Skip to content
Jurisdiction ยท 12 regulations

California privacy and AI laws

12 regulations in California that affect companies handling data: CCPA / CPRA, California AB 2013 (AI training data transparency), California ADS employment regulations, California AI Auditor Registry, California AI Transparency Act (SB 942), California AI autonomous-harm defense ban, California Delete Act / DROP, California Digital Age Assurance Act, California SB 243 (companion chatbots), California SB 53 (TFAIA), California SB 976 addictive feeds, California social media account deletion. Part of US States.

Upcoming deadlines

DateRegulation
in 3 monthsCalifornia AI Auditor Registry

Act takes effect

in 3 monthsCA SB 942

Large online platform and hosting platform duties

in 3 monthsCalifornia Digital Age Assurance Act

Age signal duties begin

in 3 monthsCA SB 53

First OES anonymized incident report and CDT definition review

in 3 monthsCalifornia SB 976 addictive feeds

Age assurance duty and AG rules

in 3 monthsCCPA / CPRA

ADMT requirements compliance date

in 3 monthsCCPA / CPRA

Browsers must support opt-out preference signal (AB 566)

in 4 monthsCA Delete Act

Annual data broker registration deadline

in 9 monthsCalifornia Digital Age Assurance Act

Deadline for existing devices and apps

in 9 monthsCA SB 243

First annual report to Office of Suicide Prevention

in 1 yearCCPA / CPRA

Risk assessments for pre-existing processing due

in 1 yearCA SB 942

Capture device manufacturer duties

in 1 yearCA Delete Act

Independent third-party audits begin

in 1 yearCCPA / CPRA

First risk assessment submission to CPPA

in 1 yearCCPA / CPRA

Cybersecurity audit due: revenue over $100M

in 2 yearsCalifornia AI Auditor Registry

Registry opens and registration required

in 2 yearsCCPA / CPRA

Cybersecurity audit due: revenue $50M-$100M

in 3 yearsCCPA / CPRA

Cybersecurity audit due: revenue under $50M

Past deadlines

DateRegulation
2 weeks agoCalifornia AI Auditor Registry

Signed by Governor

7 weeks agoCA SB 942

Covered provider duties apply

8 weeks agoCA Delete Act

Data brokers must begin processing DROP deletion requests

7 months agoCA Delete Act

Annual data broker registration deadline

8 months agoCCPA / CPRA

New CCPA regulations take effect

8 months agoCalifornia social media account deletion

Takes effect

8 months agoCA SB 53

Frontier developer obligations apply

8 months agoCA SB 243

Chatbot safeguards apply

8 months agoCA Delete Act

DROP opens to consumers

8 months agoCA SB 942

Original operative date (superseded)

8 months agoCalifornia AI autonomous-harm defense ban

Takes effect

8 months agoCA AB 2013

Training-data documentation due

11 months agoCA SB 243

SB 243 signed

11 months agoCalifornia Digital Age Assurance Act

Signed by Governor

11 months agoCA SB 942

AB 853 signed

11 months agoCalifornia AI autonomous-harm defense ban

Signed by Governor

11 months agoCalifornia social media account deletion

Signed by Governor

12 months agoCalifornia ADS employment regulations

ADS regulations take effect

12 months agoCA SB 53

SB 53 signed

1 year agoCCPA / CPRA

ADMT, risk assessment and cybersecurity audit regulations approved

1 year agoCalifornia ADS employment regulations

OAL approves regulations

1 year agoCCPA / CPRA

CPI adjustment of thresholds and fines

1 year agoCalifornia SB 976 addictive feeds

Takes effect

1 year agoCA AB 2013

AB 2013 signed

2 years agoCalifornia SB 976 addictive feeds

Signed by Governor

2 years agoCA SB 942

SB 942 signed

3 years agoCCPA / CPRA

CPRA amendments operative

6 years agoCCPA / CPRA

CCPA takes effect

Rule changes by email

The morning after a new data, privacy or AI law, or a deadline change; nothing in quiet weeks.

Double opt-in. Unsubscribe any time.