Digital Policy Alert logo

United States of America: Regulation under California Consumer Privacy Act on automated decision-making technology enters into force

Policy overview

Description

Regulation under California Consumer Privacy Act on automated decision-making technology enters into force

On 1 January 2027, the Regulation under California Consumer Privacy Act (CCPA) on automated decision-making technology (ADMT) enters into force. The rules apply to businesses using ADMT for significant consumer decisions in areas including employmen…

Scope

Policy Area
Consumer protection
Policy Instrument
User/subject right
Regulated Economic Activity
ML and AI development
Implementation Level
subnational
Government Branch
executive
Government Body
data protection authority

Complete timeline of this policy change

Hide details
2023-11-27
under deliberation

On 27 November 2023, the California Privacy Protection Agency (CPPA) published a draft of the Autom…

2024-02-23
under deliberation

On 23 February 2024, the California Privacy Protection Agency (CPPA) published a Revised draft of t…

2024-11-22
in consultation

On 22 November 2024, the California Privacy Protection Agency (CPPA) opened the public consultation…

2025-01-14
processing consultation

On 14 January 2025, the California Privacy Protection Agency (CPPA) closes the public consultation …

2025-03-28
under deliberation

On 28 March 2025, the California Privacy Protection Agency (CPPA) published its updated draft regul…

2025-09-23
adopted

On 23 September 2025, the California Office of Administrative Law adopted the regulations under Cal…

2027-01-01
in force

On 1 January 2027, the Regulation under California Consumer Privacy Act (CCPA) on automated decisio…