California Consumer Privacy Act / CPRA — Automated Decision-Making

Cal. Civ. Code § 1798.100 et seq. · Last reviewed 2 weeks ago

California is issuing regulations on automated decision-making technology under the CCPA/CPRA.

In plain English

California residents will have rights to know, opt out of, and access information about AI-driven decisions — with new rules being finalized by the California Privacy Protection Agency.

Related regulations

🇩🇪 Germany · Enacted
EU AI Act
The world's first comprehensive horizontal AI law, imposing risk-based obligations across the EU.
🇺🇸 United States · Enacted
Colorado AI Act
First comprehensive US state AI law targeting consequential decisions; effective in 2026.
🇺🇸 United States · Guidance
NIST AI RMF
Voluntary US framework for managing AI risks across the life cycle (Govern, Map, Measure, Manage).
🇬🇧 United Kingdom · Enacted
UK GDPR Art. 22
Rights regarding solely automated decisions with legal or similarly significant effects.