The California Legislature adjourned at midnight on 31 August 2026 having passed roughly 30 bills regulating artificial intelligence, and Governor Gavin Newsom has until 30 September to sign or veto each of them.1 Transparency Coalition 2026-09-01 Legislature adjourned at midnight on 31 August 2026 with roughly 30 AI bills passed; governor has until 30 September to act; bill by bill list including SB 1119 (sent 31 August, 39 to 0 Senate vote on 19 May), AB 1405 AI Auditor Registry, SB 813 verification organizations, SB 947 automated decision systems, SB 951 90 day displacement notice, AB 1883 neural data, SB 867 chatbots in toys, SB 503, AB 2575, SB 903, AB 1979, SB 1000, AB 2713, SB 1111, SB 928. Open source The stake is that the package does not stop at disclosure: it creates a state licensed AI audit profession, restricts automated decisions in hiring and firing, and attaches a private right of action and $15,000 intentional violation penalties to companion chatbots used by children.1 Transparency Coalition 2026-09-01 Legislature adjourned at midnight on 31 August 2026 with roughly 30 AI bills passed; governor has until 30 September to act; bill by bill list including SB 1119 (sent 31 August, 39 to 0 Senate vote on 19 May), AB 1405 AI Auditor Registry, SB 813 verification organizations, SB 947 automated decision systems, SB 951 90 day displacement notice, AB 1883 neural data, SB 867 chatbots in toys, SB 503, AB 2575, SB 903, AB 1979, SB 1000, AB 2713, SB 1111, SB 928. Open source 4 Transparency Coalition, bill guide 2026-06-15 SB 1119 and AB 2023 require age verification, annual risk assessments, default parental controls suppressing push notifications midnight to 6am and 8am to 3pm weekdays, crisis response protocols with parental notification, bans on content encouraging self harm, substance abuse or disordered eating, limits on sycophantic responses, annual independent audits, an Attorney General complaint mechanism, civil penalties of $5,000 negligent and $15,000 intentional, and a private right of action; builds on AB 1043 and SB 243. Open source We assess with moderate confidence that the operative fact of American AI regulation for the next year is not a federal statute but a single signature window in Sacramento, and that the audit and verification bills, not the chatbot bill that drew the lobbying, will prove the more consequential half.

What actually cleared

The volume matters less than the composition. The Strauss Firm's session close accounting counts 16 AI bills and 8 privacy bills through both chambers, and the AI set is not a single theme.2 Strauss Firm 2026-09-01 Session closed 31 August 2026 with 8 privacy bills and 16 AI bills passed; AB 1609 applies to businesses above $500 million in annual revenue; SB 1000 removes the one million monthly visitor threshold from the AI Transparency Act covered provider definition; AB 2713 provenance inspection; SB 947 bars sole reliance on automated decision systems for discipline or termination; SB 813 and AB 1405 create audit and verification infrastructure. Open source It reaches employment (SB 947 bars sole reliance on an automated decision system for discipline or termination, and SB 951 requires 90 days of notice before technological displacement affecting a quarter or more of a workforce), clinical practice (SB 503 on bias in clinical decision support, AB 2575 on a clinician's right to override it, SB 903 on AI in psychotherapy, AB 1979 pulling health care chatbot providers under medical confidentiality rules), likeness (SB 1111 on digital replicas, SB 1050 on synthetic performers in advertising), and provenance (SB 1000 removes the one million monthly visitor threshold from the AI Transparency Act's covered provider definition, and AB 2713 requires platforms to let users inspect provenance data).1 Transparency Coalition 2026-09-01 Legislature adjourned at midnight on 31 August 2026 with roughly 30 AI bills passed; governor has until 30 September to act; bill by bill list including SB 1119 (sent 31 August, 39 to 0 Senate vote on 19 May), AB 1405 AI Auditor Registry, SB 813 verification organizations, SB 947 automated decision systems, SB 951 90 day displacement notice, AB 1883 neural data, SB 867 chatbots in toys, SB 503, AB 2575, SB 903, AB 1979, SB 1000, AB 2713, SB 1111, SB 928. Open source 2 Strauss Firm 2026-09-01 Session closed 31 August 2026 with 8 privacy bills and 16 AI bills passed; AB 1609 applies to businesses above $500 million in annual revenue; SB 1000 removes the one million monthly visitor threshold from the AI Transparency Act covered provider definition; AB 2713 provenance inspection; SB 947 bars sole reliance on automated decision systems for discipline or termination; SB 813 and AB 1405 create audit and verification infrastructure. Open source

