Bill Full Text
Home
-
Bills
-
Bill
-
Authors
-
Dates
-
Locations
-
Analyses
-
Organizations
<?xml version="1.0" ?>
<ns0:MeasureDoc xmlns:html="http://www.w3.org/1999/xhtml" xmlns:ns0="http://lc.ca.gov/legalservices/schemas/caml.1#" xmlns:ns3="http://www.w3.org/1999/xlink" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" version="1.0" xsi:schemaLocation="http://lc.ca.gov/legalservices/schemas/caml.1# xca.1.xsd">
<ns0:Description>
<ns0:Id>20250AB__216999INT</ns0:Id>
<ns0:VersionNum>99</ns0:VersionNum>
<ns0:History>
<ns0:Action>
<ns0:ActionText>INTRODUCED</ns0:ActionText>
<ns0:ActionDate>2026-02-18</ns0:ActionDate>
</ns0:Action>
</ns0:History>
<ns0:LegislativeInfo>
<ns0:SessionYear>2025</ns0:SessionYear>
<ns0:SessionNum>0</ns0:SessionNum>
<ns0:MeasureType>AB</ns0:MeasureType>
<ns0:MeasureNum>2169</ns0:MeasureNum>
<ns0:MeasureState>INT</ns0:MeasureState>
</ns0:LegislativeInfo>
<ns0:AuthorText authorType="LEAD_AUTHOR">Introduced by Assembly Member Lowenthal</ns0:AuthorText>
<ns0:Authors>
<ns0:Legislator>
<ns0:Contribution>LEAD_AUTHOR</ns0:Contribution>
<ns0:House>ASSEMBLY</ns0:House>
<ns0:Name>Lowenthal</ns0:Name>
</ns0:Legislator>
</ns0:Authors>
<ns0:Title> An act to add Chapter 22.2.10 (commencing with Section 22589.10) to Division 8 of the Business and Professions Code, relating to personal information.</ns0:Title>
<ns0:RelatingClause>personal information</ns0:RelatingClause>
<ns0:GeneralSubject>
<ns0:Subject>Social media platforms: artificial intelligence models.</ns0:Subject>
</ns0:GeneralSubject>
<ns0:DigestText>
<html:p>The California Consumer Privacy Act of 2018 (CCPA) grants a consumer various rights with respect to personal information, as defined, that is collected or sold by a business, as defined, including the right to request that a business that collects personal information about the consumer disclose to the consumer certain information about that personal information, including the categories of personal information it has collected about that consumer and the specific pieces of personal information it has collected about that consumer.</html:p>
<html:p>This bill, the Digital Choice Act, would require a social media company or a person that deploys an artificial intelligence model, defined as a model operator, to allow a consumer to request a copy of the consumer’s personal information, contextual data, and social graph and would require the social media company or
model operator to respond to that request within five business days in a format that is, among other things, portable to the extent technically feasible. The bill would define “contextual data” to mean information provided by a user to an artificial intelligence model and any context or derivative data associated with the user’s interactions with the artificial intelligence model, as specified, and any model-generated or inferred data linked to or generated from those interactions. The bill would define “social graph” to mean data that represents a person’s connections and interactions within a social media platform, as specified.</html:p>
<html:p>This bill would require, among other things, a social media company to implement a transparent, third-party-accessible interoperability interface that allows a user to choose to share a covered user’s social graph or user-selected parts of the social graph to a social media platform designated by the user and enable a third party to, with
the user’s permission, access a social graph created by the user and be notified when a new or updated social graph is available, as prescribed. The bill would require a model operator to implement a third-party-accessible interoperability interface to allow a user to share the user’s contextual data directly with other artificial intelligence models as the user designates and enable those artificial intelligence models to be notified when new or updated data is available, as prescribed.</html:p>
<html:p>This bill would authorize the Attorney General to adopt specified regulations, as provided, and require the Attorney General to enforce the bill’s provisions by bringing an administrative action, as specified.</html:p>
