AI and data laws

311 moving · 704 enacted

CaliforniaCalifornia

80 on file · 65 became law · 0 still moving · 0 moved in 30 days

AB 621

Deepfake Pornography

Expands civil liability for digitized sexually explicit material, including material depicting minors, and for services that knowingly enable deepfake pornography services to operate.

In force
SB 57

Electrical Corporations: Data Centers: Report

Authorizes the Public Utilities Commission to assess whether utility costs from new data center loads shift costs to other customers and to report its findings to the Legislature.

In force
AB 566

California Opt Me Out Act

Requires web browsers to include a consumer setting that sends an opt-out preference signal to businesses, beginning January 1, 2027.

Enacted
SB 361

Data Brokers: Data Collection and Deletion

Requires data brokers registering with the California Privacy Protection Agency to disclose more of the personal information they collect, such as government ID numbers, login information and citizenship data.

In force
AB 325

Cartwright Act: Common Pricing Algorithms

Makes it unlawful under the Cartwright Act to use or distribute a common pricing algorithm as part of a conspiracy to restrain trade or to coerce others into adopting its recommended prices.

In force
SB 53

Transparency in Frontier Artificial Intelligence Act

Requires large frontier AI developers to publish frontier AI frameworks and transparency reports, report critical safety incidents to the state, protects whistleblowers and sets up a consortium to plan a public computing cluster called CalCompute.

In force
AB 2839

Elections: Deceptive Media in Advertisements

Prohibits knowingly distributing materially deceptive AI-generated or digitally altered election content about candidates, officials and election workers within set periods around elections.

In force
AB 222

Data Centers: Energy Usage Reporting and Efficiency

Would have required data center owners to report power usage effectiveness to the Energy Commission and required developers of covered AI models to estimate the energy used to develop them.

Failed
AB 2013

Generative AI Training Data Transparency

Requires developers of generative AI systems released since January 1, 2022 to post documentation on their websites summarizing the data used to train them, by January 1, 2026.

In force
AB 1008

CCPA: Personal Information Formats

Clarifies that personal information under the CCPA can exist in various formats, including artificial intelligence systems capable of outputting personal information.

In force
SB 1223

Consumer Privacy: Neural Data

Adds neural data, meaning information generated by measuring nervous system activity, to the CCPA definition of sensitive personal information.

In force
SB 1120

Physicians Make Decisions Act

Requires health plans and insurers that use AI, algorithms or other software for utilization review to meet specified requirements, including leaving medical necessity decisions to licensed health care professionals.

In force
SB 926

Crimes: Distribution of AI-Generated Intimate Images

Makes it a crime to intentionally create and distribute realistic computer-generated or digitally altered intimate images of an identifiable person that cause serious emotional distress.

In force
AB 2602

Digital Replicas in Personal Services Contracts

Makes contract terms allowing a digital replica of a performer's voice or likeness in new performances unenforceable when specified protections, such as a reasonably specific description of uses and representation, are missing.

In force
AB 1836

Digital Replicas of Deceased Personalities

Makes a person who produces or distributes a digital replica of a deceased personality's voice or likeness in audiovisual works or sound recordings without prior consent liable for at least $10,000 or actual damages.

In force
Proposition 24

California Privacy Rights Act of 2020 (CPRA)

Voter-approved initiative that amended and expanded the CCPA with new consumer privacy protections and created the California Privacy Protection Agency.

In force
AB 375

California Consumer Privacy Act of 2018 (CCPA)

Creates the California Consumer Privacy Act, giving residents rights to know, delete and opt out of the sale of personal information that businesses collect about them.

In force