AB 2027: Worker data: prohibitions: artificial intelligence.
This bill aims to regulate the use of worker data by employers and vendors to prevent the replication, automation, or replacement of jobs. Employers and vendors are prohibited from using worker data to train or deploy artificial intelligence for these purposes. They are also not allowed to sell, disclose, or provide access to worker data to third parties for this purpose. The bill requires a contract between an employer and vendor to include specific terms, including joint liability for violations. A statutory penalty of up to $500 per employee for each violation is established. Workers can bring civil actions for damages, injunctive relief, and attorney's fees and costs if a violation occurs. The bill applies to all cities, including charter cities.
| May. 14, 2026 | Coauthors revised. |
| May. 14, 2026 | In committee: Held under submission. |
| May. 06, 2026 | In committee: Set, first hearing. Referred to APPR. suspense file. |
| Apr. 22, 2026 | From committee: Do pass and re-refer to Com. on APPR. (Ayes 10. Noes 3.) (April 21). Re-referred to Com. on APPR. |
| Apr. 16, 2026 | In committee: Set, first hearing. Hearing canceled at the request of author. |
| Amended IN Assembly April 09, 2026 |
| Amended IN Assembly March 16, 2026 |
| Introduced by Assembly Member Ward |
February 17, 2026 |
LEGISLATIVE COUNSEL'S DIGEST
The people of the State of California do enact as follows:
SECTION 1.
Part 5.9 (commencing with Section 1570) is added to Division 2 of the Labor Code, to read:PART 5.9. Worker Data Protection
1570.
As used in this part:(c)
(d)
(e)“Worker data” means any of the following:
(1)Information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with the personal information relating to, a worker, regardless of how the information is collected, inferred, or obtained, including, but not limited to, a worker’s biometric data, employment history, or personal identifying information.
(2)Information that in any way relates to or describes, regardless of how the information is collected, inferred, or obtained, how a worker performs their job duties.
(a)An employer, or a vendor acting on behalf of an employer, shall collect and process worker data only as strictly necessary to administer the employment relationship and to fulfill specific, affirmatively requested employment-related or legal obligations, and shall not collect or use worker data for any other purpose, including, but not limited to, using worker data to train an artificial intelligence system to replicate, automate, or replace a worker’s job.
(b)
1571.
(a) An(c)
(d)
(e)
(2)A provision that the vendor and employer agree to be jointly and severally liable for a breach of the vendor’s data security systems or unauthorized access, to the extent the breach or access involves worker data provided by the employer, and for any violation of this part.
1572.
(a) The Labor Commissioner shall enforce this part, including investigating an alleged violation and ordering appropriate temporary relief to mitigate a violation or maintain the status quo pending the completion of a full investigation or hearing through the procedures set forth in Section 98, 98.3, 98.7, 98.74, or 1197.1, including issuing a citation against an employer who violates this part or filing a civil action. If a citation is issued, the procedures for issuing, contesting, and enforcing judgments for citations and civil penalties issued by the Labor Commissioner shall be the same as those set forth in Section 98.74 or 1197.1, as applicable.