Skip to content

Session Expired

Your session has expired. Please sign in again to continue where you left off.

Sign In Again

CA AB 2392: Public postsecondary education: generative artificial intelligence systems: procurement standards: training.

Enacted · set to take effect Jan 1, 2027 California · 2025–2026 session

Last verified Oct 1, 2026 · official bill text

AB 2392 · where it stands

4 of 5 steps complete
  1. Introduced Complete
  2. Passed first chamber Complete
  3. Passed both chambers Complete
  4. Enacted Complete
  5. Effective Jan 1, 2027
What do these statuses mean?
Introduced
Filed in the legislature; may be waiting for a committee hearing.
Passed a chamber
Approved by one or both chambers; awaiting further action.
Enacted
Signed into law, or became law without a signature or over a veto.
Effective date
The date the law says it takes effect. Once it has passed, the page shows "Effective" and the date. A court order can still block a law; if we know of one, the summary says so.
Dead / vetoed
Vetoed, failed, or the session ended without action.

In one paragraph

California's community colleges and CSU must, and the University of California is asked to, form a working group that by January 1, 2028 recommends procurement standards and user training for generative AI systems bought for education. Standards must require a documented risk assessment, safeguards against harmful output, no engagement-driven sycophancy, self-harm monitoring with human escalation, incident reporting, data-minimization and retention policies, and disclosure of training data sources. Until standards exist, each systemwide GenAI contract triggers a report to the Legislature within 60 days. Effective January 1, 2027.

Plain-English summary, written with AI assistance. The official text controls.

What it means for business

EdTech and AI vendors selling generative AI to California public colleges should expect risk-assessment, safety-monitoring, data and training-data disclosure requirements.

Key provisions

  1. Intersegmental working group (CCC Chancellor, CSU, and UC by request) with privacy, student, faculty, labor and civil-society members (Educ. Code § 66098.1(a))
  2. Minimum procurement protections: risk assessment; safeguards against harmful or illegal output, including self-harm, eating-disorder and therapy-like content; no excessive sycophancy
  3. Vendors need a safety monitoring protocol that escalates threats of harm to human review and, for imminent threats, to authorities, plus a transparent incident reporting system
  4. Data rules: written use, retention, sharing and deletion policies; collect only data strictly necessary; disclose training data sources, including copyrighted content and student data
  5. Training for students, faculty and staff on policies, privacy and GenAI limitations; reviewed yearly; completion records kept 4 years (§ 66098.1(b), § 66098.2)
  6. Recommendations due January 1, 2028; until standards are adopted, a report to the Legislature within 60 days of any systemwide GenAI contract (§ 66098.3)

Latest legislative action

Sep 30, 2026. Approved by the Governor; Chapter 855, Statutes of 2026

Sponsors

NameRole
Author

Topics and industries

Affected industries

This page is general information, not legal advice. Summaries are AI-assisted and may contain errors; read the statute for the controlling text and talk to a lawyer about your situation. Full disclaimer · Report an error