California Privacy Agency Weakens AI Regulations Amid Pressure from Big Tech

California Privacy Agency Retreats from AI Regulation

The California Privacy Protection Agency (CPPA), the first of its kind in the United States, has significantly weakened its proposed rules for regulating artificial intelligence and automated decision-making systems. This retreat comes after intense pressure from business groups, lawmakers, and Governor Gavin Newsom, who argued that the original draft rules were too costly and could stifle innovation 1

1

2

Key Changes in the Revised Rules

In a unanimous vote, the agency's board approved changes that dramatically reduce the scope and impact of the regulations:

1. The cost of compliance for businesses in the first year of enforcement has been slashed from $834 million to $143 million.
2. An estimated 90% of businesses initially required to comply will now be exempt.
3. The term "artificial intelligence" has been removed from the rules.
4. The definition of "automated decision-making" has been narrowed, potentially allowing many businesses to avoid regulation 1

   1

   2

   2

   .

Impact on Behavioral Advertising

One of the most significant changes is the removal of regulations on behavioral advertising. Previously, businesses would have been required to conduct risk assessments before implementing such advertising techniques. This change particularly benefits tech giants like Google, Meta, and TikTok, who rely heavily on targeted advertising based on user profiles 1

1

2

Concerns from Consumer Advocates

Consumer advocacy groups have expressed alarm at these changes, arguing that the CPPA is now deferring excessively to business interests:

• Sacha Haworth, executive director of the Tech Oversight Project, stated, "The CPPA is charged with protecting the data privacy of Californians, and watering down its proposed rules to benefit Big Tech does nothing to achieve that goal" 1

  1

  2

  2

  .
• Kara Williams, a law fellow at the Electronic Privacy Information Center, noted that the rules have become "weaker and weaker" with each iteration, correlating with pressure from the tech industry 1

  1

  2

  2

  .

Political Pressure and Intervention

The weakening of the rules followed significant political pressure:

1. Business groups and legislators pushed for weaker regulations.
2. Governor Newsom intervened directly, sending a letter to the agency stating that the original rules overstepped its authority 1

   1

   2

   2

   .

Related Stories

California governor signs AI regulation order requiring safety guardrails, defying Trump

California Advances Landmark AI Regulation Bill

California Leads the Way in AI Regulation with Comprehensive New Laws

California Enacts Landmark AI Transparency Law, Balancing Innovation and Safety

Remaining Protections and Future Steps

Despite the overall weakening of the rules, some protections remain:

• Workers and students are still protected in cases where fully automated systems determine outcomes in finance, lending, housing, and healthcare without human intervention.
• The public has until June 2 to comment on the altered draft rules.
• Companies must comply with the automated decision-making rules by 2027 1

  1

  2

  2

  .

Broader Context and Implications

This retreat by the CPPA marks a significant shift in the ongoing debate over AI regulation in California and potentially sets a precedent for other states and federal regulators. As the only body of its kind in the U.S., the CPPA's actions are likely to have far-reaching implications for privacy protection and AI governance across the country 1

1

2