Cybersecurity Policy Report, TechFreedom Opposes CPPA’s Proposed ADMT Rules, (Feb 20, 2025)
Rules proposed by the California Privacy Protection Agency (CPPA) on automated decision-making technology (ADMT) exceed the scope of the agency’s authority under the California Consumer Privacy Act (CCPA), according to TechFreedom.
The rules attempt “to shoehorn artificial intelligence (AI) regulations into the implementation of a privacy law framework,” TechFreedom said in comments filed with the CPPA.
To better align with the intent of California voters and lawmakers, TechFreedom recommends that the CPPA narrow the proposed definition of ADMT to focus “solely on automated technologies that directly affect consumer privacy,” the group said in a news release.
TechFreedom’s comments highlight that the CCPA is a privacy law and was not conceived as an AI law, but that changed when Assembly Bill 1008 was signed into law, effectively expanding the definition of “personal information” to include “artificial intelligence systems that are capable of outputting personal information.”
Despite that amendment, the focus of the act remains squarely on consumers’ private information, which is appropriate, according to TechFreedom, because AI is, at most, “at the periphery of the authority given to the CPPA by California voters and lawmakers.”
TechFreedom explains that the proposed ADMT regulations define automated decision-making so broadly that they would cover virtually any software, including AI technologies with no clear impact on consumer privacy.
Accordingly, TechFreedom suggested that the definition of ADMT be narrowed to mean “any automated technology that processes personal information and uses computation for the primary purpose of making a solely automated significant decision about a consumer.”
News: StateLegislation DataPrivacy CCPA