</ns0:DigestText>
<ns0:DigestKey>
<ns0:VoteRequired>MAJORITY</ns0:VoteRequired>
<ns0:Appropriation>NO</ns0:Appropriation>
<ns0:FiscalCommittee>YES</ns0:FiscalCommittee>
<ns0:LocalProgram>NO</ns0:LocalProgram>
</ns0:DigestKey>
<ns0:MeasureIndicators>
<ns0:ImmediateEffect>NO</ns0:ImmediateEffect>
<ns0:ImmediateEffectFlags>
<ns0:Urgency>NO</ns0:Urgency>
<ns0:TaxLevy>NO</ns0:TaxLevy>
<ns0:Election>NO</ns0:Election>
<ns0:UsualCurrentExpenses>NO</ns0:UsualCurrentExpenses>
<ns0:BudgetBill>NO</ns0:BudgetBill>
<ns0:Prop25TrailerBill>NO</ns0:Prop25TrailerBill>
</ns0:ImmediateEffectFlags>
</ns0:MeasureIndicators>
</ns0:Description>
<ns0:Bill id="bill">
<ns0:Preamble>The people of the State of California do enact as follows:</ns0:Preamble>
<ns0:BillSection id="id_59A348E8-E6A1-4A88-A80E-04FAAA14E6C7">
<ns0:Num>SECTION 1.</ns0:Num>
<ns0:ActionLine action="IS_ADDED" ns3:type="locator" ns3:href="urn:caml:codes:BPC:caml#xpointer(%2Fcaml%3ALawDoc%2Fcaml%3ACode%2Fcaml%3ALawHeading%5B%40type%3D'DIVISION'%20and%20caml%3ANum%3D'8.'%5D%2Fcaml%3ALawHeading%5B%40type%3D'CHAPTER'%20and%20caml%3ANum%3D'22.2.10.'%5D)" ns3:label="fractionType: LAW_SPREAD||commencingWith: 22589.10">
Chapter 22.2.10 (commencing with Section 22589.10) is added to Division 8 of the
<ns0:DocName>Business and Professions Code</ns0:DocName>
, to read:
</ns0:ActionLine>
<ns0:Fragment>
<ns0:LawHeading type="CHAPTER" id="id_19F4599C-162D-44BE-BD2C-BE6362D48FA3">
<ns0:Num>22.2.10.</ns0:Num>
<ns0:LawHeadingVersion id="id_61C4714D-A3B9-447F-B975-E99DD5CDB9F7">
<ns0:LawHeadingText>Digital Choice</ns0:LawHeadingText>
</ns0:LawHeadingVersion>
<ns0:LawSection id="id_CAF8A85C-3D13-43A6-8044-66759FF35FD6">
<ns0:Num>22589.10.</ns0:Num>
<ns0:LawSectionVersion id="id_D5331BE4-4CD6-4631-BDB6-FA1FC3E03A25">
<ns0:Content>
<html:p>This chapter shall be known as the Digital Choice Act.</html:p>
</ns0:Content>
</ns0:LawSectionVersion>
</ns0:LawSection>
<ns0:LawSection id="id_C35074CD-C845-44F9-9A5E-7FBBCA2B3F5C">
<ns0:Num>22589.11.</ns0:Num>
<ns0:LawSectionVersion id="id_4BD60BD0-F6D2-44A2-9B2F-15ED70DD411D">
<ns0:Content>
<html:p>For purposes of this chapter:</html:p>
<html:p>
(a)
<html:span class="EnSpace"/>
“Artificial intelligence model” has the meaning defined in Section 22757.11.
</html:p>
<html:p>
(b)
<html:span class="EnSpace"/>
“Business” has the meaning defined in Section 1798.140 of the Civil Code.
</html:p>
<html:p>
(c)
<html:span class="EnSpace"/>
“Consumer” has the meaning defined in Section 1798.140 of the Civil Code.
</html:p>
<html:p>
(d)
<html:span class="EnSpace"/>
(1)
<html:span class="EnSpace"/>
“Contextual data” means information provided by a user to an artificial intelligence model and any context or derivative data associated with the user’s interactions with the artificial intelligence model, including prompts, conversational histories, files, preferences, metadata,
and any model-generated or inferred data linked to or generated from those interactions.
</html:p>
<html:p>
(2)
<html:span class="EnSpace"/>
“Contextual data” does not include a model operator’s trade secrets.
</html:p>
<html:p>
(e)
<html:span class="EnSpace"/>
(1)
<html:span class="EnSpace"/>
“Model operator” means a person that deploys an artificial intelligence model, including under license or contract.
</html:p>
<html:p>
(2)
<html:span class="EnSpace"/>
“Model operator” does not include a person that interacts with artificial intelligence models solely through application programming interfaces, licensed services, prompting, or fine tuning.
</html:p>
<html:p>
(f)
<html:span class="EnSpace"/>
“Open protocol” means a publicly available set of rules that enables interoperability and data exchange between social media platforms or model operators by providing a common data infrastructure by which multiple social media platforms or model operators
can access a user’s personal information that is free from licensing fees and patent restrictions.
</html:p>
<html:p>
(g)
<html:span class="EnSpace"/>
“Personal information” means any information that identifies or describes an individual.
