliforniaTransparency in Frontier Artificial Intelligence Act (TFAIA) | Frontier developer | Give covered employees clear notice of their rights, by continuous workplace posting (with notice to new and remote employees) or by acknowledged written notice at least once a year.Applies when: All covered employees. | Ongoing | Lab. Code § 1107.1(d) |
| January 1, 2026 | CaliforniaTransparency in Frontier Artificial Intelligence Act (TFAIA) | Large frontier developer | Provide a reasonable internal process for anonymous disclosures, give the discloser monthly status updates, and share disclosures and responses with officers and directors at least quarterly.Applies when: Covered employees who believe in good faith there is a catastrophic-risk danger or a violation of the Act. Officers or directors accused of wrongdoing are excluded from the sharing. | Ongoing | Lab. Code § 1107.1(e) |
| July 1, 2026 | California autonomous vehicle emergency response law (AB 1777) | Manufacturer of autonomous vehicles | Keep a dedicated emergency response phone line, free to public agencies, open to emergency officials whenever any of your autonomous vehicles is on a public road.Applies when: Operating under a DMV testing or deployment permit. | Ongoing | Veh. Code § 38751(b)(1)(A) |
| July 1, 2026 | California autonomous vehicle emergency response law (AB 1777) | Manufacturer of autonomous vehicles | Continuously monitor every vehicle and staff the line so a remote human operator who can immobilize or move the vehicle answers within 30 seconds.Applies when: Operating under a DMV testing or deployment permit. | Ongoing | Veh. Code § 38751(b)(1)(B), (C) |
| July 1, 2026 | California autonomous vehicle emergency response law (AB 1777) | Manufacturer of autonomous vehicles | Equip each vehicle with a two-way voice device so nearby emergency officials reach a remote operator within 30 seconds who can immobilize or move it.Applies when: Operating under a DMV testing or deployment permit. Does not apply to commercial motor vehicles of 10,001 pounds or more, except passenger transportation vehicles. | Ongoing | Veh. Code § 38751(b)(2) |
| July 1, 2026 | California autonomous vehicle emergency response law (AB 1777) | Manufacturer of autonomous vehicles | Give police and firefighters access to any in-vehicle override system in emergencies, and train them on it, reviewing and updating the training regularly.Applies when: The vehicle has an override that lets someone physically present move it. Operating under a DMV testing or deployment permit. Does not apply to commercial motor vehicles of 10,001 pounds or more, except passenger transportation vehicles. | Ongoing | Veh. Code § 38751(b)(3) |
| July 1, 2026 | California autonomous vehicle emergency response law (AB 1777) | Manufacturer of autonomous vehicles | Within two minutes of an emergency geofencing message from an emergency response official, direct your fleet to leave or avoid the identified area.Applies when: An emergency response official sends an emergency geofencing message. | Each time it happens | Veh. Code § 38751(d)(1), (2) |
| July 1, 2026 | California autonomous vehicle emergency response law (AB 1777) | Manufacturer of autonomous vehicles | Within 30 business days of an official's notice that they want to issue geofencing messages, give them everything needed to send them and for you to respond.Applies when: An emergency response official gives notice that it wishes to begin issuing emergency geofencing messages. | Each time it happens | Veh. Code § 38751(d)(3) |
| August 1, 2026 | California data broker registration law, AI disclosure amendments (SB 361) | Data broker | Access the state deletion mechanism at least every 45 days and delete requesting consumers' personal information within 45 days of receiving a request.Applies when: Beginning August 1, 2026. Also direct service providers and contractors to delete. | Ongoing | Civ. Code § 1798.99.86(c)(1) |
| August 1, 2026 | California data broker registration law, AI disclosure amendments (SB 361) | Data broker | Keep deleting the consumer's personal information at least every 45 days, and do not sell or share new personal information about them.Applies when: After a consumer's deletion request has been processed, unless the consumer requests otherwise. | Ongoing | Civ. Code § 1798.99.86(d) |
| August 2, 2026 | California AI Transparency Act | Covered provider | Offer a free, publicly accessible disclosure verification tool showing whether content was created or altered by its system and outputting detected system provenance data; support uploads, URLs and an API.Applies when: Any covered provider; a compliant third-party tool reachable from the system's interface also satisfies this. | Ongoing | Bus. & Prof. Code § 22757.2(a), (e) |
| August 2, 2026 | California AI Transparency Act | Covered provider | Collect user feedback on the tool; do not collect, keep or share personal information from the tool beyond what is strictly necessary; do not condition access on personal information.Applies when: Operating the disclosure verification tool. Personal information may be kept only to contact users who opt in. | Ongoing | Bus. & Prof. Code § 22757.2(b)-(d) |
| August 2, 2026 | California AI Transparency Act | Covered provider | Include a latent disclosure in image, video or audio content its system creates or alters: provider name, system name and version, time and date, unique identifier, whether created or altered.Applies when: To the extent technically feasible; the disclosure must be permanent or extraordinarily difficult to remove, tool-compatible and consistent with industry standards. Minor modifications are excluded. | Ongoing | Bus. & Prof. Code § 22757.3(a) |
| September 19, 2026 | California deceptive election media law, 2026 rewrite (AB 502) | Person, committee or entity distributing election content | Do not, with malice, knowingly distribute materially deceptive content of a candidate or elected official that would be material to a voter's decisions or to public confidence in an election.Applies when: During the 30 days before an election in California. For candidates, an election in which the candidate is running. | Ongoing | Elec. Code § 20012(b)(1)(A), (C), (c)(1), (2) |
| September 19, 2026 | California deceptive election media law, 2026 rewrite (AB 502) | Person, committee or entity distributing election content | Do not, with malice, knowingly distribute materially deceptive content of an elections official, or of voting machines, ballots or voting sites, that is material to public confidence in an election.Applies when: From 30 days before an election in California through 38 days after it. | Ongoing | Elec. Code § 20012(b)(1)(B), (D), (c)(3) |
| September 19, 2026 | California deceptive election media law, 2026 rewrite (AB 502) | Person, committee or entity distributing election content | Do not remove a required manipulation disclosure, or knowingly republish the content without it.Applies when: During the same time periods, for content a candidate published of themselves with the disclosure. | Ongoing | Elec. Code § 20012(b)(3) |
| September 30, 2026 | California AI Transparency Act | Covered provider | Do not falsely represent that a generative AI system is designed to function primarily as assistive technology.Applies when: Any representation about assistive-technology status. | Ongoing | Bus. & Prof. Code § 22757.3(d) |
Starting in the next 90 days 42 duties
Time to prepare is short for these.
| Starts | Law | Who | What it requires | How often | Source |
|---|---|---|---|---|---|
| January 1, 2027 | California AI Transparency Act | Large online platform | Detect provenance data associated with content; show users whether system provenance data or a digital signature identifies content as AI-generated, AI-altered or device-captured; let users inspect that data.Applies when: Content distributed on the platform. Inspection may be in the interface, by link, or by download. Personal information need not be shown. | Ongoing | Bus. & Prof. Code § 22757.3.1(a), (b) as amended by AB 2713 (Stats. 2026, Ch. 856) |
| January 1, 2027 | California AI Transparency Act | Large online platform | Do not knowingly strip system provenance data or digital signatures from content uploaded to, distributed on or downloaded from the platform.Applies when: To the extent technically feasible; only data compliant or interoperable with widely adopted specifications. | Ongoing | Bus. & Prof. Code § 22757.3.1(c), (d) as amended by AB 2713 (Stats. 2026, Ch. 856) |
| January 1, 2027 | California AI Transparency Act | GenAI hosting platform | Do not knowingly make available a generative AI system that does not place the latent disclosures required of covered providers.Applies when: Hosting source code or model weights for download by California residents. | Ongoing | Bus. & Prof. Code § 22757.3.2 |
| January 1, 2027 | California AI clinical decision support and health care chatbot law (AB 1979) | Health facility, clinic or physician practice | Take reasonable steps so a licensed provider keeps the ability to exercise independent professional judgment whenever care is informed by a clinical decision support system.Applies when: Patient care informed by the output of a clinical decision support system. | Ongoing | Bus. & Prof. Code § 22758.5(a) |
| January 1, 2027 | California AI clinical decision support and health care chatbot law (AB 1979) | Health facility, clinic or physician practice | Do not use AI to direct or supervise unlicensed personnel in a clinical function that requires a license, or to perform such a function independently.Applies when: Any tool, system or device that includes artificial intelligence. | Ongoing | Bus. & Prof. Code § 22758.5(b)(1) |
| January 1, 2027 | California AI clinical decision support and health care chatbot law (AB 1979) | Business offering a health care chatbot | Keep medical information to the same confidentiality standards as a health care provider under the Confidentiality of Medical Information Act.Applies when: A business that offers a health care chatbot to a consumer; it is deemed a provider of health care for that Act only. | Ongoing | Civ. Code § 56.06(f), (g) |
| January 1, 2027 | California Protecting Our Kids from Social Media Addiction Act (SB 976) | Operator of an addictive internet-based service or application | Do not provide an addictive feed to a user unless you have reasonably determined the user is not a minor, or have verifiable parental consent.Applies when: From January 1, 2027, under age-assurance rules the Attorney General must adopt. | Ongoing | Health & Safety Code § 27001(a)(1)(B), (a)(2); § 27006(b) |
| January 1, 2027 | California ban on toys with companion chatbots (SB 867) | Person (toy manufacturer or seller) | Do not manufacture, sell, exchange, possess for sale, or offer for sale or exchange to any retailer a toy that includes a companion chatbot.Applies when: Any toy, meaning a physical product for play by children under 16, from January 1, 2027 until the section is repealed on January 1, 2031. | Ongoing | Bus. & Prof. Code § 22604.5(a) |
| January 1, 2027 | California clinical decision support bias law (SB 503) | Developer and deployer | Make reasonable efforts to identify clinical decision support systems with a known or reasonably foreseeable risk of biased impacts in health programs or activities.Applies when: Systems developed for use by deployers. | Ongoing | Bus. & Prof. Code § 22758(a)(1) |
| January 1, 2027 | California clinical decision support bias law (SB 503) | Developer | Make reasonable efforts to mitigate the known or reasonably foreseeable risk of biased impacts from the identified systems.Applies when: Identified clinical decision support systems. | Ongoing | Bus. & Prof. Code § 22758(a)(2) |
| January 1, 2027 | California clinical decision support bias law (SB 503) | Deployer | Regularly monitor the identified systems and take reasonable and proportionate steps to mitigate the known or reasonably foreseeable risk of biased impacts.Applies when: Identified clinical decision support systems in use. | Ongoing | Bus. & Prof. Code § 22758(a)(8) |
| January 1, 2027 | California companion chatbot children's safety law (SB 1119, Adam's Law) | Operator | Determine each user's age under the Digital Age Assurance Act signals, or apply the child protections and data limits to all users.Applies when: All operators. Parental default settings may not be changed unless the operator has actual knowledge the user is not a child. | Ongoing | Bus. & Prof. Code § 21811 |
| January 1, 2027 | California customer service chatbot law (AB 1609) | Large private business | Do not represent that a customer service chatbot is a human.Applies when: Any customer service chatbot interaction. | Ongoing | Bus. & Prof. Code § 22626(a) |
| January 1, 2027 | California customer service chatbot law (AB 1609) | Large private business | Clearly and conspicuously disclose, in the medium the chatbot uses, that it is artificially generated and not human.Applies when: When a reasonable person interacting with the chatbot is likely to be misled to believe they are interacting with a human. | Ongoing | Bus. & Prof. Code § 22626(b), (c) |
| January 1, 2027 | California customer service chatbot law (AB 1609) | Large private business | During at least regular business hours, provide on every customer service platform a simple feature that lets customers ask to connect to a customer service agent.Applies when: All platforms through which the business provides customer service, including online chat and telephone. Commonly understood commands, prompts, menu choices or verbal requests suffice. | Ongoing | Bus. & Prof. Code § 22627(a) |
| January 1, 2027 | California customer service chatbot law (AB 1609) | Large private business | Post the telephone customer service number clearly and conspicuously on its website.Applies when: A business that serves California customers through online platforms and has a telephone customer service platform. | Ongoing | Bus. & Prof. Code § 22627(d) |
| January 1, 2027 | California deceptive candidate media law, extended to 2031 (AB 686) | Person, committee or entity distributing candidate media | Do not distribute, with actual malice, materially deceptive audio or visual media of a candidate, intending to injure the candidate's reputation or deceive voters.Applies when: Within 60 days of an election at which the candidate will appear on the ballot, unless the media carries the required disclosure. | Ongoing | Elec. Code § 20010(a) |
| January 1, 2027 | California deceptive candidate media law, extended to 2031 (AB 686) | Person, committee or entity distributing candidate media | To distribute such media lawfully, include the disclosure that the image, video or audio has been manipulated, in the required size, duration or spoken form.Applies when: Visual: easily readable and no smaller than the largest other text; video: for the full duration. Audio: at the start, end and every two minutes. | Ongoing | Elec. Code § 20010(b) |
| January 1, 2027 | California digital replica law (SB 1111) | Person using another's name, voice or likeness commercially | Get the person's prior consent, or a parent's or guardian's for a minor, before using their name, voice or likeness, including a digital replica, on products or in advertising.Applies when: Any knowing use on or in products, merchandise or goods, or for advertising, selling or soliciting purchases. | Ongoing | Civ. Code § 3344(a)(1), (f) |
| January 1, 2027 | California digital replica law (SB 1111) | Any person | Do not use a digital replica with the intent to impersonate another; it counts as false impersonation under the Penal Code.Applies when: Any Penal Code offense in which false impersonation of another is an element, including §§ 528.5, 529 and 530. | Ongoing | Pen. Code § 540 |
| January 1, 2027 | California digitally altered rental listing images law (AB 2025) | Person advertising a rental | Include a reasonably conspicuous disclosure, on or next to the image, that the image has been altered.Applies when: Any advertisement or promotional material for rental of real property that includes a digitally altered image. | Ongoing | Civ. Code § 1940.11(b)(1) |
| January 1, 2027 | California digitally altered rental listing images law (AB 2025) | Person advertising a rental | Include the unaltered versions of the images in the posting, or a link, URL or QR code to a public website that clearly identifies them.Applies when: The same advertisements, except images or renderings not originally created with a capture device. | Ongoing | Civ. Code § 1940.11(b)(2) |
| January 1, 2027 | California generative AI law for attorneys and arbitrators (SB 574) | Attorney | Do not delegate the practice of law to generative artificial intelligence.Applies when: Always. | Ongoing | Bus. & Prof. Code § 6068.1(a)(2) |
| January 1, 2027 | California generative AI law for attorneys and arbitrators (SB 574) | Attorney | Do not enter confidential, personal identifying or other nonpublic information into a generative AI system unless access to it is restricted to the attorney and authorized persons bound to confidentiality.Applies when: When using generative AI to assist in the practice of law. | Ongoing | Bus. & Prof. Code § 6068.1(a)(3)(A) |
| January 1, 2027 | California generative AI law for attorneys and arbitrators (SB 574) | Attorney | Take reasonable steps to verify the accuracy of generative AI outputs, including all case and statutory citations, and correct any erroneous or hallucinated output.Applies when: When using generative AI to assist in the practice of law. | Ongoing | Bus. & Prof. Code § 6068.1(a)(3)(B) |
| January 1, 2027 | California generative AI law for attorneys and arbitrators (SB 574) | Attorney | Disclose the use of generative AI to the court for all documents submitted to the court.Applies when: When generative AI was used. The attorney must also consider disclosure when it is used to create content provided to the public. | Each time it happens | Bus. & Prof. Code § 6068.1(a)(3)(C) |
| January 1, 2027 | California generative AI law for attorneys and arbitrators (SB 574) | Attorney | Personally verify every citation in a brief, pleading, motion or other paper filed in court, including any citation provided by generative AI.Applies when: Any paper filed in any court. | Each time it happens | Code Civ. Proc. § 128.7(b)(2) |
| January 1, 2027 | California generative AI law for attorneys and arbitrators (SB 574) | Arbitrator | Do not delegate any part of the decisionmaking process to a generative AI tool.Applies when: Always. | Ongoing | Code Civ. Proc. § 1282.1(b)(1) |
| January 1, 2027 | California generative AI law for attorneys and arbitrators (SB 574) | Arbitrator | Do not rely on AI-generated information from outside the record without first disclosing it to the parties and, as far as practical, letting them comment.Applies when: Whenever an arbitrator would rely on information generated by generative AI outside the record. | Each time it happens | Code Civ. Proc. § 1282.1(b)(2) |
| January 1, 2027 | California social media child sexual abuse material reporting law (AB 1946) | Social media platform | Give California residents a clear, conspicuous, reasonably accessible way to report child sexual abuse material, including AI-made intimate depictions of minors and non-encrypted direct messages, without dark patterns.Applies when: Applies to every covered platform. | Ongoing | Civ. Code § 3273.66(a), as amended by AB 1946 § 2 |
| January 1, 2027 | California social media child sexual abuse material reporting law (AB 1946) | Social media platform | Collect enough information to contact the reporting user, and contact them in writing by the method they choose, such as text message or email.Applies when: A California resident reports material through the platform's mechanism. | Each time it happens | Civ. Code § 3273.66(b)(1), (c) |
| January 1, 2027 | California social media child sexual abuse material reporting law (AB 1946) | Social media platform | Have a person review a report when the material has no established or known hash match to child sexual abuse material and is not otherwise blocked.Applies when: A California resident reports material through the platform's mechanism. | Each time it happens | Civ. Code § 3273.66(b)(2) |
| January 1, 2027 | California social media child sexual abuse material reporting law (AB 1946) | Social media platform | Within 48 hours, permanently block reported material that is reasonably believed to be child sexual abuse material on the platform, and make reasonable efforts to block other copies.Applies when: The report has enough basic identifying information, such as an account identifier, to locate the material. A platform may not require any specific piece of information. | Each time it happens | Civ. Code § 3273.66(d) |
| January 1, 2027 | California social media child sexual abuse material reporting law (AB 1946) | Social media platform | Within 72 hours, confirm in writing what action was taken, the update schedule, and whether the report went through hash matching and human review.Applies when: A California resident reports material through the platform's mechanism. | Each time it happens | Civ. Code § 3273.66(e) |
| January 1, 2027 | California social media child sexual abuse material reporting law (AB 1946) | Social media platform | Within seven days, send a final written determination: blocked as child sexual abuse material, not such material, or not on the platform.Applies when: A California resident reports material through the platform's mechanism. | Each time it happens | Civ. Code § 3273.66(f), (g) |
| January 1, 2027 | California social media child sexual abuse material reporting law (AB 1946) | Social media platform | If circumstances beyond your control cause delay, notify the reporting user in writing within 48 hours of knowing, and finish the required steps within 10 days of the report.Applies when: The platform cannot meet the deadlines because of circumstances beyond its reasonable control. | Each time it happens | Civ. Code § 3273.66(h) |
| January 1, 2027 | California social media child sexual abuse material reporting law (AB 1946) | Social media platform | Restore the reporting mechanism whenever it is unavailable or not working.Applies when: The reporting mechanism is down or not functioning. | Each time it happens | Civ. Code § 3273.66(i) |
| January 1, 2027 | California student data AI training prohibition (AB 1159) | K-12 education technology operator | Do not knowingly use covered information, including persistent unique identifiers, to train a generative AI system or service or develop an AI system.Applies when: Covered information created or gathered by the operator's site, service or application. | Ongoing | Bus. & Prof. Code § 22584(b)(5) |
| January 1, 2027 | California student data AI training prohibition (AB 1159) | Preschool education technology operator | Do not knowingly use covered information, including persistent unique identifiers, to train a generative AI system or service or develop an AI system.Applies when: Covered information created or gathered by the operator's site, service or application. | Ongoing | Bus. & Prof. Code § 22586(b)(5) |
| January 1, 2027 | California synthetic performer advertising disclosure law (SB 1050) | Advertiser | Include a clear and conspicuous disclosure that the advertisement includes a synthetic performer, in wording substantially similar to the two statutory phrases.Applies when: An advertisement that prominently includes a synthetic performer. Sample wording: this performance features a synthetic performer, or no human performer is depicted. | Ongoing | Bus. & Prof. Code § 17610(b), (c) |
| January 1, 2027 | California workplace surveillance tools law (AB 1883) | Employer | Do not use an AI workplace surveillance tool on employees to recognize, infer or predict an individual's emotional state.Applies when: Any workplace surveillance tool that uses artificial intelligence. | Ongoing | Lab. Code § 1581(a)(1) |
| January 1, 2027 | California workplace surveillance tools law (AB 1883) | Employer | Do not use an AI workplace surveillance tool on employees to collect neural data.Applies when: Any workplace surveillance tool that uses artificial intelligence. | Ongoing | Lab. Code § 1581(a)(2) |
Starting later 34 duties
Dates further out, in order.
