Bill Text: CA AB302 | 2023-2024 | Regular Session | Introduced

California Assembly Bill 302

NOTE: There are more recent revisions of this legislation. Read Latest Draft

Bill Title: Department of Technology: high-risk automated decision systems: inventory.

Spectrum: Partisan Bill (Democrat 3-0)

Status: (Passed) 2023-10-13 - Chaptered by Secretary of State - Chapter 800, Statutes of 2023. [AB302 Detail]

Download: California-2023-AB302-Introduced.html

CALIFORNIA LEGISLATURE— 2023–2024 REGULAR SESSION

Assembly Bill

No. 302

Introduced by Assembly Member Ward

January 26, 2023

An act to add Section 11546.8 to the Government Code, relating to automated decision systems.

LEGISLATIVE COUNSEL'S DIGEST

AB 302, as introduced, Ward. Department of Technology: high-risk automated decision systems: inventory.

Existing law establishes the Department of Technology within the Government Operations Agency and requires the Director of Technology to supervise the Department of Technology and report directly to the Governor on issues relating to information technology.

This bill would require the department to conduct, on or before September 1, 2024, a comprehensive inventory of all high-risk automated decision systems, as defined, that have been proposed for use, development, or procurement by, or are being used, developed, or procured by, state agencies. The bill would require the comprehensive inventory to include a description of, among other things, the categories of data and personal information the automated decision system uses to make its decisions. On or before January 1, 2025, the bill would require the department to submit a report of the above-described comprehensive inventory to the Legislature.

Vote: MAJORITY Appropriation: NO Fiscal Committee: YES Local Program: NO

The people of the State of California do enact as follows:

SECTION 1.

Section 11546.8 is added to the Government Code, to read:

11546.8.

(a) For purposes of this section:

(1) “Automated decision system” means a computational process derived from machine learning, statistical modeling, data analytics, or artificial intelligence that issues simplified output, including a score, classification, or recommendation, that is used to assist or replace human discretionary decisionmaking and materially impacts natural persons.

(2) “Department” means the Department of Technology.

(3) “High-risk automated decision system” means an automated decision system that is used to assist or replace human discretionary decisions that have a legal or similarly significant effect, including decisions that materially impact access to, or approval for, housing or accommodations, education, employment, credit, health care, and criminal justice.

(b) On or before September 1, 2024, the Department of Technology shall conduct a comprehensive inventory of all high-risk automated decision systems that have been proposed for use, development, or procurement by, or are being used, developed, or procured by, state agencies.

(1) (A) Any decision the automated decision system can make or support and the intended benefits of that use.

(B) The alternatives to any use described in subparagraph (A).

(2) The results of any research assessing the efficacy and relative benefits of the uses and alternatives of the automated decision system described by paragraph (1).

(3) The categories of data and personal information the automated decision system uses to make its decisions.

(4) (A) The measures in place, if any, to mitigate the risks, including cybersecurity risk and the risk of inaccurate, unfairly discriminatory, or biased decisions, of the automated decision system.

(B) Measures described by this paragraph may include, but are not limited to, any of the following:

(i) Performance metrics to gauge the accuracy of the system.

(ii) Cybersecurity controls.

(iii) Privacy controls.

(iv) Risk assessments or audits for potential risks.

(v) Measures or processes in place to contest an automated decision.

(d) (1) On or before January 1, 2025, the department shall submit a report of the comprehensive inventory described in subdivision (b) to the Legislature.

(2) The requirement for submitting a report imposed under paragraph (1) is inoperative on January 1, 2029, pursuant to Section 10231.5.

(3) A report to be submitted pursuant to paragraph (2) shall be submitted in compliance with Section 9795.