California AB 682 (Health Care Coverage Reporting 2025)

• Authority: California
• Parent authority: State governments
• Jurisdiction: United States
• Collections: U.S. state and local documents
• Most recent activity: Defunct
• Most recent activity date: 2026-01-22

Risk subdomain coverage

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.

• Lack of transparency or interpretability

All other risk subdomains had no coverage in this document.

Risk Coverage Summary

The document has minimal coverage of AI risk domains, focusing primarily on transparency and reporting requirements rather than addressing specific AI risks. The only substantive coverage relates to lack of transparency (7.4) through mandatory reporting of AI use in claims processing. Other risk domains are not meaningfully addressed.

Sector coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.

• Finance & Insurance
• Health Care & Social Assistance

All other sectors had no coverage in this document.

Sectors Summary

This document exclusively governs the Health Care and Social Assistance sector, specifically targeting health care service plans and health insurers. It mandates detailed reporting on AI use in claims processing and prior authorization within healthcare coverage operations.

Legislative Status

Hard Law

Legislative Status Summary

This is a binding California state statute enacted by the legislature with mandatory reporting requirements, regulatory enforcement authority, and administrative penalties for non-compliance.

Actors

Proposer

• Entity Types: AI_Governance_Actor
• Summary: The document is a California state statute enacted by the legislature, as indicated by the opening phrase 'THE PEOPLE OF THE STATE OF CALIFORNIA DO ENACT AS FOLLOWS'.

Target

• Entity Types: AI_Deployer
• Summary: The statute explicitly targets health care service plans and health insurers that use AI in claims processing and prior authorization, requiring them to report on AI use in their operations.

Enforcer

• Entity Types: AI_Governance_Actor
• Summary: The statute grants enforcement authority to the director for health care service plans and the commissioner for health insurers, including powers to reject reports, assess penalties, and make rules.

Monitor

• Entity Types: AI_Governance_Actor
• Summary: The departments are responsible for receiving, reviewing, and publicly posting the reported data on their websites, providing ongoing monitoring and transparency.

AI Lifecycle Stages

Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems

• Operate and Monitor

AI Lifecycle Summary

The document focuses exclusively on the Operate and Monitor lifecycle stage, requiring reporting on AI systems already deployed in healthcare claims processing. It does not address earlier stages like planning, data collection, model building, or validation.

Technical Scope

Terms relating to technical scope that are mentioned or implicitly referenced in the document

• Predictive AI

Technical Scope Summary

The document mentions artificial intelligence in the context of claims processing but does not provide detailed definitions or distinguish between different types of AI systems. It references AI broadly alongside 'other predictive algorithms' without specifying models, systems, or technical characteristics.