| Starts | Law | Who | What it requires | How often | Source |
|---|---|---|---|---|---|
| July 1, 2027 | California companion chatbot children's safety law (SB 1119, Adam's Law) | Operator | Publish and keep accurate a description of how it complies with the age assurance requirements.Applies when: Operators that prohibit child users. | Ongoing | Bus. & Prof. Code § 21812(b) |
| July 1, 2027 | California companion chatbot children's safety law (SB 1119, Adam's Law) | Operator | Publish and keep accurate a child safety policy describing how the chatbot prevents and responds to covered harms and how the operator meets the age, data, default-setting and crisis requirements.Applies when: Operators that permit child users. | Ongoing | Bus. & Prof. Code § 21812(c) |
| July 1, 2027 | California companion chatbot children's safety law (SB 1119, Adam's Law) | Operator | Maintain a documented crisis response protocol: in-service referral to a crisis service and, for a credible imminent threat, notify a linked parent or give streamlined access to 988.Applies when: Operators that permit child users. Child users with linked parent accounts must be told a parent may be notified. | Ongoing | Bus. & Prof. Code § 21812(d)(1) |
| July 1, 2027 | California companion chatbot children's safety law (SB 1119, Adam's Law) | Operator | Set defaults only a parent can change: no persistent conversational memory, no push notifications, one hour per continuous session and two hours per day.Applies when: Child users. Special memory rules apply at 16 and older; parental controls must allow adjusting each default and disabling access under 16, and must be actively promoted. | Ongoing | Bus. & Prof. Code § 21812(d)(3) |
| July 1, 2027 | California companion chatbot children's safety law (SB 1119, Adam's Law) | Operator | Give child users age-appropriate safeguards, usage reminders and a periodically reinforced notice that they are interacting with artificial intelligence.Applies when: Operators that permit child users. | Ongoing | Bus. & Prof. Code § 21812(d)(2), (4) |
| July 1, 2027 | California companion chatbot children's safety law (SB 1119, Adam's Law) | Operator | Take reasonable measures to prevent the chatbot from fourteen listed behaviors toward children, including encouraging self-harm, sexual content, claiming sentience, romantic interest, soliciting purchases and encouraging emotional reliance.Applies when: Operators that permit child users. | Ongoing | Bus. & Prof. Code § 21812(d)(5) |
| July 1, 2027 | California companion chatbot children's safety law (SB 1119, Adam's Law) | Operator | Provide a clear, accessible interface for safety features, test it with children and parents every two years, and offer a public mechanism for third parties to report child safety incidents.Applies when: Operators that permit child users; first interface test due by January 1, 2028. | Ongoing | Bus. & Prof. Code § 21812(d)(6), (7) |
| July 1, 2027 | California companion chatbot children's safety law (SB 1119, Adam's Law) | Operator | Do not show children cross-context behavioral ads or target ads using personal information from chats; label all ads; do not sell children's personal information or use dark patterns.Applies when: Child users. Age-appropriate contextual advertising is allowed using age, coarse location, device information and expressed interest in the session, without profiling. | Ongoing | Bus. & Prof. Code § 21813(a) |
| July 1, 2027 | California companion chatbot law (SB 243) | Operator | Report annually to the Office of Suicide Prevention: crisis-referral notifications issued in the prior calendar year and protocols on suicidal ideation; include no user identifiers or personal information.Applies when: Each year beginning July 1, 2027. | Every year | Bus. & Prof. Code § 22603(a), (b) |
| July 1, 2027 | California student data AI training prohibition (AB 1159) | Higher education education technology operator | Do not knowingly use covered information, including persistent unique identifiers, to train a generative AI system or service or develop an AI system.Applies when: Covered information created or gathered by the operator's site, service or application. | Ongoing | Bus. & Prof. Code § 22587(b)(5) |
| July 1, 2027 | California workplace automated decision systems law (SB 947) | Employer | Do not use an ADS to violate labor, safety, employment or civil rights laws, to infer an employee's protected status, or to predict and punish workers for exercising legal rights.Applies when: Any use of an automated decision system on workers. | Ongoing | Lab. Code § 1522(a) |
| July 1, 2027 | California workplace automated decision systems law (SB 947) | Employer | Do not rely solely on an ADS when making a disciplinary or termination decision.Applies when: Any disciplinary or termination decision. | Ongoing | Lab. Code § 1522(b)(1) |
| July 1, 2027 | California workplace automated decision systems law (SB 947) | Employer | Do not discharge, demote, suspend or otherwise retaliate against an employee for using rights under the part, filing a complaint or cooperating in an investigation.Applies when: Any employee exercising or attempting to exercise rights under the part. | Ongoing | Lab. Code § 1526 |
| January 1, 2028 | California AI Transparency Act | Capture device manufacturer | Give users the option of a latent disclosure naming the manufacturer, the device name and version, and the time and date; embed latent disclosures by default.Applies when: Devices first produced for sale in California on or after January 1, 2028; only to the extent technically feasible and compliant with widely adopted specifications. | Ongoing | Bus. & Prof. Code § 22757.3.3 |
| January 1, 2028 | California data broker registration law, AI disclosure amendments (SB 361) | Data broker | Undergo an independent third-party audit of compliance every three years, keep the report six years, and give it to the agency within five business days of a written request.Applies when: Beginning January 1, 2028. | Ongoing | Civ. Code § 1798.99.86(e) |
| July 1, 2028 | California autonomous vehicle emergency response and remote operation law (SB 1246) | Autonomous vehicle manufacturer | Reserve or contract enough communications capacity for the maximum number of concurrent remote assistance or teleoperation sessions your capacity planning identifies.Applies when: Manufacturers operating under a testing or deployment permit. | Ongoing | Veh. Code § 38751(b)(1)(D) as added by SB 1246 |
| July 1, 2028 | California autonomous vehicle emergency response and remote operation law (SB 1246) | Autonomous vehicle manufacturer | Staff and assign remote drivers or remote assistants so they can immediately respond to every call or incident for which their support is requested.Applies when: Except where vehicle connectivity fails because of broader telecommunications failures outside the manufacturer's control. | Ongoing | Veh. Code § 38751(b)(1)(D) as added by SB 1246 |
| July 1, 2028 | California autonomous vehicle emergency response and remote operation law (SB 1246) | Autonomous vehicle manufacturer | Acknowledge receipt of an emergency geofencing message to the requesting official within two minutes.Applies when: Each emergency geofencing message from an emergency response official. | Each time it happens | Veh. Code § 38751(d)(5) as added by SB 1246 |
| July 1, 2028 | California autonomous vehicle emergency response and remote operation law (SB 1246) | Autonomous vehicle manufacturer | Use only remote drivers located in the United States who hold a valid California driver's license of the appropriate class with required endorsements.Applies when: Any remote driver. | Ongoing | Veh. Code § 38754(a) |
| July 1, 2028 | California autonomous vehicle emergency response and remote operation law (SB 1246) | Autonomous vehicle manufacturer | Immediately dispatch local incident technicians after a crash or incident immobilizing a vehicle or obstructing traffic, or on request from an emergency official or 911 dispatch.Applies when: Each such incident or request. | Each time it happens | Veh. Code § 38801(a)(1), (b)(1) |
| July 1, 2028 | California autonomous vehicle emergency response and remote operation law (SB 1246) | Autonomous vehicle manufacturer | In a fleetwide emergency or system failure, immediately notify affected local jurisdictions and dispatch, and deploy technicians where vehicles cannot be remotely recovered.Applies when: A failure that may create a traffic hazard or impede emergency response. | Each time it happens | Veh. Code § 38801(a)(2) |
| July 1, 2028 | California autonomous vehicle emergency response and remote operation law (SB 1246) | Autonomous vehicle manufacturer | For commercial vehicles without manual controls, ensure remote staff can put the vehicle in neutral, move it as directed, or turn it off and keep it stationary.Applies when: The DMV may not permit deployment of a vehicle that does not comply. | Ongoing | Veh. Code § 38803(a), (c) |
| July 1, 2028 | California autonomous vehicle emergency response and remote operation law (SB 1246) | Autonomous vehicle manufacturer | If a commercial autonomous vehicle cannot be relocated remotely, immediately dispatch a local incident technician or a tow operator as an emergency official requests.Applies when: Each such vehicle. | Each time it happens | Veh. Code § 38803(b) |
| July 1, 2028 | California autonomous vehicle emergency response and remote operation law (SB 1246) | Autonomous vehicle manufacturer | Keep records of technician response times and of responses to fleetwide failures, emergencies, immobilizations, obstructions, crashes and official requests; give them to the DMV quarterly.Applies when: Ongoing; the DMV publishes quarterly summary statistics by manufacturer. | Ongoing | Veh. Code § 38805(a)-(b), (d) |
| January 1, 2029 | California AI Transparency Act | Covered provider | From January 1, 2029, the latent disclosure must also say whether the system is designed to function primarily as assistive technology.Applies when: Content created or altered on and after January 1, 2029. | Ongoing | Bus. & Prof. Code § 22757.3(a)(1)(F) |
| January 1, 2029 | California AI auditor registration law (AB 1405) | AI auditor | Do not offer, sell or conduct a covered AI audit unless registered with the Government Operations Agency.Applies when: Beginning January 1, 2029. | Ongoing | Gov. Code § 11549.82.5 |
| January 1, 2029 | California AI auditor registration law (AB 1405) | AI auditor | Provide the agency the listed registration information, including the laws audited under, certifications, and a standard operating procedure; update it within 90 days of a material change.Applies when: At registration and after any change that materially affects the published information. | Ongoing | Gov. Code § 11549.83(a), (b) |
| January 1, 2029 | California AI auditor registration law (AB 1405) | AI auditor | Conduct covered AI audits in accordance with widely recognized industry standards appropriate to the system or model, where such standards are available.Applies when: Every covered AI audit by a registered auditor. | Ongoing | Gov. Code § 11549.83(c) |
| January 1, 2029 | California AI auditor registration law (AB 1405) | AI auditor | Keep the information given to auditees and the documentation supporting audit results for at least 10 years.Applies when: Every covered AI audit. | Ongoing | Gov. Code § 11549.83(e) |
| January 1, 2029 | California AI auditor registration law (AB 1405) | AI auditor | Stay independent of the auditee: no impairing interests, no auditing your own work, no job talks during the audit, no staff recently employed there on the subject.Applies when: Every covered AI audit. The staffing bar covers the preceding 12 months. Reasonable audit fees alone are not a prohibited interest. | Ongoing | Gov. Code § 11549.83(f)(1) |
| January 1, 2029 | California AI auditor registration law (AB 1405) | AI auditor | Do not prevent or retaliate against employees who report noncompliance to the Attorney General, the Labor Commissioner or the agency's misconduct mechanism.Applies when: When the employee has reasonable cause to believe the auditor is out of compliance with the chapter. | Ongoing | Gov. Code § 11549.83(g) |
| January 1, 2029 | California AI auditor registration law (AB 1405) | AI auditor | Display the registration number clearly and conspicuously on all advertising that offers or solicits covered AI audit services.Applies when: All advertising materials for covered AI audit services. | Ongoing | Gov. Code § 11549.83.5 |
| January 1, 2029 | California companion chatbot children's safety law (SB 1119, Adam's Law) | Operator | Obtain an independent child safety audit, then every two years and before a substantial modification that raises child safety risk; keep the report while deployed plus five years.Applies when: First audit by January 1, 2029 or before first public availability, whichever is later. Not required before 2032 for operators under $500 million in prior-year gross revenue. | Ongoing | Bus. & Prof. Code § 21814(a), (c) (the version operative because AB 1405 was chaptered) |
| January 1, 2030 | California zero-emission requirement for light-duty autonomous vehicles (SB 500) | Autonomous vehicle deployment permit holder | From January 1, 2030, operate model year 2031 or later autonomous vehicles under 8,501 pounds under a deployment permit only if they are zero-emission vehicles.Applies when: Vehicles operated under a DMV deployment permit, to the extent federal law allows. | Ongoing | Vehicle Code § 38750(j)(1) |
Triggered by an event 33 duties
These apply when something happens, such as a request, an incident or a decision about a person. Each row says what triggers it.
