On June 30, 2025, the California Civil Rights Council (CRC) secured final approval for regulations addressing employment discrimination resulting from the use of artificial intelligence and other algorithms it collectively refers to as Automated-Decision Systems. Shortly after that, on July 24, 2025, the California Privacy Protection Agency Board approved its own long-anticipated regulations on cybersecurity audits, privacy risk assessments and automated decision-making technology, also covering human resources applications, under the California Consumer Privacy Act (CCPA). The CRC regulations are effective October 1, 2025. The CCPA regulations are likely to also become effective on that date, but obligations will phase in over time. Read our latest insight on our website to learn how to prepare.
Disclaimer: While every effort has been made to ensure that the information contained in this article is accurate, neither its authors nor Squire Patton Boggs accepts responsibility for any errors or omissions. The content of this article is for general information only and is not intended to constitute or be relied upon as legal advice.