SB 468: High-risk artificial intelligence systems: duty to protect personal information.

This bill aims to protect personal information held by businesses that deploy high-risk artificial intelligence systems. A covered deployer must develop and maintain a comprehensive information security program that meets specific requirements, including administrative, technical, and physical safeguards. The program must incorporate safeguards consistent with applicable state or federal laws and regulations. A violation of this provision would constitute a deceptive trade act or practice under the Unfair Competition Law. The California Privacy Rights Agency would have the authority to adopt regulations to implement these provisions, and the agency would have jurisdiction to enforce the law.