{"data":{"slug":"california-admt-compliance-kit","title":"California ADMT and Risk Assessment Kit (CPPA)","type":"kit","formats":["docx","xlsx"],"topics":["transparency","evidence","governance"],"frameworks":[],"short":"For businesses using automated decision-making technology for significant decisions in California, under the CPPA rules that apply from 1 January 2027: Pre-use Notice, opt-out, access response and risk assessment texts, with a register of ADMT uses, an opt-out log that counts the 15 business days, and a risk assessment tracker with the review, update and submission dates.","covers":{"policies":["us-california-cppa-admt-regulations"]},"version":1,"dataset_version":"d56995931cf8","generated_at":"2026-11-12T05:00:57+00:00","citations":14,"downloads":0,"files":[{"format":"docx","filename":"california-admt-compliance-kit-v1.docx","bytes":12996,"url":"https://aipolicytracker.org/templates/california-admt-compliance-kit#download"},{"format":"xlsx","filename":"california-admt-compliance-kit-v1.xlsx","bytes":47901,"url":"https://aipolicytracker.org/templates/california-admt-compliance-kit#download"}],"url":"https://aipolicytracker.org/templates/california-admt-compliance-kit","inside":["Document: a notice, template or procedure for each recorded duty, citing its section and record","ADMT uses sheet: system, significant decision, opt-out or exception, methods, reviewer, owner","Opt-out log: received, stop-by date (15 business days), late flag, vendors notified, re-ask date","Risk assessments sheet: § 7150 category, due date, three-year review, 45-day update, CPPA submission date","Checklist and dates sheets from the record, with its review status"],"legal_basis":["us-california-cppa-admt-regulations"],"caveat":"dates","covered_obligations":[{"slug":"us-california-ccpa-admt-pre-use-notice","title":"Give consumers a Pre-use Notice before using automated decision-making technology for a significant decision","policy":"us-california-cppa-admt-regulations","source_reference":"Cal. Code Regs. tit. 11, § 7220","url":"https://aipolicytracker.org/obligations/us-california-ccpa-admt-pre-use-notice"},{"slug":"us-california-ccpa-admt-opt-out","title":"Let consumers opt out of automated decision-making technology for significant decisions, or offer a qualifying human appeal","policy":"us-california-cppa-admt-regulations","source_reference":"Cal. Code Regs. tit. 11, § 7221","url":"https://aipolicytracker.org/obligations/us-california-ccpa-admt-opt-out"},{"slug":"us-california-ccpa-admt-access","title":"Answer consumers' requests to access information about how automated decision-making technology was used about them","policy":"us-california-cppa-admt-regulations","source_reference":"Cal. Code Regs. tit. 11, § 7222","url":"https://aipolicytracker.org/obligations/us-california-ccpa-admt-access"},{"slug":"us-california-ccpa-risk-assessment","title":"Conduct and document a risk assessment before processing that presents significant risk, including ADMT for significant decisions","policy":"us-california-cppa-admt-regulations","source_reference":"Cal. Code Regs. tit. 11, §§ 7150, 7155","url":"https://aipolicytracker.org/obligations/us-california-ccpa-risk-assessment"},{"slug":"us-california-ccpa-risk-assessment-submission","title":"Submit risk assessment information to the California Privacy Protection Agency each year","policy":"us-california-cppa-admt-regulations","source_reference":"Cal. Code Regs. tit. 11, § 7157","url":"https://aipolicytracker.org/obligations/us-california-ccpa-risk-assessment-submission"}],"versions":[{"version":1,"generated_at":"2026-11-12T05:00:57+00:00","dataset_version":"d56995931cf8","changelog":"First version, built from dataset d56995931cf8.","stats":{"sheets":{"Checklist":5,"ADMT uses":0,"Opt-out log":0,"Risk assessments":0,"Dates":4},"blocks":29,"headings":11,"citations":14}}]},"meta":{"license":"CC BY 4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","disclaimer":"This template is generated from the records on aipolicytracker.org. It is an informational resource, not legal advice, and completing it does not make an organisation compliant with any law or standard. Every row that cites a duty links to the record it came from; check the official source before relying on it."}}