Existing law, the California Age-Appropriate Design Code Act, requires a business that provides an online service, product, or feature likely to be accessed by children to comply with certain requirements, including, among other things, prohibiting the business from collecting, selling, sharing, or retaining any personal information that is not necessary to provide the online service, product, or feature, except as specified. Existing law imposes specified civil penalties upon a business that violates these provisions. This bill would repeal the above-described act and would instead impose similar provisions without the above-referenced exceptions and would impose civil penalties for a violation of these provisions. The bill would require a business that provides an online product or service likely to be accessed by children to take reasonable steps to prevent specified risks of harm to children. The bill would authorize a child to void any provision of a contract that was entered into by the child or their parent or guardian as a result of a design feature of the online product or service. The bill would authorize the Attorney General or a public prosecutor to bring a civil action for a violation of these provisions, as specified.
Existing law generally regulates artificial intelligence, including companion chatbots, as defined. Existing law requires an operator, as defined, to prevent a companion chatbot on its companion chatbot platform from engaging with users unless the operator maintains a protocol for preventing the production of suicidal ideation, suicide, or self-harm content to the user. Existing law requires an operator, for a user the operator knows is a minor, to, among other things, notify the user that the user is interacting with artificial intelligence and to disclose that companion chatbots may not be suitable for some minors, as specified. The Digital Age Assurance Act requires a person who owns, maintains, or controls a software application, as defined, to request age bracket data sent by a real-time secure application programming interface or operating system with respect to a particular user from an operating system provider or a covered application store when the application is downloaded and launched. This bill would require an operator, as defined, of a companion chatbot to, on or before July 1, 2027, do various things with respect to child safety and companion chatbots, including annually perform and document a comprehensive risk assessment to identify any child safety risk, as defined, posed by the design, configuration, and operation of the companion chatbot that assesses, among other things, the likelihood of a covered harm, as defined, occurring to child users. The bill would require an operator to submit to an independent audit of its compliance with those provisions, as specified, and would require, within 90 days of completing an independent audit, the auditor to submit an AI child safety audit report to the Attorney General for any audited companion chatbot. The bill would, except as specified, require those audit reports to be kept confidential. This bill would, beginning January 1, 2028, require the Attorney General to issue an annual public report on the audits submitted pursuant to the above-described provision, as specified. The bill would authorize a public prosecutor to bring a certain civil action to enforce the bill's provisions and would authorize a child who suffers actual harm as a result of a violation of this chapter, or a parent or guardian acting on behalf of that child, to bring a civil action against the operator to obtain, among other relief, punitive damages. Existing constitutional provisions require that a statute that limits the right of access to the meetings of public bodies or the writings of public officials and agencies be adopted with findings demonstrating the interest protected by the limitation and the need for protecting that interest. This bill would make legislative findings to that effect.
Existing law makes it a crime to knowingly or willfully cause another person to engage in the unlawful manufacture of firearms or knowingly or willfully aiding, abetting, prompting, or facilitating the unlawful manufacture of firearms, including the manufacture of assault weapons or .50 BMG rifles or the manufacture of any firearm using a 3-dimensional printer, as specified. Existing law authorizes a civil action against a person who knowingly distributes or causes to be distributed any digital firearm manufacturing code to any person, except as specified. Existing law authorizes the Attorney General, county counsel, or city attorney to bring an action against this person and seek a civil penalty, as specified, for each violation, as well as injunctive relief. This bill would require the Department of Justice to check on a quarterly basis beginning no later than July 1, 2027, whether ASTM International has published industry standards for equipping 3-dimensional printers with firearm blocking technology. The bill would require, if the department determines that ASTM International has published or adopted industry standards for firearm blocking technology for 3-dimensional printers, that the department publish written guidance or regulations within 24 months after making that determination. The bill would require, among other things, the written guidance or regulations to describe minimum performance standards for 3-dimensional printer firearm blocking technology before a printer can lawfully be sold or offered for sale in the state. If, as of July 1, 2029, the department determines that ASTM International has not published industry standards for firearm blocking technology for 3-dimensional printers, the bill would relieve the department of any further responsibility to ascertain whether ASTM International has published or adopted industry standards. The bill would make it unlawful to sell, offer for sale, or transfer for consideration, a 3-dimensional printer in the State of California that is not equipped with firearm blocking technology that also meets the above-described industry standards. The bill would exempt printers used exclusively for the manufacturing of properties (props) in the entertainment industry, and would authorize the department to adopt regulations that provide for additional exceptions to these provisions. This bill would also exempt a person who distributes, or causes the distribution of, digital firearm manufacturing code, solely for the bona fide purpose of, among other things, developing, refining, and testing the functionality of a firearm blocking technology from civil liability. This bill would make these provisions severable.
