CA CPPA ADMT Regs

California Privacy Protection Agency — Automated Decisionmaking Technology (ADMT) Regulations
CA · 11 Cal. Code Regs. §§ 7200-7232

Status
In effect
Took effect
January 1, 2026
Applies to
Businesses subject to CCPA/CPRA using ADMT for significant decisions, extensive profiling, or model training
Enforced by
California Privacy Protection Agency; California Attorney General

California's privacy agency finalized binding regulations governing automated decision-making and AI used to make significant decisions about Californians — including hiring, housing, education, healthcare, financial services, and ads to minors. Consumers gain rights to pre-use notice, opt-out, and access to information about how AI made the decision.

Who is protected: California consumers, employees, students, and applicants subjected to automated decision-making

Legal detail

California Privacy Protection Agency Regulations, 11 Cal. Code Regs. §§ 7200-7232 (ADMT regulations adopted Nov. 21, 2025; effective Apr. 1, 2026 with phased compliance through Jan. 2027). Implements California Privacy Rights Act (Cal. Civ. Code § 1798.185(a)(15)-(16)). Covers ADMT for 'significant decisions' (employment, housing, education, healthcare, financial services), extensive profiling (workplace surveillance), and training of ADMT/AI.

Key facts

JurisdictionCA
LevelState
StrengthStronger
EnactedNovember 21, 2025
Citation11 Cal. Code Regs. §§ 7200-7232
Private right of actionNo, agency enforcement only
PenaltiesAdministrative fines up to $2,500 per violation ($7,500 if intentional or involving minors) under Cal. Civ. Code § 1798.155
Topicsconsumer data privacy · automated decision-making · consumer protection · AI disclosure and transparency · AI hiring and employment
Agency pageCPPA — Final ADMT, Risk Assessment, Cybersecurity Audit, and Insurance Regulations (Nov. 2025)

More AI rules in CA

Related consumer data privacy rules elsewhere

See something wrong or out of date? Submit a correction. Every entry must carry a verifiable source.