AI & Privacy/California
California — AI & privacy rules.
State-specific records for California, plus separately labeled federal rules that may apply to covered organizations nationwide.
Selected state rules and applicable federal records from T1. This is not an exhaustive state-law inventory. Federal records do not establish the contents of state law. The absence of a state-specific record is not a finding that no state law applies.
California state rules
Source-linked| Ref | Rule | Status | Jurisdiction | Eff. date |
|---|---|---|---|---|
| CA AB 2013 | California AB 2013: GenAI training-data transparencyDevelopers designing, coding, producing, or substantially modifying GenAI systems/services publicly available to… | Enacted | California | 2026-01-01in force |
| CA SB 942 / AB 853 | California AI Transparency Act, SB 942 as amended by AB 853Covered GenAI providers with >1 million monthly visitors/users, publicly accessible in California: free detection tools and… | Enacted | California | 2026-08-02in force |
| CA CCPA RISK | California CCPA risk-assessment regulationsCCPA-covered businesses conducting specified significant-risk processing under §7150(b). This does not cover all small… | Enacted | California | 2026-01-01in force |
| CA CIV 1798.100–199.100 | California Consumer Privacy Act, as amended by CPRAFor-profit businesses doing business in California that satisfy the statutory revenue, consumer-volume, or… | Enacted | California | 2023-01-01in force |
| CA DROP | California Delete Act: DROPRegistered data brokers, subject to exceptions; not every business processing personal data. | Enacted | California | 2026-08-01in force |
| CA SB 243 | California SB 243: companion chatbotsOperators offering companion-chatbot platforms in California: adaptive human-like interaction sustaining a social… | Enacted | California | 2026-01-01in force |
| CA SB 53 | California SB 53: Transparency in Frontier Artificial Intelligence ActFrontier-model developers: training compute >10²⁶ operations, including qualifying modifications. Expanded… | Enacted | California | 2026-01-01in force |
7 sourced state-specific recordsVerification method →
Federal baseline — nationwide scope
Source-linked| Ref | Rule | Status | Jurisdiction | Eff. date |
|---|---|---|---|---|
| 28 CFR 202; 90 FR 1636 | DOJ Data Security Program — countries-of-concern data transactionsU.S. persons engaging in defined covered data transactions involving bulk U.S. sensitive personal data or U.S.… | Enacted | Federal · nationwide scope | 2025-04-08in force |
| HHS 42 CFR PART 2 | Federal 42 CFR Part 2 confidentiality amendmentsFederally assisted substance-use-disorder programs and recipients subject to Part 2. Consent/redisclosure, notices, breach… | Enacted | Federal · nationwide scope | 2026-02-16in force |
| FTC COPPA | Federal COPPA rule amendmentsOperators of child-directed online services, or operators with actual knowledge of collecting personal information from… | Enacted | Federal · nationwide scope | 2026-04-22in force |
| 16 CFR 682; 69 FR 68690 | FTC Disposal Rule — consumer-report information and recordsPersons within FTC jurisdiction that maintain or otherwise possess consumer information derived from consumer reports for a… | Enacted | Federal · nationwide scope | 2005-06-01in force |
| 16 CFR 313; 65 FR 33646 | FTC GLBA Privacy Rule — original final ruleUnverified — Historical original rule for financial institutions under FTC privacy-rule jurisdiction. Present jurisdiction…Some details remain Unverified; see the field qualifications. | Enacted | Federal · nationwide scope | 2001-07-01in force |
| 16 CFR 318; 89 FR 47028 | FTC Health Breach Notification Rule — 2024 amendmentsForeign and domestic vendors of personal health records, PHR-related entities and third-party service providers maintaining… | Enacted | Federal · nationwide scope | 2024-07-29in force |
| 16 CFR 314; 86 FR 70272 | FTC Safeguards Rule — 2021 security-program amendmentsFinancial institutions within FTC Safeguards Rule jurisdiction that handle covered customer information, including… | Enacted | Federal · nationwide scope | 2023-06-09in force |
| 45 CFR 164 subpart C; 68 FR 8334 | HIPAA Security Rule — original final security standardsFor this original-rule record: HIPAA-covered health plans, health care clearinghouses and health care providers that conduct… | Enacted | Federal · nationwide scope | 2005-04-21in force |
| 17 CFR 248.30; 89 FR 47688 | SEC Regulation S-P — incident response and customer-notification amendmentsCovered brokers and dealers, investment companies, SEC-registered investment advisers and transfer agents registered with… | Enacted | Federal · nationwide scope | 2025-12-03in force |
Coverage depends on each rule's applicability test.Scope and limits →
Based on 16 tracked records, verified Nov 13, 2026.
For multi-state teamsCompare the tracked obligations in a file you can keep.
View the matrix