Agentic artificial intelligence.
What changed between versions
The entire amendment to Civil Code Section 1798.99.86 was deleted. This section had required the California Privacy Protection Agency to establish a deletion mechanism allowing consumers to request data brokers delete their personal information, with data brokers required to access the mechanism every 30 days and process deletions within 30 days.
The bill title changed from 'relating to privacy. artificial intelligence.' to 'relating to artificial intelligence,' reflecting the removal of the data broker privacy provisions and the new focus on state agency AI governance.
New Government Code Section 11546.45.5 requires the Department of Technology to conduct a comprehensive inventory of all high-risk automated decision systems and agentic AI systems that have been proposed for use, are being used, developed, or procured by any state agency, with a deadline of September 1, 2024.
New definitions added for 'automated decision system' (a computational process using ML, statistical modeling, data analytics, or AI that materially impacts natural persons), 'high-risk automated decision system' (one with legal or similarly significant effect on housing, education, employment, credit, health care, or criminal justice), 'board,' 'department,' and 'state agency' with specific inclusions and exclusions.
The Department of Technology must submit an annual report of the comprehensive inventory to the Assembly Committee on Privacy and Consumer Protection and the Senate Committee on Governmental Organization, starting January 1, 2025. The reporting requirement becomes inoperative on January 1, 2029.