Two bills in that list do something structurally different from the rest. AB 1405 directs the Government Operations Agency to establish an AI Auditor Registry and bars unregistered auditors from offering AI audit services, and SB 813 directs the same agency to select and regulate independent verification organizations that certify AI compliance.1 Transparency Coalition 2026-09-01 Legislature adjourned at midnight on 31 August 2026 with roughly 30 AI bills passed; governor has until 30 September to act; bill by bill list including SB 1119 (sent 31 August, 39 to 0 Senate vote on 19 May), AB 1405 AI Auditor Registry, SB 813 verification organizations, SB 947 automated decision systems, SB 951 90 day displacement notice, AB 1883 neural data, SB 867 chatbots in toys, SB 503, AB 2575, SB 903, AB 1979, SB 1000, AB 2713, SB 1111, SB 928. Open source 2 Strauss Firm 2026-09-01 Session closed 31 August 2026 with 8 privacy bills and 16 AI bills passed; AB 1609 applies to businesses above $500 million in annual revenue; SB 1000 removes the one million monthly visitor threshold from the AI Transparency Act covered provider definition; AB 2713 provenance inspection; SB 947 bars sole reliance on automated decision systems for discipline or termination; SB 813 and AB 1405 create audit and verification infrastructure. Open source Every other bill in the package states a duty. These two build the machinery that decides whether a duty was met, and who is allowed to say so. That is the difference between a rule and a regime.

The bill that drew the fight

SB 1119, carried by Senator Steve Padilla with Assemblymembers Buffy Wicks and Rebecca Bauer-Kahan, is the one that became the session's political test. It requires companion chatbot operators to determine a user's age, run annual risk assessments, give parents tools to limit children's time with the product, and submit to independent audits, and it bars targeted advertising built on children's personal data and the sale of data collected from children's chats, permitting only labeled age appropriate contextual advertising.3 Gizmodo 2026-09-01 Sam Altman sought to reach Governor Newsom before SB 1119 passed, though a person familiar denied they spoke; the bill was amended the Friday before the vote; SB 1119 requires age determination, parental time controls, independent audits, and bars targeted advertising on children's data and sale of children's chat data, allowing only labeled age appropriate contextual advertising; OpenAI said the bill builds on youth safety measures it has supported. Open source 4 Transparency Coalition, bill guide 2026-06-15 SB 1119 and AB 2023 require age verification, annual risk assessments, default parental controls suppressing push notifications midnight to 6am and 8am to 3pm weekdays, crisis response protocols with parental notification, bans on content encouraging self harm, substance abuse or disordered eating, limits on sycophantic responses, annual independent audits, an Attorney General complaint mechanism, civil penalties of $5,000 negligent and $15,000 intentional, and a private right of action; builds on AB 1043 and SB 243. Open source The operational detail runs further than the summary suggests: default parental controls suppressing push notifications between midnight and 6am and between 8am and 3pm on weekdays, crisis response protocols with parental notification where there is a self harm risk, prohibitions on content that encourages self harm, substance abuse or disordered eating, and a restraint on overly sycophantic responses.4 Transparency Coalition, bill guide 2026-06-15 SB 1119 and AB 2023 require age verification, annual risk assessments, default parental controls suppressing push notifications midnight to 6am and 8am to 3pm weekdays, crisis response protocols with parental notification, bans on content encouraging self harm, substance abuse or disordered eating, limits on sycophantic responses, annual independent audits, an Attorney General complaint mechanism, civil penalties of $5,000 negligent and $15,000 intentional, and a private right of action; builds on AB 1043 and SB 243. Open source Enforcement carries civil penalties of $5,000 per negligent violation and $15,000 per intentional one, an Attorney General complaint mechanism, and a private right of action for harmed children.4 Transparency Coalition, bill guide 2026-06-15 SB 1119 and AB 2023 require age verification, annual risk assessments, default parental controls suppressing push notifications midnight to 6am and 8am to 3pm weekdays, crisis response protocols with parental notification, bans on content encouraging self harm, substance abuse or disordered eating, limits on sycophantic responses, annual independent audits, an Attorney General complaint mechanism, civil penalties of $5,000 negligent and $15,000 intentional, and a private right of action; builds on AB 1043 and SB 243. Open source

