Compliance SweepBack to stories →
← Back to stories

AB-1405 Artificial intelligence: auditors: registration

AB 1405 sets January 1, 2029 registration for covered third-party AI audits and preserves independence, reporting and recordkeeping safeguards.

Illustrative artwork. Fictional scene, not a photograph of the people or events in this story.

What happened

AB 1405 was chaptered September 9 as Chapter 178. By January 1, 2029 the Government Operations Agency must establish an AI Auditor Registry, cost-based annual fees and a misconduct-reporting channel; from that date a person may not offer, sell or conduct a covered AI audit without registration. The definition reaches audits of controls, processes or systems necessary for compliance with state law, performed on behalf of a third party. It is not a general registration requirement for every organization that uses AI or every internal technology review.

Registered auditors must supply business and service information, applicable-law and credential details, and a standard procedure explaining their standards and the basis for accuracy or reliability claims, subject to reasonable trade-secret redactions. They must update materially changed registry information within 90 days, provide supported audit reports addressing scope, findings, remedies and limitations, retain reports and supporting records at least ten years, and follow independence and competence standards. The law includes specified accountancy-professional alternatives, a reasonable chance to cure or contest removal, and protection for employee reporting. Registration expressly does not constitute state endorsement; the January 2029 registry milestone does not delay earlier audit duties under other law.

Scope and timing

Authority status
Final
Applicability
Operationally relevant
Audience
Health systems, Provider networks, Health-tech
Jurisdiction
California
Recorded date
2029-01-01
Date type
compliance

Why it matters

Organizations buying AI assurance need to examine scope, evidence and independence as well as a future registration number.

Sources

Complete edition and supplemental material

This finding in the complete approved report →

Regulatory horizons, CIA trends and implementation trackers remain in the full report.

Read the entire Compliance Sweep report →

← Return to stories

Privacy preferences

Where enabled for this site, Cloudflare Web Analytics can send page-use and performance measurements to Cloudflare. This panel provides information and does not turn analytics on or off.

This panel stores no tracking choice and does not change your tool saves, screening, resets, reports or exports. Other sites have separate settings.

Read Privacy & Cookies