California CCPA regulations: automated decisions and privacy risk assessments
- United States
- Privacy
- Automated decisions
- Employment
- Healthcare
- Financial Services
United States, California · Law or regulation · Partly applicable
The final regulations address privacy risk assessments and automated decisionmaking technology (ADMT). ADMT includes technology that replaces or substantially replaces human decision-making. Significant decisions can include healthcare, employment, housing, education, and financial services. Coverage and exemptions must be assessed separately. Next key date: January 1, 2027 (ADMT-specific compliance begins). Last verified October 29, 2026.