| Starts | Law | Who | What it requires | How often | Source |
|---|---|---|---|---|---|
| When triggered | California AI Transparency Act | Covered provider | When licensing its system, notify the licensee of the licensee's obligations under the chapter.Applies when: At the time a license to a third party is provided. | Each time it happens | Bus. & Prof. Code § 22757.3(b)(1) |
| When triggered | California AI Transparency Act | Covered provider | Within 72 hours of discovering that an identifiable licensee made the system noncompliant, terminate the license or notify the licensee of the noncompliance and its reporting requirement.Applies when: When the provider knows a third-party licensee modified the system so it no longer complies. The provider has no duty to monitor licensees. | Each time it happens | Bus. & Prof. Code § 22757.3(b)(2), (5) |
| When triggered | California AI Transparency Act | Third-party licensee | Within 96 hours of the provider's notice, bring the system into compliance or stop using and offering it, and report to the provider which was done.Applies when: After receiving a noncompliance notice from the covered provider. | Each time it happens | Bus. & Prof. Code § 22757.3(b)(3) |
| When triggered | California AI Transparency Act | Covered provider | Report the licensee to the Attorney General if no report arrives, or the report shows the licensee neither fixed nor stopped using the system.Applies when: After the licensee's 96-hour reporting window. | Each time it happens | Bus. & Prof. Code § 22757.3(b)(4), (c) |
| When triggered | California AI auditor registration law (AB 1405) | AI auditor | Give the auditee a signed, dated report covering scope, results, deficiencies and remedies, adherence to internal safety protocols, and the audit's limitations.Applies when: Each covered AI audit. | Each time it happens | Gov. Code § 11549.83(d)(1) |
| When triggered | California AI independent verification organizations law (SB 813) | Independent verification organization (IVO) | Submit an annual report to the agency and the Legislature summarizing standards and methodologies and any changes to governance, funding or application information.Applies when: Annually, and no sooner than 12 months after initial designation. | Every year | Gov. Code § 8898.3(a) |
| When triggered | California AI independent verification organizations law (SB 813) | Independent verification organization (IVO) | Describe the character and justification of any redaction in published documents, and keep the unredacted information for five years.Applies when: When the IVO redacts documents to protect trade secrets, cybersecurity, public safety or national security, or to comply with law. | Each time it happens | Gov. Code § 8898.3(b), (c) |
| When triggered | California AI independent verification organizations law (SB 813) | Independent verification organization (IVO) | Do not accept payment terms that condition any payment, or its amount, on the results of the assessment.Applies when: Stated as a designation criterion the agency must consider. Payment at reasonable market rates from the assessed party is allowed. | Ongoing | Gov. Code § 8898.1(c)(2)(C) |
| When triggered | California autonomous vehicle emergency response law (AB 1777) | Manufacturer of autonomous vehicles | Send the DMV any notice of autonomous vehicle noncompliance issued by a peace officer within 72 hours, or within the time the DMV sets.Applies when: A peace officer issues a notice for a traffic violation while the autonomous technology is engaged. Operative only once the DMV adopts its regulations on these notices. | Each time it happens | Veh. Code § 38752(c), (e) |
| When triggered | California clinical decision support bias law (SB 503) | Developer | Give deployers a statement of intended uses and risks, plus documentation on training data, evaluation, data governance, expected outputs, bias risks and recommended use and monitoring.Applies when: On request or at the initial sale, whichever is earlier, and on release of material updates. Recognized industry standards or impact assessments may be used. | Each time it happens | Bus. & Prof. Code § 22758(a)(3)-(5) |
| When triggered | California companion chatbot children's safety law (SB 1119, Adam's Law) | Operator | Before releasing a new or substantially modified companion chatbot, perform and document a risk assessment for child users and take documented measures that reasonably mitigate identified child safety risks.Applies when: Operators that allow child users. One assessment may cover comparable chatbots; an assessment done for another law may qualify. | Each time it happens | Bus. & Prof. Code § 21812(a) |
| When triggered | California companion chatbot children's safety law (SB 1119, Adam's Law) | Operator | Notify a parent if practicable and preserve relevant conversation records in exportable form for at least three years; do not delete the child's account while records are preserved.Applies when: When the operator gave an imminent-threat notice or knows a child user died or engaged in serious self-harm based on chatbot conversations. | Each time it happens | Bus. & Prof. Code § 21812.5(a), (b) |
| When triggered | California companion chatbot children's safety law (SB 1119, Adam's Law) | Operator | Send the Attorney General an attested summary of each audit within 30 business days, and post a high-level summary on its website within 90 days.Applies when: After receiving each independent audit report. The full report must be given to the Attorney General within 30 business days of a for-cause request. | Each time it happens | Bus. & Prof. Code § 21814(b), (d) |
| When triggered | California customer service chatbot law (AB 1609) | Large private business | Make a good faith effort to connect the customer to an agent within 15 minutes, or give a specific appointment within one business day for an agent to call.Applies when: After a customer requests an agent through the feature. A business subject to 16 C.C.R. § 1707.2 may instead return a call within one business hour. | Each time it happens | Bus. & Prof. Code § 22627(b) |
| When triggered | California customer service chatbot law (AB 1609) | Large private business | Make a good faith effort to keep any hold or wait after connection to 15 minutes, and cumulative hold, wait and escalation time to one hour.Applies when: After a customer is connected to a customer service agent. | Each time it happens | Bus. & Prof. Code § 22627(c) |
| When triggered | California data broker registration law, AI disclosure amendments (SB 361) | Data broker | Process an unverifiable deletion request as an opt-out of sale or sharing within 45 days.Applies when: When the data broker denies a deletion request because it cannot be verified. | Each time it happens | Civ. Code § 1798.99.86(c)(1)(B) |
| When triggered | California deepfake pornography liability law (AB 621) | Service provider to a deepfake pornography service | Take all necessary steps to stop providing the enabling services within 30 days of receiving the evidence.Applies when: After a depicted person or public prosecutor submits evidence, with the required details, through the provider's prominently displayed customer service email or designated process. | Each time it happens | Civ. Code § 1708.86(c)(2) |
| When triggered | California digital replica law (SB 1111) | Person using another's name, voice or likeness commercially | Remove, recall or stop publishing the material within two business days of being served with a court order, unless the order says otherwise.Applies when: After a court grants an order under Code of Civil Procedure § 527(c) requiring removal or recall. | Each time it happens | Civ. Code § 3344(a)(2) |
| When triggered | California sexually explicit deepfake reporting law for social media (SB 981) | Social media platform | Confirm receipt of the report within 48 hours, and send a written status update within seven days of that confirmation.Applies when: Each report received through the mechanism. | Each time it happens | Bus. & Prof. Code § 22671(b) |
| When triggered | California sexually explicit deepfake reporting law for social media (SB 981) | Social media platform | Temporarily block the reported material from public view while the report is being decided.Applies when: Each report, pending the platform's determination. | Each time it happens | Bus. & Prof. Code § 22671(d)(1) |
| When triggered | California sexually explicit deepfake reporting law for social media (SB 981) | Social media platform | Decide within 30 days of the confirmation whether there is a reasonable basis to believe the report; up to 60 days from the report if delayed beyond its control.Applies when: Each report. If delayed, give the reporting user written notice within 48 hours of knowing the delay is likely. | Each time it happens | Bus. & Prof. Code § 22671(c) |
| When triggered | California sexually explicit deepfake reporting law for social media (SB 981) | Social media platform | Immediately remove the material from public view.Applies when: When the platform determines there is a reasonable basis to believe the reported material is sexually explicit digital identity theft. | Each time it happens | Bus. & Prof. Code § 22671(d)(2) |
| When triggered | California synthetic performer advertising disclosure law (SB 1050) | Advertising medium | Remove, disable or stop disseminating the advertisement in California as soon as commercially reasonable and technically feasible, and stop accepting payment for it.Applies when: After being served with a court order finding the advertisement violates the law or enjoining its creator, with information sufficient to identify it. | Each time it happens | Bus. & Prof. Code § 17610(e) |
| When triggered | California technological displacement notice law (SB 951, amending Cal-WARN) | Employer | Give 60 days' written notice before a mass layoff, relocation or termination to affected employees, the Employment Development Department, the local workforce board and local chief elected officials.Applies when: Any mass layoff, relocation or termination at a covered establishment. | Each time it happens | Lab. Code § 1401(a) |
| When triggered | California technological displacement notice law (SB 951, amending Cal-WARN) | Employer | State at the top that the notice is for a technology displacement; list the number, occupations and locations of affected jobs, the functions automated and the type of technology.Applies when: When the layoff, relocation or termination is caused in whole or substantial part by an AI system or other automated technology replacing or automating positions. | Each time it happens | Lab. Code § 1401(d)(1) |
| When triggered | California technological displacement notice law (SB 951, amending Cal-WARN) | Employer | Include in every notice the federal WARN elements, the workforce board's contact and rapid-response description, CalFresh information, and a working employer email and telephone number.Applies when: Every notice under the chapter. If the employer coordinates services, it must arrange them within 30 days of the notice. | Each time it happens | Lab. Code § 1401(b), (c), (e), (f) |
| When triggered | California workplace automated decision systems law (SB 947) | Employer | Have a human corroborate the decision using the data behind the ADS output or other supporting information; do not use output that cannot be corroborated or is inaccurate or misleading.Applies when: When the employer primarily relies on ADS output for a disciplinary or termination decision. | Each time it happens | Lab. Code § 1522(b)(2), (c) |
| When triggered | California workplace automated decision systems law (SB 947) | Employer | Give the affected employee a written, plain-language, stand-alone post-use notice when informing them of the decision.Applies when: When the employer primarily relied on an ADS for a disciplinary or termination decision. The notice states the reliance, the human review, a human contact and the anti-retaliation rule. | Each time it happens | Lab. Code § 1524 |
| When triggered | California workplace automated decision systems law (SB 947) | Employer | On the employee's request, provide a meaningful, objective description of the employee's own data used by the ADS, anonymizing other people's personal information.Applies when: When the employer primarily used an ADS for a disciplinary or termination decision and the employee asks. | Each time it happens | Lab. Code § 1522(d), (e) |
| When triggered | CaliforniaTransparency in Frontier Artificial Intelligence Act (TFAIA) | Frontier developer | Before or when deploying a new or substantially modified frontier model, publish a transparency report: website, contact mechanism, release date, languages, output modalities, intended uses and use restrictions.Applies when: Each deployment of a new or substantially modified frontier model. A system card or model card containing the information satisfies this. | Each time it happens | Bus. & Prof. Code § 22757.12(c)(1), (3) |
| When triggered | CaliforniaTransparency in Frontier Artificial Intelligence Act (TFAIA) | Large frontier developer | Include in the transparency report summaries of catastrophic-risk assessments, their results, third-party evaluator involvement and other steps taken under the framework.Applies when: Each deployment of a new or substantially modified frontier model by a large frontier developer. | Each time it happens | Bus. & Prof. Code § 22757.12(c)(2) |
| When triggered | CaliforniaTransparency in Frontier Artificial Intelligence Act (TFAIA) | Frontier developer | Report a critical safety incident involving its frontier models to the Office of Emergency Services within 15 days of discovering it.Applies when: After discovering a critical safety incident. An amended report may be filed later. | Each time it happens | Bus. & Prof. Code § 22757.13(c)(1), (3) |
| When triggered | CaliforniaTransparency in Frontier Artificial Intelligence Act (TFAIA) | Frontier developer | Disclose within 24 hours, to an appropriate authority such as law enforcement or a public safety agency, an incident posing imminent risk of death or serious physical injury.Applies when: On discovering that a critical safety incident poses an imminent risk of death or serious physical injury. | Each time it happens | Bus. & Prof. Code § 22757.13(c)(2) |
Law by law
Who each law covers, who enforces it, the penalties, whether people can sue and what the text leaves open. Open a law to see it; every line cites its section.
California AI Transparency Act
13 duties · checked November 11, 2026
Chapter 291, Statutes of 2024 (SB 942); Business and Professions Code Division 8, Chapter 25, §§ 22757-22757.6, as amended by AB 853 (Chapter 674, Statutes of 2025), SB 1000 (Chapter 861, Statutes of 2026) and AB 2713 (Chapter 856, Statutes of 2026). Official text · Full law page
Who it covers
- Covered provider. A person that creates, codes or otherwise produces a generative AI system that is publicly accessible within California. Bus. & Prof. Code § 22757.1(e)
- Large online platform. A public-facing social media, file-sharing or mass messaging platform, or stand-alone search engine, that distributes content to users who did not create it. Broadband and telecommunications services are excluded. Threshold: More than 2,000,000 unique monthly users during the preceding 12 months. Bus. & Prof. Code § 22757.1(i)
- Capture device manufacturer. A person who produces for sale in California a device that can record photographs, audio or video. A person engaged only in assembly is excluded. Bus. & Prof. Code § 22757.1(c), (d)
- GenAI hosting platform. A website or application that makes a generative AI system's source code or model weights available for download by a California resident, with or without compensation. Bus. & Prof. Code § 22757.1(h)
- Third-party licensee. A third party that licenses a covered provider's generative AI system and receives a noncompliance notice from the provider. Bus. & Prof. Code § 22757.3(b)(3)
Enforcement
- Enforcer: Attorney General, a city attorney, or a county counsel (civil action).
- Penalty: $5,000 per violation; each day in violation is a separate violation; plus the prevailing plaintiff's reasonable attorney's costs and fees, any violation of the chapter except a false assistive-technology claim. Bus. & Prof. Code § 22757.4(a), (b), (d)
- Penalty: $50,000 per violation; each day in violation is a separate violation; plus attorney's costs and fees, falsely representing that a system is designed to function primarily as assistive technology. This section is repealed January 1, 2029. Bus. & Prof. Code § 22757.4.1
- Can people sue? The law does not say Bus. & Prof. Code §§ 22757.4(a)(1), 22757.4.1(a)(1) name only the Attorney General, city attorneys and county counsel; the chapter is silent on private suits
- Time to fix before enforcement: None
Exemptions
- Any product, service, website or application that provides exclusively non-user-generated videogames. Bus. & Prof. Code § 22757.5(a)
- Until January 1, 2029, a generative AI system designed to function primarily as assistive technology. Bus. & Prof. Code § 22757.5(b)
- Content changed only by a minor modification (brightness, contrast or color, sharpening, saturating, resizing, scaling, cropping, format conversion, denoising). Bus. & Prof. Code §§ 22757.2(a)(1), 22757.3(a), 22757.1(l)
- Large online platforms need not act on provenance data or digital signatures that are not compliant or interoperable with widely adopted specifications. Bus. & Prof. Code § 22757.3.1(d) as amended by AB 2713
What the text leaves open
- The current § 22757.1 does not define the term latent disclosure even though §§ 22757.3 and 22757.3.3 use it; SB 1000 appears to have removed the definition along with the manifest-disclosure option.
- AB 2713 (Chapter 856) was read as chaptered; leginfo's codified § 22757.3.1 still showed the AB 853 wording on November 11, 2026 because the AB 2713 version takes effect January 1, 2027.
- The chapter does not say whether a private person may sue; it names only public enforcers. Whether other California law (for example the Unfair Competition Law) supplies a private claim is outside this file.
- Whether a GenAI hosting platform or licensee is covered by the per-day rule in § 22757.4(b), which names only covered providers, large online platforms and capture device manufacturers, is not addressed in the text.
- An earlier version of this file listed a ban on tools whose primary purpose is removing latent disclosures and a first-use notice by capture devices; neither appears in the codified chapter read today, so both were removed.
California AI auditor registration law (AB 1405)
8 duties · checked November 11, 2026
Chapter 178, Statutes of 2026 (AB 1405), approved September 9, 2026; adds Government Code §§ 11549.80-11549.86. Official text · Full law page
Who it covers
- AI auditor. A person, partnership or corporation that assesses an AI system or model on behalf of a third party and offers, sells or conducts audits of controls needed for compliance with state law. Gov. Code §§ 11549.80(c), (d), 11549.82.5
Enforcement
- Enforcer: Government Operations Agency, which may investigate, remove an auditor from the registry and refer to the Attorney General; the California Board of Accountancy for licensed accountants.
- Penalty: the law does not set an amount.
- Can people sue? The law does not say Gov. Code § 11549.84 (silent)
- Time to fix before enforcement: The law does not say
Exemptions
- Licensed California CPAs and permitted accounting firms are deemed to meet the report-content and independence requirements if they follow the Accountancy Act and AICPA standards. Gov. Code § 11549.83(d)(2), (f)(2)
- Audits required under any other statute or regulation that becomes operative before this chapter's effective dates are not affected. Gov. Code § 11549.86(a)
What the text leaves open
- The January 1, 2027 date rests on the general constitutional rule for non-urgency statutes.
- The chapter sets no penalty for conducting a covered AI audit without registering, beyond referral for enforcement.
- Which state laws require an audit that counts as a covered AI audit is not listed.
- Registration fees and any extra professional standards are left to the agency.
California AI autonomy defense law (AB 316)
1 duty · checked November 11, 2026
Chapter 672, Statutes of 2025 (AB 316), approved October 13, 2025; adds Civil Code § 1714.46. Official text · Full law page
Who it covers
- Defendant who developed, modified or used AI. Any defendant in a civil action who developed, modified or used artificial intelligence that is alleged to have caused harm to the plaintiff. Civ. Code § 1714.46(b)
Enforcement
- Enforcer: Courts, in the civil action where the defense would be raised.
- Penalty: the law does not set an amount.
