Post training-data documentation on the developer website
On or before 2026-01-01, and before each subsequent time a generative AI system or service released on or after 2022-01-01, or a substantial modification of it, is made publicly available to Californians, the developer must post documentation on its website covering at least: the sources or owners of the datasets; how the datasets further the intended purpose; the number of data points, which may be given in ranges with estimates for dynamic datasets; the types of data points, meaning label types or the general characteristics of unlabelled data; whether the datasets include material protected by copyright, trademark or patent, or are entirely in the public domain; whether the datasets were purchased or licensed; whether they include personal information as defined in Civil Code section 1798.140(v); whether they include aggregate consumer information as defined in section 1798.140(b); whether the developer cleaned, processed or otherwise modified the datasets and for what purpose; the time period of collection, noting whether collection is ongoing; the dates the datasets were first used in development; and whether the system used or continuously uses synthetic data generation. The duty applies regardless of whether use is for compensation.
- Applies when
- Developers making generative AI systems or services publicly available to Californians, including Chinese foundation-model companies serving California users through an API, web product or app store, and companies that substantially modify a third-party model before making it available.
- Deadline: First posting on or before 2026-01-01, then updated before each public release or substantial modification
- Applies from: 2026-01-01
- Evidence to retain
- · Archived copies of the training-data disclosure page with timestamps for each release or modification
- · Dataset inventory recording source, licence status and purchase or licence evidence
- · Working papers on data point counts and types
- · Statement on synthetic data use and determinations on personal information and aggregate consumer information
Estimated first-time effort: 10–30 person-days (estimate, not a commitment)