On June 30, 2025, the California Civil Rights Council (CRC) secured final approval for regulations addressing employment discrimination resulting from the use of artificial intelligence and other algorithms that it collectively refers to as Automated-decision Systems (ADS).
Shortly after that, on July 24, 2025, the California Privacy Protection Agency (CPPA) board approved its own long-anticipated regulations on cybersecurity audits, privacy risk assessments and automated decision-making technology (ADMT) under the California Consumer Privacy Act (CCPA). See our blog posts on the regulations and their edits and additions. While much of the focus on the CPPA’s CCPA regulations has been on traditional consumer data, the implications of this double-barreled rulemaking for human resources (HR) data may be even more significant.