California AI Transparency Act: Compliance Checklist

Compliance checklist

Run through these items to scope your obligations under California AI Transparency Act. Not legal advice; verify with counsel before acting.

1. Confirm scope: does the law apply to your operations? See Who Must Comply or use the Compliance Checker.
2. Inventory in-scope AI systems and classify them by role (developer/deployer) and decision type.
3. Address each obligation:
   • transparency — Maintain a free AI detection tool allowing users to assess whether image, video, or audio content was created or altered by the covered provider's GenAI system.Cal. Bus. & Prof. Code § 22757.2
   • transparency — Offer manifest disclosure options and apply latent provenance disclosures to AI-generated or AI-altered image, video, and audio content when technically feasible and reasonable.Cal. Bus. & Prof. Code § 22757.3
   • transparency — Large online platforms must detect compliant provenance data, disclose available system provenance data to users, permit user inspection, and not knowingly strip compliant provenance data or digital signatures.Cal. Bus. & Prof. Code § 22757.3.1
4. Adopt a federal control framework: NIST AI RMF or ISO/IEC 42001 to demonstrate due care.
5. Document evidence of compliance for each obligation, refreshed at the cadence the law requires.
6. Build the AG-notification path if the law requires it (Colorado, California SB 53).
7. Set the refresh cadence — annual for most impact-assessment regimes; continuous for monitoring.