California CCPA Regulations on Automated Decision-Making

Key dates

22 Sept 2025Regulations approved by the Office of Administrative Law
1 Jan 2026Regulations effective; risk assessment duties begin
1 Jan 2027ADMT notice, opt-out and access duties apply
1 Apr 2028First cybersecurity audits due for the largest businesses

Contribute

Spot an error, or know a record we should add? Members can propose additions and submit corrections.

Add regulation Report a correction or request removal

Related in Regulation Tracker

New York Stop Addictive Feeds Exploitation (SAFE) for Kids Act and implementing rules

New York's law restricting algorithmic feeds for minors takes effect on 25 January 2027 under final rules published in July 2026, with certified age assurance and $5,000-per-violation penalties.

United States, New YorkSigned, not yet in force

Colorado Automated Decision-Making Technology Act

Colorado repealed its 2024 AI Act before it ever applied and replaced it with a narrower automated decision-making statute that takes effect on 1 January 2027.

United States, ColoradoSigned, not yet in force

Colorado SB 26-189 — Consumer protections for automated decision-making technology

What became of the first US comprehensive AI law: after two delays and a federal enforcement pause, Colorado repealed SB 24-205 and replaced it in May 2026 with a narrower transparency and notice regime for automated…