</html:p>
<html:p>
(h)
<html:span class="EnSpace"/>
(1)
<html:span class="EnSpace"/>
“Social graph” means data that represents a person’s connections and interactions within a social media platform, including all of the following:
</html:p>
<html:p>
(A)
<html:span class="EnSpace"/>
The person’s social connections with other users
</html:p>
<html:p>
(B)
<html:span class="EnSpace"/>
Content created by the person.
</html:p>
<html:p>
(C)
<html:span class="EnSpace"/>
The person’s responses to other users’ content, including comments, reactions, mentions, reposts, shares, and other responses.
</html:p>
<html:p>
(D)
<html:span class="EnSpace"/>
Other users’ responses to the person’s
content.
</html:p>
<html:p>
(E)
<html:span class="EnSpace"/>
Metadata associated with any of the items described in subparagraphs (A) to (D), inclusive.
</html:p>
<html:p>
(F)
<html:span class="EnSpace"/>
Relational references sufficient to maintain the associations among data elements in the items described in subparagraphs (A) to (E), inclusive.
</html:p>
<html:p>
(2)
<html:span class="EnSpace"/>
“Social graph” does not include another user’s or an entity’s content and responses that have been designated private by those users and entities, including private messages.
</html:p>
<html:p>
(i)
<html:span class="EnSpace"/>
“Social media company” has the meaning defined in Section 22675.
</html:p>
<html:p>
(j)
<html:span class="EnSpace"/>
“Social media platform” has the meaning defined in Section 22675 of the Business and Professions Code.
</html:p>
</ns0:Content>
</ns0:LawSectionVersion>
</ns0:LawSection>
<ns0:LawSection id="id_12751276-495E-42E0-A17E-3A9C4E30EDAA">
<ns0:Num>22589.12.</ns0:Num>
<ns0:LawSectionVersion id="id_26759826-B24B-4C1F-8522-2D41313E5479">
<ns0:Content>
<html:p>
(a)
<html:span class="EnSpace"/>
A social media company or model operator shall allow a consumer to request a copy of the consumer’s personal information, contextual data, and social graph.
</html:p>
<html:p>
(b)
<html:span class="EnSpace"/>
If a consumer requests a copy of the consumer’s personal information, contextual data, and social graph pursuant to subdivision (a), a social media company or model operator shall provide, within five business days, the consumer’s personal information, contextual data, and social graph in a format that is all of the following:
</html:p>
<html:p>
(1)
<html:span class="EnSpace"/>
Portable to the extent technically feasible.
</html:p>
<html:p>
(2)
<html:span class="EnSpace"/>
Readily usable to the extent practicable.
</html:p>
<html:p>
(3)
<html:span class="EnSpace"/>
In a form that allows the consumer to transmit the data to another social media platform or model operator without impediment if the social media platform or model operator processes the data by automated means.
</html:p>
</ns0:Content>
</ns0:LawSectionVersion>
</ns0:LawSection>
<ns0:LawSection id="id_07C4169F-F7F0-4F8D-8EB5-CC535B3A4FFA">
<ns0:Num>22589.13.</ns0:Num>
<ns0:LawSectionVersion id="id_B7AA8058-1123-4A66-9E2E-D86A54602491">
<ns0:Content>
<html:p>
(a)
<html:span class="EnSpace"/>
A social media company shall implement a transparent, third-party-accessible interoperability interface that allows a user to choose to do both of the following:
</html:p>
<html:p>
(1)
<html:span class="EnSpace"/>
Share a covered user’s social graph or user-selected parts of the social graph to a social media platform designated by the user.
</html:p>
<html:p>
(2)
<html:span class="EnSpace"/>
Enable a third party to, with the user’s permission, access social graph created by the user and be notified when a new or updated social graph is available.
</html:p>
<html:p>
(b)
<html:span class="EnSpace"/>
A model operator shall implement a third-party-accessible interoperability interface to allow a user to share the user’s contextual data directly with
other artificial intelligence models as the user designates and enable those artificial intelligence models to be notified when new or updated data is available.
</html:p>
<html:p>
(c)
<html:span class="EnSpace"/>
To comply with subdivisions (a) and (b), a social media company or model operator shall do all of the following:
</html:p>
<html:p>
(1)
<html:span class="EnSpace"/>
Utilize an open protocol.
</html:p>
<html:p>
(2)
<html:span class="EnSpace"/>
Facilitate and maintain interoperability and continuous, real-time data sharing with other social media platforms or artificial intelligence models through an interoperability interface based on reasonable terms that do not discriminate.
