Artificial Intelligence Policy Tracker

Give consumers a Pre-use Notice before using automated decision-making technology for a significant decision

Download: JSON · MarkdownUnder California CPPA automated decision-making rules, Cal. Code Regs. tit. 11, § 7220

Pending review · linked to the official source, waiting for a reviewer to confirm it (a factual check against the official source, not a legal review or legal advice)
What this label means
Verified
— a named reviewer opened the official source and confirmed the record; the date and the reviewer are shown.
Pending review
— linked to the official source and in the queue for a reviewer to confirm.
Source-linked
— linked to the official source, not yet confirmed by a reviewer.
Verification policy and current standing · a factual check, not legal advice.
No change recorded as of 11 Nov 2026 · official source last checked
On this page 8 sections

In brief

Give consumers a Pre-use Notice before using automated decision-making technology for a significant decision is a legal requirement under the California CPPA automated decision-making rules in California (United States) (Cal. Code Regs. tit. 11, § 7220). It applies from 1 January 2027. The record carries 2 evidence examples.

Nature
Legal requirement
Source reference
Cal. Code Regs. tit. 11, § 7220
Applies from
1 January 2027
Who it binds
Deployer / user organisation
Evidence examples
2
Controls that meet it
2
Official source
Open official text
Verification
Pending review · source-linked

What does it require?

A business that uses automated decision-making technology (ADMT) to make a significant decision about a consumer (one that provides or denies financial or lending services, housing, education, employment or contracting opportunities or pay, or healthcare) must give a Pre-use Notice. It is presented prominently, at or before the point the personal information is collected (or before re-using information already held for this purpose), in the way the business mainly interacts with the consumer. It states the specific purpose in plain language, not in generic terms; the right to opt out and how (or, where an exception applies, the right to appeal or the exception relied on); the right to access information about the ADMT; that retaliation is prohibited; and how the ADMT works, including the categories of personal information that affect its output, any human's role, and the alternative process for people who opt out. It may sit in the Notice at Collection, and one notice may cover several uses.

Practical action

For each system that makes or replaces a human's significant decision, write a Pre-use Notice naming the specific decision, the opt-out (or appeal) route, the access right, and how the system and its alternative process work; show it before collection in the channel the consumer uses.

Who does it apply to?

Applies from:

Which controls meet this duty?

Satisfies: the control, operated properly, does the work the duty asks for. Supports: it contributes but the duty needs more. Each control page lists every other duty it serves, so work done once can be counted once.

  • satisfiesProcessProduct owner · at launch and on material change
    AI interaction and use disclosure notices

    Serves 23 recorded duties · evidence: AI interaction or use notice, Notice catalogue, Notice wording approval

    Notice before use that an automated tool will make or substantially make the decision.

  • supportsProcessAI governance lead · continuous
    AI system inventory and classification

    Serves 13 recorded duties · evidence: AI system register, Risk-tier classification sign-off, AI intake and classification procedure

    Knowing which systems make significant decisions is the starting point for the notice.

Templates that cover this duty

Generated from the records. Free · no account · links emailed to your work address. This duty is cited in each file with its source reference and a link back here.

All 7 templates that cover it →

What evidence would a reviewer expect?

Evidence examples
EvidenceTypeNotes
The published Pre-use Notice for each use, with the date it went live and where it is showndocument
A record of which significant decisions use ADMT and which notice covers eachdocument

Frequently asked questions

Is this a legal requirement?

Yes. It is a legal requirement under California CPPA automated decision-making rules (Cal. Code Regs. tit. 11, § 7220).

When does this obligation apply?

It applies from 1 January 2027.

What evidence shows compliance?

A reviewer would expect: The published Pre-use Notice for each use, with the date it went live and where it is shown; A record of which significant decisions use ADMT and which notice covers each.

Which controls satisfy this obligation?

AI interaction and use disclosure notices; AI system inventory and classification.

What should an organisation do in practice?

For each system that makes or replaces a human's significant decision, write a Pre-use Notice naming the specific decision, the opt-out (or appeal) route, the access right, and how the system and its alternative process work; show it before collection in the channel the consumer uses.

Cite this record

AIPolicyTracker (2026). “Give consumers a Pre-use Notice before using automated decision-making technology for a significant decision (California CPPA automated decision-making rules)” [AIPT-OBL-0118, not yet verified]. https://aipolicytracker.org/id/AIPT-OBL-0118 (accessed 12 November 2026). Data licensed CC BY 4.0.

Permanent id AIPT-OBL-0118: it never changes or gets reused, and its address keeps working if this page moves.

Cite the official text alongside it: CPPA announcement: regulations approved by the Office of Administrative Law, California Privacy Protection Agency, https://cppa.ca.gov/regulations/pdf/ccpa_updates_cyber_risk_admt_appr_text.pdf.

BibTeX
@misc{aipolicytracker2026_giveconsumersapreusenoti,
  author       = {{AIPolicyTracker}},
  title        = {{Give consumers a Pre-use Notice before using automated decision-making technology for a significant decision (California CPPA automated decision-making rules)}},
  year         = {2026},
  howpublished = {\url{https://aipolicytracker.org/obligations/us-california-ccpa-admt-pre-use-notice}},
  url          = {https://aipolicytracker.org/obligations/us-california-ccpa-admt-pre-use-notice},
  urldate      = {2026-11-12},
  note         = {Data licensed CC BY 4.0. Accessed 12 November 2026}
}

Change history

No change to this record's tracked fields has been recorded since 15 October 2026, when field-level history began.

Similar obligations in other instruments

Disclaimer: informational only, not legal advice. Verify every claim against the linked official sources and consult a qualified lawyer before acting.