California AB 1008
| California AB 1008 | |
|---|---|
| Jurisdiction | California |
| Bill | AB 1008 |
| Session | 2023–2024 Regular Session |
| Enacted | September 28, 2024 |
| Effective | See compliance timeline |
| Status | In force / operative as specified |
| Codified | Civil Code Section 1798.140 |
| Subjects | California Consumer Privacy Act personal information and AI systems |
| Enforcement | Enforcement follows the CCPA enforcement structure, including the California Privacy Protection Agency and the Attorney General as applicable |
| Official source | Link |
California AB 1008 is a California artificial intelligence statute enacted in 2024 that amends the California Consumer Privacy Act definition of personal information to clarify that personal information can exist in various formats, including in relation to artificial intelligence systems.[1]
Background
[edit]California enacted a group of artificial intelligence laws in 2024 addressing generative AI transparency, digital replicas, election deepfakes, health care AI communications, privacy, and statutory AI definitions. California AB 1008 is part of that broader state-law package and addresses california consumer privacy act personal information and ai systems.
Legislative History
[edit]- Bill: AB 1008
- Session: 2023–2024 Regular Session
- Chapter: Chapter 802, Statutes of 2024
- Signed: September 28, 2024
- Codification: Civil Code Section 1798.140
- Official source: California Legislature bill page
Scope
[edit]Covered Entities
[edit]- Businesses and other entities subject to the California Consumer Privacy Act.
Covered Systems or Content
[edit]- Personal information in various formats, including contexts involving AI systems and related processing.
Exemptions
[edit]- Existing CCPA exemptions and statutory limitations remain relevant.
Key Requirements
[edit]- Personal information format: Clarifies that personal information can exist in various formats.
- CCPA integration: Amends the CCPA definitional section rather than creating a standalone AI regulatory regime.
- AI relevance: Supports application of California privacy obligations where personal information is used in or represented by AI systems.
Enforcement
[edit]Enforcement follows the CCPA enforcement structure, including the California Privacy Protection Agency and the Attorney General as applicable.
Compliance Timeline
[edit]- Signed: September 28, 2024
- Chaptered: Chapter 802, Statutes of 2024
- Effective: Governed by the chapter and CCPA effective-date rules.
Relationship to Other Law
[edit]AB 1008 is a privacy-law amendment rather than a standalone AI law; it links AI governance to California’s existing CCPA framework.
Litigation and Challenges
[edit]No major litigation or constitutional challenge has been identified as of May 9, 2026.
Practical Impact
[edit]The amendment matters for AI compliance because it reinforces that AI-related data formats do not escape California privacy obligations.
Criticism and Support
[edit]Public commentary generally framed the statute as part of California’s effort to regulate concrete AI harms while preserving innovation. Specific stakeholder positions should be tied to bill analyses, committee materials, or sourced public statements when expanded.
Current Status
[edit]As of May 9, 2026, the statute has been enacted. Operative obligations should be checked against the codified effective dates and any subsequent amendments, guidance, or litigation.
See Also
[edit]- United States State Legislation
- California AI Transparency Act
- Generative AI Transparency
- Deepfakes
- Automated Decision Systems