- Can people sue? The law does not say Civ. Code § 1714.46 (creates no cause of action of its own; applies in actions brought under other law)
- Time to fix before enforcement: None
Exemptions
- Defendants may still present any other affirmative defense, including evidence on causation or foreseeability, and evidence of the comparative fault of others. Civ. Code § 1714.46(c)
What the text leaves open
- The January 1, 2026 date rests on the general constitutional rule for non-urgency statutes.
- The section does not say whether it applies to actions filed, or harms that occurred, before January 1, 2026.
California AI clinical decision support and health care chatbot law (AB 1979)
3 duties · checked November 11, 2026
Chapter 854, Statutes of 2026 (AB 1979), approved September 30, 2026; adds Business and Professions Code § 22758.5 and amends Civil Code §§ 56.05 and 56.06. Official text · Full law page
Who it covers
- Health facility, clinic or physician practice. A health facility, clinic, physician's office or office of a group practice that uses AI, including a clinical decision support system, in patient care. Bus. & Prof. Code § 22758.5(a), (e)
- Business offering a health care chatbot. A business that offers consumers a generative AI chatbot marketed as supporting health services and using health information, for managing the person's information or for diagnosis, treatment or management of a medical condition. Civ. Code §§ 56.05(i), 56.06(f)
Enforcement
- Enforcer: For the clinical provisions: the Medical Board of California or Osteopathic Medical Board for physicians, and health professional licensing boards by injunction. For chatbot businesses: the medical privacy law's remedies, including patient suits and public enforcement.
- Penalty: Nominal damages of $1,000 or actual damages, in a patient's action, negligent release of confidential medical information by a chatbot business treated as a provider of health care. Civ. Code § 56.36(b)
- Penalty: Up to $2,500 per violation (negligent); up to $25,000 (knowing and willful); up to $250,000 (for financial gain), administrative fines or civil penalties for unlawful disclosure or use of medical information by a person or entity other than a licensed professional. Civ. Code § 56.36(c)
- Penalty: Compensatory damages, punitive damages up to $3,000, attorney's fees up to $1,000 and costs, a patient who suffers economic loss or personal injury from an unlawful use or disclosure. Civ. Code § 56.35
- Can people sue? Yes Civ. Code §§ 56.35, 56.36(b) for the chatbot privacy provisions; Bus. & Prof. Code § 22758.5 is silent for the clinical provisions
- Time to fix before enforcement: None
Exemptions
- Use of an AI tool by a trainee in a supervised course of study or training program while working toward licensure. Bus. & Prof. Code § 22758.5(b)(2)
- Automated decision systems used for documentation and communication that involve no professional judgment, such as record-update messages and reminders. Bus. & Prof. Code § 22758.5(d)
- Appointment management, patient education, pre-visit materials and payment processing are not clinical decision support, where no professional license is required. Bus. & Prof. Code § 22758.5(e)(4)
What the text leaves open
- The January 1, 2027 date rests on the general constitutional rule for non-urgency statutes.
- The private right of action applies only to the medical privacy provisions; the clinical decision support section names licensing boards and is silent on private suits.
- Who brings the administrative fines and civil penalties under Civ. Code § 56.36, and the rest of that Act's duties (authorization and disclosure rules), were not read in full.
- The clinical section does not say how it is enforced against a facility or clinic, as opposed to a physician.
California AI in utilization review law (SB 1120)
4 duties · checked November 11, 2026
Chapter 879, Statutes of 2024 (SB 1120); Health and Safety Code § 1367.01(k) and Insurance Code § 10123.135(j). Official text · Full law page
Who it covers
- Health care service plan. A health care service plan, including a specialized plan, that uses AI, an algorithm or other software for utilization review based on medical necessity, or works through an entity that does. Health & Saf. Code § 1367.01(k)(1)
- Disability insurer. A disability insurer, including a specialized health insurer, that uses AI, an algorithm or other software for utilization review based on medical necessity, or works through an entity that does. Ins. Code § 10123.135(j)(1)
Enforcement
- Enforcer: Department of Managed Health Care (health plans) and the Insurance Commissioner (disability insurers).
- Penalty: Administrative penalties for each failure; no amount stated in the section, a health plan's failure to meet any requirement of the section, assessed by the director after notice and an opportunity for hearing. Health & Saf. Code § 1367.01 (administrative penalty paragraph)
- Penalty: Administrative penalties for each failure; no amount stated in the section, an insurer's failure to meet any requirement of the section, assessed by the commissioner after notice and an opportunity for hearing. Ins. Code § 10123.135 (administrative penalty paragraph)
- Can people sue? The law does not say Health & Saf. Code § 1367.01(k) and Ins. Code § 10123.135(j) (silent)
- Time to fix before enforcement: None
Exemptions
- Medi-Cal managed care plans are covered only to the extent federal approvals are obtained and federal funding is not jeopardized. Health & Saf. Code § 1367.01(k)(7)
- Decisions about care for people who depend on prayer or spiritual means for healing. Health & Saf. Code § 1367.01(m)
What the text leaves open
- The subdivision letters of the administrative-penalty paragraphs were not captured, and the sections state no penalty amount.
- The insurer subdivision (Ins. Code § 10123.135(j)) was read only at its opening; it is described here as parallel to the health plan subdivision on the strength of identical opening language.
- Whether either department has issued guidance was not checked.
California AI independent verification organizations law (SB 813)
3 duties · checked November 11, 2026
Chapter 179, Statutes of 2026 (SB 813), approved September 9, 2026; adds Government Code §§ 8898-8898.4. Official text · Full law page
Who it covers
- Independent verification organization (IVO). An AI auditor that the Government Operations Agency designates as having demonstrated expertise in assessing the risks posed by an AI system or model. Applying is voluntary. Gov. Code § 8898(c), (e)
Enforcement
- Enforcer: Government Operations Agency, through suspension or termination of the IVO designation.
- Penalty: the law does not set an amount.
- Can people sue? The law does not say Gov. Code § 8898.4 (silent on any right to sue)
- Time to fix before enforcement: None
Exemptions
- No developer, deployer or operator of an AI system is required to engage an IVO or undergo a covered AI audit. Gov. Code § 8898.4(a)(3)
- The chapter does not create liability solely for failing to comply with a standard under it. Gov. Code § 8898.4(a)(1)
What the text leaves open
- The January 1, 2027 date rests on the general constitutional rule for non-urgency statutes.
- Most of the chapter directs the agency; duties on IVOs depend on criteria the agency has until 2028 to publish.
- The chapter does not say what legal effect IVO designation has beyond the evidentiary provision.
California AI political advertisement disclosure law (AB 2355)
1 duty · checked November 11, 2026
Chapter 260, Statutes of 2024 (AB 2355), approved September 17, 2024; adds Government Code § 84514. Official text · Full law page
Who it covers
- Political committee. A committee, as defined in Gov. Code § 82013 (not read), that creates, originally publishes or originally distributes a qualified political advertisement. Gov. Code § 84514(a)(1)
Enforcement
- Enforcer: Fair Political Practices Commission.
- Penalty: the law does not set an amount.
- Can people sue? The law does not say Gov. Code § 84514(c) (names only Commission remedies; the Act's civil enforcement chapter was not read)
- Time to fix before enforcement: None
Exemptions
- Media altered immaterially by AI, including cosmetic adjustments, color edits, cropping or resizing. Gov. Code § 84514(d)(2)(B)
- The section does not alter the rights or immunities of an interactive service provider under 47 U.S.C. § 230. Gov. Code § 84514(b)
What the text leaves open
- The January 1, 2025 date rests on the general constitutional rule for non-urgency statutes.
- How the disclosure must be displayed or spoken in each medium is set by §§ 84504 to 84504.5, which were not read.
- Administrative and civil penalty amounts under the Political Reform Act were not read.
- Whether the section has been amended since this bill was not checked against the current code.
California AI voice robocall disclosure law (AB 2905)
2 duties · checked November 11, 2026
Chapter 316, Statutes of 2024 (AB 2905); amends Public Utilities Code § 2874. Official text · Full law page
Who it covers
- Caller using an automatic dialing-announcing device. Any person who places telephone calls through an automatic dialing-announcing device that plays a prerecorded message. Pub. Util. Code § 2874(a)
Enforcement
- Enforcer: California Public Utilities Commission, on complaint or its own motion.
- Penalty: Up to $500 per violation, and disconnection of telephone service to the device for a period the commission sets, any violation of the automatic dialing-announcing device article, a civil offense. Pub. Util. Code § 2876
- Can people sue? The law does not say Pub. Util. Code §§ 2874, 2876 (silent)
- Time to fix before enforcement: None
What the text leaves open
- Only §§ 2874 and 2876 were read; the article's other sections (who may use these devices, exemptions and hours) were not.
- The January 1, 2025 date rests on the general constitutional rule for non-urgency statutes.
- Whether § 2874 has been amended since 2024 was not checked against the codified section.
California AI-generated child sexual abuse material: possession and distribution (AB 1831)
2 duties · checked November 15, 2026
Chapter 926, Statutes of 2024 (AB 1831), approved September 29, 2024; amends Penal Code §§ 311, 311.2, 311.11 and 311.12. Official text · Full law page
Who it covers
- Person. Any individual or business that possesses, produces or distributes the covered matter. Penal Code § 311(d)
Enforcement
- Enforcer: Criminal prosecution; the sections do not name the prosecuting office. A web search on November 15, 2026 found no court ruling blocking these provisions.
- Penalty: Felony: state prison, or up to 1 year in county jail, or a fine up to $2,500, or both fine and imprisonment, possession (§ 311.11(a)); 2, 4 or 6 years in state prison with a qualifying prior conviction (§ 311.11(b)). Penal Code § 311.11(a)-(b)
- Penalty: Felony: 2, 3 or 6 years in state prison, a fine up to $100,000, or both, distribution or exhibition for commercial consideration. Penal Code § 311.2(b)
- Penalty: Up to 1 year in county jail, a fine up to $2,000, or both; or state prison (felony on a repeat offense), distribution or exhibition to a person 18 or older. Penal Code § 311.2(c)(1)
- Penalty: Felony, distribution or exhibition to a person under 18. Penal Code § 311.2(d)(1)
- Can people sue? The law does not say Penal Code §§ 311.2, 311.11 (criminal offenses only)
- Time to fix before enforcement: None
Exemptions
- Law enforcement and prosecutors investigating crimes, legitimate medical, scientific or educational activities, and lawful conduct between spouses (distribution offenses). Penal Code § 311.2(e)
- Films rated by the Motion Picture Association of America (possession offense). Penal Code § 311.11(d)(2)
What the text leaves open
- The state prison terms for § 311.2(d) and the general felony terms are set elsewhere in the Penal Code and were not opened.
California AI-generated child sexual abuse material: sending, producing and exploitation offenses (SB 1381)
2 duties · checked November 15, 2026
Chapter 929, Statutes of 2024 (SB 1381), approved September 29, 2024; amends Penal Code §§ 311.1, 311.3, 311.4 and 312.3. Official text · Full law page
Who it covers
- Person. Any individual or business that sends, produces, duplicates, prints, exchanges or distributes the covered matter. Penal Code §§ 311(d), 311.1(a), 311.3(a)
Enforcement
- Enforcer: Criminal prosecution; the sections do not name the prosecuting office. A web search on November 15, 2026 found no court ruling blocking these provisions.
- Penalty: Up to 1 year in county jail, a fine up to $1,000, or both; or state prison, a fine up to $10,000, or both, sending, producing or distributing under § 311.1(a). Penal Code § 311.1(a)
- Penalty: A fine up to $2,000, up to 1 year in county jail, or both; state prison with a prior conviction, sexual exploitation of a child under § 311.3(a). Penal Code § 311.3(e)
- Can people sue? The law does not say Penal Code §§ 311.1, 311.3 (criminal offenses only)
- Time to fix before enforcement: None
Exemptions
- Law enforcement and prosecutors investigating crimes, legitimate medical, scientific or educational activities, and lawful conduct between spouses. Penal Code §§ 311.1(b), 311.3(d)
- Telephone corporations carrying or transmitting messages. Penal Code § 311.1(d)
- Employees of commercial film developers acting within the scope of employment and the employer's instructions (sexual exploitation offense). Penal Code § 311.3(f)
- From January 1, 2027: unsolicited matter received without knowledge or consent through a system the person does not control, and a minor who only viewed the conduct. Penal Code § 311.3(g)-(h) as amended by SB 1276
California CCPA personal information in AI systems (AB 1008)
1 duty · checked November 15, 2026
AB 1008 (2023-2024), Chapter 802, Statutes of 2024; Civ. Code § 1798.140(v)(4). Official text · Full law page
Who it covers
- Business. A for-profit entity doing business in California that determines how consumers' personal information is processed and meets a CCPA threshold. Threshold: Over $25,000,000 in annual gross revenue (as adjusted); buys, sells or shares personal information of 100,000 or more consumers or households a year; or earns 50% or more of revenue from selling or sharing personal information Civ. Code § 1798.140(d)(1)
Enforcement
- Enforcer: California Privacy Protection Agency (administrative fines) and the Attorney General (civil penalties and injunctions).
- Penalty: Administrative fine up to $2,500 per violation, or $7,500 per intentional violation or violation involving known under-16 consumers (as adjusted), violating the CCPA, in a California Privacy Protection Agency enforcement action. Civ. Code § 1798.155(a)
- Penalty: Injunction and civil penalty up to $2,500 per violation, or $7,500 per intentional violation and each violation involving minors' personal information (as adjusted), violating the CCPA, in an Attorney General civil action. Civ. Code § 1798.199.90(a)
- Can people sue? The law does not say AB 1008
- Time to fix before enforcement: The law does not say
Exemptions
- Deidentified and aggregate consumer information is not personal information. Civ. Code § 1798.140(v)(3)
What the text leaves open
- The CCPA's limited private right of action for certain data breaches (Civ. Code § 1798.150) and its cure rules were not read in this run.
- Current inflation-adjusted amounts under § 1798.199.95(d) were not checked.
- How regulators apply the AI-system format rule in practice (for example, to model weights) is not stated in the text.
California Defending Democracy from Deepfake Deception Act (AB 2655)
4 duties · checked November 15, 2026
Chapter 261, Statutes of 2024 (AB 2655), approved September 17, 2024; Elections Code §§ 20510-20520. Official text · Full law page
Who it covers
- Large online platform. A public-facing website or app, including social media, video sharing platforms, advertising networks and search engines. Threshold: at least 1,000,000 California users during the preceding 12 months Elec. Code § 20512(h)
Enforcement
- Enforcer: The Attorney General, a district attorney or a city attorney (§ 20516); a candidate, elected official or elections official who reported the content (§ 20515(b)). See the court_block on each duty.
- Penalty: Injunctive or other equitable relief; no fines are stated, compelling removal, labeling or a working reporting process. The plaintiff must prove the violation by clear and convincing evidence. Elec. Code §§ 20515(b), 20516
- Can people sue? Yes Elec. Code § 20515(b) (candidates, elected officials and elections officials who made a report)
- Time to fix before enforcement: None
Exemptions
- Regularly published online news outlets that clearly disclose the content is not authentic; broadcasting stations in bona fide news coverage or, in some cases, paid ads; satire or parody. Elec. Code § 20519
- Content with only minor modifications such as brightness, contrast or background-noise changes. Elec. Code § 20512(i)(2)
What the text leaves open
- The August 28, 2025 order binds only the Attorney General and Secretary of State. It does not address suits by district attorneys, city attorneys or the candidates and officials allowed to sue under § 20515(b); the court's August 20, 2025 final judgment held the law preempted by Section 230 as applied to X Corp. and Rumble.
- California's appeal (Ninth Circuit No. 25-6138) was briefed in early 2026; a web search on November 15, 2026 found no appellate decision.
California Protecting Our Kids from Social Media Addiction Act (SB 976)
11 duties · checked November 14, 2026
Chapter 321, Statutes of 2024 (SB 976); Health and Safety Code Division 20, Chapter 24, §§ 27000-27007. Official text · Full law page
Who it covers
- Operator of an addictive internet-based service or application. A person who operates a website, online service or app, including a social media platform, that offers users an addictive feed as a significant part of its service. Health & Safety Code § 27000.5(b)(1), (e)
Enforcement
- Enforcer: California Attorney General only, in a civil action brought in the name of the people of the State of California. Court status: a federal court has blocked enforcement of the notification limits (§ 27002(a)) and the annual disclosure (§ 27005), and the Ninth Circuit ordered the like-count default (§ 27002(b)(3)) blocked. The personalized-feed provisions and private-mode default are in force (NetChoice v. Bonta, 9th Cir. Sept. 9, 2025).
- Penalty: the law does not set an amount.
