CALIFORNIA LEGISLATURE 20252026 REGULAR SESSION Assembly Bill No. 1405Introduced by Assembly Member Bauer-Kahan(Coauthor: Senator Wiener)February 21, 2025 An act to add Chapter 5.9.5 (commencing with Section 11549.80) to Part 1 of Division 3 of Title 2 of the Government Code, relating to artificial intelligence. LEGISLATIVE COUNSEL'S DIGESTAB 1405, as introduced, Bauer-Kahan. Artificial intelligence: auditors: enrollment.Existing law establishes the Department of Technology within the Government Operations Agency. Existing law requires the department to conduct, in coordination with other interagency bodies as it deems appropriate, a comprehensive inventory of all high-risk automated decision systems that have been proposed for use, development, or procurement by, or are being used, developed, or procured by, any state agency.Existing law defines automated decision system as a computational process derived from machine learning, statistical modeling, data analytics, or artificial intelligence that issues simplified output, including a score, classification, or recommendation, that is used to assist or replace human discretionary decisionmaking and materially impacts natural persons. Existing law defines artificial intelligence as an engineered or machine-based system that varies in its level of autonomy and that can, for explicit or implicit objectives, infer from the input it receives how to generate outputs that can influence physical or virtual environments.This bill would require the Government Operations Agency, by January 1, 2027, to establish a mechanism on the agencys internet website allowing AI auditors to enroll with the agency and allowing natural persons to report misconduct by an enrolled AI auditor. The bill would require the agency, commencing January 1, 2027, to publish information provided by an enrolled AI auditor on the agencys internet website and retain specified reports for as long as the auditor remains enrolled, plus 10 years.This bill would, commencing January 1, 2027, require an AI auditor, prior to initially conducting a covered audit, as defined, to enroll with the agency. The bill would require an AI auditor that enrolls with the agency to pay an enrollment fee, to be fixed by the agency by January 1, 2027, and provide specified information. The bill would impose various requirements on an AI auditor that conducts a covered audit, including, among other things, providing the auditee with an audit report after the covered audit.This bill would prohibit the AI auditor from accepting employment with an auditee within 12 months of completing a covered audit of the auditee, disclosing confidential information except under certain circumstances, and preventing an employee from engaging in, or retaliating against an employee who has engaged in, specified whistleblower activity.This bill would create the AI Auditors Enrollment Fund within the State Treasury, to be administered by the agency, and would require that all moneys collected or received by the agency pursuant to the above-described provisions be deposited into the fund to be available, upon appropriation by the Legislature, to administer the above-described provisions.Digest Key Vote: MAJORITY Appropriation: NO Fiscal Committee: YES Local Program: NO Bill TextThe people of the State of California do enact as follows:SECTION 1. Chapter 5.9.5 (commencing with Section 11549.80) is added to Part 1 of Division 3 of Title 2 of the Government Code, to read: CHAPTER 5.9.5. Artificial Intelligence Auditors11549.80. For purposes of this chapter, the following definitions apply:(a) Agency means the Government Operations Agency.(b) Artificial intelligence or AI means an engineered or machine-based system that varies in its level of autonomy and that can, for explicit or implicit objectives, infer from the input it receives how to generate outputs that can influence physical or virtual environments.(c) Artificial intelligence auditor or AI auditor means a person, partnership, or corporation that assesses an AI system or model on behalf of a third party.(d) Covered audit means an audit conducted pursuant to any state statute that requires an audit of an AI system or model by an independent third party auditor.11549.81. The AI Auditors Enrollment Fund is hereby created within the State Treasury. The fund shall be administered by the Government Operations Agency. All moneys collected or received by the agency under this chapter shall be deposited into the AI Auditors Enrollment Fund to be available for expenditure by the agency, upon appropriation by the Legislature, to administer this chapter.11549.82. (a) By January 1, 2027, the agency shall do all of the following:(1) Establish a mechanism on the agencys internet website allowing AI auditors to enroll with the agency pursuant to paragraph (1) of subdivision (a) of Section 11549.83.(2) Fix enrollment fees at an amount not exceeding the reasonable costs of administering this chapter.(3) Establish a mechanism on the agencys internet website allowing natural persons to report misconduct by an enrolled AI auditor.(b) Beginning January 1, 2027, the agency shall do both of the following:(1) Publish any information provided by an enrolled AI auditor pursuant to subdivision (a) of Section 11549.83 in a publicly accessible format on the agencys internet website.(2) Retain any report submitted using the mechanism established pursuant to paragraph (3) of subdivision (a) pertaining to an enrolled AI auditor for as long as the auditor remains enrolled, plus 10 years.11549.83. (a) Beginning January 1, 2027, prior to initially conducting a covered audit, an AI auditor shall do all of the following:(1) Enroll with the agency using the mechanism established pursuant to paragraph (1) of subdivision (a) of Section 11549.82.(2) Pay to the agency the enrollment fee set forth in paragraph (2) of subdivision (a) of Section 11549.82.(3) Provide to the agency all of the following information:(A) The name of the auditor.(B) All of the following contact information:(i) The primary physical address of the auditor, if the auditor has a physical address.(ii) The primary internet website of the auditor, if the auditor has an internet website.(iii) A telephone number enabling a natural person to communicate with the auditor.(iv) An email address enabling a natural person to communicate with the auditor.(C) The types of AI systems or models that the auditor is qualified to audit.(D) Any relevant qualifications, certifications, or accreditations the auditor wishes to provide.(E) A written description of the auditor and the services they provide, not to exceed 200 words in length.(F) A standard operating procedure (SOP) that describes the auditors procedures in sufficient detail to enable a third party to assess whether audits are conducted according to generally accepted industry best practices.