California 20252026 Regular Session Status: Introduced 1 D cosponsors

SB 468 — High-risk artificial intelligence systems: duty to protect personal information.

Last action — Returned to Secretary of Senate pursuant to Joint Rule 56.

Track this bill free

No card. One bill, free forever — alerts when it moves.

  1. 1
    Introduced
  2. 2
    In Committee
  3. 3
    Passed Senate
  4. 4
    Passed Assembly
  5. 5
    To Executive
  6. 6
    Enacted

This bill has been introduced in the Senate. Introduced February 19, 2025. It must pass committee before a floor vote.

Next likely step: a committee referral and hearing.

Prognosis

Stalled 28% · moderate confidence

Where this bill stands today.

Odds of enactment

Low

How often bills like it became law.

  • Introduced

    Current position in the legislative process.

  • 1 sponsor

    1 primary, 0 co-sponsors signed on.

  • Single-party support

    Sponsorship is currently within one party (1 D).

  • Cleared a recorded vote

    Passed 2 recorded votes so far.

Prognosis reads this bill's own signals — stage, sponsorship breadth, committee status, recorded votes and cross-state momentum. Odds come from a model trained on which bills have become law.

Summary

Existing law, the California Consumer Privacy Act of 2018 (CCPA) , grants a consumer various rights with respect to personal information that is collected or sold by a business. The CCPA defines various terms for these purposes. The California Privacy Rights Act of 2020 (CPRA) , approved by the voters as Proposition 24 at the November 3, 2020, statewide general election, amended, added to, and reenacted the CCPA and establishes the California Privacy Protection Agency (agency) and vests the agency with full administrative power, authority, and jurisdiction to enforce the CCPA. Existing law requires, on or before January 1, 2026, and before each time thereafter that a generative artificial intelligence system or service, as defined, or a substantial modification to a generative artificial intelligence system or service, released on or after January 1, 2022, is made available to Californians for use, regardless of whether the terms of that use include compensation, a developer of the system or service to post on the developer's internet website documentation, as specified, regarding the data used to train the generative artificial intelligence system or service. This bill would impose a duty on a covered deployer, defined as a business that deploys a high-risk artificial intelligence system that processes personal information, to protect personal information held by the covered deployer, subject to certain requirements. In this regard, the bill would require a covered deployer whose high-risk artificial intelligence systems process personal information to develop, implement, and maintain a comprehensive information security program, as specified, that contains administrative, technical, and physical safeguards that are appropriate for, among other things, the covered deployer's size, scope, and type of business. The bill would require the program described above to meet specified requirements, including, among other things, that the program incorporates safeguards that are consistent with the safeguards for the protection of personal information and information of a similar character under applicable state or federal laws and regulations. Existing law, the Unfair Competition Law, establishes a statutory cause of action for unfair competition, including any unlawful, unfair, or fraudulent business act or practice and unfair, deceptive, untrue, or misleading advertising, and establishes remedies and penalties in that regard, including injunctive relief and civil penalties. This bill would specify that a violation of the above-described provisions relating to the duty of a covered deployer to protect information, including the requirement that a covered deployer maintain the comprehensive information security program described above, constitute a deceptive trade act or practice under that law. Existing law, the Administrative Procedure Act, governs the procedure for the adoption, amendment, or repeal of regulations by state agencies and for the review of those regulatory actions by the Office of Administrative Law. This bill would authorize the agency to adopt regulations pursuant to the act to implement these provisions, and would exempt, notwithstanding that provision, any regulations adopted by the agency to establish fees from the act. The bill would define various terms for these purposes. The California Privacy Rights Act of 2020 authorizes the Legislature to amend the act to further the purposes and intent of the act by a majority vote of both houses of the Legislature, as specified. This bill would declare that its provisions further the purposes and intent of the California Privacy Rights Act of 2020.

Bill Text

What changed in the latest version

1 added · 1 removed

Plain-language change summary

The new version of Bill SB 468 adds some important text while removing outdated references. This change helps clarify the intent of the bill and makes it easier to understand. By updating the language, the bill ensures that it is relevant and effective in addressing current issues. Overall, these changes aim to improve the bill's impact on the community it serves.

→
Previous
Latest
Bill Number Bill Keyword Home Bill Information California Law Publications Other Resources My Subscriptions My Favorites Bill Information >> Bill Search >> Text Bill TextBill Information PDF2 Bill PDF |Add To My Favorites |Track Bill | Version:
Bill Number Bill Keyword Home Bill Information California Law Publications Other Resources My Subscriptions My Favorites Bill Information >> Bill Search >> Text Bill Text PDF2 Bill PDF |Add To My Favorites |Track Bill | Version:
⬇ Download PDF
View plain text versions (2)

Action History

  1. Returned to Secretary of Senate pursuant to Joint Rule 56.

  2. May 23 hearing: Held in committee and under submission.

  3. Set for hearing May 23.

  4. May 5 hearing: Placed on APPR. suspense file.

  5. Set for hearing May 5.

  6. From committee: Do pass and re-refer to Com. on APPR. (Ayes 11. Noes 0. Page 835.) (April 22). Re-referred to Com. on APPR.