- Can people sue? No Health & Safety Code § 27006(a) (enforceable only in an Attorney General civil action)
- Time to fix before enforcement: The law does not say
Exemptions
- Services where interactions between users are limited to commercial transactions or consumer reviews of products, sellers, services, events or places. Health & Safety Code § 27000.5(b)(2)(A)
- Services that operate a feed for the primary purpose of cloud storage. Health & Safety Code § 27000.5(b)(2)(B)
- Feeds based only on non-persistent information, non-persistent search terms, privacy or accessibility settings, device signals about minor status, express user requests, private messages, or the next item in a series. Health & Safety Code § 27000.5(a)(1)-(7)
What the text leaves open
- The district court's December 31, 2024 order (N.D. Cal. No. 5:24-cv-07885) also lists § 27002(b)(1), the parental hours setting, among the enjoined sections; the court's own copy of that order was not opened in this run, so that duty is not marked as blocked here.
- Meta, Google and TikTok appealed the August 5, 2026 denial of their own requests to block the personalized-feed provisions (§§ 27001(a), 27002(b)(2), (b)(4)); the Ninth Circuit appeals (Nos. 26-5120, 26-5121, 26-5132) were pending, and no order blocking those provisions was found.
- Whether the Attorney General has adopted the age-assurance and parental-consent rules due by January 1, 2027 was not checked.
- Chapter 24 names no penalty amount; whether other California law supplies civil penalties in an Attorney General action under § 27006 was not read.
California autonomous vehicle emergency response and remote operation law (SB 1246)
9 duties · checked November 15, 2026
Chapter 1021, Statutes of 2026 (SB 1246), approved September 30, 2026; Vehicle Code § 38751 (new version), § 38754 and §§ 38800-38807; Penal Code § 13519.18. Official text · Full law page
Who it covers
- Autonomous vehicle manufacturer. A manufacturer operating autonomous vehicles under a DMV testing or deployment permit without a human operator physically present; Chapter 3's relocation rules apply to autonomous vehicles operating as commercial vehicles. Veh. Code §§ 38751(b), (e); 38803 as added by SB 1246
Enforcement
- Enforcer: A city attorney or county counsel, by civil action, for violations within its jurisdiction; the DMV through deployment permits (§ 38803(c)). A violation of Chapter 3 is not a crime.
- Penalty: Civil penalty up to $5,000 for each violation, violations of § 38801 (technician dispatch and fleetwide failure duties). Veh. Code § 38806(b)(1)
- Penalty: Civil penalty up to $10,000 per commercial autonomous vehicle, a vehicle that obstructs or interferes with emergency events or operations, or law enforcement operations, for more than 30 minutes after an official requests a local incident technician. Veh. Code § 38806(b)(2)
- Can people sue? The law does not say Veh. Code § 38806(b) (civil actions by a city attorney or county counsel)
- Time to fix before enforcement: None
Exemptions
- Remote driver and remote assistant staffing need not cover failures of telecommunications infrastructure outside the manufacturer's direct control. Veh. Code § 38751(b)(1)(D) as added by SB 1246
What the text leaves open
- Courts weighing a penalty must consider severity, interference with emergency response and whether the violation was repeated, and may consider circumstances beyond the manufacturer's reasonable control (§ 38806(c)).
California autonomous vehicle emergency response law (AB 1777)
7 duties · checked November 14, 2026
Chapter 682, Statutes of 2024 (AB 1777); Vehicle Code §§ 38750 (amended), 38751, 38752 and 38753. Official text · Full law page
Who it covers
- Manufacturer. A manufacturer of autonomous vehicles (SAE Level 3 to 5) that operate without a human operator physically present in the vehicle. Veh. Code §§ 38750(a)(2), (a)(5); 38751(e)
Enforcement
- Enforcer: Department of Motor Vehicles, through permits: it may not renew, reinstate or expand a permit's operational design domain unless the manufacturer certifies full compliance with § 38751(b).
- Penalty: the law does not set an amount.
- Can people sue? The law does not say Veh. Code §§ 38751-38753 (no provision)
- Time to fix before enforcement: The law does not say
Exemptions
- Commercial motor vehicles of 10,001 pounds or more are exempt from the two-way voice device, override access and permit-certification rules, unless they are passenger transportation vehicles. Veh. Code § 38751(f)
- Manufacturers whose autonomous vehicles always have a human operator physically present. Veh. Code § 38751(e)
What the text leaves open
- SB 1246 makes this version of § 38751 inoperative July 1, 2028; § 38752 continues. The file is not cut off on that date because § 38752 outlives it, so check SB 1246 for duties after June 30, 2028.
- Whether the DMV has adopted the regulations that make the noncompliance-notice duty (§ 38752) operative was not checked.
- SB 1246's replacement § 38751 and its new duties (remote assistance capacity, remote driver location and licensing, incident technicians, quarterly data reporting, city and county civil enforcement) from July 1, 2028 are not mapped here.
- Read once; no second pass was done.
California ban on deceptive candidate deepfakes within 60 days of an election (AB 730)
1 duty · checked November 15, 2026
Chapter 493, Statutes of 2019 (AB 730), Elections Code § 20010, as amended by AB 972 (Chapter 745, Statutes of 2022). Official text · Full law page
Ends January 1, 2027. The deepfake version of § 20010 is repealed on this date by its own terms; no later statute extending it is shown on the code page. (Elec. Code § 20010(g) as amended by AB 972 § 3)
Who it covers
- Person, committee or other entity. Anyone, including a campaign committee or business, that distributes the covered media within 60 days of an election in which the candidate is on the ballot. Elec. Code § 20010(a)
Enforcement
- Enforcer: The candidate shown, by civil action. A web search on November 15, 2026 found no court ruling blocking § 20010.
- Penalty: Injunction or other equitable relief, stopping distribution of media that violates the section. Elec. Code § 20010(c)(1)
- Penalty: General or special damages; the court may award reasonable attorney's fees and costs to the prevailing party, distributing the media in violation of the section. The plaintiff must prove the violation by clear and convincing evidence. Elec. Code § 20010(c)(2)-(3)
- Can people sue? Yes Elec. Code § 20010(c)
- Time to fix before enforcement: None
Exemptions
- Broadcasters airing the media in bona fide news coverage with a clear note that its authenticity is questioned, or when paid to air it. Elec. Code § 20010(d)(2)-(3)
- News websites and periodicals that clearly state the media does not accurately represent the candidate. Elec. Code § 20010(d)(4)
- Satire or parody. Elec. Code § 20010(d)(5)
What the text leaves open
- The section is set to expire on January 1, 2027. A bill extending it after November 2026 would need to be checked then.
California ban on toys with companion chatbots (SB 867)
1 duty · checked November 11, 2026
Chapter 189, Statutes of 2026 (SB 867), approved September 10, 2026; amends Business and Professions Code § 22601 and adds § 22604.5 (Companion Chatbots chapter, §§ 22601-22606). Official text · Full law page
Who it covers
- Person (toy manufacturer or seller). Any person who manufactures, sells or exchanges, possesses with intent to sell or exchange, or exposes or offers for sale or exchange to any retailer, a toy that includes a companion chatbot. Bus. & Prof. Code § 22604.5(a)
Enforcement
- Enforcer: Private civil action by a person who suffers injury in fact; the chapter names no public enforcer.
- Penalty: The greater of actual damages or $1,000 per violation, plus injunctive relief and reasonable attorney's fees and costs, a violation of the Companion Chatbots chapter, which now includes the toy ban, that causes the plaintiff injury in fact. Bus. & Prof. Code § 22605
- Can people sue? Yes Bus. & Prof. Code § 22605
- Time to fix before enforcement: None
Exemptions
- Products that are not companion chatbots: customer-service and operational bots, limited video game bots, and stand-alone voice assistants that do not sustain a relationship or elicit emotional responses. Bus. & Prof. Code § 22601(b)(2)
What the text leaves open
- SB 867 adds no enforcement provision of its own. The remedy shown is the existing chapter-wide private action in § 22605, which applies to a violation of the chapter; whether a public prosecutor can enforce the ban under other law is not addressed.
- The January 1, 2027 date rests on the general constitutional rule for non-urgency statutes.
- The phrase to any retailer could be read to limit only the offering for sale or all the listed acts; the text does not resolve it.
- SB 1119 (Chapter 190) amended a different section of the same chapter in the same session; the two bills' changes to the chapter were not reconciled against codified text.
California clinical decision support bias law (SB 503)
4 duties · checked November 11, 2026
Chapter 857, Statutes of 2026 (SB 503), approved September 30, 2026; adds Business and Professions Code Division 8, Chapter 25.3, § 22758. Official text · Full law page
Who it covers
- Developer. A person, partnership, state or local agency, corporation or deployer that designs, codes, substantially modifies or otherwise produces a clinical decision support system for commercial or public use. Bus. & Prof. Code § 22758(c)(6), (b)
- Deployer. A health facility, clinic, physician's office or office of a group practice that uses a clinical decision support system. Bus. & Prof. Code § 22758(c)(5)
Enforcement
- Enforcer: The law does not name one
- Penalty: the law does not set an amount.
- Can people sue? The law does not say Bus. & Prof. Code § 22758 (silent)
- Time to fix before enforcement: The law does not say
Exemptions
- A deployer that builds a system for its own internal use need not generate the developer documentation if consistent information is readily available to it. Bus. & Prof. Code § 22758(a)(7)
- Appointment management, patient education, pre-visit materials and payment processing are not clinical decision support, where no professional license is required. Bus. & Prof. Code § 22758(c)(4)
What the text leaves open
- The chapter has no enforcement provision. Whether it can be enforced through licensing law, the Unfair Competition Law or civil rights law is outside the text.
- The January 1, 2027 date rests on the general constitutional rule for non-urgency statutes.
- Compliance is not a defense to a claim of unlawful discrimination (§ 22758(d)).
- The text does not define reasonable efforts or how often monitoring must occur.
California common pricing algorithm law (AB 325, Cartwright Act)
2 duties · checked November 11, 2026
Chapter 338, Statutes of 2025 (AB 325), approved October 6, 2025; adds Business and Professions Code §§ 16729 and 16756.1. Official text · Full law page
Who it covers
- Person using or distributing a common pricing algorithm. Any person, other than the end consumer, who uses or distributes a common pricing algorithm: a method used by two or more persons that uses competitor data to recommend, align, stabilize, set or influence a price or commercial term. Bus. & Prof. Code § 16729(a), (b), (d)(5)
Enforcement
- Enforcer: Attorney General and district attorneys, by criminal prosecution or civil action; any person injured in business or property, by civil action.
- Penalty: Up to $1,000,000 per violation (civil penalty), any violation of the Cartwright Act, in a civil action brought by the Attorney General or a district attorney. Bus. & Prof. Code § 16755.1 (added by SB 763, Stats. 2025, Ch. 426)
- Penalty: Corporations: fine up to $6,000,000, or twice the gross gain or loss if greater, criminal penalty for a conspiracy against trade under the Cartwright Act. Bus. & Prof. Code § 16755(a)(1), (3) (as amended by SB 763)
- Penalty: Individuals: imprisonment of up to three years, a fine up to $1,000,000 or twice the gross gain or loss if greater, or both, criminal penalty for a conspiracy against trade under the Cartwright Act. Bus. & Prof. Code § 16755(a)(2), (3) (as amended by SB 763)
- Penalty: Three times the damages sustained, plus interest, injunctive relief, attorney's fees and costs, a person injured in business or property by a Cartwright Act violation, whether they dealt with the defendant directly or indirectly. Bus. & Prof. Code § 16750(a)
- Can people sue? Yes Bus. & Prof. Code § 16750(a)
- Time to fix before enforcement: None
Exemptions
- The end consumer of a product or service is not a person under the section. Bus. & Prof. Code § 16729(d)(5)
What the text leaves open
- The penalties are those of the Cartwright Act as a whole, read from SB 763 (the 2025 companion bill) and Bus. & Prof. Code § 16750; they are not specific to pricing algorithms.
- The January 1, 2026 date rests on the general constitutional rule for non-urgency statutes.
- The section does not define coerces.
California companion chatbot children's safety law (SB 1119, Adam's Law)
13 duties · checked November 11, 2026
Chapter 190, Statutes of 2026 (SB 1119), approved September 10, 2026; adds Business and Professions Code Division 8, Chapter 11.6, §§ 21810-21818, and amends § 22602. Official text · Full law page
Who it covers
- Operator. A person who makes a companion chatbot (as defined in § 22601) available to a user in California. Apart from age determination, the age-assurance description and enforcement, the duties apply only to operators that allow child users. Bus. & Prof. Code § 21810.5(j), (f)
Enforcement
- Enforcer: Public prosecutors described in Business and Professions Code § 17204 (civil action); only the Attorney General may seek injunctive or declaratory relief. A harmed child, or a parent or guardian, may also sue.
- Penalty: Up to $5,000 per affected child for each negligent violation, any violation of the chapter, in a public prosecutor's action; attorney's fees are also available. Bus. & Prof. Code § 21816(a)(1)(A)
- Penalty: Up to $15,000 per affected child for each intentional violation, any violation of the chapter, in a public prosecutor's action. Bus. & Prof. Code § 21816(a)(1)(B)
- Penalty: Actual damages, attorney's fees and costs, and injunctive or declaratory relief, a child who suffers actual harm from a violation of § 21812(d)(1)-(5). Financial harm must exceed $1,000 per child; emotional harm must be serious emotional distress. Bus. & Prof. Code § 21816(b)
- Can people sue? Yes Bus. & Prof. Code § 21816(b), (c) (limited to actual harm from § 21812(d)(1)-(5); no private claim under the Unfair Competition Law)
- Time to fix before enforcement: None
Exemptions
- A postsecondary educational institution that makes a companion chatbot available exclusively for use in educational settings. Bus. & Prof. Code § 21810.5(j)(2)(A)
- An entity making a companion chatbot available exclusively to employees, contractors or other personnel for workplace use. Bus. & Prof. Code § 21810.5(j)(2)(B)
- Until January 1, 2032, operators with under $500 million in gross revenue in the prior calendar year are outside the audit section. Bus. & Prof. Code § 21814(c)
- The behavior limits do not bar age-appropriate information or resources about abuse, neglect, bullying or other unsafe circumstances. Bus. & Prof. Code § 21812(d)(5)(B)
- Nothing in the chapter requires an action that violates federal law. Bus. & Prof. Code § 21818
What the text leaves open
- The January 1, 2027 date for the sections with no stated date rests on the general constitutional rule for non-urgency statutes.
- Two versions of § 21814 were enacted. The one described here applies because AB 1405 (Chapter 178, Statutes of 2026) was chaptered; that assumes AB 1405 takes effect by January 1, 2027, which follows from the same general rule and was not confirmed from codified text.
- SB 1119 removes the known-minor duties in § 22602(c) on January 1, 2027, six months before the replacement protections in § 21812 become operative on July 1, 2027.
- The age-determination duty cross-refers to the Digital Age Assurance Act (Civ. Code § 1798.500 et seq.) and Health and Safety Code § 27001, which were not read.
- The text does not define negligent or intentional violation, or say how affected children are counted for the penalty.
California companion chatbot law (SB 243)
6 duties · checked November 11, 2026
Chapter 677, Statutes of 2025 (SB 243); Business and Professions Code Division 8, Chapter 22.6, §§ 22601-22606; § 22602 amended by SB 1119 (Chapter 190, Statutes of 2026). Official text · Full law page
Who it covers
- Operator. A person who makes a companion chatbot platform available to a user in California. Bus. & Prof. Code § 22601(e)
Enforcement
- Enforcer: Private civil action by a person who suffers injury in fact; the chapter names no public enforcer.
- Penalty: The greater of actual damages or $1,000 per violation, plus injunctive relief and reasonable attorney's fees and costs, a violation of the chapter that causes the plaintiff injury in fact. Bus. & Prof. Code § 22605
- Can people sue? Yes Bus. & Prof. Code § 22605
- Time to fix before enforcement: None
Exemptions
- A bot used only for customer service, a business's operational purposes, productivity and analysis of source information, internal research or technical assistance. Bus. & Prof. Code § 22601(b)(2)(A)
- A video game feature limited to replies about the game that cannot discuss mental health, self-harm or sexually explicit conduct, or hold a dialogue on unrelated topics. Bus. & Prof. Code § 22601(b)(2)(B)
- A stand-alone speaker and voice-command device acting as a virtual assistant that does not sustain a relationship across interactions or generate outputs likely to elicit emotional responses. Bus. & Prof. Code § 22601(b)(2)(C)
What the text leaves open
- SB 1119 removes § 22602(c) on January 1, 2027, while the sections of its new children's-safety chapter that state a date say operative July 1, 2027. Whether any protection for minors applies in between was not resolved here; the full Chapter 11.6 text needs its own file.
- The January 1, 2027 date for the amended § 22602 rests on the general constitutional rule for non-urgency statutes, because SB 1119 states no date for that section.
- The chapter names no public enforcer. § 22606 says its remedies are cumulative to other law, so enforcement under other statutes is not ruled out by the text.
- The chapter does not define when an operator knows a user is a minor.
