AI Law
California measures affecting artificial intelligence, grouped by area of law. Each law name links to its source. This is a research summary, not legal advice and not an exhaustive inventory of every applicable state, federal or local rule — enactment is distinct from effectiveness and compliance dates, and chaptered text, amendments, operative dates, scope, remedies and current court orders should be verified before legal reliance or publication.
At a glance: 68 entries — 49 statutes, plus executive orders, regulations, frameworks, guidance and 2 vetoed bills. Entries include enacted measures with future or staged duties (25), as well as measures already enacted or operative.
Public governance & sandboxing (7)
- Executive Order N-12-23 (2023) — Agency directive. Directs approved GenAI testing environments, controlled pilots, risk analysis and workforce training.
- CDT GenAI sandbox implementation (2024) — Program evidence. Documents isolated cloud pilots using public, nonsensitive data.
- SB 896 — Generative AI Accountability Act (2024) — Enacted. Requires state AI reporting, infrastructure risk analysis and disclosure of specified state communications.
- Executive Order N-5-26 (2026) — Agency directive. Directs development of trusted-AI procurement safeguards and vendor requirements.
- Executive Order N-6-26 (2026) — Agency directive. Directs evaluation of AI workforce and economic impacts.
- SB 1159 — AI transparency and governance (2026) — Enacted; future/staged duties. Excludes AI from specified participation terms and addresses false human participation.
- AB 2885 — AI definitions (2024) — Enacted. Establishes an AI definition across specified code provisions.
Frontier safety & oversight (7)
- SB 53 — Transparency in Frontier AI Act (2025) — Enacted. Requires safety frameworks, transparency reports, incident reporting and protected employee disclosures.
- CalCompute provisions of SB 53 (2025) — Funding-dependent. Plans public computing infrastructure for safe, equitable AI research.
- SB 813 — Independent verification organizations (2026) — Enacted; future/staged duties. Creates a framework for qualifying independent AI risk evaluators.
- AB 1405 — AI auditor registry (2026) — Enacted; future/staged duties. Creates registry and auditor independence standards.
- September 18 AI oversight executive order (2026) — Agency directive / proposals. Accelerates oversight and seeks proposals for verified safety plans and emergency shutoff.
- SB 1047 — frontier-model safety proposal (2024) — Vetoed. Proposed catastrophic-risk safeguards and oversight.
- AB 1864 — gene synthesis safeguards (2026) — Enacted. Requires customer and genetic-material screening safeguards.
Children & companion relationships (9)
- SB 243 — Companion chatbots (2025) — Enacted. Requires identity disclosure, self-harm protocols and specified minor protections.
- SB 1119 — Adam's Law (2026) — Enacted; future/staged duties. Adds child-risk assessments, safer defaults, parental controls and independent audits.
- SB 867 — toys with companion chatbots (2026) — Enacted; future/staged duties. Temporarily prohibits covered companion-chatbot toys.
- AB 1064 — LEAD for Kids proposal (2025) — Vetoed. Proposed broader child chatbot restrictions.
- AB 1043 — Digital Age Assurance Act (2025) — Enacted; future/staged duties. Establishes age-bracket signaling framework.
- AB 1856 — age-verification signals (2026) — Enacted; future/staged duties. Amends age-signal duties.
- AB 1709 — covered-platform age restrictions (2026) — Enacted; future/staged duties. Restricts covered addictive features.
- AB 2246 — services accessed by children (2026) — Enacted; future/staged duties. Revises child online-design protections.
- AB 2 — injuries to children (2026) — Enacted; future/staged duties. Adds remedies for covered injuries to children.
Privacy & data governance (7)
- CCPA / CPRA (2020) — Existing framework. Provides privacy rights and regulates processing of personal information.
- CCPA automated decisionmaking regulations (2025) — Enacted; future/staged duties. Establishes specified access and opt-out rights.
- CCPA risk-assessment regulations (2025) — Operative; staged reporting. Requires risk assessments and reporting.
- CCPA cybersecurity-audit regulations (2025) — Enacted; future/staged duties. Requires independent cybersecurity audits for covered businesses.
- Delete Act / DROP (2023) — Existing framework. Provides centralized deletion-request mechanism.
- SB 923 — expanded deletion rights (2026) — Enacted; future/staged duties. Expands deletion rights for information collected about consumers.
- AB 2561 — privacy settings (2026) — Enacted; future/staged duties. Restricts reversal of affirmative privacy choices without consent.
Employment & civil rights (6)
- FEHA and related civil-rights law (0) — Existing framework. Existing antidiscrimination duties apply to AI-assisted conduct.
- CRD automated-decision employment regulations (2025) — Operative. Clarifies discrimination rules, records and disability-related inquiries.