(b) In conducting a covered audit, an enrolled AI auditor shall abide by generally accepted industry best practices appropriate to the system or model being audited.11549.84. (a) After conducting a covered audit, an enrolled AI auditor shall provide the auditee with an audit report that contains, but is not limited to, all of the following:(1) The results of the audit.(2) An explanation of any steps the auditee can take to meet generally accepted industry standards appropriate to the system or model being audited.(3) An explanation of any steps the auditee can take to become compliant with state law.(b) An AI auditor shall not knowingly make a material misrepresentation in an audit report prepared pursuant to this subdivision.(c) An enrolled AI auditor shall retain any documentation provided to an auditee pursuant to this chapter for at least 10 years.(d) An enrolled AI auditor shall not conduct a covered audit if it has a financial interest in the auditee other than a financial interest that is necessary for the performance of the audit.(e) Notwithstanding Chapter 1 (commencing with Section 16600) of Part 2 of Division 7 of the Business and Professions Code, an enrolled AI auditor shall not accept employment with an auditee within 12 months of completing a covered audit of the auditee.11549.85. (a) An enrolled AI auditor may disclose confidential information concerning an auditee only if the auditee provides written authorization or if the disclosure is any of the following:(1) Made in compliance with a subpoena or a summons enforceable by order of a court.(2) Reasonably necessary to maintain or defend the auditor in a legal proceeding initiated by the auditee.(3) Made in response to an official inquiry from a federal or state government regulatory agency.(4) Made to another enrolled AI auditor or person in connection with a proposed sale or merger of the auditors professional practice, provided the parties enter into a written nondisclosure agreement with regard to all auditee information shared between the parties.(5) Made to either of the following:(A) Another enrolled AI auditor to the extent necessary for purposes of professional consultation.(B) Organizations that provide professional standards review and ethics or quality control peer review.(6) Specifically permitted by state or federal law.(b) An enrolled AI auditor shall not do either of the following:(1) Prevent an employee from disclosing information to the Attorney General or the Labor Commissioner, or using the mechanism established pursuant to paragraph (3) of subdivision (a) of Section 11549.82, including through terms and conditions of employment or seeking to enforce terms and conditions of employment, if the employee has reasonable cause to believe the information indicates that the auditor is out of compliance with the requirements of this chapter.(2) Retaliate against an employee for disclosing information pursuant to paragraph (1).
CALIFORNIA LEGISLATURE 20252026 REGULAR SESSION Assembly Bill No. 1405Introduced by Assembly Member Bauer-Kahan(Coauthor: Senator Wiener)February 21, 2025 An act to add Chapter 5.9.5 (commencing with Section 11549.80) to Part 1 of Division 3 of Title 2 of the Government Code, relating to artificial intelligence. LEGISLATIVE COUNSEL'S DIGESTAB 1405, as introduced, Bauer-Kahan. Artificial intelligence: auditors: enrollment.Existing law establishes the Department of Technology within the Government Operations Agency. Existing law requires the department to conduct, in coordination with other interagency bodies as it deems appropriate, a comprehensive inventory of all high-risk automated decision systems that have been proposed for use, development, or procurement by, or are being used, developed, or procured by, any state agency.Existing law defines automated decision system as a computational process derived from machine learning, statistical modeling, data analytics, or artificial intelligence that issues simplified output, including a score, classification, or recommendation, that is used to assist or replace human discretionary decisionmaking and materially impacts natural persons. Existing law defines artificial intelligence as an engineered or machine-based system that varies in its level of autonomy and that can, for explicit or implicit objectives, infer from the input it receives how to generate outputs that can influence physical or virtual environments.This bill would require the Government Operations Agency, by January 1, 2027, to establish a mechanism on the agencys internet website allowing AI auditors to enroll with the agency and allowing natural persons to report misconduct by an enrolled AI auditor. The bill would require the agency, commencing January 1, 2027, to publish information provided by an enrolled AI auditor on the agencys internet website and retain specified reports for as long as the auditor remains enrolled, plus 10 years.This bill would, commencing January 1, 2027, require an AI auditor, prior to initially conducting a covered audit, as defined, to enroll with the agency. The bill would require an AI auditor that enrolls with the agency to pay an enrollment fee, to be fixed by the agency by January 1, 2027, and provide specified information. The bill would impose various requirements on an AI auditor that conducts a covered audit, including, among other things, providing the auditee with an audit report after the covered audit.This bill would prohibit the AI auditor from accepting employment with an auditee within 12 months of completing a covered audit of the auditee, disclosing confidential information except under certain circumstances, and preventing an employee from engaging in, or retaliating against an employee who has engaged in, specified whistleblower activity.This bill would create the AI Auditors Enrollment Fund within the State Treasury, to be administered by the agency, and would require that all moneys collected or received by the agency pursuant to the above-described provisions be deposited into the fund to be available, upon appropriation by the Legislature, to administer the above-described provisions.Digest Key Vote: MAJORITY Appropriation: NO Fiscal Committee: YES Local Program: NO
CALIFORNIA LEGISLATURE 20252026 REGULAR SESSION
Assembly Bill
No. 1405
Introduced by Assembly Member Bauer-Kahan(Coauthor: Senator Wiener)February 21, 2025
Introduced by Assembly Member Bauer-Kahan(Coauthor: Senator Wiener)
February 21, 2025
An act to add Chapter 5.9.5 (commencing with Section 11549.80) to Part 1 of Division 3 of Title 2 of the Government Code, relating to artificial intelligence.
LEGISLATIVE COUNSEL'S DIGEST
## LEGISLATIVE COUNSEL'S DIGEST
AB 1405, as introduced, Bauer-Kahan. Artificial intelligence: auditors: enrollment.
