Short answer: California’s 2026 AI laws mostly target large platforms, AI developers and employers using automated decisions. For small businesses, the most relevant changes are stronger rules on deleting customer data, limits on relying only on AI for firing or discipline, and broader AI transparency duties for AI providers. Most rules for customer service chatbots apply only to very large companies.
Key takeaways
- Governor Newsom signed 22 of 25 major privacy and AI bills before the September 30, 2026 deadline.
- The customer service chatbot law (AB 1609) applies only to businesses with over $500 million in annual gross revenue.
- Employers should not rely only on an automated system to discipline or fire staff (SB 947).
- Review how you collect, track and delete customer data, because privacy changes reach more businesses than the AI-specific bills.
This article is general information, not legal advice. Check the bill text and talk to a lawyer about your situation.
Which AI and privacy laws did California pass in 2026?
According to a National Law Review summary of the session, Governor Newsom signed 22 of 25 major privacy and AI bills and vetoed three. The new laws cover chatbots, AI transparency, workplace AI, health care AI, children’s online safety and consumer data.
Which new laws matter most for small businesses?
| Law | What it does | Likely impact on small businesses |
|---|---|---|
| AB 1609 | Regulates customer service chatbots | Low: applies to businesses with over $500 million in annual gross revenue |
| SB 947 | Employers may not rely solely on an automated decision system to discipline or terminate; a human must corroborate and the employee gets notice | Medium to high if you use AI or software in HR decisions |
| AB 1883 | Restricts AI-enabled workplace surveillance such as emotion recognition | Relevant if you use monitoring tools |
| SB 923 | Extends the right to delete to data collected about a consumer, including from third parties; online-only businesses must offer an online request method | Relevant if you are covered by the CCPA |
| SB 690 | Limits private lawsuits over certain website and app tracking, effective January 1, 2027 | Lower lawsuit risk for analytics, but other claims remain |
| SB 1000 | Broadens which AI providers the AI Transparency Act covers | Relevant if you build or sell generative AI tools |
| SB 1050 | Requires disclosure when an ad prominently features a synthetic performer | Relevant if you use AI-generated people in ads |
Do these laws affect my website chatbot?
For most small businesses, the dedicated customer service chatbot law will not apply because of its revenue threshold. Good practice still matters: tell visitors they are talking to an AI, offer an easy way to reach a person, and avoid collecting more personal data than you need. These habits also prepare you for future rules in other states.
What if I use AI in hiring or HR?
If you use software that scores, flags or ranks employees, make sure a person reviews the evidence before any discipline or termination, and keep a record of that review. SB 947 requires human corroboration and a notice to the employee when an automated system is used in these decisions. Also review any monitoring tools against AB 1883’s limits.
What should a small business do now?
- List every AI tool you use and what data it touches.
- Check whether you meet CCPA thresholds and review your data deletion process.
- Add an AI disclosure and human handoff to chatbots and AI phone agents.
- Keep a person in the loop for HR decisions that involve automated tools.
- Label AI-generated people in ads where required.
- Write a short internal AI policy so staff know the rules.
Where to go next
If you run a website chatbot, read our guide to an AI chatbot for your website, and for phone automation see the AI receptionist guide. Clinics and dental practices that handle patient information can see how this works in our AI chatbot for dental offices. Our responsible AI approach and data security practices explain how we build compliant systems. For a related change in how AI-written text is marked, see what the Claude text watermark means for small businesses.
Frequently asked questions
Do California’s 2026 AI laws apply to my small business?
Some may. Many target large platforms or AI developers, but rules on HR decisions, workplace monitoring and consumer data can reach smaller businesses. Check each law’s thresholds or ask a lawyer.
Do I need to tell customers they are talking to a chatbot?
The new customer service chatbot law applies to very large businesses, but disclosing AI use is good practice and is required in some situations under other laws.
Can I use AI to help with hiring and firing?
You can use AI tools to assist, but for discipline or termination in California a person must corroborate the decision and the employee must receive notice under SB 947.
When do these laws take effect?
Effective dates vary by bill. For example, SB 690 takes effect on January 1, 2027. Check each bill’s text for its date.
Try it free: take the 3-minute AI readiness quiz, see what missed calls cost you with the AI savings calculators, try the in-browser RAG chatbot demo or listen to the AI receptionist demo.
Sources
- California Privacy Protection Agency, Laws and regulations
- California Attorney General, California Consumer Privacy Act (CCPA)
- NIST, AI Risk Management Framework
Written by Waseem Hassan, AI/ML engineer and founder of NexaIntellect AI. Want AI systems that are built with compliance in mind? Book a free consultation.
AI/ML engineer building LLM agents, RAG systems and automation for growing businesses.
