California AB 2930 (Automated decision systems)

• Authority: California
• Parent authority: State governments
• Jurisdiction: United States
• Collections: U.S. state and local documents
• Most recent activity: Defunct
• Most recent activity date: 2024-11-30

Risk subdomain coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the risk subdomain are explicitly described.

• Unfair discrimination and misrepresentation
• Unequal performance across groups
• Compromise of privacy
• Governance failure
• Lack of capability or robustness
• Lack of transparency or interpretability

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.

• Overreliance and unsafe use
• Loss of human agency and autonomy
• Increased inequality and decline in employment

All other risk subdomains had no coverage in this document.

Risk Coverage Summary

The document has good coverage of approximately 6-8 subdomains, with strong focus on unfair discrimination (1.1, 1.3), privacy compromise (2.1), lack of transparency (7.4), and governance failure (6.5). Coverage is concentrated in discrimination/toxicity, privacy, and system safety domains, with the primary goal of mitigating algorithmic discrimination in automated decision systems.

Sector coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.

• Public Administration (excl. National Security)

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the sector are described.

• Agriculture, Mining, Construction & Manufacturing
• Trade, Transportation & Utilities
• Information
• Finance & Insurance
• Real Estate, Rental & Leasing
• Professional & Technical Services
• Scientific Research & Development Services
• Management, Administrative & Support Services
• Educational Services
• Health Care & Social Assistance
• Arts, Entertainment & Recreation
• Accommodation, Food & Other Services

All other sectors had no coverage in this document.

Sectors Summary

The document primarily governs employment-related automated decision systems across all sectors, with particular emphasis on decisions affecting hiring, termination, pay, promotion, and task allocation. It also covers government services and benefits administration. The regulation applies horizontally across industries rather than targeting specific sectors.

Legislative Status

Hard Law

Legislative Status Summary

This is a binding California state statute with mandatory obligations, enforcement mechanisms through the Civil Rights Department, civil penalties up to $25,000 per violation, and injunctive relief provisions.

Actors

Proposer

• Entity Types: AI_Governance_Actor
• Entities: California State Legislature; People of the State of California
• Summary: The document is a California state legislative act, as indicated by the opening phrase 'The people of the State of California do enact as follows' and the section structure adding provisions to the California Business and Professions Code.

Target

• Entity Types: AI_Developer, AI_Deployer
• Summary: The document explicitly targets two categories of entities: 'deployers' (entities that use automated decision systems to make consequential decisions) and 'developers' (entities that design, code, or produce automated decision systems). These definitions encompass organizations using AI for employment, government benefits, and other consequential decisions.

Enforcer

• Entity Types: AI_Governance_Actor
• Entities: Civil Rights Department
• Summary: The Civil Rights Department is explicitly designated as the enforcement authority with powers to investigate violations, request impact assessments, and bring civil actions against deployers or developers who violate the chapter.

Monitor

• Entity Types: AI_Governance_Actor
• Entities: Civil Rights Department
• Summary: The Civil Rights Department serves as the monitoring body with authority to investigate compliance, request and review impact assessments, and oversee implementation of the chapter's requirements.

AI Lifecycle Stages

Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems

• Plan and Design
• Collect and Process Data
• Build and Use Model
• Verify and Validate
• Deploy
• Operate and Monitor

AI Lifecycle Summary

The document covers multiple lifecycle stages with primary focus on Verify and Validate, Deploy, and Operate and Monitor stages. It mandates impact assessments before deployment, notification requirements during deployment, and ongoing monitoring through annual assessments and governance programs.

Technical Scope

Terms relating to technical scope that are mentioned or implicitly referenced in the document

• AI Systems

Technical Scope Summary

The document explicitly defines and covers 'automated decision systems' and 'artificial intelligence' but does not specifically mention frontier AI, general purpose AI, foundation models, generative AI, predictive AI, open-weight models, or compute thresholds. The focus is on AI systems used for consequential decisions regardless of their technical architecture.