There have been recent 2025 amendments to the California Consumer Privacy Act (CCPA) of 2018. One of these (AB 1008) redefines the term “personal information” to include data developed through the use of artificial intelligence (AI).
If an artificial intelligence system has the capability of revealing personal information (PI), there may be restrictions placed on how companies may profit from, or use, that data. Personal information not only includes names, addresses, etc., but also biometric data. The goal of this amendment is to be sure that AI systems abide by the same privacy protections that other data storage and processing systems abide by and use.
Perhaps the most far-reaching impact of this amendment is that companies that choose to use AI capable of developing personal information must have the ability to correct erroneous output. Since it is unlikely most companies will be developing their own systems, the inability to correct AI hallucinations may prove to be a limiting factor in the implementation of AI in California.