- SB 947 — No Robo Bosses Act (2026) — Enacted; future/staged duties. Requires human oversight of firing and discipline.
- SB 951 — technological displacement notice (2026) — Enacted; future/staged duties. Adds AI-displacement information to required notices.
- AB 1331 — workplace surveillance (2026) — Enacted; future/staged duties. Restricts workplace bathroom surveillance.
- AB 1883 — workplace emotion and neural surveillance (2026) — Enacted; future/staged duties. Limits AI emotion inference and neural-data collection.
Healthcare & professional responsibility (8)
- AB 3030 — AI patient communications (2024) — Enacted. Requires disclosure for covered AI-generated clinical communications.
- SB 1120 — AI utilization review (2024) — Enacted. Requires individualized clinical considerations and preserves provider decision-making.
- AB 489 — misleading healthcare AI titles (2025) — Operative. Prohibits misleading representations of AI as licensed healthcare professionals.
- AB 1979 — healthcare AI and medical privacy (2026) — Enacted; future/staged duties. Addresses clinical judgment and health-data confidentiality.
- SB 503 — healthcare AI (2026) — Enacted. Healthcare AI safeguard measure.
- SB 574 — legal professionals and AI (2026) — Enacted. Addresses professional responsibility in AI-assisted legal work.
- CMIA and healthcare licensing framework (0) — Existing framework. Medical confidentiality and licensing obligations apply to relevant AI uses.
- Attorney General AI healthcare advisory (2025) — Guidance. Explains existing legal duties and recommends testing, validation and transparency.
Education & student data (5)
- AB 1159 — student personal information (2026) — Enacted; future/staged duties. Restricts student-data uses, including AI training.
- AB 2876 — AI literacy (2024) — Enacted. Requires consideration of AI literacy in specified curricula.
- SB 1288 — AI in education working group (2024) — Enacted. Convenes a group to examine educational AI use.
- AB 2392 — postsecondary GenAI procurement (2026) — Enacted. Addresses GenAI procurement standards and training.
- AB 2148 — natural-person school personnel (2026) — Enacted; future/staged duties. Defines specified school personnel as natural persons.
Consumer protection & transparency (9)
- AB 2013 — training-data transparency (2024) — Enacted. Requires public documentation of training data.
- SB 942 — California AI Transparency Act (2024) — Enacted; amended. Establishes provenance and detection requirements.
- AB 853 — AI Transparency Act amendments (2025) — Enacted; amended. Revises the earlier transparency framework.
- SB 1000 — AI Transparency Act amendments (2026) — Operative. Removes user threshold and revises disclosure-verification and provenance duties.
- AB 2713 — system provenance data (2026) — Enacted; future/staged duties. Revises platform provenance duties.
- SB 1001 — bot disclosure (2018) — Existing framework. Requires disclosure in covered misleading bot interactions.
- AB 1609 — customer-service chatbots (2026) — Enacted; future/staged duties. Requires chatbot transparency and good-faith access to human assistance.
- General consumer protection and competition law (0) — Existing framework. Existing prohibitions apply to deceptive, unfair and anticompetitive AI conduct.
- Attorney General general AI advisory (2025) — Guidance. Explains application of existing California law to AI.
Identity, likeness & exploitation (7)
- AB 2602 — digital-replica contract terms (2024) — Enacted. Makes certain digital-replica provisions unenforceable.
- SB 926 — sexually explicit synthetic images (2024) — Enacted. Criminalizes specified harmful synthetic sexual imagery.
- SB 981 — sexual digital identity theft reporting (2024) — Enacted. Requires reporting and removal processes.
- SB 1381 — AI-generated child exploitation material (2024) — Enacted. Expands covered child sexual exploitation material.
- SB 1276 — child sexual exploitation (2026) — Enacted. Further expands child exploitation protections.
- SB 1111 — digital replicas (2026) — Enacted; future/staged duties. Updates likeness and impersonation protections.
- SB 1050 — synthetic performers (2026) — Enacted; future/staged duties. Requires specified synthetic-performer disclosures.
Elections & civic integrity (3)
- AB 2355 — political-advertisement disclosures (2024) — Enacted; court check needed. Requires disclosures for specified synthetic political content.
- AB 2655 — deceptive election content on platforms (2024) — Enacted; court check needed. Requires action on certain reported deceptive election content.
- AB 2839 — deceptive election materials (2024) — Enacted; court check needed. Restricts specified deceptive synthetic election communications.
Source
Full register with enforcement, verification/follow-up notes and a review-notes column: California AI Law Register spreadsheet (2026-10-31, with clickable source links on each law name).
Note from the register's Overview: project-relevance notes are analysis, not statutory language, and sandboxing does not itself waive privacy, discrimination or consumer-protection law.