Amends California's Business and Professions Code to require large online platforms to detect and disclose provenance data of AI-generated content, prohibit GenAI hosting platforms from distributing non-compliant systems, and require capture device manufacturers to embed latent disclosures by default, with civil penalties of $5,000 per violation.
Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the risk subdomain are explicitly described.
Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.
All other risk subdomains had no coverage in this document.
Risk Coverage Summary
The document has good coverage of approximately 4-5 subdomains, with strong focus on misinformation (3.1, 3.2), malicious actors (4.1, 4.3), and system transparency (7.4). Coverage is concentrated in content authenticity, provenance tracking, and disclosure mechanisms to combat deepfakes and synthetic media manipulation.
Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.
Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the sector are described.
All other sectors had no coverage in this document.
Sectors Summary
The document primarily governs the Information sector (social media platforms, file-sharing platforms, search engines, telecommunications-adjacent services) and Manufacturing sector (capture device manufacturers). It also has implications for Professional and Technical Services (GenAI system developers and hosting platforms).
Hard Law
Legislative Status Summary
This is a binding California state statute with mandatory obligations, civil penalties of $5,000 per violation, and enforcement by the Attorney General, city attorneys, or county counsel.
Proposer
Target
Enforcer
Monitor
Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems
AI Lifecycle Summary
The document primarily focuses on the Deploy and Operate and Monitor stages of the AI lifecycle, with requirements for provenance data disclosure, content authenticity verification, and post-deployment transparency mechanisms. It does not substantially address earlier stages like planning, data collection, or model development.
Terms relating to technical scope that are mentioned or implicitly referenced in the document
Technical Scope Summary
The document explicitly defines and covers generative AI systems and AI more broadly. It does not mention frontier AI, general purpose AI, task-specific AI, foundation models, predictive AI, open-weight models, or compute thresholds. The focus is on GenAI systems that generate synthetic content.
Document data from AGORA, CSET Emerging Technology Observatory.