SB 1106 California Senate · 2025-2026 Regular Session

Agentic artificial intelligence.

Summary
Existing law requires the Office of Emergency Services to, as appropriate, perform a risk analysis of potential threats posed by the use of generative artificial intelligence to California's critical infrastructure, including those that could lead to mass casualty events. Existing law requires that risk analysis to be provided to the Governor, and, if appropriate, include recommendations reflecting changes to artificial intelligence technology, its applications, and risk management, including further private actions, administrative actions, and collaboration with the Legislature to guard against potential threats and vulnerabilities. This bill would require that recommendations in the risk analysis reflecting changes to artificial intelligence technology include agentic artificial intelligence, as defined. Existing law requires the Department of Technology to annually submit to certain legislative committees a report regarding a specified required comprehensive inventory of all high-risk automated decision systems that have been, or are being, used, developed, or procured by a state agency. Existing law defines "high-risk automated decision system" to mean an automated decision system that is used to assist or replace human discretionary decisions that have a legal or similarly significant effect, including decisions that materially impact access to, or approval for, housing or accommodations, education, employment, credit, health care, and criminal justice. This bill would further require the comprehensive inventory in the report to include agentic artificial intelligence that has been, or is being, used, developed, or procured by a state agency.
Bill status passed 3 of 5 stages cleared
Introduction
Feb 2026
Committee Review
Aug 2026
Senate Passage
May 2026
Assembly Passage
Governor
Introduced Feb 13, 2026 Last action Aug 13, 2026
Maddy AI version diff · 3 comparisons

What changed between versions

06/11/26 - Amended Assembly 07/02/26 - Amended Assembly · 5 edits · Jul 2, 2026
MODERATE
The July 2 amendment removes the entire data broker deletion mechanism provision (Civil Code Section 1798.99.86) and replaces it with a new Government Code section (11546.45.5) requiring the Department of Technology to inventory all high-risk automated decision systems and agentic AI used by state agencies, with annual reports to legislative committees through 2029. The bill's focus shifts from consumer data privacy to government transparency and accountability for AI use in state operations.
SCOPE

The entire amendment to Civil Code Section 1798.99.86 was deleted. This section had required the California Privacy Protection Agency to establish a deletion mechanism allowing consumers to request data brokers delete their personal information, with data brokers required to access the mechanism every 30 days and process deletions within 30 days.

The bill title changed from 'relating to privacy. artificial intelligence.' to 'relating to artificial intelligence,' reflecting the removal of the data broker privacy provisions and the new focus on state agency AI governance.

REQUIREMENT

New Government Code Section 11546.45.5 requires the Department of Technology to conduct a comprehensive inventory of all high-risk automated decision systems and agentic AI systems that have been proposed for use, are being used, developed, or procured by any state agency, with a deadline of September 1, 2024.

DEFINITION

New definitions added for 'automated decision system' (a computational process using ML, statistical modeling, data analytics, or AI that materially impacts natural persons), 'high-risk automated decision system' (one with legal or similarly significant effect on housing, education, employment, credit, health care, or criminal justice), 'board,' 'department,' and 'state agency' with specific inclusions and exclusions.

ENFORCEMENT

The Department of Technology must submit an annual report of the comprehensive inventory to the Assembly Committee on Privacy and Consumer Protection and the Senate Committee on Governmental Organization, starting January 1, 2025. The reporting requirement becomes inoperative on January 1, 2029.

Floor votes · Senate May 19, 2026

How they voted

390
Passed · 1 other
Total votes 40
May 19, 2026
D Democratic30
30 Yea
100% Yea
R Republican10
9 Yea 1
90% Yea
Vote distribution
All Yea All Nay Mixed No data
Full legislative history

Actions timeline

Total actions
16
Key actions
7
Committee
5
Amendments
3
Aug 13, 2026
Lower · Passed
August 13 hearing: Held in committee and under submission.
lower
Jul 2, 2026
Lower · Passed
Read second time and amended. Re-referred to Com. on APPR.
lower
Jul 2, 2026
Lower · Passed
From committee: Do pass as amended and re-refer to Com. on APPR. (Ayes 12. Noes 0.) (July 1).
lower
Jun 11, 2026
Lower · Passed
From committee with author's amendments. Read second time and amended. Re-referred to Com. on P. & C.P.
lower
May 26, 2026
Committee
Referred to Com. on P. & C.P.
lower
May 19, 2026
Upper · Passed
Read third time. Passed. (Ayes 39. Noes 0. Page 4335.) Ordered to the Assembly.
upper
Apr 20, 2026
Upper · Passed
From committee: Do pass. (Ayes 5. Noes 0. Page 3953.) (April 20).
upper
Apr 7, 2026
Upper · Passed
From committee: Do pass and re-refer to Com. on APPR. (Ayes 8. Noes 0. Page 3741.) (April 6). Re-referred to Com. on APPR.
upper
Feb 26, 2026
Committee
Referred to Com. on P., D.T., & C.P.
upper
Feb 13, 2026
Introduced
Introduced. Read first time. To Com. on RLS. for assignment. To print.
upper
1 primary · 0 co-sponsors

Sponsors

Role
Legislator
Party
State
District
P
Photo of Christopher Cabaldon
Christopher Cabaldon
DDemocratic
CA
3