# Give consumers a Pre-use Notice before using automated decision-making technology for a significant decision

- **Record type**: Obligation
- **Instrument**: California Privacy Protection Agency regulations on automated decision-making technology, risk assessments and cybersecurity audits
- **Jurisdiction**: California (United States)
- **Category**: transparency
- **Binding**: Yes
- **Applies from**: 2027-01-01
- **Provision**: Cal. Code Regs. tit. 11, § 7220

## In brief

Give consumers a Pre-use Notice before using automated decision-making technology for a significant decision is a legal requirement under the California CPPA automated decision-making rules in California (United States) (Cal. Code Regs. tit. 11, § 7220). It applies from 1 January 2027. The record carries 2 evidence examples.

## What the duty requires

A business that uses automated decision-making technology (ADMT) to make a significant decision about a consumer (one that provides or denies financial or lending services, housing, education, employment or contracting opportunities or pay, or healthcare) must give a Pre-use Notice. It is presented prominently, at or before the point the personal information is collected (or before re-using information already held for this purpose), in the way the business mainly interacts with the consumer. It states the specific purpose in plain language, not in generic terms; the right to opt out and how (or, where an exception applies, the right to appeal or the exception relied on); the right to access information about the ADMT; that retaliation is prohibited; and how the ADMT works, including the categories of personal information that affect its output, any human's role, and the alternative process for people who opt out. It may sit in the Notice at Collection, and one notice may cover several uses.

## What an organisation does about it

For each system that makes or replaces a human's significant decision, write a Pre-use Notice naming the specific decision, the opt-out (or appeal) route, the access right, and how the system and its alternative process work; show it before collection in the channel the consumer uses.

## Controls that meet this duty

- AI interaction and use disclosure notices (satisfies): https://aipolicytracker.org/controls/ai-interaction-and-use-disclosure
- AI system inventory and classification (supports): https://aipolicytracker.org/controls/ai-system-inventory

## Parent instrument

- California Privacy Protection Agency regulations on automated decision-making technology, risk assessments and cybersecurity audits
  - Record: https://aipolicytracker.org/policies/us-california-cppa-admt-regulations
  - Context file: https://aipolicytracker.org/policies/us-california-cppa-admt-regulations.md

## Provenance

- **Permanent id**: AIPT-OBL-0118 (https://aipolicytracker.org/id/AIPT-OBL-0118; never changes or gets reused)
- **Record page**: https://aipolicytracker.org/obligations/us-california-ccpa-admt-pre-use-notice
- **Official source**: https://cppa.ca.gov/regulations/pdf/ccpa_updates_cyber_risk_admt_appr_text.pdf
- **Provision**: Cal. Code Regs. tit. 11, § 7220
- **Review status**: pending review
- **Confidence**: high
- **Facts last confirmed**: never confirmed against the official source
- **Retrieved**: 2026-11-12
- **Licence**: https://creativecommons.org/licenses/by/4.0/
- **Cite as**: AIPolicyTracker (2026). "Give consumers a Pre-use Notice before using automated decision-making technology for a significant decision (California CPPA automated decision-making rules)" [AIPT-OBL-0118, not yet verified]. https://aipolicytracker.org/id/AIPT-OBL-0118 (accessed 12 November 2026).

> This record is a structured summary with a link to the official text. It is not legal advice. Open the official source before relying on any date or duty. How current each record type must be is published at https://aipolicytracker.org/verification; what a record must carry at all is published at https://aipolicytracker.org/coverage.