Data Protection

CCPA/CPRA (AI Provisions)

California privacy law provisions specifically addressing automated decision-making and profiling.

Definition

The California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) includes specific provisions relevant to AI:

  • Automated decision-making: Right to opt out of automated decision-making technology
  • Profiling: Consumer rights regarding profiling for decisions with legal or significant effects
  • Access rights: Right to know the logic involved in automated decision-making
  • Opt-out rights: Consumers can limit use of sensitive personal information

The California Privacy Protection Agency (CPPA) is developing regulations specifically addressing:

  • Risk assessments for automated decision-making
  • Pre-use notice requirements for AI systems
  • Access to information about AI logic
  • Audit requirements for high-risk AI processing

Sources

  • California Civil Code § 1798
  • CPPA Regulations