California crime of creating and sharing realistic fake intimate images (SB 926)
1 duty · checked November 15, 2026
Chapter 289, Statutes of 2024 (SB 926), approved September 19, 2024; Penal Code § 647(j)(4)(A)(ii). Official text · Full law page
Who it covers
- Person 18 or older. Any adult who creates and distributes, or causes the distribution of, the covered image. Threshold: 18 years of age or older at the time of the offense Penal Code § 647(j)(4)(A)(ii)
Enforcement
- Enforcer: Criminal prosecution; the section does not name the prosecuting office. A web search on November 15, 2026 found no court challenge.
- Penalty: Misdemeanor: up to 6 months in county jail, a fine up to $1,000, or both, a first violation (disorderly conduct). Penal Code §§ 647 (opening paragraph), 19
- Penalty: Up to 1 year in county jail, a fine up to $2,000, or both, a second or later violation, or a violation where the person shown was a minor. Penal Code § 647(k)(1)-(2)
- Can people sue? The law does not say Penal Code § 647 (criminal offense only)
- Time to fix before enforcement: None
Exemptions
- Distribution while reporting unlawful activity, under a subpoena or court order, in a lawful public proceeding, or on a matter of public concern (being a public figure alone does not make it one). Penal Code § 647(j)(4)(D)
California customer service chatbot law (AB 1609)
6 duties · checked November 11, 2026
Chapter 733, Statutes of 2026 (AB 1609), approved and filed September 28, 2026; adds Business and Professions Code Division 8, Chapter 22.6.1, §§ 22625-22629. Official text · Full law page
Who it covers
- Large private business. A business that provides goods and services to customers, meaning natural persons residing in California by account address. Services means paid services, not free tiers. Threshold: More than $500,000,000 in gross annual revenue nationally. Bus. & Prof. Code § 22625(g), (b), (j)
Enforcement
- Enforcer: A public prosecutor (the chapter does not define the term).
- Penalty: Up to $5,000 for an initial violation; up to $10,000 for each subsequent violation, a violation of the chapter by a large private business, in an action brought by a public prosecutor. Bus. & Prof. Code § 22628(b)
- Can people sue? No Bus. & Prof. Code § 22628(d)
- Time to fix before enforcement: None
Exemptions
- Services provided subject to, and in compliance with, Public Utilities Commission General Order 133 (telecommunications) or General Order 103-A (water), and any corrective action plan. Bus. & Prof. Code § 22628(g)(1)
- Exclusive business lines: channels meant only for employees or business-to-business communications. Bus. & Prof. Code §§ 22628(g)(2), 22625(e)
- A hospital, for communications about providing, coordinating, managing, paying for or operating health care services. Bus. & Prof. Code § 22628(g)(3)
- A consumer reporting agency as defined in the federal Fair Credit Reporting Act. Bus. & Prof. Code § 22628(g)(4)
- A business with no telephone customer service as of January 1, 2027 need not add it if it offers other ways to promptly reach an agent. Bus. & Prof. Code § 22628(e)
- Requests made by email, web contact form or voicemail are outside the 15-minute rule; no duty to add a communication platform not offered as of January 1, 2027. Bus. & Prof. Code § 22627(e)
What the text leaves open
- The chaptered bill states no operative date. January 1, 2027 follows from the general constitutional rule for non-urgency statutes and matches the reference date the text itself uses; leginfo had not yet codified Chapter 22.6.1 on November 11, 2026.
- The text does not say whether the $500 million revenue test counts affiliates, or which year's revenue is measured.
- Public prosecutor is not defined in the chapter.
- The chapter does not say what counts as a separate violation for the penalty (per customer, per contact or per day).
California data broker registration law, AI disclosure amendments (SB 361)
6 duties · checked November 11, 2026
Chapter 466, Statutes of 2025 (SB 361), approved October 8, 2025; amends Civil Code §§ 1798.99.82, 1798.99.84 and 1798.99.86. Official text · Full law page
Who it covers
- Data broker. A business that meets the definition of data broker in the data broker registration title; the definition is in a section that was not read. Civ. Code § 1798.99.82(a)
Enforcement
- Enforcer: California Privacy Protection Agency, by administrative action.
- Penalty: $200 for each day of failing to register, plus unpaid fees and the agency's reasonable expenses, failing to register as required. Civ. Code § 1798.99.82(c)
- Penalty: $200 for each deletion request for each day the information is not deleted, plus the agency's reasonable expenses, failing to comply with the deletion requirements. Civ. Code § 1798.99.82(d)
- Can people sue? The law does not say Civ. Code § 1798.99.82(c), (d) (administrative action by the agency only)
- Time to fix before enforcement: None
Exemptions
- Deletion is not required where keeping the information is reasonably necessary for a purpose in Civ. Code § 1798.105(d), or where §§ 1798.145 or 1798.146 do not require it. Civ. Code § 1798.99.86(c)(2)
What the text leaves open
- The January 1, 2026 date rests on the general constitutional rule for non-urgency statutes.
- The definition of data broker and the reporting metrics are in sections of the title that were not read.
- Which duties are new in SB 361 and which were already in the sections it amends was not compared against the prior text.
California deceased personality digital replica law (AB 1836)
1 duty · checked November 11, 2026
Chapter 258, Statutes of 2024 (AB 1836), approved September 17, 2024; amends Civil Code § 3344.1. Official text · Full law page
Who it covers
- Person using a deceased personality's digital replica. Any person who produces, distributes or makes available the digital replica of a deceased personality's voice or likeness in an expressive audiovisual work or sound recording. Civ. Code § 3344.1(a)(2)(A)(i)
Enforcement
- Enforcer: The injured party, by civil action: the persons who hold the deceased personality's rights.
- Penalty: The greater of $10,000 or actual damages, producing, distributing or making available a deceased personality's digital replica in an expressive audiovisual work or sound recording without consent. Civ. Code § 3344.1(a)(2)(A)(i)
- Can people sue? Yes Civ. Code § 3344.1(a)
- Time to fix before enforcement: None
Exemptions
- Use in news, public affairs or sports broadcasts or accounts, and use for comment, criticism, scholarship, satire or parody. Civ. Code § 3344.1(a)(2)(A)(ii)(I), (II)
- Documentary, historical or biographical portrayals of the person as themselves, unless the use creates the false impression of an authentic recording the person took part in. Civ. Code § 3344.1(a)(2)(A)(ii)(III)
- Fleeting or incidental uses, and advertisements for works that fall within these exceptions. Civ. Code § 3344.1(a)(2)(A)(ii)(IV), (V)
- Uses occurring more than 70 years after the death of the deceased personality. Civ. Code § 3344.1(g)
What the text leaves open
- The January 1, 2025 date rests on the general constitutional rule for non-urgency statutes.
- Whether the section has been amended since this bill was not checked against the current code.
- The section applies to acts occurring directly in California (§ 3344.1(o)); how that applies to online distribution is not addressed.
California deceptive candidate media law, extended to 2031 (AB 686)
2 duties · checked November 11, 2026
Chapter 334, Statutes of 2026 (AB 686), approved September 19, 2026; amends Elections Code § 20010 and Code of Civil Procedure § 35. Official text · Full law page
Who it covers
- Person, committee or entity distributing candidate media. A person, committee as defined in Gov. Code § 82013, or other entity that distributes, with actual malice, materially deceptive audio or visual media of a candidate. Elec. Code § 20010(a)
Enforcement
- Enforcer: The candidate whose voice or likeness appears in the media, by civil action.
- Penalty: the law does not set an amount.
- Can people sue? Yes Elec. Code § 20010(c)
- Time to fix before enforcement: None
Exemptions
- Media that includes the disclosure that it has been manipulated, in the required size, duration or spoken form. Elec. Code § 20010(b)
- Radio and television broadcasters airing the media in bona fide news coverage with an acknowledgment that its authenticity is questioned, or when paid to broadcast it. Elec. Code § 20010(d)(2), (3)
- Websites and regularly published periodicals carrying news and commentary that clearly state the media does not accurately represent the candidate's speech or conduct. Elec. Code § 20010(d)(4)
- Media that constitutes satire or parody. Elec. Code § 20010(d)(5)
- The section does not alter the rights or immunities of an interactive service provider under 47 U.S.C. § 230. Elec. Code § 20010(d)(1)
What the text leaves open
- The January 1, 2027 date rests on the general constitutional rule for non-urgency statutes.
- What AB 686 changed in § 20010, beyond the repeal date, was not compared against the prior text.
- How this section and the broader Elections Code § 20012 apply to the same content is not addressed.
California deceptive election media law, 2026 rewrite (AB 502)
3 duties · checked November 11, 2026
Chapter 333, Statutes of 2026 (AB 502), approved September 19, 2026, urgency statute; amends Elections Code § 20012. Official text · Full law page
Who it covers
- Person, committee or entity distributing election content. Any person, committee or other entity that, with malice, knowingly distributes an advertisement or other election communication containing materially deceptive content. Elec. Code § 20012(b)(1)
Enforcement
- Enforcer: The depicted individual, a candidate or committee in the election, or an elections official, by civil action. A federal court permanently enjoined enforcement of the 2024 version of this section against the plaintiffs in Kohls v. Bonta; this rewrite followed.
- Penalty: the law does not set an amount.
- Can people sue? Yes Elec. Code § 20012(d)
- Time to fix before enforcement: None
Exemptions
- Content a reasonable person would understand to be satire or parody, or content carrying a disclosure that it was manipulated for satire or parody. Elec. Code § 20012(e)(4)
- A candidate portraying themselves, if the content carries the AI disclosure in Gov. Code § 84514 or a disclosure that it has been manipulated, in the required format. Elec. Code § 20012(b)(2)
- Broadcasting stations airing the content in bona fide news coverage with an acknowledgment that it is not accurate, or paid to air it if they have consistent prohibition and disclaimer rules or federal law requires airing. Elec. Code § 20012(e)(1), (2)
- Regularly published newspapers, magazines and periodicals, including online, that clearly state the content does not accurately represent an actual event. Elec. Code § 20012(e)(3)
- Interactive computer services as defined in 47 U.S.C. § 230(f)(2). Elec. Code § 20012(e)(5)
What the text leaves open
- The 2024 version of this section (AB 2839) was permanently enjoined as to the plaintiffs in Kohls v. Bonta (E.D. Cal. 2025) 797 F.Supp.3d 1177, and the state's appeal to the Ninth Circuit was pending as of August 28, 2026, per the Assembly committee analysis. Whether the rewritten section has been challenged or enjoined was not confirmed.
- Damages actions do not apply to a broadcasting station or website that distributed but did not create the content (§ 20012(d)(2)(B)).
- The section does not define what is material to a voter's electoral decisions.
California deepfake pornography liability law (AB 621)
3 duties · checked November 11, 2026
Chapter 673, Statutes of 2025 (AB 621), approved October 13, 2025; amends Civil Code § 1708.86. Official text · Full law page
Who it covers
- Person who creates or discloses the material. Any natural person or legal entity that creates and intentionally discloses, or intentionally discloses, digitized sexually explicit material of a person who did not consent or was a minor. Civ. Code § 1708.86(b)(1), (2)
- Deepfake pornography service operator. A person that owns, operates or controls a website, app or other service whose primary purpose is to create digitized sexually explicit material. Civ. Code § 1708.86(a)(3), (c)(1)
- Service provider to a deepfake pornography service. A person that provides a service enabling the ongoing operation of a deepfake pornography service, or that knowingly facilitates or recklessly aids the prohibited conduct. Civ. Code § 1708.86(b)(3), (c)(2)
Enforcement
- Enforcer: The depicted individual by civil action, and public prosecutors: the Attorney General, city attorneys, county counsel and district attorneys.
- Penalty: Statutory damages of $1,500 to $50,000 per work, up to $250,000 if committed with malice; or actual damages; plus the defendant's gain, punitive damages, and attorney's fees, a depicted individual who prevails in a civil action. Civ. Code § 1708.86(f)(1)
- Penalty: $25,000 per violation; $50,000 per violation committed with malice, civil penalty in an action by a public prosecutor, who need not prove actual harm. Civ. Code § 1708.86(f)(2)
- Can people sue? Yes Civ. Code § 1708.86(b), (f)(1)
- Time to fix before enforcement: None
Exemptions
- Disclosure while reporting unlawful activity, performing law enforcement duties, or in legal proceedings. Civ. Code § 1708.86(d)(1)(A)
- Material that is a matter of legitimate public concern, of political or newsworthy value, or constitutionally protected commentary. Being a public figure alone does not make material newsworthy. Civ. Code § 1708.86(d)(1)(B), (d)(2)
- Conduct protected by federal law, including 47 U.S.C. § 230. Civ. Code § 1708.86(i)
- Internet service providers are not liable for merely transmitting, routing or providing access to third-party content. Civ. Code § 1708.86(j)
What the text leaves open
- The January 1, 2026 date rests on the general constitutional rule for non-urgency statutes.
- Service providers get 30 days to cut off a deepfake pornography service after receiving evidence; that is a condition of a presumption of liability, not a general cure period, so none is shown.
- The section does not define what services enable the ongoing operation of a deepfake pornography service.
California digital replica contract law (AB 2602)
1 duty · checked November 11, 2026
Chapter 259, Statutes of 2024 (AB 2602), approved September 17, 2024; adds Labor Code § 927. Official text · Full law page
Who it covers
- Party contracting for an individual's services. Any person who makes an agreement with an individual for personal or professional services that allows a digital replica of the individual's voice or likeness to replace work the individual would have done in person. Lab. Code § 927(a)
Enforcement
- Enforcer: The law does not name one
- Penalty: the law does not set an amount.
- Can people sue? The law does not say Lab. Code § 927 (silent)
- Time to fix before enforcement: None
Exemptions
- A missing description of intended uses does not void the provision if the uses are consistent with the contract terms and the fundamental character of the photography or soundtrack as recorded or performed. Lab. Code § 927(a)(2)(B)
- Provisions negotiated by legal counsel for the individual, with commercial terms stated clearly and conspicuously in a writing the individual signed or initialed. Lab. Code § 927(a)(3)(A)
- Provisions covered by a labor union whose collective bargaining agreement expressly addresses uses of digital replicas. Lab. Code § 927(a)(3)(B)
- Other provisions of the contract, and exclusivity grants, are not affected. Lab. Code § 927(b)
What the text leaves open
- The section does not say what counts as a reasonably specific description.
- Whether the section has been amended since this bill was not checked against the current code.
California digital replica law (SB 1111)
3 duties · checked November 11, 2026
Chapter 862, Statutes of 2026 (SB 1111), approved September 30, 2026; amends Civil Code § 3344 and adds Penal Code § 540. Official text · Full law page
Who it covers
- Person using another's name, voice or likeness commercially. Any person who knowingly uses another person's name, voice, signature, photograph or likeness, including a digital replica, on products or for advertising or selling, without prior consent. Civ. Code § 3344(a)(1), (f)
Enforcement
- Enforcer: The injured person, by civil action; prosecutors for the Penal Code offenses.
- Penalty: The greater of $750 or actual damages, plus profits from the use; punitive damages may be awarded; the prevailing party recovers attorney's fees and costs, knowing commercial use of a person's name, voice or likeness, including a digital replica, without consent. Civ. Code § 3344(a)(1)
- Can people sue? Yes Civ. Code § 3344(a)
- Time to fix before enforcement: None
Exemptions
- Use in connection with any news, public affairs or sports broadcast or account, or any political campaign. Civ. Code § 3344(c)
- Owners and employees of advertising media, unless they knew of the unauthorized use. Civ. Code § 3344(e)
- Use in a commercially sponsored medium is not automatically a covered use; it is a question of fact how directly the use is tied to the sponsorship or advertising. Civ. Code § 3344(d)
What the text leaves open
- Digital replica is defined in Civil Code § 3344.1, which was not read.
- The January 1, 2027 date rests on the general constitutional rule for non-urgency statutes.
- Which parts of § 3344 are new in 2026, beyond the digital replica subdivision, was not compared against the prior text.
- Penalties for the Penal Code impersonation offenses were not read.
California digitally altered real estate images law (AB 723)
2 duties · checked November 11, 2026
Chapter 497, Statutes of 2025 (AB 723), approved October 10, 2025; adds Business and Professions Code § 10140.8, amended by AB 2025 (Chapter 572, Statutes of 2026). Official text · Full law page
Who it covers
- Real estate broker or salesperson. A real estate broker or salesperson, or a person acting on their behalf, who includes a digitally altered image in an advertisement or promotional material for the sale of real property. Bus. & Prof. Code § 10140.8(a)(1)
Enforcement
- Enforcer: The law does not name one
- Penalty: the law does not set an amount.
- Can people sue? The law does not say Bus. & Prof. Code § 10140.8 (silent)
- Time to fix before enforcement: None
Exemptions
- Images changed only by lighting, sharpening, white balance, color correction, angle, straightening, cropping, exposure or other common adjustments that do not change how the property is represented. Bus. & Prof. Code § 10140.8(b)(2)
- From January 1, 2027, advertisements for a leasehold longer than one year. Bus. & Prof. Code § 10140.8(c) as amended by AB 2025
What the text leaves open
- The section states no penalty or enforcer; license discipline under other sections of the Real Estate Law was not read.