Existing law charges the Labor Commissioner with enforcement of various labor laws, including investigation of employee complaints. This bill would declare it is the policy of the state that a worker providing direct patient care be free to use their professional judgment to make assessments and decisions within their scope of practice as appropriate for their patients. The bill would prohibit an employer from retaliating or discriminating against a worker providing patient care, as specified. The bill would authorize a worker who is subject to retaliation or discrimination in violation of these provisions to file a complaint with the Labor Commissioner against an employer. The bill would require the Labor Commissioner to enforce these provisions, as specified. Existing law provides that everyone is responsible not only for the result of their willful acts, but also for an injury occasioned to another by their want of ordinary care or skill in the management of their property or person. Existing law prohibits a defendant who developed, modified, or used artificial intelligence, as defined, from asserting a defense that the artificial intelligence autonomously caused the harm to the plaintiff. This bill would prohibit a defendant who developed, modified, selected, or deployed a clinical decision support system that is alleged to have harmed the plaintiff from asserting a defense that the failure of a licensed health care professional or other health care worker to override an output of the clinical decision support system is a superseding cause severing the defendant's liability for the alleged harm.
Existing law establishes the Division of Labor Standards Enforcement within the Department of Industrial Relations. Existing law authorizes the division, which is headed by the Labor Commissioner, to enforce the Labor Code and all labor laws of the state, the enforcement of which is not specifically vested in any other officer, board, or commission. This bill would, with certain exceptions, prohibit an employer from using a workplace surveillance tool that uses artificial intelligence to, among other things, collect neural data or recognize an individual's emotional state. The bill would define an employer to include a governmental entity, including, among other entities, charter cities and the University of California. This bill would authorize the Labor Commissioner or a public prosecutor to enforce the bill's provisions. The bill would subject an employer who violates the bill's provisions to a civil penalty of up to $500 for each violation. The bill would define various terms for purposes of its provisions. This bill would exempt from its provisions an employer's use of a workplace surveillance tool in specified operations where the use of a workplace surveillance tool is reasonable necessary to comply with a federal statute, federal regulation, or binding federal contract relating to the development of aircraft for use in the national airspace or the development of products or services for national security, military, space, or defense purposes. The bill would include findings that changes proposed by this bill address a matter of statewide concern rather than a municipal affair and, therefore, apply to all cities, including charter cities.
Existing law establishes the Office of Elections Cybersecurity within the Secretary of State's office to coordinate efforts between the Secretary of State and local elections officials to reduce the likelihood and severity of cyber incidents and to monitor and counteract false or misleading information regarding the electoral process. Existing law requires the Office of Elections Cybersecurity, among other things, to develop best practices for protecting against threats to election cybersecurity in consultation with federal, state, and local agencies and private organizations. This bill would also authorize the office to consult with academic researchers for that purpose. The bill would require the office to assess whether additional state resources are needed to replace election cybersecurity resources previously provided by the federal government.
Existing law establishes the Office of Data and Innovation within the Government Operations Agency with a mission to deliver better government services to the people of California through technology and service innovation, data, and design. Existing law establishes the Data and Innovation Services Revolving Fund consisting of certain sources of moneys including donations, endowments, or grants of funds from private or public sources that commit to the office's mission of ethical, efficient, effective, secure, and responsible use of data in a manner that respects privacy. Exiting law makes moneys in the fund available upon appropriation of the Legislature, as specified. This bill would establish the Engaged California Program within the office. The bill would require the office to, among other things, design, establish, and maintain a platform for ongoing dialogue between Californians and state government and to establish best practices for its use. Subject to certain conditions, including upon appropriation by the Legislature for the express purpose of running the Engaged California Program, the bill would require topics to be selected for deliberation in accordance with specified procedure and would require state agencies identified by the office to coordinate outreach, among other things. The bill would require the Data and Innovation Services Revolving Fund to consist of supplemental funding for the Engaged California Program from partner organizations. The bill would prohibit organizations that provide that funding from participating in the selection of a topic for deliberation and from participating in the deliberation. The bill would also make any unspent funds appropriated for the Engaged California Program during the 2026–27 fiscal year available for use by that program during the 2027–28 fiscal year.
