AB-1405 Artificial intelligence: auditors: registration
Oct 4, 2026 edition · GC-2026-0061 · Published 2026-10-04 · Version 2 · Final
AB 1405 creates a California registry for auditors of AI controls required by state law, with registration required to offer, sell or conduct covered audits beginning January 1, 2029.

What happened
California chaptered AB 1405 on September 9, 2026, establishing an AI Auditor Registry administered by the Government Operations Agency. The agency must establish the registry, annual fees limited to reasonable administrative costs, and a public misconduct-reporting mechanism by January 1, 2029. Beginning that date, a person may not offer, sell or conduct a covered AI audit without registration. The definition covers audits of AI controls, processes or systems necessary for compliance with state law; it does not make every assessment of an AI product a covered audit. Registration numbers must appear conspicuously in advertising for covered audit services, and the public registry must state that registration is not a state recommendation or endorsement.
Registered auditors must disclose their services, applicable laws, qualifications and operating procedures, update material registration information within 90 days, and retain audit reports and supporting documentation for at least 10 years. Reports must explain scope, findings, supporting evidence, limitations and appropriate measures to address deficiencies, with a signed compliance statement. Independence safeguards address financial conflicts, reviewing one's own work, employment negotiations during an audit and specified recent employment with the auditee. Qualified accountants and accounting firms can satisfy specified report and independence requirements through the stated professional standards; they are not categorically exempt from registration. The law also protects employee reporting of suspected violations and permits investigation, removal from the registry and enforcement referrals, subject to notice and an opportunity to cure or contest removal.
Scope and timing
- Authority status
- Final
- Applicability
- Operationally relevant
- Audience
- Health systems, Provider networks, Health-tech
- Jurisdiction
- California
- Recorded date
- 2029-01-01
- Date type
- compliance
Why it matters
Organizations procuring legally required AI audits need to distinguish registration from endorsement and evaluate the auditor's scope, independence and evidence retention. Firms providing covered audits have a specific January 2029 registration horizon.
Recommended action
Inventory AI audit services against the statutory covered-audit definition. Track the registry and implementing rules, prepare registration and advertising controls for January 1, 2029, and assess auditor contracts for independence, reporting and 10-year evidence retention.
Sources
- AB-1405 Artificial intelligence: auditors: registration, bill historyOfficial · California Legislature · 2026-09-09 · Source review 2026-09-10
- AB-1405 Artificial intelligence: auditors: registration, current bill text (09/09/26 - Chaptered)Official · California Legislature · 2026-09-09 · Source review 2026-09-10
- AB1405 chaptered text, retained official rendered documentOfficial · California Legislature · 2026-09-09 · Source review 2026-10-15
- Official Assembly 2023-24 Constitution, Article IV section 8Official · California Legislature · Source review 2026-10-14
Complete edition and supplemental material
This finding in the complete approved report →Regulatory horizons, CIA trends and implementation trackers remain in the full report.
Read the entire Compliance Sweep report →