The bill traces to a specific death. Padilla's office cites the case of Adam Raine, a California teenager who died by suicide after extended interaction with a chatbot, and states that court documents record the system mentioning suicide more than 1,200 times.5 Office of Senator Steve Padilla 2026-05-20 SB 1119 and AB 2023 authored by Padilla with Wicks and Bauer-Kahan; SB 1119 cleared Senate Privacy 7 to 0 and Senate Judiciary 13 to 0, AB 2023 cleared Assembly Privacy and Consumer Protection 13 to 2; requirements include annual risk assessments addressing suicidal ideation, unhealthy dependency and social isolation; the bills respond to the death of Adam Raine, with court documents said to record more than 1,200 mentions of suicide; Padilla quoted on dire consequences. Open source That figure comes from the sponsor's own release rather than from a court record read independently, and should be read accordingly. The legislative path was not close: SB 1119 cleared Senate Privacy 7 to 0 and Senate Judiciary 13 to 0, and passed the Senate floor 39 to 0 on 19 May before returning from the Assembly on 31 August.5 Office of Senator Steve Padilla 2026-05-20 SB 1119 and AB 2023 authored by Padilla with Wicks and Bauer-Kahan; SB 1119 cleared Senate Privacy 7 to 0 and Senate Judiciary 13 to 0, AB 2023 cleared Assembly Privacy and Consumer Protection 13 to 2; requirements include annual risk assessments addressing suicidal ideation, unhealthy dependency and social isolation; the bills respond to the death of Adam Raine, with court documents said to record more than 1,200 mentions of suicide; Padilla quoted on dire consequences. Open source 1 Transparency Coalition 2026-09-01 Legislature adjourned at midnight on 31 August 2026 with roughly 30 AI bills passed; governor has until 30 September to act; bill by bill list including SB 1119 (sent 31 August, 39 to 0 Senate vote on 19 May), AB 1405 AI Auditor Registry, SB 813 verification organizations, SB 947 automated decision systems, SB 951 90 day displacement notice, AB 1883 neural data, SB 867 chatbots in toys, SB 503, AB 2575, SB 903, AB 1979, SB 1000, AB 2713, SB 1111, SB 928. Open source

Industry read those margins correctly and moved to the only remaining veto point. Gizmodo reports that Sam Altman sought to reach Newsom in the week before final passage, though a person familiar with the matter denied that the two spoke, and that the bill was amended on the Friday before the vote.3 Gizmodo 2026-09-01 Sam Altman sought to reach Governor Newsom before SB 1119 passed, though a person familiar denied they spoke; the bill was amended the Friday before the vote; SB 1119 requires age determination, parental time controls, independent audits, and bars targeted advertising on children's data and sale of children's chat data, allowing only labeled age appropriate contextual advertising; OpenAI said the bill builds on youth safety measures it has supported. Open source OpenAI's public position afterward was that the bill builds on youth safety work the company already supports.3 Gizmodo 2026-09-01 Sam Altman sought to reach Governor Newsom before SB 1119 passed, though a person familiar denied they spoke; the bill was amended the Friday before the vote; SB 1119 requires age determination, parental time controls, independent audits, and bars targeted advertising on children's data and sale of children's chat data, allowing only labeled age appropriate contextual advertising; OpenAI said the bill builds on youth safety measures it has supported. Open source The gap between a private approach to the governor and a supportive public statement is itself the signal: with a unanimous floor vote behind it, opposing SB 1119 on the record buys nothing, and the leverage that remains sits in amendments and in the signing decision.

Who gains, who loses

Large model developers gain on relative terms and lose on absolute ones. Age assurance, annual risk assessment, independent audit and provenance inspection are fixed costs that scale poorly for a startup and are rounding errors for a company with a trust and safety organization already built.3 Gizmodo 2026-09-01 Sam Altman sought to reach Governor Newsom before SB 1119 passed, though a person familiar denied they spoke; the bill was amended the Friday before the vote; SB 1119 requires age determination, parental time controls, independent audits, and bars targeted advertising on children's data and sale of children's chat data, allowing only labeled age appropriate contextual advertising; OpenAI said the bill builds on youth safety measures it has supported. Open source 4 Transparency Coalition, bill guide 2026-06-15 SB 1119 and AB 2023 require age verification, annual risk assessments, default parental controls suppressing push notifications midnight to 6am and 8am to 3pm weekdays, crisis response protocols with parental notification, bans on content encouraging self harm, substance abuse or disordered eating, limits on sycophantic responses, annual independent audits, an Attorney General complaint mechanism, civil penalties of $5,000 negligent and $15,000 intentional, and a private right of action; builds on AB 1043 and SB 243. Open source AB 1609's customer service chatbot obligations reach only businesses above $500 million in annual revenue, but most of the package draws no such line, and SB 1000 deliberately removes an existing size threshold from the Transparency Act.2 Strauss Firm 2026-09-01 Session closed 31 August 2026 with 8 privacy bills and 16 AI bills passed; AB 1609 applies to businesses above $500 million in annual revenue; SB 1000 removes the one million monthly visitor threshold from the AI Transparency Act covered provider definition; AB 2713 provenance inspection; SB 947 bars sole reliance on automated decision systems for discipline or termination; SB 813 and AB 1405 create audit and verification infrastructure. Open source