Existing law establishes the Department of Technology within the Government Operations Agency. Existing law requires the department to conduct, in coordination with other interagency bodies as it deems appropriate, a comprehensive inventory of all high-risk automated decision systems that have been proposed for use, development, or procurement by, or are being used, developed, or procured by, any state agency.Existing law defines automated decision system as a computational process derived from machine learning, statistical modeling, data analytics, or artificial intelligence that issues simplified output, including a score, classification, or recommendation, that is used to assist or replace human discretionary decisionmaking and materially impacts natural persons. Existing law defines artificial intelligence as an engineered or machine-based system that varies in its level of autonomy and that can, for explicit or implicit objectives, infer from the input it receives how to generate outputs that can influence physical or virtual environments.This bill would require the Government Operations Agency, by January 1, 2027, to establish a mechanism on the agencys internet website allowing AI auditors to enroll with the agency and allowing natural persons to report misconduct by an enrolled AI auditor. The bill would require the agency, commencing January 1, 2027, to publish information provided by an enrolled AI auditor on the agencys internet website and retain specified reports for as long as the auditor remains enrolled, plus 10 years.This bill would, commencing January 1, 2027, require an AI auditor, prior to initially conducting a covered audit, as defined, to enroll with the agency. The bill would require an AI auditor that enrolls with the agency to pay an enrollment fee, to be fixed by the agency by January 1, 2027, and provide specified information. The bill would impose various requirements on an AI auditor that conducts a covered audit, including, among other things, providing the auditee with an audit report after the covered audit.This bill would prohibit the AI auditor from accepting employment with an auditee within 12 months of completing a covered audit of the auditee, disclosing confidential information except under certain circumstances, and preventing an employee from engaging in, or retaliating against an employee who has engaged in, specified whistleblower activity.This bill would create the AI Auditors Enrollment Fund within the State Treasury, to be administered by the agency, and would require that all moneys collected or received by the agency pursuant to the above-described provisions be deposited into the fund to be available, upon appropriation by the Legislature, to administer the above-described provisions.
Existing law establishes the Department of Technology within the Government Operations Agency. Existing law requires the department to conduct, in coordination with other interagency bodies as it deems appropriate, a comprehensive inventory of all high-risk automated decision systems that have been proposed for use, development, or procurement by, or are being used, developed, or procured by, any state agency.
Existing law defines automated decision system as a computational process derived from machine learning, statistical modeling, data analytics, or artificial intelligence that issues simplified output, including a score, classification, or recommendation, that is used to assist or replace human discretionary decisionmaking and materially impacts natural persons. Existing law defines artificial intelligence as an engineered or machine-based system that varies in its level of autonomy and that can, for explicit or implicit objectives, infer from the input it receives how to generate outputs that can influence physical or virtual environments.
This bill would require the Government Operations Agency, by January 1, 2027, to establish a mechanism on the agencys internet website allowing AI auditors to enroll with the agency and allowing natural persons to report misconduct by an enrolled AI auditor. The bill would require the agency, commencing January 1, 2027, to publish information provided by an enrolled AI auditor on the agencys internet website and retain specified reports for as long as the auditor remains enrolled, plus 10 years.
This bill would, commencing January 1, 2027, require an AI auditor, prior to initially conducting a covered audit, as defined, to enroll with the agency. The bill would require an AI auditor that enrolls with the agency to pay an enrollment fee, to be fixed by the agency by January 1, 2027, and provide specified information. The bill would impose various requirements on an AI auditor that conducts a covered audit, including, among other things, providing the auditee with an audit report after the covered audit.
This bill would prohibit the AI auditor from accepting employment with an auditee within 12 months of completing a covered audit of the auditee, disclosing confidential information except under certain circumstances, and preventing an employee from engaging in, or retaliating against an employee who has engaged in, specified whistleblower activity.
This bill would create the AI Auditors Enrollment Fund within the State Treasury, to be administered by the agency, and would require that all moneys collected or received by the agency pursuant to the above-described provisions be deposited into the fund to be available, upon appropriation by the Legislature, to administer the above-described provisions.
## Digest Key
## Bill Text
The people of the State of California do enact as follows:SECTION 1. Chapter 5.9.5 (commencing with Section 11549.80) is added to Part 1 of Division 3 of Title 2 of the Government Code, to read: CHAPTER 5.9.5. Artificial Intelligence Auditors11549.80. For purposes of this chapter, the following definitions apply:(a) Agency means the Government Operations Agency.(b) Artificial intelligence or AI means an engineered or machine-based system that varies in its level of autonomy and that can, for explicit or implicit objectives, infer from the input it receives how to generate outputs that can influence physical or virtual environments.(c) Artificial intelligence auditor or AI auditor means a person, partnership, or corporation that assesses an AI system or model on behalf of a third party.(d) Covered audit means an audit conducted pursuant to any state statute that requires an audit of an AI system or model by an independent third party auditor.11549.81. The AI Auditors Enrollment Fund is hereby created within the State Treasury. The fund shall be administered by the Government Operations Agency. All moneys collected or received by the agency under this chapter shall be deposited into the AI Auditors Enrollment Fund to be available for expenditure by the agency, upon appropriation by the Legislature, to administer this chapter.11549.82. (a) By January 1, 2027, the agency shall do all of the following:(1) Establish a mechanism on the agencys internet website allowing AI auditors to enroll with the agency pursuant to paragraph (1) of subdivision (a) of Section 11549.83.(2) Fix enrollment fees at an amount not exceeding the reasonable costs of administering this chapter.(3) Establish a mechanism on the agencys internet website allowing natural persons to report misconduct by an enrolled AI auditor.(b) Beginning January 1, 2027, the agency shall do both of the following:(1) Publish any information provided by an enrolled AI auditor pursuant to subdivision (a) of Section 11549.83 in a publicly accessible format on the agencys internet website.(2) Retain any report submitted using the mechanism established pursuant to paragraph (3) of subdivision (a) pertaining to an enrolled AI auditor for as long as the auditor remains enrolled, plus 10 years.11549.83. (a) Beginning January 1, 2027, prior to initially conducting a covered audit, an AI auditor shall do all of the following:(1) Enroll with the agency using the mechanism established pursuant to paragraph (1) of subdivision (a) of Section 11549.82.