Regulon — CA-SB-896 · CA SB 896 (GenAI Accountability Act)

Summary

Imposes obligations on California state agencies and departments that use generative AI to communicate directly with persons regarding government services and benefits, requiring a disclaimer that the communication was generated by GenAI and information on how to contact a human employee. Requires the Department of Technology to update the Executive Order N-12-23 report as needed, and requires the Office of Emergency Services to perform a risk analysis of GenAI threats to critical infrastructure with annual summary reporting to the Legislature. The law contains no enforcement mechanism, private right of action, or penalty provision — compliance is expected through internal government accountability. Applies exclusively to state government entities, not private-sector actors.

Enforcement & Penalties

Enforcement Authority

No private right of action. No specific enforcement mechanism or penalty provision is included in the statute. Obligations are imposed on state agencies and departments; compliance is expected through internal government accountability and executive oversight. The Office of Emergency Services, Department of Technology, Government Operations Agency, Office of Data and Innovation, and Department of Human Resources have operational roles but are not granted enforcement authority over other agencies.

Penalties

No penalties, damages, or remedies are specified in the statute.

Who Is Covered

Compliance Obligations 6 obligations · click obligation ID to open requirement page

T-01 AI Identity Disclosure · T-01.1 · Government · Government System

Gov. Code § 11549.66(a)(1)-(4)

Plain Language

Any California state agency or department that uses generative AI to communicate directly with individuals about government services and benefits must include a disclaimer indicating the communication was generated by GenAI. The disclaimer format varies by medium: for written letters and emails, it must appear prominently at the start; for continuous online interactions like chatbots, it must be displayed throughout; for audio, it must be stated verbally at the start and end; and for video, it must be displayed throughout. This is an unconditional disclosure — there is no 'reasonable person' trigger. It applies only to state government entities, not private-sector operators.

Statutory Text

A state agency or department that utilizes GenAI to directly communicate with a person regarding government services and benefits shall ensure that those communications include both of the following: (a) A disclaimer that indicates to the person that the communication was generated by GenAI. (1) For written communications involving physical and digital media, including letters, email, and other occasional messages, the disclaimer shall appear prominently at the start of each communication. (2) For written communications involving continuous online interactions, including interactions with chatbots, the disclaimer shall be prominently displayed throughout the interaction. (3) For audio communications, the disclaimer shall be provided verbally at the start and end of the interaction. (4) For video communications, the disclaimer shall be prominently displayed throughout the interaction.

Other · Government · Government System

Gov. Code § 11549.66(b)

Plain Language

When a state agency or department uses GenAI to communicate with a person about government services or benefits, the communication must include either direct contact information or a link to a webpage explaining how the person can reach a human employee of that agency. This ensures recipients of AI-generated government communications always have a path to a real person. This obligation operates alongside the GenAI disclaimer requirement in § 11549.66(a) — both must be included in every qualifying communication.

Statutory Text

(b) Information, or a link to an internet website containing information, describing how the person may contact a human employee of the state agency or department.

Other · Government · Government System

Gov. Code § 11549.65(a)

Plain Language

The Department of Technology, guided by the Government Operations Agency, Office of Data and Innovation, and Department of Human Resources, must update the Executive Order N-12-23 report to the Governor as needed to reflect significant developments in GenAI. The agencies should consult with academia, industry experts, and state employee representative organizations. This is an internal government strategic planning obligation, not a compliance requirement applicable to private entities or to government AI systems in deployment.

Statutory Text

(a) The Department of Technology, under the guidance of the Government Operations Agency, the Office of Data and Innovation, and the Department of Human Resources, shall update the report, as needed, to respond to significant developments and shall, as appropriate, consult with academia, industry experts, and organizations that represent state exclusive employee representatives.

Other · Government · Government System

Gov. Code § 11549.65(b)(1)-(3)

Plain Language

The Office of Emergency Services must perform a risk analysis of GenAI-related threats to California's critical infrastructure, including mass casualty scenarios. The full analysis goes to the Governor and may include recommendations for private actions, administrative actions, and legislative collaboration. A high-level summary must be submitted annually to the Legislature. This is a government intelligence and threat-assessment function — it creates no compliance obligation for AI developers, deployers, or other private entities.

Statutory Text

(1) The Office of Emergency Services shall, as appropriate, perform a risk analysis of potential threats posed by the use of GenAI to California's critical infrastructure, including those that could lead to mass casualty events. (2) The analysis required by paragraph (1) shall be provided to the Governor, and, if appropriate, shall include recommendations reflecting changes to artificial intelligence technology, its applications, and risk management, including further private actions, administrative actions, and collaboration with the Legislature to guard against potential threats and vulnerabilities. (3) A high-level summary of the analysis required by paragraph (1) shall be submitted annually to the Legislature.

Other · Government System

Gov. Code § 11549.65(c)

Plain Language

State agencies and departments must consider opportunities to adopt GenAI where it could improve government operations, consistent with existing procurement policies. This is an aspirational directive to explore GenAI adoption — it does not impose specific procurement standards, documentation requirements, or compliance obligations. It creates no new actionable compliance obligation.

Statutory Text

(c) Any state agency or department shall consider procurement and enterprise use opportunities in which GenAI can improve the efficiency, effectiveness, accessibility, and equity of government operations consistent with the Government Operations Agency, the Department of General Services, and the Department of Technology's policies for public sector GenAI procurement.

Other · Government System

Gov. Code § 11549.65(d)

Plain Language

Legal counsel for state agencies must consider how GenAI may affect regulatory issues within their agency's jurisdiction and recommend updates as appropriate. This is an internal advisory directive — it requires agencies to be aware of GenAI's regulatory implications but does not create specific compliance obligations, reporting requirements, or enforcement mechanisms. It creates no new actionable compliance obligation for any entity.

Statutory Text

(d) Legal counsel for any state agency or department shall consider any potential impact of GenAI on regulatory issues under the respective agency's or department's authority and recommend necessary updates, if appropriate, as a result of this evolving technology.