# California ADMT and Risk Assessment Kit (CPPA)

- **Type**: Template (Kit)
- **Page**: https://aipolicytracker.org/templates/california-admt-compliance-kit
- **Formats**: DOCX and XLSX
- **Current version**: v1, built 2026-11-12

For businesses using automated decision-making technology for significant decisions in California, under the CPPA rules that apply from 1 January 2027: Pre-use Notice, opt-out, access response and risk assessment texts, with a register of ADMT uses, an opt-out log that counts the 15 business days, and a risk assessment tracker with the review, update and submission dates.

## What is inside

- Document: a notice, template or procedure for each recorded duty, citing its section and record
- ADMT uses sheet: system, significant decision, opt-out or exception, methods, reviewer, owner
- Opt-out log: received, stop-by date (15 business days), late flag, vendors notified, re-ask date
- Risk assessments sheet: § 7150 category, due date, three-year review, 45-day update, CPPA submission date
- Checklist and dates sheets from the record, with its review status

## Laws and frameworks it is built from

- California CPPA automated decision-making rules (California (United States)), Pending review · source-linked, checked 11 Nov 2026: https://aipolicytracker.org/policies/us-california-cppa-admt-regulations

## Recorded duties it covers

- Give consumers a Pre-use Notice before using automated decision-making technology for a significant decision (California CPPA automated decision-making rules): https://aipolicytracker.org/obligations/us-california-ccpa-admt-pre-use-notice
- Let consumers opt out of automated decision-making technology for significant decisions, or offer a qualifying human appeal (California CPPA automated decision-making rules): https://aipolicytracker.org/obligations/us-california-ccpa-admt-opt-out
- Answer consumers' requests to access information about how automated decision-making technology was used about them (California CPPA automated decision-making rules): https://aipolicytracker.org/obligations/us-california-ccpa-admt-access
- Conduct and document a risk assessment before processing that presents significant risk, including ADMT for significant decisions (California CPPA automated decision-making rules): https://aipolicytracker.org/obligations/us-california-ccpa-risk-assessment
- Submit risk assessment information to the California Privacy Protection Agency each year (California CPPA automated decision-making rules): https://aipolicytracker.org/obligations/us-california-ccpa-risk-assessment-submission

## Latest changes

First version, built from dataset d56995931cf8.

- **Retrieved**: 2026-11-12
- **Licence**: https://creativecommons.org/licenses/by/4.0/

> Built from structured summaries of official texts. Not legal advice. A record whose review status is not "verified" has not been confirmed against its official source by a named reviewer; open the official source before relying on any date or duty. How records are verified: https://aipolicytracker.org/verification.