(2) Pay to the agency the enrollment fee set forth in paragraph (2) of subdivision (a) of Section 11549.82.(3) Provide to the agency all of the following information:(A) The name of the auditor.(B) All of the following contact information:(i) The primary physical address of the auditor, if the auditor has a physical address.(ii) The primary internet website of the auditor, if the auditor has an internet website.(iii) A telephone number enabling a natural person to communicate with the auditor.(iv) An email address enabling a natural person to communicate with the auditor.(C) The types of AI systems or models that the auditor is qualified to audit.(D) Any relevant qualifications, certifications, or accreditations the auditor wishes to provide.(E) A written description of the auditor and the services they provide, not to exceed 200 words in length.(F) A standard operating procedure (SOP) that describes the auditors procedures in sufficient detail to enable a third party to assess whether audits are conducted according to generally accepted industry best practices.(b) In conducting a covered audit, an enrolled AI auditor shall abide by generally accepted industry best practices appropriate to the system or model being audited.11549.84. (a) After conducting a covered audit, an enrolled AI auditor shall provide the auditee with an audit report that contains, but is not limited to, all of the following:(1) The results of the audit.(2) An explanation of any steps the auditee can take to meet generally accepted industry standards appropriate to the system or model being audited.(3) An explanation of any steps the auditee can take to become compliant with state law.(b) An AI auditor shall not knowingly make a material misrepresentation in an audit report prepared pursuant to this subdivision.(c) An enrolled AI auditor shall retain any documentation provided to an auditee pursuant to this chapter for at least 10 years.(d) An enrolled AI auditor shall not conduct a covered audit if it has a financial interest in the auditee other than a financial interest that is necessary for the performance of the audit.(e) Notwithstanding Chapter 1 (commencing with Section 16600) of Part 2 of Division 7 of the Business and Professions Code, an enrolled AI auditor shall not accept employment with an auditee within 12 months of completing a covered audit of the auditee.11549.85. (a) An enrolled AI auditor may disclose confidential information concerning an auditee only if the auditee provides written authorization or if the disclosure is any of the following:(1) Made in compliance with a subpoena or a summons enforceable by order of a court.(2) Reasonably necessary to maintain or defend the auditor in a legal proceeding initiated by the auditee.(3) Made in response to an official inquiry from a federal or state government regulatory agency.(4) Made to another enrolled AI auditor or person in connection with a proposed sale or merger of the auditors professional practice, provided the parties enter into a written nondisclosure agreement with regard to all auditee information shared between the parties.(5) Made to either of the following:(A) Another enrolled AI auditor to the extent necessary for purposes of professional consultation.(B) Organizations that provide professional standards review and ethics or quality control peer review.(6) Specifically permitted by state or federal law.(b) An enrolled AI auditor shall not do either of the following:(1) Prevent an employee from disclosing information to the Attorney General or the Labor Commissioner, or using the mechanism established pursuant to paragraph (3) of subdivision (a) of Section 11549.82, including through terms and conditions of employment or seeking to enforce terms and conditions of employment, if the employee has reasonable cause to believe the information indicates that the auditor is out of compliance with the requirements of this chapter.(2) Retaliate against an employee for disclosing information pursuant to paragraph (1).
The people of the State of California do enact as follows:
## The people of the State of California do enact as follows:
SECTION 1. Chapter 5.9.5 (commencing with Section 11549.80) is added to Part 1 of Division 3 of Title 2 of the Government Code, to read: CHAPTER 5.9.5. Artificial Intelligence Auditors11549.80. For purposes of this chapter, the following definitions apply:(a) Agency means the Government Operations Agency.(b) Artificial intelligence or AI means an engineered or machine-based system that varies in its level of autonomy and that can, for explicit or implicit objectives, infer from the input it receives how to generate outputs that can influence physical or virtual environments.(c) Artificial intelligence auditor or AI auditor means a person, partnership, or corporation that assesses an AI system or model on behalf of a third party.(d) Covered audit means an audit conducted pursuant to any state statute that requires an audit of an AI system or model by an independent third party auditor.11549.81. The AI Auditors Enrollment Fund is hereby created within the State Treasury. The fund shall be administered by the Government Operations Agency. All moneys collected or received by the agency under this chapter shall be deposited into the AI Auditors Enrollment Fund to be available for expenditure by the agency, upon appropriation by the Legislature, to administer this chapter.11549.82. (a) By January 1, 2027, the agency shall do all of the following:(1) Establish a mechanism on the agencys internet website allowing AI auditors to enroll with the agency pursuant to paragraph (1) of subdivision (a) of Section 11549.83.(2) Fix enrollment fees at an amount not exceeding the reasonable costs of administering this chapter.(3) Establish a mechanism on the agencys internet website allowing natural persons to report misconduct by an enrolled AI auditor.(b) Beginning January 1, 2027, the agency shall do both of the following:(1) Publish any information provided by an enrolled AI auditor pursuant to subdivision (a) of Section 11549.83 in a publicly accessible format on the agencys internet website.(2) Retain any report submitted using the mechanism established pursuant to paragraph (3) of subdivision (a) pertaining to an enrolled AI auditor for as long as the auditor remains enrolled, plus 10 years.11549.83. (a) Beginning January 1, 2027, prior to initially conducting a covered audit, an AI auditor shall do all of the following:(1) Enroll with the agency using the mechanism established pursuant to paragraph (1) of subdivision (a) of Section 11549.82.(2) Pay to the agency the enrollment fee set forth in paragraph (2) of subdivision (a) of Section 11549.82.(3) Provide to the agency all of the following information:(A) The name of the auditor.(B) All of the following contact information:(i) The primary physical address of the auditor, if the auditor has a physical address.(ii) The primary internet website of the auditor, if the auditor has an internet website.(iii) A telephone number enabling a natural person to communicate with the auditor.(iv) An email address enabling a natural person to communicate with the auditor.(C) The types of AI systems or models that the auditor is qualified to audit.(D) Any relevant qualifications, certifications, or accreditations the auditor wishes to provide.(E) A written description of the auditor and the services they provide, not to exceed 200 words in length.(F) A standard operating procedure (SOP) that describes the auditors procedures in sufficient detail to enable a third party to assess whether audits are conducted according to generally accepted industry best practices.