In a move that reinforces California’s proactive stance on regulating emerging technologies and privacy concerns, Governor Gavin Newsom recently signed a significant number of bills at the conclusion of the state's legislative session. These laws, which further develop the state's legal framework surrounding privacy and artificial intelligence (AI), aim to address some of the novel challenges posed by the rapid evolution of technology.
Key Legislative Developments
Governor Newsom put his signature on more than a dozen of the approximately 38 privacy and AI-related bills forwarded to him. These measures include amendments to the existing California Consumer Privacy Act (CCPA) and new legislation aimed at enhancing transparency and consumer protection in the context of AI and data privacy.
Among the newly signed bills is SB 1223, which expands the definition of “sensitive personal information” within the CCPA to encompass neural data. Effective January 1, 2025, this law addresses data obtained from brainwave activity in association with cognitive technologies, aiming to ensure that such data is responsibly collected and shared with explicit disclosure.
Another critical update to the CCPA is through AB 1008, which attempts to clarify its relevance to AI systems capable of processing personal information into "abstract digital formats." This is seen as a preparatory step towards understanding how AI outputs might engage personal data.
Additionally, AB 1824 stipulates that in the event of mergers or acquisitions, companies must respect the existing consumer opt-out preferences associated with personal data, a regulation effective from January 1, 2025. In the realm of AI, AB 2013 and AB 2655 focus on requiring generative AI developers to provide clear documentation about their training datasets and controlling the use of AI-generated deepfakes in elections, respectively.
In a context where vehicle technology is ever-expanding, SB 1394 mandates that connected vehicles indicate when an outside party accesses the vehicle’s services. It also obliges manufacturers to act swiftly to disable control by domestic abusers when requested by a survivor, with multiple implementation phases starting in 2025.
Unsigned Bills and Vetoes
Despite these advancements, Governor Newsom vetoed several notable bills, primarily due to concerns about their potential impact on innovation and the existing technological landscape in California. SB 1047, known as the "Safe and Secure Innovation for Frontier Artificial Intelligence Act," proposed stringent safety regulations and was seen as potentially restrictive for burgeoning AI projects. Similarly, AB 1949, aimed at enhancing children’s privacy protections, and AB 3048, which proposed expansions for opt-out signals in digital platforms, were also vetoed.
Implications and Future Direction
California's legislative agenda reflects its ambition to set a precedent in technological and privacy regulation. This legislative wave underlines the necessity for companies to implement comprehensive governance and oversight mechanisms to comply with these evolving requirements.
With these legislative actions, California continues to influence policy beyond its borders, shaping how AI and data privacy are understood and regulated globally. In the coming sessions, several significant bills that have yet to be passed will likely re-emerge, suggesting that the state's legislative journey in artificial intelligence and data privacy continues to evolve and expand. As the technological landscape shifts, California's legal framework will likely keep pace, bringing further changes and challenges for those involved in AI and data-driven industries.
Source: Noah Wire Services