California Assembly Bill 3030 (2024)

• Authority: California
• Parent authority: State governments
• Jurisdiction: United States
• Collections: U.S. state and local documents
• Most recent activity: Enacted
• Most recent activity date: 2024-09-28

Risk subdomain coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the risk subdomain are explicitly described.

• Lack of transparency or interpretability

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.

• False or misleading information
• Overreliance and unsafe use
• Lack of capability or robustness

All other risk subdomains had no coverage in this document.

Risk Coverage Summary

The document has minimal coverage of approximately 3-4 subdomains, with focus on misinformation risks (3.1), human-computer interaction issues (5.1), and system safety concerns (7.3, 7.4). Coverage is concentrated on patient safety and transparency in healthcare AI communications.

Sector coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.

• Health Care & Social Assistance

All other sectors had no coverage in this document.

Sectors Summary

The document exclusively governs the Health Care and Social Assistance sector, specifically regulating AI use in health facilities, clinics, and physician offices for patient communications. No other sectors are mentioned or governed.

Legislative Status

Hard Law

Legislative Status Summary

This is a binding California state statute with mandatory requirements, specific enforcement mechanisms, and designated regulatory authorities for violations.

Actors

Proposer

• Entity Types: AI_Governance_Actor
• Entities: California State Legislature; California Assembly
• Summary: The document is California Assembly Bill 3030 (2024), indicating it was proposed by the California Assembly as part of the state legislative process.

Target

• Entity Types: AI_Deployer
• Entities: health facilities; clinics; physician's offices; offices of group practices
• Summary: The bill explicitly targets health facilities, clinics, physician's offices, and offices of group practices that use generative AI for patient communications. These entities are deploying AI systems in healthcare settings.

Enforcer

• Entity Types: AI_Governance_Actor
• Entities: Medical Board of California; Osteopathic Medical Board of California; health facility licensing authorities; clinic licensing authorities
• Summary: The bill designates specific enforcement bodies for different types of violations: existing health facility and clinic enforcement mechanisms, and the Medical Board of California or Osteopathic Medical Board of California for physician violations.

Monitor

• Entity Types: AI_Governance_Actor
• Entities: Medical Board of California; Osteopathic Medical Board of California; health facility licensing authorities; clinic licensing authorities
• Summary: The same bodies responsible for enforcement would also be responsible for monitoring compliance, as they have jurisdiction over licensed health facilities, clinics, and physicians under existing California health regulatory frameworks.

AI Lifecycle Stages

Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems

• Deploy
• Operate and Monitor

AI Lifecycle Summary

The document primarily focuses on the Deploy and Operate and Monitor stages of the AI lifecycle, as it regulates how generative AI systems are deployed in patient communications and requires ongoing operational practices (disclaimers and human contact information). It does not address earlier stages like planning, data collection, or model building.

Technical Scope

Terms relating to technical scope that are mentioned or implicitly referenced in the document

• AI Systems
• Generative AI

Technical Scope Summary

The document explicitly mentions and defines generative artificial intelligence and artificial intelligence more broadly. It does not mention frontier AI, general purpose AI, task-specific AI, foundation models, predictive AI, open-weight models, or compute thresholds.