When an algorithm decides who gets hired, insured, or approved for credit, a growing set of laws gives the affected person a right to opt out or to an explanation. This hub covers those rules, including CPPA rulemaking and algorithmic hiring audits.

Automated Decision-Making

Colorado's AI Act and the Consequential Decision: What the Reenacted Part 17 Says

September 7, 2026

Colorado's 2024 artificial intelligence statute was delayed once, then repealed and reenacted before it ever took effect. Senate Bill 26-189, signed May 14, 2026, replaced part 17 of article 1 of title 6 with a framework keyed to automated decision-making technology. Consequential decision survived as the trigger; the algorithmic discrimination duty did not.

Read more →
CCPA / CPRA

California's ADMT, Risk Assessment and Cybersecurity Audit Regulations: What the Final Text Says

September 1, 2026

The California Privacy Protection Agency's rulemaking package on automated decisionmaking technology, risk assessments and cybersecurity audits took effect January 1, 2026, and the obligations it creates switch on across four separate years. This reports what the approved text defines, whom each article reaches by its own terms, and the dates written into it.

Read more →
AI & Privacy

Automated Decision-Making Under Privacy Law: The Rules That Actually Bind

August 24, 2026

There is no general American law on algorithmic decisions. What exists is a set of narrow regimes reaching them from different directions: California ADMT rules attaching to decisions in named life domains, profiling opt-outs in the state comprehensive statutes, employment statutes imposing audits and notice, and an FTC remedy that reaches the model itself.

Read more →

Related pages