The clearest gainers are the auditors. AB 1405 and SB 813 together convert AI assurance from a consulting product into a state gated one, and the firms admitted to the registry acquire a position no legislature has previously created in this market.1 Transparency Coalition 2026-09-01 Legislature adjourned at midnight on 31 August 2026 with roughly 30 AI bills passed; governor has until 30 September to act; bill by bill list including SB 1119 (sent 31 August, 39 to 0 Senate vote on 19 May), AB 1405 AI Auditor Registry, SB 813 verification organizations, SB 947 automated decision systems, SB 951 90 day displacement notice, AB 1883 neural data, SB 867 chatbots in toys, SB 503, AB 2575, SB 903, AB 1979, SB 1000, AB 2713, SB 1111, SB 928. Open source 2 Strauss Firm 2026-09-01 Session closed 31 August 2026 with 8 privacy bills and 16 AI bills passed; AB 1609 applies to businesses above $500 million in annual revenue; SB 1000 removes the one million monthly visitor threshold from the AI Transparency Act covered provider definition; AB 2713 provenance inspection; SB 947 bars sole reliance on automated decision systems for discipline or termination; SB 813 and AB 1405 create audit and verification infrastructure. Open source Plaintiffs' firms gain the private right of action in SB 1119, which turns child safety compliance into litigation exposure rather than a regulator's discretionary matter.4 Transparency Coalition, bill guide 2026-06-15 SB 1119 and AB 2023 require age verification, annual risk assessments, default parental controls suppressing push notifications midnight to 6am and 8am to 3pm weekdays, crisis response protocols with parental notification, bans on content encouraging self harm, substance abuse or disordered eating, limits on sycophantic responses, annual independent audits, an Attorney General complaint mechanism, civil penalties of $5,000 negligent and $15,000 intentional, and a private right of action; builds on AB 1043 and SB 243. Open source

The losers are less obvious than the headlines suggest. Companion chatbot startups without an audit budget lose the ability to serve minors at all in the largest state market. Employers using automated screening lose the option of a fully automated adverse action under SB 947, and any employer contemplating a large AI driven reduction loses timing flexibility under SB 951's notice period.1 Transparency Coalition 2026-09-01 Legislature adjourned at midnight on 31 August 2026 with roughly 30 AI bills passed; governor has until 30 September to act; bill by bill list including SB 1119 (sent 31 August, 39 to 0 Senate vote on 19 May), AB 1405 AI Auditor Registry, SB 813 verification organizations, SB 947 automated decision systems, SB 951 90 day displacement notice, AB 1883 neural data, SB 867 chatbots in toys, SB 503, AB 2575, SB 903, AB 1979, SB 1000, AB 2713, SB 1111, SB 928. Open source 2 Strauss Firm 2026-09-01 Session closed 31 August 2026 with 8 privacy bills and 16 AI bills passed; AB 1609 applies to businesses above $500 million in annual revenue; SB 1000 removes the one million monthly visitor threshold from the AI Transparency Act covered provider definition; AB 2713 provenance inspection; SB 947 bars sole reliance on automated decision systems for discipline or termination; SB 813 and AB 1405 create audit and verification infrastructure. Open source Health systems deploying clinical AI absorb bias identification duties and an override obligation that has to be designed into the product, not bolted onto the policy manual.1 Transparency Coalition 2026-09-01 Legislature adjourned at midnight on 31 August 2026 with roughly 30 AI bills passed; governor has until 30 September to act; bill by bill list including SB 1119 (sent 31 August, 39 to 0 Senate vote on 19 May), AB 1405 AI Auditor Registry, SB 813 verification organizations, SB 947 automated decision systems, SB 951 90 day displacement notice, AB 1883 neural data, SB 867 chatbots in toys, SB 503, AB 2575, SB 903, AB 1979, SB 1000, AB 2713, SB 1111, SB 928. Open source