(b) In conducting a covered audit, an enrolled AI auditor shall abide by generally accepted industry best practices appropriate to the system or model being audited.11549.84. (a) After conducting a covered audit, an enrolled AI auditor shall provide the auditee with an audit report that contains, but is not limited to, all of the following:(1) The results of the audit.(2) An explanation of any steps the auditee can take to meet generally accepted industry standards appropriate to the system or model being audited.(3) An explanation of any steps the auditee can take to become compliant with state law.(b) An AI auditor shall not knowingly make a material misrepresentation in an audit report prepared pursuant to this subdivision.(c) An enrolled AI auditor shall retain any documentation provided to an auditee pursuant to this chapter for at least 10 years.(d) An enrolled AI auditor shall not conduct a covered audit if it has a financial interest in the auditee other than a financial interest that is necessary for the performance of the audit.(e) Notwithstanding Chapter 1 (commencing with Section 16600) of Part 2 of Division 7 of the Business and Professions Code, an enrolled AI auditor shall not accept employment with an auditee within 12 months of completing a covered audit of the auditee.11549.85. (a) An enrolled AI auditor may disclose confidential information concerning an auditee only if the auditee provides written authorization or if the disclosure is any of the following:(1) Made in compliance with a subpoena or a summons enforceable by order of a court.(2) Reasonably necessary to maintain or defend the auditor in a legal proceeding initiated by the auditee.(3) Made in response to an official inquiry from a federal or state government regulatory agency.(4) Made to another enrolled AI auditor or person in connection with a proposed sale or merger of the auditors professional practice, provided the parties enter into a written nondisclosure agreement with regard to all auditee information shared between the parties.(5) Made to either of the following:(A) Another enrolled AI auditor to the extent necessary for purposes of professional consultation.(B) Organizations that provide professional standards review and ethics or quality control peer review.(6) Specifically permitted by state or federal law.(b) An enrolled AI auditor shall not do either of the following:(1) Prevent an employee from disclosing information to the Attorney General or the Labor Commissioner, or using the mechanism established pursuant to paragraph (3) of subdivision (a) of Section 11549.82, including through terms and conditions of employment or seeking to enforce terms and conditions of employment, if the employee has reasonable cause to believe the information indicates that the auditor is out of compliance with the requirements of this chapter.(2) Retaliate against an employee for disclosing information pursuant to paragraph (1).
SECTION 1. Chapter 5.9.5 (commencing with Section 11549.80) is added to Part 1 of Division 3 of Title 2 of the Government Code, to read:
### SECTION 1.
CHAPTER 5.9.5. Artificial Intelligence Auditors11549.80. For purposes of this chapter, the following definitions apply:(a) Agency means the Government Operations Agency.(b) Artificial intelligence or AI means an engineered or machine-based system that varies in its level of autonomy and that can, for explicit or implicit objectives, infer from the input it receives how to generate outputs that can influence physical or virtual environments.(c) Artificial intelligence auditor or AI auditor means a person, partnership, or corporation that assesses an AI system or model on behalf of a third party.(d) Covered audit means an audit conducted pursuant to any state statute that requires an audit of an AI system or model by an independent third party auditor.11549.81. The AI Auditors Enrollment Fund is hereby created within the State Treasury. The fund shall be administered by the Government Operations Agency. All moneys collected or received by the agency under this chapter shall be deposited into the AI Auditors Enrollment Fund to be available for expenditure by the agency, upon appropriation by the Legislature, to administer this chapter.11549.82. (a) By January 1, 2027, the agency shall do all of the following:(1) Establish a mechanism on the agencys internet website allowing AI auditors to enroll with the agency pursuant to paragraph (1) of subdivision (a) of Section 11549.83.(2) Fix enrollment fees at an amount not exceeding the reasonable costs of administering this chapter.(3) Establish a mechanism on the agencys internet website allowing natural persons to report misconduct by an enrolled AI auditor.(b) Beginning January 1, 2027, the agency shall do both of the following:(1) Publish any information provided by an enrolled AI auditor pursuant to subdivision (a) of Section 11549.83 in a publicly accessible format on the agencys internet website.(2) Retain any report submitted using the mechanism established pursuant to paragraph (3) of subdivision (a) pertaining to an enrolled AI auditor for as long as the auditor remains enrolled, plus 10 years.11549.83. (a) Beginning January 1, 2027, prior to initially conducting a covered audit, an AI auditor shall do all of the following:(1) Enroll with the agency using the mechanism established pursuant to paragraph (1) of subdivision (a) of Section 11549.82.(2) Pay to the agency the enrollment fee set forth in paragraph (2) of subdivision (a) of Section 11549.82.(3) Provide to the agency all of the following information:(A) The name of the auditor.(B) All of the following contact information:(i) The primary physical address of the auditor, if the auditor has a physical address.(ii) The primary internet website of the auditor, if the auditor has an internet website.(iii) A telephone number enabling a natural person to communicate with the auditor.(iv) An email address enabling a natural person to communicate with the auditor.(C) The types of AI systems or models that the auditor is qualified to audit.(D) Any relevant qualifications, certifications, or accreditations the auditor wishes to provide.(E) A written description of the auditor and the services they provide, not to exceed 200 words in length.(F) A standard operating procedure (SOP) that describes the auditors procedures in sufficient detail to enable a third party to assess whether audits are conducted according to generally accepted industry best practices.(b) In conducting a covered audit, an enrolled AI auditor shall abide by generally accepted industry best practices appropriate to the system or model being audited.11549.84. (a) After conducting a covered audit, an enrolled AI auditor shall provide the auditee with an audit report that contains, but is not limited to, all of the following:(1) The results of the audit.(2) An explanation of any steps the auditee can take to meet generally accepted industry standards appropriate to the system or model being audited.(3) An explanation of any steps the auditee can take to become compliant with state law.(b) An AI auditor shall not knowingly make a material misrepresentation in an audit report prepared pursuant to this subdivision.(c) An enrolled AI auditor shall retain any documentation provided to an auditee pursuant to this chapter for at least 10 years.(d) An enrolled AI auditor shall not conduct a covered audit if it has a financial interest in the auditee other than a financial interest that is necessary for the performance of the audit.(e) Notwithstanding Chapter 1 (commencing with Section 16600) of Part 2 of Division 7 of the Business and Professions Code, an enrolled AI auditor shall not accept employment with an auditee within 12 months of completing a covered audit of the auditee.11549.85. (a) An enrolled AI auditor may disclose confidential information concerning an auditee only if the auditee provides written authorization or if the disclosure is any of the following:(1) Made in compliance with a subpoena or a summons enforceable by order of a court.