AI Governance Engineer
GitHub

California CPPA: regulations on automated decisionmaking technology

Businesses using ADMT for significant decisions give a pre-use notice, an opt-out or a human appeal, and access to information about the ADMT

By Reviewed

From clause to evidenceThe chain from California CPPA CCPA regulations (ADMT) to its evidence record, in 6 steps; the text alternative lists them and the facts under the figure state each in full.Clause: California CPPA regulations (ADMT, risk assessments, cybersecurity audits), CCPA regulations (ADMT)ClauseCalifornia CPPACCPAregulationsDuty holder: Businesses subject to the CCPADuty holderBusinessessubject…Applies from: 2027-01-01 (Applies later)Applies from2027-01-01Applies laterArtefact: ADMT register; pre-use notice; opt-out or appeal workflow; ADMT access responseArtefactADMT registerLayers: Layer 02 Inventory & Transparency and Layer 04 Runtime Controls & Observability and Layer 05 Assurance & Continuous ComplianceLayersLayer 02Layer 04Layer 05Evidence record: the common evidence record (Evidence record v1)Evidence recordEvidence recordv1Same topic elsewhere: no crosswalk topic files this clause yetAs of 2026-09-24 · illustrative, not a claim of conformity From clause to evidenceThe chain from California CPPA CCPA regulations (ADMT) to its evidence record, in 6 steps; the text alternative lists them and the facts under the figure state each in full.Clause: California CPPA regulations (ADMT, risk assessments, cybersecurity audits), CCPA regulations (ADMT)ClauseCalifornia CPPA · CCPA regulationsDuty holder: Businesses subject to the CCPADuty holderBusinesses subject…Applies from: 2027-01-01 (Applies later)Applies from2027-01-01 · Applies laterArtefact: ADMT register; pre-use notice; opt-out or appeal workflow; ADMT access responseArtefactADMT registerLayers: Layer 02 Inventory & Transparency and Layer 04 Runtime Controls & Observability and Layer 05 Assurance & Continuous ComplianceLayersLayer 02Layer 04Layer 05Evidence record: the common evidence record (Evidence record v1)Evidence recordEvidence record v1Same topic elsewhere: no crosswalk topicfiles this clause yetAs of 2026-09-24illustrative, not a claim of conformity
From clause to evidence Build the artefact, then file every output it produces as a record that names AIGE-OBL-USCA-CPPA-ADMT. Drawn from chapter 08.
Text alternative
  • Clause: California CPPA, CCPA regulations.
  • Duty holder: Businesses subject….
  • Applies from: 2027-01-01, Applies later.
  • Artefact: ADMT register.
  • Layers: Layer 02, Layer 04, Layer 05.
  • Evidence record: Evidence record v1.
  • Record schema: Evidence record.
  • No crosswalk topic files this clause yet.
When this obligation appliesThe date of AIGE-OBL-USCA-CPPA-ADMT on a time axis, against its review date 2026-09-24.2024202620282030As of 2026-09-242027-01-01 · Applies laterRegulations effective2026-01-01; ADMT dutiesfrom 2027-01-012027-01-01 · Applies later · Regulations effective 2026-01-01; ADMT duties from 2027-01-01Source: Obligation register(chapter 08)
When this obligation appliesThe date of AIGE-OBL-USCA-CPPA-ADMT on a time axis, against its review date 2026-09-24.2027-01-01 · Applies laterRegulations effective 2026-01-01; ADMT dutiesfrom 2027-01-012024202620282030As of 2026-09-242027-01-01 · Applies later · Regulations effective 2026-01-01; ADMT duties from 2027-01-01Source: Obligation register (chapter 08)
When this obligation applies The first date in the row's status, then each later step: filled once its date has passed, outlined while it is still ahead of the review date.
Data table: the dates
Dates of AIGE-OBL-USCA-CPPA-ADMT
DateStepDetail
2027-01-01Applies laterRegulations effective 2026-01-01; ADMT duties from 2027-01-01
Id
AIGE-OBL-USCA-CPPA-ADMT
Instrument
California CPPA regulations (ADMT, risk assessments, cybersecurity audits) law
Clause
CCPA regulations (ADMT)
In scope
Businesses subject to the CCPA
Authority
California Privacy Protection Agency
Applies from
Applies later · Regulations effective 2026-01-01; ADMT duties from 2027-01-01

The artefact that evidences it

ADMT register; pre-use notice; opt-out or appeal workflow; ADMT access response.

Patterns that build it

No pattern in the catalogue names this clause on its "Maps to" line yet; the artefact above is the engineering answer.

Source

Chapter 08, section State privacy and sector laws, checked against its sources on the review date above.

Machine-readable

Cite this obligation

García Aibar, J. (2026). California CPPA: regulations on automated decisionmaking technology (AIGE-OBL-USCA-CPPA-ADMT). In AI Governance Engineering: The Thesis & Body of Knowledge (v0.5.0). https://doi.org/10.5281/zenodo.22956197. https://aigovernanceengineer.com/obligations/aige-obl-usca-cppa-admt. CC BY 4.0

BibTeX

@misc{aige2026obligation,
  author       = {Jorge García Aibar},
  title        = {{California CPPA: regulations on automated decisionmaking technology (AIGE-OBL-USCA-CPPA-ADMT)}},
  howpublished = {In AI Governance Engineering: The Thesis \& Body of Knowledge},
  year         = {2026},
  version      = {0.5.0},
  doi          = {10.5281/zenodo.22956197},
  url          = {https://aigovernanceengineer.com/obligations/aige-obl-usca-cppa-admt},
  note         = {Version 0.5.0}
}