Last updated:
An amendment to the CCPA clarifying that personal information includes data generated or output by AI systems.
Effective January 2025, AB 1008 ensures that AI-generated data (such as synthetic profiles or inferred traits) is treated with the same privacy protections as raw data. It subjects AI outputs to CCPA right to delete and right to correct requests, closing the loop on data privacy within the AI lifecycle.
Real world example:
A consumer discovers an AI-generated profile correctly identifies their political leaning but incorrectly lists their medical history; they use AB 1008 to force the company to correct the inferred data in its database.