Existing law, the Protecting Our Kids from Social Media Addiction Act, prohibits an operator of an addictive internet-based service or application from providing an addictive feed, as defined, to a user unless the operator does not have actual knowledge that the user is a minor, as specified, or the operator has obtained verifiable parental consent to provide an addictive feed to the user who is a minor. Existing law, the Digital Age Assurance Act, beginning January 1, 2027, requires a person who owns, maintains, or controls a software application, as defined, to request age bracket data sent by a real-time secure application programming interface or operating system with respect to a particular user from an operating system provider or a covered application store when the application is downloaded and launched. This bill would prohibit a covered platform, as defined, from providing an addictive feature, as defined, to a user who is under 16 years of age and would require a covered platform to implement reasonable measures to ensure that users under 16 years of age are not offered or provided any addictive feature on the covered platform. The bill would also authorize the Attorney General to adopt regulations to implement and enforce the bill in order to further the purpose of protecting minors online, including by altering the scope of "covered platform" if the Attorney General determines that doing so is necessary to ensure that "covered platform" applies to internet websites, online services, online applications, or mobile applications that make addictive features, as defined, available to users under 16 years of age. This bill would impose a civil penalty upon a noncompliant platform and would require its provisions to be enforced by a civil action brought only by the Attorney General or a local public prosecutor, as specified. This bill would also establish the e-Safety Advisory Commission within the Department of Justice as an independent advisory body that is only for administrative purposes to advise state government on certain matters related to online safety and would require the commission to, on or before January 1 of each year, report to the Legislature and the Governor on, among other things, its activities under the bill.
The California Consumer Privacy Act of 2018 (CCPA) grants a consumer various rights with respect to personal information, as defined, that is collected or sold by a business, as defined, including the right to direct a business that collects sensitive personal information, as defined, about the consumer to limit its use, as prescribed. The California Privacy Rights Act of 2020, approved by the voters as Proposition 24 at the November 3, 2020, statewide general election, amended, added to, and reenacted the CCPA. This bill would, under the CCPA, prohibit a business, service provider, or contractor from selling or sharing sensitive personal information to a third party, except as specified. This bill would declare that its provisions further the purposes and intent of the California Privacy Rights Act of 2020.
Existing law prohibits a person from using a bot, as defined, to mislead another person about the bot's artificial identity to incentivize the purchase or sale of goods or services, among other things. Existing law requires an operator of a companion chatbot, as defined, to provide a disclosure regarding the companion chatbot's artificial identity if a reasonable person interacting with the companion chatbot would be misled to believe that the person is interacting with a human. This bill would prohibit a large private business, as defined, from representing that a customer service chatbot is a human. The bill would also require the large private business to provide certain disclosures if a reasonable person interacting with the chatbot would be misled to believe they are interacting with a human. This bill would require a large private business to provide a customer service feature allowing customers to contact a customer service agent during its regular business hours, as defined. This bill would require, except as specified, large private businesses to make a good faith effort to connect a customer to an agent within 15 minutes after a request for human customer service is made, or schedule an appointment with the customer, as specified. For online chatbot customer service platforms and telephonic customer service platforms, the bill would require a large private business to make a good faith effort to limit initial and cumulative telephonic hold times, and would require certain large private businesses to post prescribed contact information on their internet website. The bill would authorize a public prosecutor to enforce these provisions, and would make a large private business that violates these provisions liable for a penalty of up to $5,000 for an initial violation, and $10,000 for each subsequent violation. The bill would waive its requirements due to unforeseen circumstances beyond the reasonable control of a large private business or extraordinary or emergency situations, and would exempt a large private business that provides services subject to, and is in compliance with, specified public utilities law. The bill would further exempt exclusive business lines and communications by a hospital, as specified, and a consumer reporting agency, as prescribed. The bill would define terms for these purposes.