</html:p>
<html:p>
(3)
<html:span class="EnSpace"/>
Disclose to other social media companies or model operators complete, accurate, and regularly updated documentation describing access to the interoperability interface required under this section.
</html:p>
<html:p>
(d)
<html:span class="EnSpace"/>
A social media company or model operator shall reasonably secure a user’s personal information, contextual data, or social graph obtained through an interoperability interface.
</html:p>
<html:p>
(e)
<html:span class="EnSpace"/>
A business that accesses an interoperability interface shall take reasonable steps to meet platform integrity standards, including data security, data privacy, and abuse-mitigation practices necessary to preserve user protections and secure any data it acquires, processes, or transmits.
</html:p>
<html:p>
(f)
<html:span class="EnSpace"/>
A social media company, model operator, or other controller shall not share or receive a user’s personal information, contextual data, or social graph through the interoperability interface without the user’s consent.
</html:p>
<html:p>
(g)
<html:span class="EnSpace"/>
A social media company or model operator shall adopt an accessible,
prominent, and persistent method for users to give consent for data sharing with other social media platforms or model operators through the interoperability interface.
</html:p>
<html:p>
(h)
<html:span class="EnSpace"/>
This section does not require a social media company to do any of the following:
</html:p>
<html:p>
(1)
<html:span class="EnSpace"/>
Provide access to either of the following:
</html:p>
<html:p>
(A)
<html:span class="EnSpace"/>
Inferences, analyses, or derived data that the social media company has generated internally about a user.
</html:p>
<html:p>
(B)
<html:span class="EnSpace"/>
Proprietary algorithms, ranking systems, or other internal operating mechanisms.
</html:p>
<html:p>
(2)
<html:span class="EnSpace"/>
Transmit personal information, contextual data, or a social graph that is stored or structured in a proprietary format and with respect to that personal information, contextual data, or social
graph, both of the following apply:
</html:p>
<html:p>
(A)
<html:span class="EnSpace"/>
An open, industry standard format is not reasonably available.
</html:p>
<html:p>
(B)
<html:span class="EnSpace"/>
Transmitting the personal information, contextual data, or social graph would disclose information described in paragraph (1).
</html:p>
<html:p>
(i)
<html:span class="EnSpace"/>
A business that uses an artificial intelligence model provided by a model operator to provide an application or a service to a consumer shall promptly transmit a consumer’s request to the model operator with sufficient information for the model operator to execute the request and communicate about the request with the consumer.
</html:p>
</ns0:Content>
</ns0:LawSectionVersion>
</ns0:LawSection>
<ns0:LawSection id="id_11E7296A-0BBF-4CDE-BD92-3D7E7B08514B">
<ns0:Num>22589.14.</ns0:Num>
<ns0:LawSectionVersion id="id_DCEB8394-20BA-4CAE-8F72-D4E41841BF0F">
<ns0:Content>
<html:p>
(a)
<html:span class="EnSpace"/>
The Attorney General may adopt regulations to identify specific open protocols that the Attorney General has determined, after an assessment, meet the definition of “open protocol” listed in Section 22589.11.
</html:p>
<html:p>
(b)
<html:span class="EnSpace"/>
If a social media company uses an open protocol that the Attorney General identifies under subdivision (a), the social media company shall be entitled to a rebuttable presumption that the social media company provides access on reasonable terms that do not discriminate.
</html:p>
</ns0:Content>
</ns0:LawSectionVersion>
</ns0:LawSection>
<ns0:LawSection id="id_0AE42534-149C-4CAE-A96B-330EDC66150E">
<ns0:Num>22589.15.</ns0:Num>
<ns0:LawSectionVersion id="id_5D3DBAD2-96BE-4B76-9E80-5606B3C51654">
<ns0:Content>
<html:p>
(a)
<html:span class="EnSpace"/>
The Attorney General shall enforce this chapter.
</html:p>
<html:p>
(b)
<html:span class="EnSpace"/>
A social media company or model operator that violates this chapter shall be liable for an administrative fine of not more than two thousand five hundred dollars ($2,500) for each violation or seven thousand five hundred dollars ($7,500) for each intentional violation.
</html:p>
<html:p>
(c)
<html:span class="EnSpace"/>
In a proceeding brought pursuant to this chapter, the Attorney General may petition for appropriate injunctive relief.
</html:p>
</ns0:Content>
</ns0:LawSectionVersion>
</ns0:LawSection>
</ns0:LawHeading>
</ns0:Fragment>
</ns0:BillSection>
</ns0:Bill>
</ns0:MeasureDoc>