Enzai MCP server
Connects to your AI.
Any MCP-compatible agent gets the same governed connection, right where your teams already work.
Some of our integrations
Workflow tools
Jira, ServiceNow
Model providers
Anthropic, OpenAI
Agent tools
Copilot Studio, Claude Enterprise
Development environments
Azure AI Foundry, Amazon Bedrock, Databricks

Podcast

California's ADMT regulations with Phil Laird

California's ADMT regulations with Phil Laird

California's ADMT regulations with Phil Laird

Phil Laird (General Counsel, California Privacy Protection Agency) walks through California's ADMT regulations, the 2026/2027 Risk Assessment roadmap, and what the agency means by meaningful human involvement.

Phil Laird (General Counsel, California Privacy Protection Agency) walks through California's ADMT regulations, the 2026/2027 Risk Assessment roadmap, and what the agency means by meaningful human involvement.

Abstract cover image of ivory poppy petals with a faint honey glow, for the podcast episode on California's ADMT regulations.
Phil Laird (General Counsel, California Privacy Protection Agency)

Listen on Spotify

Listen on YouTube

Listen on Apple


Summary

This episode of the AI Governance Podcast features Phil Laird, General Counsel of the California Privacy Protection Agency (CPPA). Phil joins Enzai's Matt McCallum to discuss how California is operationalising automated decision-making oversight in 2026 and 2027.

They explore what California's regulations require by "meaningful human involvement" and what the definition explicitly rules out, the most common failure modes in early ADMT implementations, how California's Risk Assessment regime overlaps with EU AI Act and GDPR work, and the architectural ambition behind DROP. Phil closes on why "frictionless" is operating doctrine inside the agency rather than consumer rhetoric.

You can listen on Spotify or Apple Music or watch the episode here on YouTube.

Key takeaways

  • What California's definition of "meaningful human involvement" explicitly closes the door on, and why some enterprise human-review patterns won't pass it.

  • The most common failure mode in early ADMT implementations: organisations believing they have addressed automation bias when they have not, and what the CPPA's sharper expectations actually require.

  • Where California's Risk Assessment regime overlaps with EU AI Act and GDPR work, where it doesn't, and why "re-use" is bounded rather than wholesale.

  • Inside DROP, the centralised Delete Request and Opt-out Platform California is building, and what operational readiness in 2026/2027 looks like for in-scope businesses.

  • Why "frictionless" is operating doctrine inside the CPPA rather than consumer rhetoric, and how that shapes the agency's regulatory sequencing.

Listen on Spotify

Listen on YouTube

Listen on Apple

On this page

Compliance by design

Compliance by design

Compliance by design

ISO 27001 certified since 2023, audited every year by NQA

GDPR-aligned data handling

Customer data hosted on AWS in multiple regions

Bring your own AI model over a private connection

Join our newsletter

By signing up, you agree to the Enzai privacy policy

Join our newsletter

By signing up, you agree to the Enzai privacy policy

Join our newsletter

By signing up, you agree to the Enzai privacy policy

Join our newsletter

By signing up, you agree to the Enzai privacy policy

AI governance

AI governance

infrastructure

infrastructure

engineered for trust.

engineered for trust.

Find the AI your teams use, review it before launch, assess it against the rules that apply and control what agents can do. Built for regulated organizations.

Connect your existing systems, policies and AI workflows in one platform.

Connect your existing systems, policies and AI workflows in one platform.