{"slug":"us-california-ccpa-admt-opt-out","id":"AIPT-OBL-0119","permanent_url":"https://aipolicytracker.org/id/AIPT-OBL-0119","title":"Let consumers opt out of automated decision-making technology for significant decisions, or offer a qualifying human appeal","short_title":"Opt-out of ADMT","category":"human_oversight","summary":"Consumers must be able to opt out of the use of ADMT for a significant decision, through at least two designated methods that are easy to use and need minimal steps; a business that deals with consumers online must offer an interactive form linked from the Pre-use Notice, and a cookie banner is not enough. A verifiable request may not be required. If the consumer opts out before processing starts, the ADMT must not be used for them; if after, processing must stop within 15 business days and service providers and contractors must be told. The business must wait 12 months before asking the consumer to consent again. Exceptions include offering an appeal to a human reviewer with authority to overturn the decision, and certain admission, acceptance, hiring and work-allocation uses that meet the stated conditions.\n","practical_action":"Build the opt-out form and a second method, wire opt-outs to stop processing within 15 business days and to notify vendors, or document the exception relied on and, for the human-appeal exception, designate and train reviewers who can overturn the decision.","is_binding":true,"applies_from":"2027-01-01","section":"Article 11, § 7221","source_reference":"Cal. Code Regs. tit. 11, § 7221","official_source_url":"https://cppa.ca.gov/regulations/pdf/ccpa_updates_cyber_risk_admt_appr_text.pdf","review_status":"pending_review","confidence_level":"high","last_verified_at":null,"reviewed_by":null,"actors":["deployer"],"sectors":["employment","financial_services","healthcare","education"],"use_cases":["hiring_and_hr","health","finance_and_credit","education"],"applicability":[],"evidence_examples":[{"title":"The opt-out link, form and second method, and a log of requests with dates received and processing stopped","description":null,"artifact_type":"document"},{"title":"Notices sent to service providers and contractors about each opt-out","description":null,"artifact_type":"document"},{"title":"Where an exception is used, the documented exception and, for human appeal, the reviewer designation and appeal records","description":null,"artifact_type":"document"}],"framework_mappings":[],"controls":[{"slug":"decision-explanation-and-appeal-route","title":"Decision explanation, human review and appeal route","kind":"process","relationship":"supports","note":"The appeal route used under the human-appeal exception.","confidence_level":"medium","url":"https://aipolicytracker.org/controls/decision-explanation-and-appeal-route"},{"slug":"human-oversight-and-override","title":"Human oversight design and override procedure","kind":"process","relationship":"supports","note":"The human-appeal exception needs a reviewer with authority to overturn the decision.","confidence_level":"high","url":"https://aipolicytracker.org/controls/human-oversight-and-override"},{"slug":"privacy-and-data-protection-for-ai","title":"Privacy and data-protection controls for AI","kind":"process","relationship":"supports","note":"Handling consumer rights requests over personal information.","confidence_level":"medium","url":"https://aipolicytracker.org/controls/privacy-and-data-protection-for-ai"}],"url":"https://aipolicytracker.org/obligations/us-california-ccpa-admt-opt-out","policy":{"slug":"us-california-cppa-admt-regulations","title":"California Privacy Protection Agency regulations on automated decision-making technology, risk assessments and cybersecurity audits","status":"in_force","jurisdiction":"us-california","url":"https://aipolicytracker.org/policies/us-california-cppa-admt-regulations"}}