  7. Set for hearing April 22.

  8. Referred to Com. on JUD.

  9. From printer. May be acted upon on or after March 22.

  10. Introduced. Read first time. To Com. on RLS. for assignment. To print.

Sponsors

Sponsorship breakdown

Export CSV (upgrade) →

1 sponsors · 0 co-sponsors · 121 not signed on

Sponsors (1)

Co-sponsors (0)

None.

Not signed on (121)

121 members have not signed on to this bill.

Show all 121 →

"Not signed on" means a member has not sponsored or co-sponsored this bill — it does not imply opposition. Members flagged Voted No have a recorded No vote on this bill.

Whip count is in markup. Polling the chamber and every recorded vote this session. Only the first open is slow. It’s instant for you after this. Calling the roll · Tallying · Engrossing

Votes

Do pass, but first be re-referred to the Committee on [Appropriations]

Passed 11 Yea · 0 Nay · 2 Other
Party YeaNayPresentNot Voting
Democratic 11000
Republican 0002
Total 11002
% of votes cast 85%0%0%15%
How each member voted (13)
Member Party Vote
Allen, Benjamin Democratic Yea
Arreguín, Jesse Democratic Yea
Ashby, Angelique V. Democratic Yea
Caballero, Anna M. Democratic Yea
Durazo, Maria Elena Democratic Yea
Laird, John Democratic Yea
Stern, Henry I. Democratic Yea
Umberg, Thomas J. Democratic Yea
Wahab, Aisha Democratic Yea
Weber Pierson, M.D., Akilah Democratic Yea
Wiener, Scott D. Democratic Yea
Niello, Roger W. Republican Not Voting
Valladares, Suzette Martinez Republican Not Voting

Official roll call →

Subjects

civil-rights technology
Cross-referencing the record. Reading this bill against every other bill in the corpus by meaning, not keywords. Only the first open is slow. It’s instant for you after this. Matching · Ranking · Engrossing

Frequently asked questions

What does SB 468 do?
Existing law, the California Consumer Privacy Act of 2018 (CCPA) , grants a consumer various rights with respect to personal information that is collected or sold by a business. The CCPA defines various terms for these purposes. The California Privacy Rights Act of 2020 (CPRA) , approved by the voters as Proposition 24 at the November 3, 2020, statewide general election, amended, added to, and reenacted the CCPA and establishes the California Privacy Protection Agency (agency) and vests the agency with full administrative power, authority, and jurisdiction to enforce the CCPA. Existing law requires, on or before January 1, 2026, and before each time thereafter that a generative artificial intelligence system or service, as defined, or a substantial modification to a generative artificial intelligence system or service, released on or after January 1, 2022, is made available to Californians for use, regardless of whether the terms of that use include compensation, a developer of the system or service to post on the developer's internet website documentation, as specified, regarding the data used to train the generative artificial intelligence system or service. This bill would impose a duty on a covered deployer, defined as a business that deploys a high-risk artificial intelligence system that processes personal information, to protect personal information held by the covered deployer, subject to certain requirements. In this regard, the bill would require a covered deployer whose high-risk artificial intelligence systems process personal information to develop, implement, and maintain a comprehensive information security program, as specified, that contains administrative, technical, and physical safeguards that are appropriate for, among other things, the covered deployer's size, scope, and type of business. The bill would require the program described above to meet specified requirements, including, among other things, that the program incorporates safeguards that are consistent with the safeguards for the protection of personal information and information of a similar character under applicable state or federal laws and regulations. Existing law, the Unfair Competition Law, establishes a statutory cause of action for unfair competition, including any unlawful, unfair, or fraudulent business act or practice and unfair, deceptive, untrue, or misleading advertising, and establishes remedies and penalties in that regard, including injunctive relief and civil penalties. This bill would specify that a violation of the above-described provisions relating to the duty of a covered deployer to protect information, including the requirement that a covered deployer maintain the comprehensive information security program described above, constitute a deceptive trade act or practice under that law. Existing law, the Administrative Procedure Act, governs the procedure for the adoption, amendment, or repeal of regulations by state agencies and for the review of those regulatory actions by the Office of Administrative Law. This bill would authorize the agency to adopt regulations pursuant to the act to implement these provisions, and would exempt, notwithstanding that provision, any regulations adopted by the agency to establish fees from the act. The bill would define various terms for these purposes. The California Privacy Rights Act of 2020 authorizes the Legislature to amend the act to further the purposes and intent of the act by a majority vote of both houses of the Legislature, as specified. This bill would declare that its provisions further the purposes and intent of the California Privacy Rights Act of 2020.
Who sponsors SB 468?
SB 468 is sponsored by Becker, Josh (Democratic).
What is the current status of SB 468?
This bill has been introduced in the Senate. Introduced February 19, 2025. It must pass committee before a floor vote.
Where can I track SB 468?
Track SB 468 free on One Click Politics — get push/email alerts when it moves.

Make your voice heard on SB 468

Find the representatives who decide this bill and tell them where you stand — for yourself, or mobilize your whole list in one click with One Click Politics advocacy software.

Find my representatives → Run a campaign

Stay ahead of SB 468

Last checked for changes 3 months ago · updated continuously

One Click Politics tracks every bill in Congress and all 50 states.

Track this bill →