Give consumers a Pre-use Notice before using automated decision-making technology for a significant decision
Download: JSON · MarkdownUnder California CPPA automated decision-making rules, Cal. Code Regs. tit. 11, § 7220
What this label means
- Verified
- — a named reviewer opened the official source and confirmed the record; the date and the reviewer are shown.
- Pending review
- — linked to the official source and in the queue for a reviewer to confirm.
- Source-linked
- — linked to the official source, not yet confirmed by a reviewer.
On this page 8 sections
In brief
Give consumers a Pre-use Notice before using automated decision-making technology for a significant decision is a legal requirement under the California CPPA automated decision-making rules in California (United States) (Cal. Code Regs. tit. 11, § 7220). It applies from 1 January 2027. The record carries 2 evidence examples.
- Jurisdiction
- California (United States)
- Nature
- Legal requirement
- Source reference
- Cal. Code Regs. tit. 11, § 7220
- Applies from
- 1 January 2027
- Who it binds
- Deployer / user organisation
- Evidence examples
- 2
- Controls that meet it
- 2
- Official source
- Open official text
- Verification
- Pending review · source-linked
What does it require?
A business that uses automated decision-making technology (ADMT) to make a significant decision about a consumer (one that provides or denies financial or lending services, housing, education, employment or contracting opportunities or pay, or healthcare) must give a Pre-use Notice. It is presented prominently, at or before the point the personal information is collected (or before re-using information already held for this purpose), in the way the business mainly interacts with the consumer. It states the specific purpose in plain language, not in generic terms; the right to opt out and how (or, where an exception applies, the right to appeal or the exception relied on); the right to access information about the ADMT; that retaliation is prohibited; and how the ADMT works, including the categories of personal information that affect its output, any human's role, and the alternative process for people who opt out. It may sit in the Notice at Collection, and one notice may cover several uses.
Practical action
For each system that makes or replaces a human's significant decision, write a Pre-use Notice naming the specific decision, the opt-out (or appeal) route, the access right, and how the system and its alternative process work; show it before collection in the channel the consumer uses.
Who does it apply to?
Applies from:
Which controls meet this duty?
Satisfies: the control, operated properly, does the work the duty asks for. Supports: it contributes but the duty needs more. Each control page lists every other duty it serves, so work done once can be counted once.
-
satisfiesProcessProduct owner · at launch and on material changeAI interaction and use disclosure notices
Serves 23 recorded duties · evidence: AI interaction or use notice, Notice catalogue, Notice wording approval
Notice before use that an automated tool will make or substantially make the decision.
-
supportsProcessAI governance lead · continuousAI system inventory and classification
Serves 13 recorded duties · evidence: AI system register, Risk-tier classification sign-off, AI intake and classification procedure
Knowing which systems make significant decisions is the starting point for the notice.
Templates that cover this duty
Generated from the records. Free · no account · links emailed to your work address. This duty is cited in each file with its source reference and a link back here.
- AI Agent Registry and Permission Matrix
Register · XLSX and DOCX · v7
- EU AI Act Article 50 Transparency Kit
Kit · DOCX and XLSX · v47
- California ADMT and Risk Assessment Kit (CPPA)
Kit · DOCX and XLSX · v1
- AI Model Card
Kit · DOCX and XLSX · v5
What evidence would a reviewer expect?
| Evidence | Type | Notes |
|---|---|---|
| The published Pre-use Notice for each use, with the date it went live and where it is shown | document | |
| A record of which significant decisions use ADMT and which notice covers each | document |
Frequently asked questions
Is this a legal requirement?
Yes. It is a legal requirement under California CPPA automated decision-making rules (Cal. Code Regs. tit. 11, § 7220).
When does this obligation apply?
It applies from 1 January 2027.
What evidence shows compliance?
A reviewer would expect: The published Pre-use Notice for each use, with the date it went live and where it is shown; A record of which significant decisions use ADMT and which notice covers each.
Which controls satisfy this obligation?
AI interaction and use disclosure notices; AI system inventory and classification.
What should an organisation do in practice?
For each system that makes or replaces a human's significant decision, write a Pre-use Notice naming the specific decision, the opt-out (or appeal) route, the access right, and how the system and its alternative process work; show it before collection in the channel the consumer uses.
Cite this record
AIPolicyTracker (2026). “Give consumers a Pre-use Notice before using automated decision-making technology for a significant decision (California CPPA automated decision-making rules)” [AIPT-OBL-0118, not yet verified]. https://aipolicytracker.org/id/AIPT-OBL-0118 (accessed 12 November 2026). Data licensed CC BY 4.0.
Permanent id AIPT-OBL-0118: it never changes or gets reused, and its address keeps working if this page moves.
Cite the official text alongside it: CPPA announcement: regulations approved by the Office of Administrative Law, California Privacy Protection Agency, https://cppa.ca.gov/regulations/pdf/ccpa_updates_cyber_risk_admt_appr_text.pdf.
BibTeX
@misc{aipolicytracker2026_giveconsumersapreusenoti,
author = {{AIPolicyTracker}},
title = {{Give consumers a Pre-use Notice before using automated decision-making technology for a significant decision (California CPPA automated decision-making rules)}},
year = {2026},
howpublished = {\url{https://aipolicytracker.org/obligations/us-california-ccpa-admt-pre-use-notice}},
url = {https://aipolicytracker.org/obligations/us-california-ccpa-admt-pre-use-notice},
urldate = {2026-11-12},
note = {Data licensed CC BY 4.0. Accessed 12 November 2026}
}
Change history
No change to this record's tracked fields has been recorded since 15 October 2026, when field-level history began.
Similar obligations in other instruments
- Answer consumers' requests to access information about how automated decision-making technology was used about them — California CPPA automated decision-making rules, California (United States)
- Tell users at the start of an AI companion interaction, and at least every three hours, that they are not communicating with a human — New York AI companion safeguards, New York (United States)
- Tell users that an AI companion chatbot is artificially generated and not human, at the start and at least every three hours — Washington AI companion chatbot law (ESHB 2225), Washington State (United States)
- Where the user is known to be a minor or the chatbot is directed to minors, repeat the not-human notice at least every hour — Washington AI companion chatbot law (ESHB 2225), Washington State (United States)
- Publish the self-harm protocol and the number of crisis referral notifications issued in the preceding calendar year — Washington AI companion chatbot law (ESHB 2225), Washington State (United States)
- Disclose AI interaction and label synthetic content — EU AI Act, European Union
- Employers must inform workers and their representatives before using high-risk AI at work — EU AI Act, European Union
- Providers of generative AI must mark synthetic output as artificially generated in a machine-readable way — EU AI Act, European Union
Disclaimer: informational only, not legal advice. Verify every claim against the linked official sources and consult a qualified lawyer before acting.