When a Business’s Use of Automated Decisionmaking Technology is Subject to the Requirements of This Article

What it requires

Section 7200 defines when a business's use of ADMT is subject to Article 11 requirements. A business that uses ADMT to make a significant decision concerning a consumer must comply with the requirements of this Article. Subsection (b) sets the phase-in, and it is more generous than "comply on January 1, 2026". Every use of ADMT for a significant decision that begins before January 1, 2027, including a use first deployed during 2026, has until January 1, 2027 to be brought into compliance. Only a business that begins using ADMT for a significant decision on or after January 1, 2027 must be in compliance from the moment it starts.

Regulation text

A business that uses ADMT to make a significant decision concerning a consumer must comply with the requirements of this Article. [...] (b) A business that uses ADMT for a significant decision prior to January 1, 2027, must be in compliance with the requirements of this Article no later than January 1, 2027. A business that uses ADMT on or after January 1, 2027, must be in compliance with the requirements of this Article any time it is using ADMT for a significant decision.

California Consumer Privacy Act / California Privacy Rights Act, § 7200Read the full section from California Privacy Protection Agency (CalPrivacy)

How Privisy tests it