California — California GenAI Procurement Guidelines and Toolkit
California · California GenAI Procurement Guidelines and Toolkit
California's Government Operations Agency and Department of Technology issued procurement guidelines and a toolkit requiring state entities to complete a SIMM 5305-F GenAI risk assessment, use written solicitations with a GenAI Disclosure & Fact Sheet, engage the CIO/AIO, and report GenAI contracts before procuring generative AI.
Technical detail
California's Government Operations Agency and Department of Technology issued procurement guidelines and a toolkit requiring state entities to complete a SIMM 5305-F GenAI risk assessment, use written solicitations with a GenAI Disclosure & Fact Sheet, engage the CIO/AIO, and report GenAI contracts before procuring generative AI.
Who is protected: Residents interacting with state government AI systems; public-sector data subjects.
Who must comply: All California state agencies and departments considering or procuring generative AI, and their bidders/vendors
Key facts
| Jurisdiction | California |
|---|---|
| Level | State |
| Status | In effect |
| Protection strength | Limited protection |
| Effective date | 2024-03-21 |
| Citation | California GenAI Procurement Guidelines and Toolkit |
| Topics | government use of AI · AI disclosure and transparency · consumer data privacy |
| Last verified | 2026-07-01 |
| Official source | State of California GenAI Guidelines for Public Sector Procurement (California Department of Technology / GovOps) ↗ |
More AI rules in California
- CA EO N-6-26 (AI Workforce) · In effect
- California AB 489 (AI healthcare chatbot misrepresentation ban) · In effect
- X.AI v. Bonta (AB 2013 training-data disclosure) · Blocked / in litigation
- CA SB 1298 (2012 AV authorization) · In effect
- CA AB 856 (2015 drone trespass) · In effect
- California Bot Disclosure Act (bots must self-identify in sales/election messaging) · In effect
Related government use of AI rules elsewhere
- WA SB 5982 (Data Center / Clean Energy) · In effect
- Arkansas public entity AI/ADS policy mandate (Act 848, 2025) · In effect
- One-year moratorium on data center development (Inver Grove Heights MN) · In effect
- FERC order directing PJM and other grid operators to reform · Enacted (not yet in effect)
- San Marcos citywide data center ban (Land Use Matrix amendme · In effect
- Washington County (MD) 12-month data center moratorium · Enacted (not yet in effect)
See something wrong or out of date? Submit a correction — every entry must carry a verifiable official source.