While the federal government appears content to sit back and wait, more than 40 U.S. states are .
California, with its status as a tech-forward state and huge economy, has a chance to lead the way. So much so, in fact, that the European Union is trying to coordinate with the state on AI laws. The EU opened an office in San Francisco in 2022 and dispatched a tech envoy, Gerard de Graaf, to better communicate about laws and regulations around AI.
We are living through what de Graaf calls 鈥渢he year of AI.鈥 De Graaf and deputy head of the EU office in San Francisco Joanna Smolinska told CalMatters that if California lawmakers pass AI regulation in the coming months, the state can emerge as a standard bearer for the regulation of AI in the United States. In other words: California鈥檚 laws could influence the future of AI as we know it.
Last month, de Graaf to speak with several state lawmakers key to AI regulation:
- Assemblymember Rebecca Bauer-Kahan, a San Ramon Democrat, is author of a bill that in an effort to prohibit automated discrimination
- Democratic State Sen. Scott Wiener from San Francisco is author of a
- Assemblywoman Buffy Wicks, an East Bay Democrat, is author of a bill that would require online platforms put sometimes referred to as deepfakes ahead of elections this fall
- And Sen. Tom Umberg, chair of the Senate Judiciary Committee, who was referred to as the 鈥淐alifornia鈥檚 chief gatekeeper for AI rules.鈥
The meeting to discuss the bills was at least the sixth trip de Graaf or other EU officials made to Sacramento in two months. EU officials who helped write the AI Act and EU Commission Vice President Josep Fontelles also made trips to Sacramento and Silicon Valley in recent weeks.
This week, EU leaders ended a years-long process with the , which regulates use of artificial intelligence in 27 nations. It bans emotion recognition at school and in the workplace, prohibits such as the kind used in China to reward or punish certain kinds of behavior and some instances of predictive policing. The AI Act applies high risk labels for AI in health care, hiring, and issuing government benefits.
There are some notable differences between the EU law and what California lawmakers are considering. The AI Act addresses how law enforcement agencies can use AI, while Bauer-Kahan鈥檚 bill does not, and Wicks鈥 watermarking bill could end up stronger than AI Act requirements. But the California bills and the AI Act both take a risk-based approach to regulation, both advise continued testing and assessment of forms of AI deemed high risk, and both call for watermarking generative AI outputs.
鈥淚f you take these three bills together, you鈥檙e probably at 70-80% of what we cover in the AI Act,鈥 de Graaf said. 鈥淚t鈥檚 a very solid relationship that we both benefit from.鈥
In the meeting, de Graaf said they discussed draft AI bills, AI bias and risk assessments, advanced AI models, the state of watermarking images and videos made by AI, and which issues to prioritize. The San Francisco office works under the authority of the EU delegation in Washington D.C. to promote EU tech policy and strengthen cooperation with influential tech and policy figures in the United States.
Artificial intelligence can make predictions about people including what movies they want to watch on Netflix or the next words in a sentence, but without high standards and continuous testing, AI that makes critical decisions about people鈥檚 lives can automate discrimination. AI has a history of harming people of color, such as , or . The technology has a demonstrated ability to adversely affect the lives of most people, including women, people with disabilities, the young, the old, and .
In a recent , Umberg talked about the importance of striking a balance, insisting 鈥淲e could get this wrong.鈥 Too little regulation could lead to catastrophic consequences for society, and too much could 鈥渟trangle the AI industry鈥 that calls California home.
Coordination between California and EU officials attempts to combine regulatory initiatives in two uniquely influential markets.
The majority of the top AI companies are , and according to startup tracker Crunchbase, for the past eight months, companies in .
The General Data Protection Regulation, better known as GDPR, is the European Union鈥檚 best known legislation for privacy protection. It also led to coinage of the term 鈥渢he Brussels effect,鈥 when enforcement of a single law leads to outsized influence in other countries. In this case, the EU law forced tech companies to adopt stricter user protections if they wanted access to the region鈥檚 450 million residents. That law went into effect in 2018, the same year that California passed a similar law. .
Defining AI
Coordination is necessary, de Graaf said, because technology is a global industry and it鈥檚 important to avoid policy that makes it complicated for businesses to comply with rules around the world.
One of the first steps to working together is a shared definition of how to define artificial intelligence so you agree on what technology is covered under a law. De Graaf said his office worked with Bauer-Kahan and Umberg on how to define AI 鈥渂ecause if you have very different definitions to start with then convergence or harmonization is almost impossible.鈥
Given the recent passage of the AI Act, the absence of federal action, and the complexity of regulating AI, the Senate Judiciary staff lawyers held numerous meetings with EU officials and staff, Umberg told CalMatters in a statement. The definition of AI used by the California Senate Judiciary committee is informed by a number of voices including federal agencies, the Organization for Economic Co-operation and Development, and the EU.
鈥淚 strongly believe that we can learn from each other鈥檚 work and responsibly regulate AI without harming innovation in this dynamic and quickly-changing environment鈥 Umberg told CalMatters in a written statement.
The trio of bills discussed with de Graaf in April passed their respective houses this week. He suspects questions from California lawmakers will get more specific as bills move closer to adoption.
California lawmakers to regulate AI in the current legislative session.
鈥淚 think what is now the imperative for the Legislature is to whittle the bills down to a more manageable number,鈥 he said. 鈥淚 mean, there鈥檚 over 50 so that we focused particularly on the bills to these assembly members or senators themselves.鈥
State agency also seeks to protect Californians鈥 privacy
Elected officials and their staff aren鈥檛 the only ones speaking with EU officials. The California Privacy Protection Agency 鈥 a state agency made to protect people鈥檚 privacy and 鈥 also speaks regularly with EU officials, including de Graaf.
Most states with privacy protection laws rely on state attorneys general for enforcement. California is the only state with an independent agency with enforcement authority to audit businesses, levy fines, or bring businesses to court, said agency executive director Ashkan Soltanti, because key elements of the EU鈥檚 privacy protection law influenced the formation of California鈥檚 privacy law. De Graaf and Soltani testified about similarities between definitions of AI in California and the EU in .
鈥淭he roots of the agency were inspired at great length by the General Data Protection Regulation (GDPR),鈥 Soltani said. 鈥淭here鈥檚 an interest and a goal, and in fact, to where possible, make sure that our approach is harmonious with frameworks in other jurisdictions, not just states but internationally as well.鈥
Soltani was hired when the agency was created in 2021. He told CalMatters international coordination is a big part of the job. After hiring staff and attorneys, one of his first orders of business was joining the Global Privacy Assembly, a group of 140 data privacy authorities from around the world. California is the only U.S. state that is a member of the group.
Alignment is important for setting the rules of the road for businesses but also for consumers to protect themselves and their communities in a digital world where borders blur.
鈥淭hey don鈥檛 think whether they鈥檙e doing business with a California company or a European company or an Asian company, particularly if it鈥檚 all in English, they just think they鈥檙e interacting online, so having consistent frameworks for protection ultimately benefits consumers,鈥 Soltani said.
Like California lawmakers, and protections for consumers, students, and workers. And like the AI Act, draft rules call for impact assessments. Its five-member board will consider passing rules into law in July.
The last day of the legislative calendar year for California lawmakers to pass a bill into law is Aug. 31.
is a nonprofit, nonpartisan media venture explaining California policies and politics.