- The dates rest on the general constitutional rule for non-urgency statutes.
California digitally altered rental listing images law (AB 2025)
2 duties · checked November 11, 2026
Chapter 572, Statutes of 2026 (AB 2025), approved September 27, 2026; adds Civil Code § 1940.11 and amends Business and Professions Code § 10140.8. Official text · Full law page
Who it covers
- Person advertising a rental. Any person who includes a digitally altered image in an advertisement or other promotional material for the rental of real property. Not limited to licensed brokers. Civ. Code § 1940.11(b)(1)
Enforcement
- Enforcer: The law does not name one
- Penalty: the law does not set an amount.
- Can people sue? The law does not say Civ. Code § 1940.11 (silent)
- Time to fix before enforcement: None
Exemptions
- Images changed only by lighting, sharpening, white balance, color correction, angle, straightening, cropping, exposure or other common adjustments that do not change how the property is represented. Civ. Code § 1940.11(a)(2)(B)
- The duty to provide the unaltered original does not apply to an image, architectural rendering or artistic rendering not originally created with a capture device. Civ. Code § 1940.11(b)(2)(B)
What the text leaves open
- The section states no penalty and no remedy for a violation by a person who is not a real estate licensee.
- The January 1, 2027 date rests on the general constitutional rule for non-urgency statutes.
- The section does not displace false or misleading advertising law (§ 1940.11(d)).
California generative AI law for attorneys and arbitrators (SB 574)
7 duties · checked November 11, 2026
Chapter 858, Statutes of 2026 (SB 574), approved September 30, 2026; adds Business and Professions Code § 6068.1 and Code of Civil Procedure §§ 180 and 1282.1, amends Code of Civil Procedure § 128.7. Official text · Full law page
Who it covers
- Attorney. An attorney, including one who uses generative artificial intelligence to assist in the practice of law. Bus. & Prof. Code § 6068.1(a)
- Arbitrator. An arbitrator. Code Civ. Proc. § 1282.1(b)
Enforcement
- Enforcer: Courts, by sanctions for filings that violate the citation rule; the attorney duties sit in the State Bar Act, whose discipline provisions were not read.
- Penalty: the law does not set an amount.
- Can people sue? The law does not say Code Civ. Proc. § 128.7(c)(1) (a party may move for sanctions; no separate right to sue is stated)
- Time to fix before enforcement: None
What the text leaves open
- The January 1, 2027 date rests on the general constitutional rule for non-urgency statutes.
- Section 128.7 has a safe-harbor period for withdrawing a challenged filing; that part of the section was not read, so no cure period is shown.
- State Bar discipline for violating § 6068.1 is not stated in the section.
- The section does not say what form the disclosure to the court must take.
California generative AI patient communications law (AB 3030)
2 duties · checked November 11, 2026
Chapter 848, Statutes of 2024 (AB 3030); Health and Safety Code § 1339.75. Official text · Full law page
Who it covers
- Health facility, clinic, physician's office or office of a group practice. A licensed health facility or clinic, a solo physician's office, or a group practice of two or more physicians, that uses generative AI to generate written or verbal patient communications about patient clinical information. Health & Saf. Code § 1339.75(a), (c)
Enforcement
- Enforcer: Facility and clinic licensing enforcement under the Health and Safety Code (in practice the State Department of Public Health), and the Medical Board of California or Osteopathic Medical Board for physicians.
- Penalty: the law does not set an amount.
- Can people sue? The law does not say Health & Saf. Code § 1339.75(d) (silent)
- Time to fix before enforcement: None
Exemptions
- A communication generated by generative AI that is read and reviewed by a human licensed or certified health care provider. Health & Saf. Code § 1339.75(b)
- Administrative matters such as appointment scheduling, billing and other clerical or business matters are not patient clinical information. Health & Saf. Code § 1339.75(c)(7)
What the text leaves open
- Penalty amounts depend on the facility and clinic licensing articles and medical board discipline, which were not read.
- The section names licensed facilities, licensed clinics and physicians for enforcement; how it is enforced against an unlicensed group practice entity is not stated.
California generative AI training data transparency law (AB 2013)
2 duties · checked November 11, 2026
Chapter 817, Statutes of 2024 (AB 2013); Civil Code Division 3, Part 4, Title 15.2, §§ 3110-3111; § 3111 amended by AB 1170 (Chapter 67, Statutes of 2025). Official text · Full law page
Who it covers
- Developer. A person, partnership, state or local government agency, or corporation that designs, codes, produces or substantially modifies an AI system or service for use by members of the public, and makes a generative AI system or service publicly available to Californians, with or without compensation. Applies to systems or substantial modifications released on or after January 1, 2022. Civ. Code §§ 3110(b), 3111
Enforcement
- Enforcer: The law does not name one
- Penalty: the law does not set an amount.
- Can people sue? The law does not say Civ. Code §§ 3110-3111 (silent)
- Time to fix before enforcement: The law does not say
Exemptions
- A generative AI system or service whose sole purpose is to help ensure security and integrity. Civ. Code § 3111(b)(1)
- A generative AI system or service whose sole purpose is the operation of aircraft in the national airspace. Civ. Code § 3111(b)(2)
- A generative AI system or service developed for national security, military or defense purposes and made available only to a federal entity. Civ. Code § 3111(b)(3)
- Use by an affiliate, or by a hospital's medical staff member, is not use by members of the public. Civ. Code § 3110(b)
What the text leaves open
- The title has no enforcement provision. Whether the duty can be enforced through other California law, such as the Unfair Competition Law, is outside the text and not resolved here.
- What AB 1170 (2025) changed in § 3111 was not compared against the 2024 text; it appears in a multi-section bill and the current section reads as described here.
- The text does not say how detailed a high-level summary must be, or how long documentation must stay posted.
- An earlier version of this file said summaries for systems released before January 1, 2025 may rely on reasonably available information; that language is not in the codified section and was removed.
California law against AI posing as a licensed health professional (AB 489)
2 duties · checked November 11, 2026
Chapter 615, Statutes of 2025 (AB 489), approved October 11, 2025; adds Business and Professions Code Division 2, Chapter 15.5, §§ 4999.8-4999.9. Official text · Full law page
Who it covers
- Developer or deployer of an AI system. A person or entity that develops or deploys an AI or generative AI system, program or device whose advertising or functionality uses terms, letters or phrases that indicate a health care license. Bus. & Prof. Code § 4999.9(b)
Enforcement
- Enforcer: The appropriate health care professional licensing board or enforcement agency.
- Penalty: the law does not set an amount.
- Can people sue? The law does not say Bus. & Prof. Code § 4999.9 (silent)
- Time to fix before enforcement: None
What the text leaves open
- Penalty amounts depend on each profession's existing title-protection statutes, which were not read.
- The January 1, 2026 date rests on the general constitutional rule for non-urgency statutes.
- The chapter does not list the protected terms; they are found in each licensing act.
California partial driving automation marketing law (SB 1398)
3 duties · checked November 11, 2026
Chapter 308, Statutes of 2022 (SB 1398), approved September 13, 2022; adds Vehicle Code § 24011.5. Official text · Full law page
Who it covers
- Vehicle manufacturer. A manufacturer of new passenger vehicles equipped with a partial driving automation feature, or that provides a software update or upgrade adding one. Veh. Code § 24011.5(a), (b), (e)
- Vehicle dealer. A dealer that sells new passenger vehicles equipped with a partial driving automation feature, or provides an update or upgrade adding one. Veh. Code § 24011.5(a), (b)
Enforcement
- Enforcer: The law does not name one
- Penalty: the law does not set an amount.
- Can people sue? The law does not say Veh. Code § 24011.5(d) (compliance does not limit civil liability, including negligence or product defect claims; no new right to sue stated)
- Time to fix before enforcement: None
Exemptions
- A dealer is not in violation of the notice duty if the manufacturer failed to provide the information, or provided information that does not comply. Veh. Code § 24011.5(e)
- A manufacturer is not in violation of the notice duty if it gave the dealer the required information and the dealer failed to give the notice. Veh. Code § 24011.5(f)
What the text leaves open
- The January 1, 2023 date rests on the general constitutional rule for non-urgency statutes.
- Penalties and the enforcing agency come from other Vehicle Code sections that were not read.
- Whether the section has been amended since this bill was not checked against the current code.
California rules for AI-drafted police reports and their vendors (SB 524)
4 duties · checked November 15, 2026
Chapter 587, Statutes of 2025 (SB 524), approved October 10, 2025; adds Penal Code § 13663. Official text · Full law page
Who it covers
- Law enforcement agency. Any state or local department or agency that employs peace officers. Penal Code § 13663(e)(4)
- Contracted vendor. A third party that has made AI available to law enforcement to generate draft police reports. Penal Code § 13663(e)(2)
Enforcement
- Enforcer: The law does not name one
- Penalty: the law does not set an amount.
- Can people sue? The law does not say Penal Code § 13663
- Time to fix before enforcement: The law does not say
Exemptions
- Vendors may access AI-processed data for troubleshooting, bias mitigation, accuracy improvement or system refinement. Penal Code § 13663(d)(2)
California sexually explicit deepfake reporting law for social media (SB 981)
5 duties · checked November 11, 2026
Chapter 292, Statutes of 2024 (SB 981), approved September 19, 2024; adds Business and Professions Code §§ 22670-22671. Official text · Full law page
Who it covers
- Social media platform. A social media platform as defined in Bus. & Prof. Code § 22675, which was not read. Bus. & Prof. Code § 22670(d)
Enforcement
- Enforcer: The law does not name one
- Penalty: the law does not set an amount.
- Can people sue? The law does not say Bus. & Prof. Code §§ 22670-22671 (silent)
- Time to fix before enforcement: None
Exemptions
- Stand-alone direct messaging services with end-to-end encryption, and the end-to-end encrypted portion of a multiservice platform. Bus. & Prof. Code § 22670(d)(2)(A)
- Services owned or operated by a 501(c)(3) nonprofit organization. Bus. & Prof. Code § 22670(d)(2)(B)
- Images or video with only minor alterations, such as brightness or contrast, that do not significantly change the perceived content. Bus. & Prof. Code § 22670(a)(2)
What the text leaves open
- The January 1, 2025 date rests on the general constitutional rule for non-urgency statutes.
- The chapter states no penalty, enforcer or remedy; whether general unfair competition law applies is not addressed.
- The definition of social media platform is in § 22675, which was not read.
- Whether the section has been amended since this bill was not checked against the current code.
California social media child sexual abuse material reporting law (AB 1946)
8 duties · checked November 14, 2026
Chapter 185, Statutes of 2026 (AB 1946); amends Civil Code §§ 3273.65, 3273.66, 3273.67 and 3345.1. Official text · Full law page
Who it covers
- Social media platform. A social media platform as defined in Business and Professions Code § 22675, excluding stand-alone end-to-end encrypted messaging and services of 501(c)(3) nonprofits. Civ. Code § 3273.65(q)
Enforcement
- Enforcer: California Attorney General, district attorneys, city attorneys and county counsel, by civil action for penalties and injunctive relief; depicted individuals may also sue for damages.
- Penalty: Up to $250,000 per day of violation, plus reasonable attorney's fees and costs, violating the reporting mechanism, contact, human review, 48-hour blocking or delay-notice duties (§ 3273.66(a)-(d), (h)). Civ. Code § 3273.67(a)(1)(A)
- Penalty: Up to $75,000 for a first violation; up to $250,000 per day for later violations or after five days of noncompliance, violating the written confirmation and final determination duties (§ 3273.66(e)-(g)), except for reports by or for a depicted individual. Civ. Code § 3273.67(a)(1)(B), (C)
- Penalty: Actual damages plus statutory damages up to $250,000 per violation (capped at $125,000 if the material was blocked before suit, or $75,000 for some duties if the platform meets Take It Down and CyberTipline conditions), with fees and costs, a depicted individual's civil action for a violation of the title other than § 3273.66(a). Civ. Code § 3273.67(b)(2), (3)
- Can people sue? Yes Civ. Code § 3273.67(b), (c) (depicted individuals, directly or through a parent, guardian or representative)
- Time to fix before enforcement: The law does not say
Exemptions
- A stand-alone direct messaging service with end-to-end encrypted communication, or the end-to-end encrypted part of a multiservice platform. Civ. Code § 3273.65(q)(2)(A)
- Services owned or operated by, and companies that are, 501(c)(3) tax-exempt nonprofits. Civ. Code § 3273.65(p)(2), (q)(2)(B)
What the text leaves open
- Until January 1, 2027, the 2023 version of these sections (AB 1394) applies; it differs, for example by requiring that the reporting user be depicted in the material. That version is not mapped here.
- The coverage test depends on Business and Professions Code § 22675's definition of social media platform, which was not opened in this run, so no size threshold is stated.
- The changes to Civil Code § 3345.1 (knowing facilitation of commercial sexual exploitation, and the audit exemption now requiring submission to the Attorney General) were not mapped.
- Read once; no second pass was done.
California student data AI training prohibition (AB 1159)
3 duties · checked November 11, 2026
Chapter 182, Statutes of 2026 (AB 1159), approved September 10, 2026; amends Business and Professions Code §§ 22584 and 22586, adds §§ 22585, 22586.1 and Chapter 22.2.6 (§ 22587 et seq.). Official text · Full law page
Who it covers
- K-12 education technology operator. The operator of a website, online service or app, or an entity working on its behalf, with actual knowledge it is used for K-12 school purposes and that was designed or marketed for them. Bus. & Prof. Code § 22584(a)(10)
- Preschool education technology operator. The same kind of operator where the site, service or app is used, designed or marketed for preschool or prekindergarten purposes. Bus. & Prof. Code § 22586(a)(7)
- Higher education education technology operator. The same kind of operator where the site, service or app is used, designed or marketed for higher educational purposes. Bus. & Prof. Code § 22587(a)(11)
Enforcement
- Enforcer: Pupils and students who suffer actual damages, or their parents or guardians, by individual or class action; a copy of the complaint goes to the Attorney General.
- Penalty: The greater of actual damages or $500 per plaintiff, per violation; plus injunctive relief, punitive damages, and attorney's fees and costs, an operator's failure to comply with the chapter, in an action by a pupil or student who suffered actual damages. Bus. & Prof. Code §§ 22585(a), 22586.1(a), 22587.1(a)
- Can people sue? Yes Bus. & Prof. Code §§ 22585(a), 22586.1(a), 22587.1(a)
- Time to fix before enforcement: 60 days (after written notice, before an individual suit can proceed)
Exemptions
- The State Department of Education, local educational agencies, schools, preschools and higher education institutions are not operators. Bus. & Prof. Code §§ 22584(a)(10)(B), 22586(a)(7)(B), 22587(a)(11)(B)
- Operators may still use information to maintain, develop, support, improve or diagnose their own site, service or application. Bus. & Prof. Code §§ 22584(c), 22586(c)
What the text leaves open
- The January 1, 2027 date rests on the general constitutional rule for non-urgency statutes.
- Only the AI training prohibition and the enforcement sections were read; the chapters contain other student privacy duties not listed here.
- The pre-suit notice terms were read in the K-12 and preschool sections; the higher education section was read only at its opening.
- Whether public enforcement is available under other law is not addressed in the sections read.
California synthetic performer advertising disclosure law (SB 1050)
2 duties · checked November 11, 2026
Chapter 246, Statutes of 2026 (SB 1050), approved September 16, 2026; adds Business and Professions Code § 17610. Official text · Full law page
Who it covers
- Advertiser (any person who creates and publishes an advertisement). Any person who creates and causes to be published, in an advertising medium, an audio or audiovisual advertisement that prominently includes a synthetic performer. Bus. & Prof. Code § 17610(b)
- Advertising medium. A broadcast station, cable operator, video distributor, online platform, streaming service, ad network, publisher or other entity that distributes advertisements to California consumers and is able to remove them. Bus. & Prof. Code § 17610(a)(2), (e)
Enforcement
- Enforcer: Attorney General, district attorneys, county counsel and city attorneys under the false advertising law; also enforceable under the Unfair Competition Law.
- Penalty: Up to $2,500 per violation (civil penalty), a violation is treated as a violation of the false advertising statute (§ 17500), in a civil action by a public prosecutor. Bus. & Prof. Code §§ 17610(f), 17536(a)
- Penalty: Misdemeanor: up to six months in county jail, a fine up to $2,500, or both, a violation of § 17500, which this section is deemed to be. Bus. & Prof. Code §§ 17610(f), 17500
- Can people sue? The law does not say Bus. & Prof. Code § 17610(f) (enforceable under the Unfair Competition Law, § 17200 et seq., whose private standing rules were not read)
- Time to fix before enforcement: None
Exemptions
- Advertisements for expressive works such as films, television, streaming content, documentaries and video games, if the synthetic performer's use matches its use in the work. Bus. & Prof. Code § 17610(d)(4)
- Advertisements where generative AI is used only for language translation of a human performer or accessibility features. Bus. & Prof. Code § 17610(d)(5)
- A person or entity that cannot remove, disable access to or stop disseminating an advertisement is not an advertising medium. Bus. & Prof. Code § 17610(a)(2)(B)
What the text leaves open
- The January 1, 2027 date rests on the general constitutional rule for non-urgency statutes.
