Senate BillPassed first houseCivil
SB 1106: Agentic artificial intelligence.
What SB 1106 does, verified August 15, 2026
<p>This bill aims to amend the California privacy law to require data brokers to process consumer deletion requests more frequently. Currently, data brokers must access the deletion mechanism at least once every 45 days, but the bill would reduce this period to 30 days. This change would allow consumers to request the deletion of their personal information more easily and promptly.</p>
Bill journey
✓IntroducedComplete
✓In CommitteeComplete
✓First Chamber FloorComplete
4Second ChamberCurrent
5GovernorPending
6ChapteredPending
Last action: August 13 hearing: Held in committee and under submission. (2026-08-13)Alert me
Author and sponsors
Full contact details, staff, and committees with Connect, $16/moUnlockRecent actions16 total · showing 5
| Aug. 13, 2026 | August 13 hearing: Held in committee and under submission. |
| Aug. 05, 2026 | August 5 set for first hearing. Placed on suspense file. |
| Jul. 02, 2026 | Read second time and amended. Re-referred to Com. on APPR. |
| Jul. 02, 2026 | From committee: Do pass as amended and re-refer to Com. on APPR. (Ayes 12. Noes 0.) (July 1). |
| Jun. 11, 2026 | From committee with author's amendments. Read second time and amended. Re-referred to Com. on P. & C.P. |
Latest bill textAmended version, July 2, 2026 · 1,118 words
| Amended IN Assembly July 02, 2026 |
| Amended IN Assembly June 11, 2026 |
CALIFORNIA LEGISLATURE— 2025–2026 REGULAR SESSION
Senate Bill
No. 1106
| Introduced by Senator Cabaldon |
February 13, 2026 |
An act to amend Section 3110 of the Civil Code, and to amend Sections 11546.45.5, 11549.64 and 11549.65 of the Government Code, relating to artificial intelligence.
LEGISLATIVE COUNSEL'S DIGEST
SB 1106, as amended, Cabaldon. Agentic artificial intelligence.
Existing law requires the Office of Emergency Services to, as appropriate, perform a risk analysis of potential threats posed by the use of generative artificial intelligence to California’s critical infrastructure, including those that could lead to mass casualty events. Existing law requires that risk analysis to be provided to the Governor, and, if appropriate, include recommendations reflecting changes to artificial intelligence technology, its applications, and risk management, including further private actions, administrative actions, and collaboration with the Legislature to guard against potential threats and vulnerabilities.
This bill would require that recommendations in the risk analysis reflecting changes to artificial intelligence technology include agentic artificial intelligence, as defined.
Existing law requires the Department of Technology to annually submit to certain legislative committees a report regarding a specified required comprehensive inventory of all high-risk automated decision systems that have been, or are being, used, developed, or procured by a state agency. Existing law defines “high-risk automated decision system” to mean an automated decision system that is used to assist or replace human discretionary decisions that have a legal or similarly significant effect, including decisions that materially impact access to, or approval for, housing or accommodations, education, employment, credit, health care, and criminal justice.
This bill would further require the comprehensive inventory in the report to include agentic artificial intelligence that has been, or is being, used, developed, or procured by a state agency.
The people of the State of California do enact as follows:
SECTION 1.
Section 3110 of the Civil Code is amended to read:3110.
For purposes of this title:(a)(1)“Agentic artificial intelligence” means stochastic artificial intelligence that is capable, alone or in conjunction with other agentic artificial intelligence, of all of the following:
(A)Optimizing toward multistep or abstract objectives using dynamic task decomposition or delegation, which may include modifying the behavior of the artificial intelligence based on outcomes rather than instructions or consent of the user or principal.
(B)Controlling or executing actions or tasks, executing code externally, using external tools, making purchases, or accessing accounts or applications requiring user authentication.
(C)Egressing the network or shell of either the artificial intelligence system or the user or principal.
(2)“Agentic artificial intelligence” does not include an artificial intelligence system that can respond only to direct task prompts and instructions from the user and does not have network egress or shell access capability.
(a) (1) “Agentic artificial intelligence” or “agentic AI” means an artificial intelligence system that can pursue multistep or abstract goals by independently breaking them into tasks or delegating them, adjusting its own behavior based on results rather than waiting for user instruction or consent, and that can act in the world, including by executing code, using external tools, making purchases, accessing accounts that require authentication, or operating outside its own.
(2) “Agentic artificial intelligence” does not include a system that only responds to direct prompts and instructions from the user and lacks network egress or shell access.
(b) “Artificial intelligence” means an engineered or machine-based system that varies in its level of autonomy and that can, for explicit or implicit objectives, infer from the input it receives how to generate outputs that can influence physical or virtual environments.
(c) “Developer” means a person, partnership, state or local government agency, or corporation that designs, codes, produces, or substantially modifies an artificial intelligence system or service for use by members of the public. For purposes of this subdivision, “members of the public” does not include an affiliate as defined in subparagraph (A) of paragraph (1) of subdivision (c) of Section 1799.1a, or a hospital’s medical staff member.
(d) “Generative artificial intelligence” means artificial intelligence that can generate derived synthetic content, such as text, images, video, and audio, that emulates the structure and characteristics of the artificial intelligence’s training data.
(e) “Substantially modifies” or “substantial modification” means a new version, new release, or other update to a generative artificial intelligence system or service that materially changes its functionality or performance, including the results of retraining or fine tuning.
(f) “Synthetic data generation” means a process in which seed data are used to create artificial data that have some of the statistical characteristics of the seed data.
(g) “Train a generative artificial intelligence system or service” includes testing, validating, or fine tuning by the developer of the artificial intelligence system or service.
SEC. 2.
Section 11546.45.5 of the Government Code is amended to read:11546.45.5.
(a) For purposes of this section:(1) “Agentic artificial intelligence” or “agentic AI” means an artificial intelligence system that can pursue multistep or abstract goals by independently breaking them into tasks or delegating them, adjusting its own behavior based on results rather than waiting for user instruction or consent, and that can act in the world, including by executing code, using external tools, making purchases, accessing accounts that require authentication, or operating outside its own.
(2) “Agentic artificial intelligence” does not include a system that only responds to direct prompts and instructions from the user and lacks network egress or shell access.
(1)
(3)
“Artificial intelligence” means an engineered or machine-based system that varies in its level of autonomy and that can, for explicit or implicit objectives, infer from the input it receives how to generate outputs that can influence physical or virtual environments.(2)
(4)
“Automated decision system” means a computational process derived from machine learning, statistical modeling, data analytics, or artificial intelligence that issues simplified output, including a score, classification, or recommendation, that is used to assist or replace human discretionary decisionmaking and materially impacts natural persons. “Automated decision system” does not include a spam email filter, firewall, antivirus software, identity and access management tools, calculator, database, dataset, or other compilation of data.(3)
(5)
“Board” means any administrative or regulatory board, commission, committee, council, association, or authority consisting of more than one person whose members are appointed by the Governor, the Legislature, or both.(4)
(6)
“Department” means the Department of Technology.(5)
(7)
“High-risk automated decision system” means an automated decision system that is used to assist or replace human discretionary decisions that have a legal or similarly significant effect, including decisions that materially impact access to, or approval for, housing or accommodations, education, employment, credit, health care, and criminal justice.(6)
(8)
(A) “State agency” means any of the following:Text of SB 1106 as amended, from the official record. Connect Plus keeps every version and highlights what changed.Compare versions