California Finalizes Next Wave of State AI and Privacy Regulation

According to WilmerHale, the new laws mean businesses now have a clearer view of California's AI and privacy regulatory landscape for the coming year[1].WilmerHale reports that SB 923, the Expanding Privacy Rights Act, amends the CCPA to expand existing deletion rights[1]. The firm also says that under AB 883, data brokers must check the state's deletion platform every 30 days[1] instead of every 45.Wilson Sonsini reports that SB 690 removes the private right of action for those pen-register and trap-and-trace claims when the conduct occurs on a website, online application, or mobile application[3].According to Kelley Drye, the measures Newsom signed include key child safety measures (AB 2246, SB 1119, AB 1709, SB 867, AB 1856) and AI auditor oversight bills (SB 813 and AB 1405)[4].The Governor's office quoted California Labor Federation President Lorena Gonzalez as saying the four workplace AI bills show how we can begin to put guardrails on AI at work[5].WilmerHale reports that Newsom vetoed the measures proposed in AB 1542, SB 903, and AB 2575 due to concerns regarding overbroad provisions and feasibility of implementation[1].Latham & Watkins reports that under Executive Order N-9-26, the state's Government Operations Agency must send recommendations on frontier AI rules by November 16, 2026[2].