(2) Reasonably necessary to maintain or defend the auditor in a legal proceeding initiated by the auditee.(3) Made in response to an official inquiry from a federal or state government regulatory agency.(4) Made to another enrolled AI auditor or person in connection with a proposed sale or merger of the auditors professional practice, provided the parties enter into a written nondisclosure agreement with regard to all auditee information shared between the parties.(5) Made to either of the following:(A) Another enrolled AI auditor to the extent necessary for purposes of professional consultation.(B) Organizations that provide professional standards review and ethics or quality control peer review.(6) Specifically permitted by state or federal law.(b) An enrolled AI auditor shall not do either of the following:(1) Prevent an employee from disclosing information to the Attorney General or the Labor Commissioner, or using the mechanism established pursuant to paragraph (3) of subdivision (a) of Section 11549.82, including through terms and conditions of employment or seeking to enforce terms and conditions of employment, if the employee has reasonable cause to believe the information indicates that the auditor is out of compliance with the requirements of this chapter.(2) Retaliate against an employee for disclosing information pursuant to paragraph (1).
CHAPTER 5.9.5. Artificial Intelligence Auditors11549.80. For purposes of this chapter, the following definitions apply:(a) Agency means the Government Operations Agency.(b) Artificial intelligence or AI means an engineered or machine-based system that varies in its level of autonomy and that can, for explicit or implicit objectives, infer from the input it receives how to generate outputs that can influence physical or virtual environments.(c) Artificial intelligence auditor or AI auditor means a person, partnership, or corporation that assesses an AI system or model on behalf of a third party.(d) Covered audit means an audit conducted pursuant to any state statute that requires an audit of an AI system or model by an independent third party auditor.11549.81. The AI Auditors Enrollment Fund is hereby created within the State Treasury. The fund shall be administered by the Government Operations Agency. All moneys collected or received by the agency under this chapter shall be deposited into the AI Auditors Enrollment Fund to be available for expenditure by the agency, upon appropriation by the Legislature, to administer this chapter.11549.82. (a) By January 1, 2027, the agency shall do all of the following:(1) Establish a mechanism on the agencys internet website allowing AI auditors to enroll with the agency pursuant to paragraph (1) of subdivision (a) of Section 11549.83.(2) Fix enrollment fees at an amount not exceeding the reasonable costs of administering this chapter.(3) Establish a mechanism on the agencys internet website allowing natural persons to report misconduct by an enrolled AI auditor.(b) Beginning January 1, 2027, the agency shall do both of the following:(1) Publish any information provided by an enrolled AI auditor pursuant to subdivision (a) of Section 11549.83 in a publicly accessible format on the agencys internet website.(2) Retain any report submitted using the mechanism established pursuant to paragraph (3) of subdivision (a) pertaining to an enrolled AI auditor for as long as the auditor remains enrolled, plus 10 years.11549.83. (a) Beginning January 1, 2027, prior to initially conducting a covered audit, an AI auditor shall do all of the following:(1) Enroll with the agency using the mechanism established pursuant to paragraph (1) of subdivision (a) of Section 11549.82.(2) Pay to the agency the enrollment fee set forth in paragraph (2) of subdivision (a) of Section 11549.82.(3) Provide to the agency all of the following information:(A) The name of the auditor.(B) All of the following contact information:(i) The primary physical address of the auditor, if the auditor has a physical address.(ii) The primary internet website of the auditor, if the auditor has an internet website.(iii) A telephone number enabling a natural person to communicate with the auditor.(iv) An email address enabling a natural person to communicate with the auditor.(C) The types of AI systems or models that the auditor is qualified to audit.(D) Any relevant qualifications, certifications, or accreditations the auditor wishes to provide.(E) A written description of the auditor and the services they provide, not to exceed 200 words in length.(F) A standard operating procedure (SOP) that describes the auditors procedures in sufficient detail to enable a third party to assess whether audits are conducted according to generally accepted industry best practices.(b) In conducting a covered audit, an enrolled AI auditor shall abide by generally accepted industry best practices appropriate to the system or model being audited.11549.84. (a) After conducting a covered audit, an enrolled AI auditor shall provide the auditee with an audit report that contains, but is not limited to, all of the following:(1) The results of the audit.(2) An explanation of any steps the auditee can take to meet generally accepted industry standards appropriate to the system or model being audited.(3) An explanation of any steps the auditee can take to become compliant with state law.(b) An AI auditor shall not knowingly make a material misrepresentation in an audit report prepared pursuant to this subdivision.(c) An enrolled AI auditor shall retain any documentation provided to an auditee pursuant to this chapter for at least 10 years.(d) An enrolled AI auditor shall not conduct a covered audit if it has a financial interest in the auditee other than a financial interest that is necessary for the performance of the audit.(e) Notwithstanding Chapter 1 (commencing with Section 16600) of Part 2 of Division 7 of the Business and Professions Code, an enrolled AI auditor shall not accept employment with an auditee within 12 months of completing a covered audit of the auditee.11549.85. (a) An enrolled AI auditor may disclose confidential information concerning an auditee only if the auditee provides written authorization or if the disclosure is any of the following:(1) Made in compliance with a subpoena or a summons enforceable by order of a court.(2) Reasonably necessary to maintain or defend the auditor in a legal proceeding initiated by the auditee.(3) Made in response to an official inquiry from a federal or state government regulatory agency.(4) Made to another enrolled AI auditor or person in connection with a proposed sale or merger of the auditors professional practice, provided the parties enter into a written nondisclosure agreement with regard to all auditee information shared between the parties.(5) Made to either of the following:(A) Another enrolled AI auditor to the extent necessary for purposes of professional consultation.(B) Organizations that provide professional standards review and ethics or quality control peer review.(6) Specifically permitted by state or federal law.(b) An enrolled AI auditor shall not do either of the following:(1) Prevent an employee from disclosing information to the Attorney General or the Labor Commissioner, or using the mechanism established pursuant to paragraph (3) of subdivision (a) of Section 11549.82, including through terms and conditions of employment or seeking to enforce terms and conditions of employment, if the employee has reasonable cause to believe the information indicates that the auditor is out of compliance with the requirements of this chapter.(2) Retaliate against an employee for disclosing information pursuant to paragraph (1).
