2024
September 19, 2024
SB 942, the California AI Transparency Act, was signed. It created detection and disclosure duties for covered providers of generative AI systems. AB 853 later amended the act and moved its operative date. Sources: SB 942; AB 853.
September 28, 2024
AB 2013, AB 3030 and SB 1120 were signed. They address generative AI training data documentation, patient communications generated with AI and the use of AI or software in healthcare utilization review. Sources: AB 3030; SB 1120; AB 2013.
2025
January 1, 2025
AB 3030 and SB 1120 took effect. Their patient communication and utilization review requirements apply within the statutes' stated scope. Sources: AB 3030; SB 1120.
June 27, 2025
The Office of Administrative Law approved the Civil Rights Council's employment regulations regarding automated decision systems. Sources: Civil Rights Council rulemaking actions.
September 22, 2025
The Office of Administrative Law approved the CPPA regulations on cybersecurity audits, risk assessments, ADMT, insurance and other CCPA updates. Sources: CPPA final rulemaking page; CPPA approved regulations.
September 29, 2025
SB 53, the Transparency in Frontier Artificial Intelligence Act, was signed. Sources: SB 53.
October 1, 2025
The employment automated decision system regulations took effect. Sources: Civil Rights Council rulemaking actions.
October 11, 2025
AB 489 was signed. It extends healthcare professional title and representation restrictions to AI and generative AI systems. Sources: AB 489.
October 13, 2025
AB 853 was signed. It amended the California AI Transparency Act, moved the act's operative date to August 2, 2026 and added later duties for certain platforms and capture device manufacturers. Sources: SB 942; AB 853.
2026
January 1, 2026
The CPPA regulations took effect. New processing covered by the risk assessment article must be assessed before it begins. Sources: CPPA approved regulations.
AB 2013's generative AI training data documentation deadline arrived. Documentation is also required before later covered releases or substantial modifications are made available to Californians. Sources: AB 2013.
SB 53 frontier model requirements and AB 489 healthcare representation restrictions took effect. Sources: SB 53; AB 489.
August 2, 2026
The California AI Transparency Act became operative for covered providers. Sources: SB 942; AB 853.
September 9, 2026
SB 813 and AB 1405 were signed. SB 813 creates a designation program for independent verification organizations. AB 1405 creates an AI Auditor Registry and practice rules for covered AI audits. Sources: SB 813; AB 1405.
September 18, 2026
Executive Order N-9-26 took effect. It accelerated agency work on the IVO and auditor programs and directed the Government Operations Agency and Cal OES to develop recommendations for possible changes to frontier AI safety law. Sources: Executive Order N-9-26.
November 16, 2026
Executive Order N-9-26 sets this deadline for recommendations on possible statutory changes, including onsite independent verification, verification of frontier safety materials, an emergency shutoff and an expanded critical incident definition. These are recommendations, not current private sector duties. Sources: Executive Order N-9-26.
2027
January 1, 2027
Covered businesses must comply with the CPPA ADMT article when they use ADMT for a significant decision. Sources: CPPA approved regulations.
Some AB 853 duties for large online platforms and GenAI hosting platforms become operative. Sources: SB 942; AB 853.
May 1, 2027
Executive Order N-9-26 directs the Government Operations Agency to publish application requirements, procedures and criteria for independent verification organizations by this date. The order moves agency work earlier than SB 813's original January 1, 2028 date. Sources: SB 813; Executive Order N-9-26.
December 1, 2027
Executive Order N-9-26 directs the Government Operations Agency to establish the AI Auditor Registry and begin specified actions by this date. The statutory prohibition on unregistered covered AI audit practice still begins January 1, 2029 unless the law changes. Sources: AB 1405; Executive Order N-9-26.
December 31, 2027
Covered processing that began before the CPPA regulations took effect and continued afterward must have a documented risk assessment by this date. Sources: CPPA approved regulations.
2028
January 1, 2028
AB 853 duties for capture device manufacturers become operative. For capture devices first produced for sale in California on or after this date, manufacturers must offer users the option of a latent disclosure in captured content and embed latent disclosures by default, to the extent technically feasible and compliant with widely adopted specifications. Sources: SB 942; AB 853.
April 1, 2028
Businesses must submit required information for risk assessments conducted in 2026 and 2027 to the CPPA. Sources: CPPA approved regulations.
2029
January 1, 2029
AB 1405 prohibits an unregistered person from offering, selling or conducting a covered AI audit. The statute defines a covered AI audit as an audit of internal controls, processes or systems needed for compliance with state law. Sources: AB 1405.
What to monitor
- Government Operations Agency implementation of the IVO designation program and AI Auditor Registry
- the November 2026 recommendations required by Executive Order N-9-26 and any resulting bills or regulations
- Cal OES implementation of SB 53 incident reporting
- CPPA guidance and enforcement material for risk assessments and ADMT rights
- litigation, amendments or agency interpretations that change applicability or dates
- statutes enacted after the 2026 source cutoff