Skill

legalcode-ccpa-admt-compliance

Assess and implement California CPRA Automated Decision-Making Technology (ADMT) compliance for businesses using AI or algorithmic systems that make or substantially replace human decision-making for significant decisions. Covers ADMT scope determination and significant decision classification (employment, lending, housing, healthcare, education, insurance), pre-use notice drafting (11 CCR 7220), consumer opt-out mechanism implementation (11 CCR 7221), access request response procedures (11 CCR 7222), alternative human review process design, risk assessment requirements for ADMT under 11 CCR 7150-7157, ADMT training data documentation obligations (11 CCR 7153), profiling disclosure requirements, and ongoing compliance monitoring. Aligned with CPPA final regulations effective January 1, 2026, with full ADMT compliance required by January 1, 2027, and risk assessment submission deadlines (April 1, 2028). Integrates with broader CCPA/CPRA consumer rights framework (Cal. Civ. Code 1798.100 et seq.), CPPA enforcement priorities, and cross-references EU AI Act, Colorado SB 24-205, and NYC Local Law 144 for multi-jurisdiction AI governance. Use when deploying AI systems for hiring/recruitment, credit decisions, insurance underwriting, tenant screening, healthcare eligibility, educational assessment, or other consequential automated decisions affecting California consumers; conducting ADMT risk assessments; drafting ADMT pre-use notices and privacy policy disclosures; implementing opt-out mechanisms for significant decisions; designing human appeal processes for ADMT decisions; or building an ADMT compliance program for California operations. Produces compliance gap analysis, pre-use notice templates, opt-out mechanism specifications, access request response procedures, risk assessment documentation, human oversight design, remediation roadmaps, and Glass Box audit trails suitable for CPPA regulatory submission and internal governance.