CHAPTER 5.9.5. Artificial Intelligence Auditors
CHAPTER 5.9.5. Artificial Intelligence Auditors
11549.80. For purposes of this chapter, the following definitions apply:(a) Agency means the Government Operations Agency.(b) Artificial intelligence or AI means an engineered or machine-based system that varies in its level of autonomy and that can, for explicit or implicit objectives, infer from the input it receives how to generate outputs that can influence physical or virtual environments.(c) Artificial intelligence auditor or AI auditor means a person, partnership, or corporation that assesses an AI system or model on behalf of a third party.(d) Covered audit means an audit conducted pursuant to any state statute that requires an audit of an AI system or model by an independent third party auditor.
11549.80. For purposes of this chapter, the following definitions apply:
(a) Agency means the Government Operations Agency.
(b) Artificial intelligence or AI means an engineered or machine-based system that varies in its level of autonomy and that can, for explicit or implicit objectives, infer from the input it receives how to generate outputs that can influence physical or virtual environments.
(c) Artificial intelligence auditor or AI auditor means a person, partnership, or corporation that assesses an AI system or model on behalf of a third party.
(d) Covered audit means an audit conducted pursuant to any state statute that requires an audit of an AI system or model by an independent third party auditor.
11549.81. The AI Auditors Enrollment Fund is hereby created within the State Treasury. The fund shall be administered by the Government Operations Agency. All moneys collected or received by the agency under this chapter shall be deposited into the AI Auditors Enrollment Fund to be available for expenditure by the agency, upon appropriation by the Legislature, to administer this chapter.
11549.81. The AI Auditors Enrollment Fund is hereby created within the State Treasury. The fund shall be administered by the Government Operations Agency. All moneys collected or received by the agency under this chapter shall be deposited into the AI Auditors Enrollment Fund to be available for expenditure by the agency, upon appropriation by the Legislature, to administer this chapter.
11549.82. (a) By January 1, 2027, the agency shall do all of the following:(1) Establish a mechanism on the agencys internet website allowing AI auditors to enroll with the agency pursuant to paragraph (1) of subdivision (a) of Section 11549.83.(2) Fix enrollment fees at an amount not exceeding the reasonable costs of administering this chapter.(3) Establish a mechanism on the agencys internet website allowing natural persons to report misconduct by an enrolled AI auditor.(b) Beginning January 1, 2027, the agency shall do both of the following:(1) Publish any information provided by an enrolled AI auditor pursuant to subdivision (a) of Section 11549.83 in a publicly accessible format on the agencys internet website.(2) Retain any report submitted using the mechanism established pursuant to paragraph (3) of subdivision (a) pertaining to an enrolled AI auditor for as long as the auditor remains enrolled, plus 10 years.
11549.82. (a) By January 1, 2027, the agency shall do all of the following:
(1) Establish a mechanism on the agencys internet website allowing AI auditors to enroll with the agency pursuant to paragraph (1) of subdivision (a) of Section 11549.83.
(2) Fix enrollment fees at an amount not exceeding the reasonable costs of administering this chapter.
(3) Establish a mechanism on the agencys internet website allowing natural persons to report misconduct by an enrolled AI auditor.
(b) Beginning January 1, 2027, the agency shall do both of the following:
(1) Publish any information provided by an enrolled AI auditor pursuant to subdivision (a) of Section 11549.83 in a publicly accessible format on the agencys internet website.
(2) Retain any report submitted using the mechanism established pursuant to paragraph (3) of subdivision (a) pertaining to an enrolled AI auditor for as long as the auditor remains enrolled, plus 10 years.
11549.83. (a) Beginning January 1, 2027, prior to initially conducting a covered audit, an AI auditor shall do all of the following:(1) Enroll with the agency using the mechanism established pursuant to paragraph (1) of subdivision (a) of Section 11549.82.(2) Pay to the agency the enrollment fee set forth in paragraph (2) of subdivision (a) of Section 11549.82.(3) Provide to the agency all of the following information:(A) The name of the auditor.(B) All of the following contact information:(i) The primary physical address of the auditor, if the auditor has a physical address.(ii) The primary internet website of the auditor, if the auditor has an internet website.(iii) A telephone number enabling a natural person to communicate with the auditor.(iv) An email address enabling a natural person to communicate with the auditor.(C) The types of AI systems or models that the auditor is qualified to audit.(D) Any relevant qualifications, certifications, or accreditations the auditor wishes to provide.(E) A written description of the auditor and the services they provide, not to exceed 200 words in length.(F) A standard operating procedure (SOP) that describes the auditors procedures in sufficient detail to enable a third party to assess whether audits are conducted according to generally accepted industry best practices.(b) In conducting a covered audit, an enrolled AI auditor shall abide by generally accepted industry best practices appropriate to the system or model being audited.