The counter-case

The strongest argument against this reading is that nothing has been enacted. Thirty bills reaching a desk is not thirty laws, and the governor holds an unreviewable veto through 30 September on each one individually.1 Transparency Coalition 2026-09-01 Legislature adjourned at midnight on 31 August 2026 with roughly 30 AI bills passed; governor has until 30 September to act; bill by bill list including SB 1119 (sent 31 August, 39 to 0 Senate vote on 19 May), AB 1405 AI Auditor Registry, SB 813 verification organizations, SB 947 automated decision systems, SB 951 90 day displacement notice, AB 1883 neural data, SB 867 chatbots in toys, SB 503, AB 2575, SB 903, AB 1979, SB 1000, AB 2713, SB 1111, SB 928. Open source A governor with national ambitions and a state economy anchored in these companies has both reason and precedent to sign the child safety measures, which carry no political cost, while vetoing the employment and audit bills, which carry a large one. If AB 1405 and SB 813 fall, the package loses the enforcement machinery and reverts to a set of duties with no professional infrastructure to test them, which is a materially weaker outcome than the one assessed above. Federal preemption is a second route to the same result, though on a slower clock. A third possibility deserves weight: several of these bills take effect well after signature, and a legislature that passes 30 bills in one session frequently spends the next one amending them.

What to watch

  • The 30 September disposition, bill by bill. Count signatures against the audit and employment bills specifically, not the total. If AB 1405 and SB 813 are signed alongside SB 1119, California has built a regime; if only the child safety bills survive, it has passed a headline.1 Transparency Coalition 2026-09-01 Legislature adjourned at midnight on 31 August 2026 with roughly 30 AI bills passed; governor has until 30 September to act; bill by bill list including SB 1119 (sent 31 August, 39 to 0 Senate vote on 19 May), AB 1405 AI Auditor Registry, SB 813 verification organizations, SB 947 automated decision systems, SB 951 90 day displacement notice, AB 1883 neural data, SB 867 chatbots in toys, SB 503, AB 2575, SB 903, AB 1979, SB 1000, AB 2713, SB 1111, SB 928. Open source 2 Strauss Firm 2026-09-01 Session closed 31 August 2026 with 8 privacy bills and 16 AI bills passed; AB 1609 applies to businesses above $500 million in annual revenue; SB 1000 removes the one million monthly visitor threshold from the AI Transparency Act covered provider definition; AB 2713 provenance inspection; SB 947 bars sole reliance on automated decision systems for discipline or termination; SB 813 and AB 1405 create audit and verification infrastructure. Open source
  • Whether the Government Operations Agency staffs the registry. Watch for a rulemaking notice or an accreditation standard for AI auditors within the first two quarters after enactment. A registry with no admitted auditors is the failure mode.1 Transparency Coalition 2026-09-01 Legislature adjourned at midnight on 31 August 2026 with roughly 30 AI bills passed; governor has until 30 September to act; bill by bill list including SB 1119 (sent 31 August, 39 to 0 Senate vote on 19 May), AB 1405 AI Auditor Registry, SB 813 verification organizations, SB 947 automated decision systems, SB 951 90 day displacement notice, AB 1883 neural data, SB 867 chatbots in toys, SB 503, AB 2575, SB 903, AB 1979, SB 1000, AB 2713, SB 1111, SB 928. Open source
  • The first SB 1119 private action. The private right of action is the enforcement mechanism that does not depend on the Attorney General's budget. A filed complaint within six months of the effective date would confirm the litigation channel is live; silence through a year would suggest the penalty tiers are the real constraint.4 Transparency Coalition, bill guide 2026-06-15 SB 1119 and AB 2023 require age verification, annual risk assessments, default parental controls suppressing push notifications midnight to 6am and 8am to 3pm weekdays, crisis response protocols with parental notification, bans on content encouraging self harm, substance abuse or disordered eating, limits on sycophantic responses, annual independent audits, an Attorney General complaint mechanism, civil penalties of $5,000 negligent and $15,000 intentional, and a private right of action; builds on AB 1043 and SB 243. Open source
  • Whether age assurance ships nationally or only in California. If a major chatbot provider rolls out age determination and parental time controls across the United States rather than geofencing them, California has again set the national floor by default, which is the mechanism that made its privacy statute a de facto standard.3 Gizmodo 2026-09-01 Sam Altman sought to reach Governor Newsom before SB 1119 passed, though a person familiar denied they spoke; the bill was amended the Friday before the vote; SB 1119 requires age determination, parental time controls, independent audits, and bars targeted advertising on children's data and sale of children's chat data, allowing only labeled age appropriate contextual advertising; OpenAI said the bill builds on youth safety measures it has supported. Open source
  • Whether a preemption vehicle names these bills. Watch any federal AI preemption text for language reaching state audit or verification mandates rather than only disclosure rules. That is the tell for which half of California's package Washington actually fears.

For two years the argument about AI regulation in the United States has been conducted in drafts and frameworks. California has now put a complete compliance code on a governor's desk with a hard deadline, and whatever survives that desk becomes the specification that every model developer serving American users builds against, whether Congress agrees or not.