California Consumer Privacy Act Automated Decision-Making Technology Requirements Take Effect

Implementation Date: January 1, 2027

Beginning January 1, 2027, employers subject to the California Consumer Privacy Act (CCPA) that use automated decision-making technology (ADMT) to make significant employment-related decisions must begin complying with the amended privacy regulations. Employers utilizing ADMT for employment-related decisions must: 

  • Conduct a risk assessment before using ADMT to make a significant decision; 
  • Provide a pre-use notice to California residents; and  
  • Submit any risk assessments to the CCPA Agency by April 1 of the following year.  

Additional site updates are forthcoming.

11 CCR § 7120