11549.83. (a) Beginning January 1, 2027, prior to initially conducting a covered audit, an AI auditor shall do all of the following:
(1) Enroll with the agency using the mechanism established pursuant to paragraph (1) of subdivision (a) of Section 11549.82.
(2) Pay to the agency the enrollment fee set forth in paragraph (2) of subdivision (a) of Section 11549.82.
(3) Provide to the agency all of the following information:
(A) The name of the auditor.
(B) All of the following contact information:
(i) The primary physical address of the auditor, if the auditor has a physical address.
(ii) The primary internet website of the auditor, if the auditor has an internet website.
(iii) A telephone number enabling a natural person to communicate with the auditor.
(iv) An email address enabling a natural person to communicate with the auditor.
(C) The types of AI systems or models that the auditor is qualified to audit.
(D) Any relevant qualifications, certifications, or accreditations the auditor wishes to provide.
(E) A written description of the auditor and the services they provide, not to exceed 200 words in length.
(F) A standard operating procedure (SOP) that describes the auditors procedures in sufficient detail to enable a third party to assess whether audits are conducted according to generally accepted industry best practices.
(b) In conducting a covered audit, an enrolled AI auditor shall abide by generally accepted industry best practices appropriate to the system or model being audited.
11549.84. (a) After conducting a covered audit, an enrolled AI auditor shall provide the auditee with an audit report that contains, but is not limited to, all of the following:(1) The results of the audit.(2) An explanation of any steps the auditee can take to meet generally accepted industry standards appropriate to the system or model being audited.(3) An explanation of any steps the auditee can take to become compliant with state law.(b) An AI auditor shall not knowingly make a material misrepresentation in an audit report prepared pursuant to this subdivision.(c) An enrolled AI auditor shall retain any documentation provided to an auditee pursuant to this chapter for at least 10 years.(d) An enrolled AI auditor shall not conduct a covered audit if it has a financial interest in the auditee other than a financial interest that is necessary for the performance of the audit.(e) Notwithstanding Chapter 1 (commencing with Section 16600) of Part 2 of Division 7 of the Business and Professions Code, an enrolled AI auditor shall not accept employment with an auditee within 12 months of completing a covered audit of the auditee.
11549.84. (a) After conducting a covered audit, an enrolled AI auditor shall provide the auditee with an audit report that contains, but is not limited to, all of the following:
(1) The results of the audit.
(2) An explanation of any steps the auditee can take to meet generally accepted industry standards appropriate to the system or model being audited.
(3) An explanation of any steps the auditee can take to become compliant with state law.
(b) An AI auditor shall not knowingly make a material misrepresentation in an audit report prepared pursuant to this subdivision.
(c) An enrolled AI auditor shall retain any documentation provided to an auditee pursuant to this chapter for at least 10 years.
(d) An enrolled AI auditor shall not conduct a covered audit if it has a financial interest in the auditee other than a financial interest that is necessary for the performance of the audit.
(e) Notwithstanding Chapter 1 (commencing with Section 16600) of Part 2 of Division 7 of the Business and Professions Code, an enrolled AI auditor shall not accept employment with an auditee within 12 months of completing a covered audit of the auditee.
11549.85. (a) An enrolled AI auditor may disclose confidential information concerning an auditee only if the auditee provides written authorization or if the disclosure is any of the following:(1) Made in compliance with a subpoena or a summons enforceable by order of a court.(2) Reasonably necessary to maintain or defend the auditor in a legal proceeding initiated by the auditee.(3) Made in response to an official inquiry from a federal or state government regulatory agency.(4) Made to another enrolled AI auditor or person in connection with a proposed sale or merger of the auditors professional practice, provided the parties enter into a written nondisclosure agreement with regard to all auditee information shared between the parties.(5) Made to either of the following:(A) Another enrolled AI auditor to the extent necessary for purposes of professional consultation.(B) Organizations that provide professional standards review and ethics or quality control peer review.(6) Specifically permitted by state or federal law.(b) An enrolled AI auditor shall not do either of the following:(1) Prevent an employee from disclosing information to the Attorney General or the Labor Commissioner, or using the mechanism established pursuant to paragraph (3) of subdivision (a) of Section 11549.82, including through terms and conditions of employment or seeking to enforce terms and conditions of employment, if the employee has reasonable cause to believe the information indicates that the auditor is out of compliance with the requirements of this chapter.(2) Retaliate against an employee for disclosing information pursuant to paragraph (1).
11549.85. (a) An enrolled AI auditor may disclose confidential information concerning an auditee only if the auditee provides written authorization or if the disclosure is any of the following:
(1) Made in compliance with a subpoena or a summons enforceable by order of a court.
(2) Reasonably necessary to maintain or defend the auditor in a legal proceeding initiated by the auditee.
(3) Made in response to an official inquiry from a federal or state government regulatory agency.
(4) Made to another enrolled AI auditor or person in connection with a proposed sale or merger of the auditors professional practice, provided the parties enter into a written nondisclosure agreement with regard to all auditee information shared between the parties.
(5) Made to either of the following:
(A) Another enrolled AI auditor to the extent necessary for purposes of professional consultation.
(B) Organizations that provide professional standards review and ethics or quality control peer review.
(6) Specifically permitted by state or federal law.
(b) An enrolled AI auditor shall not do either of the following:
(1) Prevent an employee from disclosing information to the Attorney General or the Labor Commissioner, or using the mechanism established pursuant to paragraph (3) of subdivision (a) of Section 11549.82, including through terms and conditions of employment or seeking to enforce terms and conditions of employment, if the employee has reasonable cause to believe the information indicates that the auditor is out of compliance with the requirements of this chapter.
(2) Retaliate against an employee for disclosing information pursuant to paragraph (1).