AI law in California

Includes US federal law, which applies in every state. See also United States (federal).

Get the build plan for California

The guards that cover the most here

67 guards address 93 items across 2 jurisdictions with binding law: 17 binding law in force, 18 enacted but not yet applying, 34 standards and frameworks, 24 TwinEthos recommended guardrails.

1. Health information sent to an external AI vendor without the contractual or legal basis the law requires

   Send identifiable health data only to AI endpoints registered with a signed BAA or processing agreement and retention and training off; otherwise de-identify first.

   Addresses 2 items: 2 binding law in force

   Law in force in United States (federal) (US), California (US-CA).

2. AI chat interaction without disclosure

   Show an AI-identity notice at or before the first assistant turn, in the UI or as the opening message, and answer truthfully when asked if it is a bot.

   Addresses 5 items: 1 binding law in force · 1 enacted, not yet applying · 2 standards · 1 recommended guardrail

   Law in force in California (US-CA); next date 2027-07-01.

3. AI experience ignores age signals it already has

   Route every age signal the product holds into the AI session policy and apply a minor profile: tighter content, no romantic role-play, bounded engagement, frequent AI reminders.

   Addresses 3 items: 1 binding law in force · 2 enacted, not yet applying

   Law in force in California (US-CA); next date 2027-01-01.

4. Companion or conversational AI without a self-harm crisis protocol

   Screen every user message for suicidal ideation and self-harm, return a crisis referral instead of the normal reply on detection, and block encouragement or method content.

   Addresses 3 items: 1 binding law in force · 1 enacted, not yet applying · 1 recommended guardrail

   Law in force in California (US-CA); next date 2027-07-01.

5. GenAI content without latent provenance disclosure

   Embed a signed C2PA manifest or equivalent latent disclosure in generated or captured media when it is created, and do not distribute systems or files that lack it.

   Addresses 3 items: 1 binding law in force · 2 enacted, not yet applying

   Law in force in California (US-CA); next date 2027-01-01.

6. AI agent configured to pose as, or claim affiliation with, a government body or a business it does not represent

   Make the agent's persona, greeting, and scripts name only the operating organization, and never instruct it to claim a government or third-party business identity or endorsement.

   Addresses 1 item: 1 binding law in force

   Law in force in United States (federal) (US).

7. AI implies it is a licensed professional

   Remove licensed-professional titles and credentials from AI health personas, prompts, report headers, and marketing, and label the advice as coming from an AI.

   Addresses 1 item: 1 binding law in force

   Law in force in California (US-CA).

8. AI-generated voice or likeness of a real person used on products or in advertising without that person's consent

   Check a recorded commercial-use consent or talent release for the depicted person before a generated or cloned voice or likeness is published to an ad, product, or storefront.

   Addresses 1 item: 1 binding law in force

   Law in force in California (US-CA).

9. Companion chatbot without a 'may not be suitable for some minors' disclosure

   Show 'Companion chatbots may not be suitable for some minors' on every surface users reach the chatbot through: app, web client, other clients and store listings.

   Addresses 1 item: 1 binding law in force

   Law in force in California (US-CA).

10. Digital replica of a deceased personality without estate consent

    Require an estate or rights-holder consent record, or a reviewer's stored exception determination, on a deceased personality's replica job before it is generated or published.

    Addresses 1 item: 1 binding law in force

    Law in force in California (US-CA).

The top 10 of 67; the build plan ranks all of them and lets you narrow by AI feature.

By AI feature

Plans for one feature in California:

• Chat or assistant
• Agents that use tools or take actions
• Decisions about people (hiring, credit, insurance, health)
• Generated text, images, audio or video
• Classification, scoring or biometrics

Laws

• CCPA ADMT Regulations California (US-CA)
• Cal. Civ. Code 3344 (commercial use of likeness) California (US-CA)
• California AB 1836 (digital replica) California (US-CA)
• California AB 2013 California (US-CA)
• California AB 3030 (Health-care GenAI patient communications) California (US-CA)
• California AB 489 (AI implying health-care licensure) California (US-CA)
• California AB 853 California (US-CA)
• California CMIA (Civ. Code 56 et seq.) California (US-CA)
• California SB 1119 (Bus. & Prof. Code 21810-21818, companion chatbots and children) California (US-CA)
• California SB 243 California (US-CA)
• California SB 53 (Transparency in Frontier AI Act) California (US-CA)
• California SB 942 California (US-CA)
• FTC Impersonation Rule (16 CFR Part 461) United States (federal) (US)
• HIPAA Privacy Rule (45 CFR 160, 164 Subpart E) United States (federal) (US)

Coming into force

• 1 Jan 2027: GenAI hosting platforms must not distribute systems that omit disclosures (California) (California (US-CA))
• 1 Jan 2027: Large online platforms must detect and display content provenance (California) (California (US-CA))
• 1 Jan 2027: Companion chatbot operators must determine users' age through California's age-signal law or give every user the child protections (California SB 1119) (California (US-CA))
• 1 Jan 2027: Consumers requesting access to ADMT must receive a plain-language explanation (California (US-CA))
• 1 Jan 2027: Consumers must be able to opt out of automated decision technology (California (US-CA))
• 1 Jan 2027: Automated decision technology requires pre-use notice (California (US-CA))
• 1 Jul 2027: Companion chatbot operators must determine users' age through California's age-signal law or give every user the child protections (California SB 1119) (California (US-CA))
• 1 Jul 2027: Ads shown to child users of a companion chatbot must be clearly labeled, and the chatbot must not slip non-compliant ads into the chat (California SB 1119) (California (US-CA))
• 1 Jul 2027: Child users must be told, in child-appropriate language and repeatedly during long chats, that they are dealing with AI (California SB 1119) (California (US-CA))
• 1 Jul 2027: Companion chatbots may not target ads at children using their chats, show them behavioral ads, or sell or reuse their data (California SB 1119) (California (US-CA))
• 1 Jul 2027: Companion chatbots open to children need a crisis protocol with referral, parent notice or a 988 connection, and record preservation (California SB 1119) (California (US-CA))
• 1 Jul 2027: Companion chatbots must give children usage reminders and not foster reliance, flattery, relationship purchases or secrecy (California SB 1119) (California (US-CA))

10 more dates on Coming into force.