- The section makes violations enforceable under the Unfair Competition Law; whether and when a private plaintiff can sue under that law was not read, so the private right of action is shown as not stated.
- The section covers audio, video and audiovisual advertisements; whether still images are covered is not addressed.
California technological displacement notice law (SB 951, amending Cal-WARN)
3 duties · checked November 11, 2026
Chapter 860, Statutes of 2026 (SB 951), approved September 30, 2026; amends Labor Code §§ 1400.5 and 1401 and adds § 1402.7 (California WARN Act, Labor Code §§ 1400-1408). Official text · Full law page
Who it covers
- Employer. A person who owns and operates a covered establishment, including a parent corporation for a subsidiary's establishment. Counted employees must have worked at least 6 of the preceding 12 months. Threshold: Covered establishment: an industrial or commercial facility that employs, or employed in the preceding 12 months, 75 or more persons. Mass layoff: 50 or more employees laid off in any 30-day period. Lab. Code § 1400.5(b), (c), (e), (i)
Enforcement
- Enforcer: Labor Commissioner; affected employees, local governments and employee representatives may sue.
- Penalty: Back pay and the value of benefits for the violation period, up to 60 days or half the days employed, whichever is smaller, failing to give employees the required notice; owed to each employee who lost employment. Lab. Code § 1402
- Penalty: Up to $500 for each day of the violation, failing to notify the Employment Development Department, the local workforce board and local officials. Not owed if the employer pays employees what § 1402 requires within three weeks of the order. Lab. Code § 1403
- Can people sue? Yes Lab. Code § 1404
- Time to fix before enforcement: None
Exemptions
- Project-based closings or layoffs in broadcasting, motion picture and certain construction, drilling, logging and mining work, and seasonal employees hired on that understanding. Lab. Code § 1400.5(h)
- No notice is required when the layoff, relocation or termination is necessitated by a physical calamity or act of war. Lab. Code § 1401(g)
- For relocations and terminations (not mass layoffs), an employer actively seeking capital or business that would have avoided the action, if the department so determines. Lab. Code § 1402.5
What the text leaves open
- The January 1, 2027 date rests on the general constitutional rule for non-urgency statutes.
- The text does not define caused in substantial part by AI or other automated technology.
- SB 951 does not add a penalty of its own; liability for a deficient technology-displacement notice follows the existing Cal-WARN remedies, and how a notice missing only the new contents is treated is not addressed.
- The codified chapter on leginfo still showed the pre-2027 wording of §§ 1400.5 and 1401 on November 11, 2026; penalties and the private action were read from the codified §§ 1402-1405.
California workplace automated decision systems law (SB 947)
6 duties · checked November 11, 2026
Chapter 859, Statutes of 2026 (SB 947), approved September 30, 2026; adds Labor Code Division 2, Part 5.5.5, §§ 1520-1526.7. Official text · Full law page
Who it covers
- Employer. A person who directly or indirectly employs or controls the wages, hours or working conditions of any person, including state and local government employers, labor contractors, farm labor contractors and foreign labor contractors. Lab. Code § 1520(d)(3)
Enforcement
- Enforcer: Labor Commissioner (investigation, citation and civil action) and public prosecutors.
- Penalty: $500 per violation, any violation of the part by an employer. Lab. Code § 1526.1(e)
- Penalty: Injunctive relief, punitive damages, and reasonable attorney's fees and costs, available in a civil action brought by the Labor Commissioner or a public prosecutor. Lab. Code § 1526.1(d)
- Can people sue? The law does not say Lab. Code § 1526.1 (names only the Labor Commissioner and public prosecutors; silent on employee suits)
- Time to fix before enforcement: None
Exemptions
- Not an automated decision system: spam filters, firewalls, antivirus software, identity and access management tools, calculators, databases, datasets or other compilations of data. Lab. Code § 1520(c)
- Parties to a collective bargaining agreement that explicitly waives the part in clear terms, sets wages and working conditions, and protects against algorithmic management. Lab. Code § 1526.5
- Use of a system required by, or reasonably necessary to comply with, a federal statute, regulation or binding contract on aircraft development or national security, military, space or defense work. Lab. Code § 1526.6
- An employer that meets this part's notice requirements need not meet substantially similar automated-decision notice provisions in other state law, except quotas and automated work standards. Lab. Code § 1526.3
What the text leaves open
- The part does not define primarily relied or say how a violation is counted for the $500 penalty.
- The text is silent on whether an employee may sue directly; other Labor Code enforcement routes were not analyzed.
- Employers that are businesses under the California Consumer Privacy Act remain subject to the privacy agency's automated decisionmaking rules (§ 1526.4), which were not read.
- § 1526.1(c) refers to a deactivation decision, a term the part does not otherwise use.
California workplace surveillance tools law (AB 1883)
2 duties · checked November 11, 2026
Chapter 853, Statutes of 2026 (AB 1883), approved September 30, 2026; adds Labor Code Division 2, Part 5.8, §§ 1580-1583. Official text · Full law page
Who it covers
- Employer. A person or governmental entity that employs or controls the wages, hours or working conditions of any person, including state and local government, labor contractors, farm and foreign labor contractors, and entities that contract with a labor contractor for labor or services. Lab. Code § 1580(d)
Enforcement
- Enforcer: Labor Commissioner (investigation, citation and civil action) and public prosecutors; an employee may also recover the penalty.
- Penalty: Up to $500 per violation, a violation of the part; recoverable as a statutory penalty paid to the employee or as a civil penalty, but not both for the same violation. Lab. Code § 1582(d)
- Penalty: Injunctive relief, punitive damages, and reasonable attorney's fees and costs, available in a civil action by the Labor Commissioner or a public prosecutor. Lab. Code § 1582(c)
- Can people sue? Yes Lab. Code § 1582(d)(2) (an employee may recover the penalty as a statutory penalty; the section does not describe the employee's procedure)
- Time to fix before enforcement: None
Exemptions
- Using a workplace surveillance tool to ensure safety, or any use outside the two prohibited purposes, is not barred. Lab. Code § 1581(b)
- Aircraft development and national security, military, space or defense work, but only where the tool is reasonably necessary to comply with a federal statute, regulation or binding contract. Lab. Code § 1583
What the text leaves open
- The January 1, 2027 date rests on the general constitutional rule for non-urgency statutes.
- § 1582(d)(2) lets an employee recover the penalty but the part does not say whether by civil action, a Labor Commissioner claim or both.
- The part does not say how violations are counted (per employee, per tool or per day).
- Local ordinances that give employees equal or greater protection are not preempted (§ 1582(f)).
California zero-emission requirement for light-duty autonomous vehicles (SB 500)
1 duty · checked November 15, 2026
Chapter 277, Statutes of 2021 (SB 500), approved September 23, 2021; Vehicle Code § 38750(j). Official text · Full law page
Who it covers
- Autonomous vehicle deployment permit holder. Anyone operating autonomous vehicles under a DMV deployment permit. Threshold: model year 2031 or later; gross vehicle weight rating under 8,501 pounds Vehicle Code § 38750(j)(1)
Enforcement
- Enforcer: The law does not name one
- Penalty: the law does not set an amount.
- Can people sue? The law does not say Vehicle Code § 38750(j)
- Time to fix before enforcement: The law does not say
Exemptions
- Applies only to the extent authorized by federal law; heavier vehicles (8,501 pounds or more) are outside it. Vehicle Code § 38750(j)(1)
California: Transparency in Frontier Artificial Intelligence Act (TFAIA)
12 duties · checked November 11, 2026
Chapter 138, Statutes of 2025 (SB 53); Business and Professions Code Division 8, Chapter 25.1, §§ 22757.10-22757.16; Labor Code §§ 1107-1107.2 (whistleblower protections). Official text · Full law page
Who it covers
- Frontier developer. A person who has trained, or initiated the training of, a frontier model, using or intending to use the computing power that defines a frontier model. Threshold: Frontier model: a foundation model trained with more than 10^26 integer or floating-point operations, counting the original run and later fine-tuning or other material modifications. Bus. & Prof. Code § 22757.11(h), (i)
- Large frontier developer. A frontier developer that, together with its affiliates, exceeded the revenue threshold in the preceding calendar year. Threshold: Annual gross revenues above $500,000,000 with affiliates in the preceding calendar year, in addition to the frontier-model compute threshold. Bus. & Prof. Code § 22757.11(j)
- Covered employee (protected, not regulated). An employee responsible for assessing, managing or addressing risk of critical safety incidents. Lab. Code § 1107(b)
Enforcement
- Enforcer: Attorney General only, for the civil penalty. The Office of Emergency Services receives incident reports and internal-use summaries. Covered employees may bring their own actions under the Labor Code.
- Penalty: Up to $1,000,000 per violation, depending on the severity of the violation, a large frontier developer that fails to publish or transmit a required compliant document, makes a prohibited false or misleading statement, fails to report an incident, or fails to comply with its own framework. Bus. & Prof. Code § 22757.15
- Can people sue? No Bus. & Prof. Code § 22757.15(b) (penalty recoverable only by the Attorney General); Lab. Code § 1107.1(f)-(h) separately allows a covered employee's civil action, attorney's fees and injunctive relief for retaliation
- Time to fix before enforcement: None
Exemptions
- Not a catastrophic risk: output that is publicly accessible in substantially similar form from a source other than a foundation model; lawful federal government activity; harm where the model did not materially contribute. Bus. & Prof. Code § 22757.11(c)(2)
- Making a frontier model available to a third party primarily to develop or evaluate it is not deployment. Bus. & Prof. Code § 22757.11(e)(2)
- Published documents may be redacted to protect trade secrets, cybersecurity, public safety or national security, or to comply with law; describe the redaction and keep the unredacted information five years. Bus. & Prof. Code § 22757.12(f)
- A developer may meet the incident-reporting section by complying with a federal law, regulation or guidance designated by the Office of Emergency Services, after declaring that intent. Bus. & Prof. Code § 22757.13(h), (i)
- Loss of equity value does not count as damage to or loss of property. Bus. & Prof. Code § 22757.16
What the text leaves open
- The civil penalty in § 22757.15 names only large frontier developers. A frontier developer below the revenue threshold still has duties (transparency report, incident reporting, false-statement ban), but the chapter states no penalty for it.
- The Labor Code's definition of critical safety incident (§ 1107(c)(1)) also covers damage to or loss of property, which the Business and Professions Code definition (§ 22757.11(d)(1)) does not.
- Whether the Office of Emergency Services has designated any federal law under § 22757.13(h) was not checked on an agency page today.
- The bill also has Government Code provisions on a public computing consortium (CalCompute); they place no duties on private parties and were not read.
Other enacted laws to check
These 36 enacted AI laws are in the states you chose, but they are not yet mapped duty by duty, so they are not in the plan above. Each page has a summary and the official source.
- California AB 1651: State Bar of California: artificial intelligence. (effective January 1, 2028)
- California AB 2392: Public postsecondary education: generative artificial intelligence systems: procurement standards: training. (effective January 1, 2027)
- California AB 2504: Community colleges: artificial intelligence: pilot program. (effective January 1, 2027)
- California AB 2839: Elections: deceptive media in advertisements. (effective September 17, 2024)
- California AB 302: Department of Technology: high-risk automated decision systems: inventory. (effective January 1, 2024)
- California AB102: Budget Act of 2025. (effective June 27, 2025)
- California AB107: Budget Act of 2024. (effective June 26, 2024)
- California AB1215: Law enforcement: facial recognition and other biometric surveillance. (effective January 1, 2020)
- California AB1766: Health curriculum framework: human trafficking and online safety. (effective January 1, 2027)
- California AB1792: Pupil instruction: health framework: sexual health. (effective January 1, 2027)
- California AB2071: Pupil instruction: digital wellness. (effective January 1, 2027)
- California AB2212: Postsecondary education: sexual harassment, harassment, intimidation, and bullying policies: student training. (effective August 1, 2027)
- California AB2713: California AI Transparency Act: system provenance data. (effective January 1, 2027)
- California AB2876: Pupil instruction: media literacy: artificial intelligence literacy: curriculum frameworks: instructional… (effective January 1, 2025)
- California AB2885: Artificial intelligence. (effective January 1, 2025)
- California AB602: Depiction of individual using digital or electronic technology: sexually explicit material: cause of action. (effective January 1, 2020)
- California AB853: California AI Transparency Act. (effective January 1, 2027)
- California AB96: Public employment: local public transit agencies: autonomous transit vehicle technology. (effective January 1, 2024)
- California AB972: Elections: deceptive audio or visual media. (effective January 1, 2023)
- California AB979: California Cybersecurity Integration Center: artificial intelligence. (effective January 1, 2026)
- California ACR215: 23 Asilomar AI Principles.
- California SB 1159: Artificial intelligence: transparency and governance. (effective January 1, 2027)
- California SB1000: California AI Transparency Act. (effective September 30, 2026)
- California SB101: Budget Act of 2025. (effective June 27, 2025)
- California SB1216: Secretary of Government Operations: deepfakes. (effective January 1, 2023)
- California SB1276: Crimes: sexual exploitation of a child. (effective January 1, 2027)
- California SB1288: Public schools: artificial intelligence working group. (effective January 1, 2025)
- California SB241: Community colleges: personnel: qualifications. (effective January 1, 2026)
- California SB253: State Bar of California. (effective January 1, 2026)
- California SB36: Pretrial release: risk assessment tools. (effective January 1, 2020)
- California SB47: February 2025 bar exam: audit. (effective October 1, 2025)
- California SB480: Autonomous vehicles. (effective January 1, 2026)
- California SB896: Generative Artificial Intelligence Accountability Act. (effective January 1, 2025)
- California SB928: California State University: faculty employees. (effective January 1, 2027)
- California SCR17: Artificial intelligence.
- California SJR6: Artificial intelligence.
Information, not legal advice. This plan summarizes what the official texts of the laws listed say. It does not decide whether a law applies to your organization; that turns on facts such as your size, your role as a developer or deployer, and how you use AI. Laws change, and courts and regulators can read them differently. Check the official text linked with each duty and talk to a qualified lawyer before acting. Using this page does not create an attorney-client relationship. See our terms of service.
How the plan is built
Each law in the plan was read from its official text, on the legislature’s or state’s own website. 265 of the 326 have also been read a second time to confirm every date, threshold, penalty and enforcer; the rest have had one full read, and each shows the date it was last checked. Each duty is written in plain English in 30 words or fewer and carries the section it comes from, with a link.
Where a law is silent, the plan says so. It does not borrow a penalty from another statute or guess at a deadline. A law that is repealed or replaced on a known date shows that end date, and its duties leave the plan once the date passes. The date each law was last checked appears with it.
The plan is built fresh from these records every time the page loads, so it changes as soon as a law is added or re-checked. To report an error, use the corrections page. For how we find laws and decide what counts as an AI law, see our methodology. If you are not sure which laws touch your business at all, start with Am I Affected?
Common questions
What does an AI compliance plan cover?
Each duty an enacted state AI law places on a business or other regulated party: who it applies to, what it requires, when it starts, how often it recurs, who enforces it, the penalties and whether people can sue. The builder covers 1,235 duties in 326 enacted laws across 50 states, and every duty links to the section of law it comes from.
Where does the information come from?
From the official text of each law: the enrolled bill, session law or codified statute, opened on the legislature's or state's own website. 265 of the 326 laws have also been read a second time to confirm every date, threshold, penalty and enforcer, and the date each law was last checked is shown with it. Where a law is silent on a point, such as a penalty amount, the plan says the law does not say rather than filling the gap. Law firm summaries and news reports are never used as sources.
Does the plan include every AI law in a state?
Not yet. It includes the enacted laws we have mapped duty by duty. When you choose a state, its other enacted AI laws are listed separately with links, so nothing is left out of view. New laws are added as they are read. When a law is repealed or replaced on a set date, its duties show that end date and leave the plan once it passes.
How do I know which duties apply to my company?
Start with the 'who it covers' entry for each law: many apply only above a size or revenue threshold, only to developers or only to deployers, or only in one industry. The plan quotes those conditions from the text. Whether your company meets them depends on facts only you and your counsel know.
Is this legal advice?
No. It is information drawn from official legal texts, organized so you can see what each law requires. Use it to brief your team and your lawyers, not in place of them.
What does Pro add?
The same plan as a CSV file for spreadsheets and audit files, and as a calendar file (.ics) with every dated duty as an event that links back to the law. Both are built from the states and uses you pick. The plan on this page, and printing it, are open to everyone.