CCPA/CPRA § 7220

Pre-use Notice Requirements

The Privisy audit tests this section. See the checks

Source
Regulation
In force from
January 1, 2026
Last reviewed
September 2026
Framework
CCPA/CPRA

What it requires

Before using ADMT for a significant decision, businesses must provide consumers with a Pre-use Notice informing them about the business's use of ADMT and consumers' rights to opt-out of ADMT and to access ADMT. Section 7200(b) phases this in: a business that uses ADMT for a significant decision before January 1, 2027, including a use first deployed during 2026, must have its Pre-use Notice in place no later than January 1, 2027. A business that begins such use on or after that date must present the notice at or before the point it collects the personal information it plans to process with ADMT, or, for personal information already collected for a different purpose, before processing it with ADMT (§ 7220(b)(2)).

Regulation text

A business that uses ADMT as set forth in section 7200, subsection (a), must provide consumers with a Pre-use Notice. The Pre-use Notice must inform consumers about the business's use of ADMT and consumers' rights to opt-out of ADMT and to access ADMT, as set forth in this section.

California Consumer Privacy Act / California Privacy Rights Act, § 7220Read the full section from California Privacy Protection Agency (CalPrivacy)

How Privisy tests it

  • ADMT: Logic and Significance

    Pre-use Notice must describe how ADMT processes PI (§ 7220(c)(5)(A))

  • ADMT: Business Purpose

    Plain-language purpose statement (§ 7220(c)(1))

  • ADMT: Input Data Categories

    Categories of PI affecting the output (§ 7220(c)(5)(A))

  • ADMT: Right to Human Review

    Human-appeal disclosure (§ 7220(c)(2)(A); exception defined in § 7221(b)(1))

  • ADMT: Output Type

    Output type and how it is used in the decision (§ 7220(c)(5)(B))

The audit runs these checks against your live site and shows the evidence behind every result.

Get Your Audit

This page is for information only and is not legal advice. The excerpt is reproduced from official public sources and was checked against them on the last-reviewed date above. Laws change: check the authoritative source and consult a licensed attorney for compliance guidance.

See what your site actually does under these rules.

The Privisy audit runs 56 checks on your live site and cites the section behind every finding.

Get Your Audit