CA AB979: California Cybersecurity Integration Center: artificial intelligence.

In one paragraph

California's AB 979 amends Government Code § 8586.5 so the California Cybersecurity Integration Center, led by the Office of Emergency Services, must develop a California AI Cybersecurity Collaboration Playbook by January 1, 2027, informed by federal standards and the federal JCDC AI playbook. It must include mandatory mechanisms for state contractors and vendors providing AI services to share known threats and vulnerabilities, and may add voluntary ones for others. Shared threat information is confidential. Signed October 3, 2025 (Chapter 285); effective January 1, 2026.

Plain-English summary, written with AI assistance. The official text controls.

What it means for business

Companies providing AI services to California state agencies will be subject to mandatory mechanisms, set in a state playbook due January 1, 2027, for sharing known threats and vulnerabilities in those services; shared threat information is confidential.

Key provisions

1. 1By January 1, 2027, the California Cybersecurity Integration Center, consulting the Office of Information Security and the Government Operations Agency, develops a California AI Cybersecurity Collaboration Playbook to facilitate information sharing across the cyber and AI communities and strengthen defenses against emerging threats, including AI (Gov. Code § 8586.5(g))
2. 2The Center reviews federal requirements, standards and industry best practices, including the federal Joint Cyber Defense Collaborative AI Cybersecurity Collaboration Playbook, and how the federal government implements them
3. 3The playbook must include mandatory mechanisms for state contractors and vendors providing AI services to share potential threats and vulnerabilities they know of in those contracted or purchased services with a state entity named in the playbook
4. 4It may include voluntary information-sharing mechanisms for other entities
5. 5Cyber threat indicators and defensive measures shared under the playbook are confidential and may go only to approved state employees and contractors; privileged or Public Records Act-exempt OES records are not disclosed
6. 6Signed by the Governor October 3, 2025 (Chapter 285, Statutes of 2025); effective January 1, 2026

Latest legislative action

Oct 3, 2025. Chaptered by Secretary of State - Chapter 285, Statutes of 2025.

Sponsors (showing 5 of 31)

Roll call votes (showing 3 of 9)