California AB 512 (Health Care Coverage: Prior Authorization 2025)

• Authority: California
• Parent authority: State governments
• Jurisdiction: United States
• Collections: U.S. state and local documents
• Most recent activity: Defunct
• Most recent activity date: 2026-01-22

Risk subdomain coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the risk subdomain are explicitly described.

• Unfair discrimination and misrepresentation
• Unequal performance across groups
• Compromise of privacy
• Overreliance and unsafe use
• Lack of capability or robustness
• Lack of transparency or interpretability

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.

• Loss of human agency and autonomy

All other risk subdomains had no coverage in this document.

Risk Coverage Summary

The document has good coverage of approximately 5-6 subdomains, with strong focus on unfair discrimination (1.1, 1.3), privacy compromise (2.1), lack of transparency (7.4), and lack of robustness (7.3). Coverage is concentrated in discrimination/toxicity, privacy, and AI system safety domains, specifically addressing risks in healthcare AI utilization review systems.

Sector coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.

• Health Care & Social Assistance

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the sector are described.

• Finance & Insurance

All other sectors had no coverage in this document.

Sectors Summary

The document exclusively governs the Health Care and Social Assistance sector, specifically regulating health care service plans and disability insurers that use AI for utilization review and management functions. No other economic sectors are governed by this legislation.

Legislative Status

Hard Law

Legislative Status Summary

This is a binding California state statute with mandatory requirements, enforcement mechanisms including administrative penalties, and regulatory oversight by state departments.

Actors

Proposer

• Entity Types: AI_Governance_Actor
• Entities: California State Legislature; people of the State of California
• Summary: The document is a California state legislative act, as indicated by the opening phrase 'The people of the State of California do enact as follows' and the bill designation 'California AB 512'.

Target

• Entity Types: AI_Deployer
• Entities: health care service plans; disability insurers; specialized health care service plans; entities with which they contract for utilization review or utilization management functions
• Summary: The statute explicitly targets health care service plans and disability insurers that use AI for utilization review and management functions, as well as entities they contract with for these services.

Enforcer

• Entity Types: AI_Governance_Actor
• Entities: California Department of Managed Health Care (director); California Department of Insurance (commissioner); State Department of Health Care Services
• Summary: The statute designates specific state regulatory agencies with enforcement authority, including the power to assess administrative penalties, conduct audits, and review compliance.

Monitor

• Entity Types: AI_Governance_Actor
• Entities: California Department of Managed Health Care (director); State Department of Health Care Services; California Department of Insurance
• Summary: The statute establishes monitoring responsibilities through periodic onsite medical surveys, audit mechanisms, and compliance reviews conducted by state regulatory agencies.

AI Lifecycle Stages

Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems

• Plan and Design
• Collect and Process Data
• Verify and Validate
• Deploy
• Operate and Monitor

AI Lifecycle Summary

The document primarily focuses on the Deploy and Operate and Monitor stages of the AI lifecycle, with specific requirements for how AI tools must be implemented in utilization review systems and ongoing oversight requirements. There is minimal coverage of earlier stages like planning, data collection, or model building.

Technical Scope

Terms relating to technical scope that are mentioned or implicitly referenced in the document

• AI Systems
• Predictive AI
• Task-specific AI

Technical Scope Summary

The document explicitly mentions AI systems through references to 'artificial intelligence, algorithm, or other software tool' used for utilization review. It provides a definition of artificial intelligence and focuses on task-specific AI applications in healthcare utilization management. There is no mention of frontier AI, general purpose AI, foundation models, generative AI, open-weight models, or compute thresholds.