California is poised to introduce comprehensive regulations on automated decision-making tools (ADMTs), including those powered by Artificial Intelligence, through the California Privacy Protection Agency (CPPA). The proposed rules would require organizations using these tools for significant decisions—such as employment opportunities, compensation, or extensive profiling—to provide pre-use notices, allow opt-outs, conduct detailed risk assessments, and offer impacted individuals the right to access and understand decisions. These measures, drawing from international frameworks like the EU’s GDPR but tailored for California, would create some of the nation’s strictest standards for the business use of automation and Artificial Intelligence.
Governor Gavin Newsom has taken the unusual step of formally opposing the CPPA’s broad approach, cautioning in an April 23 letter that such expansive and stringent regulations risk stifling innovation and could drive Artificial Intelligence companies out of the state. Newsom emphasized that while safeguarding consumer rights is critical, regulations must be clear and reasonable so as not to hamper California’s leadership in technology and economic growth. He raised concerns that early-stage overregulation could lead to company relocations, complex compliance burdens, and a weakening of California’s—and America’s—competitiveness in the global technology sector.
The CPPA’s draft rules have elicited hundreds of public comments from both ends of the spectrum. Technology companies and business groups warn that excessive regulation would harm the state’s economic climate and Artificial Intelligence ecosystem, while labor organizations and advocacy groups including the ACLU of Northern California support the rules as necessary to prevent discrimination and unchecked surveillance. As the CPPA revises the draft in response to feedback, legal challenges are expected no matter the final content, potentially leading to prolonged litigation and influencing how other states approach Artificial Intelligence regulation. Employers are advised to review their current use of automated decision-making, adopt responsible governance policies, and prepare for increased oversight regardless of the rule’s fate, as California’s decisions could set a broader precedent for the U.S.
