By BTI Group | Published October 11, 2026 | Updated October 22, 2026
California just made the rules for workplace AI much stricter. On September 30, 2026, the governor signed new laws that cover how employers use artificial intelligence and automated tools in layoffs, employee monitoring, discipline and termination. In a legal update dated October 9, 2026, Seyfarth Shaw LLP Senior Counsel Yana Komsitsky explains that California “has enacted three new laws governing employer use of artificial intelligence and automated tools.” She also points out that the laws are separate from the CCPA’s automated decisionmaking technology (ADMT) rules and reach employers the CCPA does not. The same day, the governor also signed AB 1331, which bars workplace surveillance tools in workplace bathrooms, so most firm summaries now count four new laws (King & Spalding, October 13, 2026).
Here is BTI Group’s view: these laws will not stay in California. We expect them to become a model that many states copy, because limiting “robo bosses” and AI surveillance is politically popular, and lawmakers in other states are already working on similar bills. Below we summarize what the laws require, lay out the evidence behind our view, and explain how to get ready for workplace AI compliance across multiple states.
Not legal advice: This article is for general information only and is not legal advice. Talk to qualified employment counsel about your specific obligations.
What California Enacted: The Four New Workplace AI Laws
1. SB 951: AI disclosures in Cal/WARN layoff notices (effective January 1, 2027)
Cal/WARN generally requires 60 days’ advance notice of a covered mass layoff, relocation or termination. Under SB 951, if AI or automation causes all or a substantial part of a covered event, the employer has to add specific information to the notices it sends to affected employees and to the Employment Development Department (EDD). That information includes the statement “This notice is for a technology displacement” at the top, the number, job classification and work location of affected employees, the job functions being automated, and the category of technology that caused the displacement. Seyfarth notes that Cal/WARN violations “may result in civil penalties of up to $500 per day.”
2. AB 1883: Limits on AI-enabled workplace surveillance (effective January 1, 2027)
AB 1883 bars private and public employers from using AI-enabled surveillance tools to infer or predict an employee’s emotional state, or to collect neural data. The definition of a covered tool is wide. Seyfarth lists “video and audio surveillance, time tracking, geolocation” among the examples. The law covers private employers, government bodies, and California’s public university systems. It includes limited exceptions for certain safety, aircraft, national security, military, space and defense purposes. Remedies include injunctions, punitive damages, attorneys’ fees, and “civil penalties of up to $500 per violation,” and violations may also create exposure under PAGA.
3. SB 947, the No Robo Bosses Act: Human review of discipline and termination (effective July 1, 2027)
Under SB 947, an employer “may not rely solely on an ADS when making a disciplinary or termination decision.” If an employer primarily relies on the output of an automated decision system (ADS), a human has to corroborate the decision with supporting evidence, and the employer cannot use output that is inaccurate, incomplete or misleading. The employee must receive a separate plain-language written notice with a human contact, and can request a description of the data the ADS used. The burden falls on the employer: Seyfarth writes that “it will be the employer’s duty to establish compliance.” Penalties match AB 1883, up to $500 per violation, plus injunctive relief, punitive damages and fees.
4. AB 1331: No workplace surveillance tools in bathrooms (effective January 1, 2027)
AB 1331 bars employers from using a workplace surveillance tool to monitor or surveil employees in workplace bathrooms. According to King & Spalding, covered tools are defined broadly and include video and audio surveillance, continuous time tracking, geolocation and photo-optical systems, while smoke and carbon monoxide detectors and body-screening weapon detectors are excluded. Limited exceptions apply when an employee must carry a tool into a bathroom for identification or safety, or when a tool is needed to open a locked or secured bathroom. Penalties mirror AB 1883, up to $500 per violation. The law does not limit Labor Code section 435, which already bans audio or video recording in restrooms, locker rooms and changing rooms. For broader camera rules, see our guide to laws on security cameras.
California Workplace AI Compliance Timeline
| Date | Law or rule | What it means for employers |
|---|---|---|
| October 1, 2025 | Civil Rights Council ADS regulations (FEHA) | In effect. Discriminatory use of automated-decision systems is unlawful; keep ADS data and related records for 4 years. |
| January 1, 2026 | Illinois HB 3773 | In effect for Illinois employees. Discriminatory use of AI in employment decisions is a civil rights violation; notice is required. |
| January 1, 2027 | AB 1883 | No AI workplace surveillance tools that infer emotional state or collect neural data (safety exception). |
| January 1, 2027 | AB 1331 | No workplace surveillance tools in workplace bathrooms (limited exceptions). |
| January 1, 2027 | SB 951 | Cal/WARN notices must flag AI-driven layoffs: “This notice is for a technology displacement.” |
| January 1, 2027 | CCPA ADMT regulations (CPPA) | Covered businesses using ADMT for significant employment decisions before 2027 must comply by this date. |
| January 1, 2027 | Colorado SB 26-189 | Colorado AI employment obligations begin (multi-state employers). |
| July 1, 2027 | SB 947, No Robo Bosses Act | No sole reliance on an ADS for discipline or termination; human corroboration and written post-use notice. |
| December 31, 2027 | CCPA risk assessments | Risk assessments due for covered processing that began before January 1, 2026. |
| April 1, 2028 | CCPA risk assessment filing | Information on 2026 and 2027 risk assessments due to the CPPA. |
SB 947 vs. SB 7: What Changed From the Vetoed Bill
California’s first No Robo Bosses bill, SB 7, passed the Legislature in 2025 but was vetoed in October 2025. According to CNBC, the governor objected to a requirement that employers alert workers in advance whenever an AI system that could affect their working conditions was in use. Foley & Lardner notes that SB 7 would have covered hiring, promotion, discipline and termination. SB 947 is narrower: it focuses on discipline and termination, bars relying solely on an ADS, requires a human to corroborate decisions that rely primarily on an ADS, and requires a written post-use notice instead of advance notice.
Why Other States Will Follow California (BTI’s View)
The following is BTI Group’s opinion, built on public evidence we were able to verify.
The issue is easy to explain and hard to argue against
“A computer shouldn’t be able to fire you without a human checking its work” fits in one sentence. Few legislators want to vote against it publicly, and few want to defend software that guesses at employees’ emotions. In our view, the combination of AI anxiety, job security and privacy gives lawmakers in both parties a reason to act, and that is the usual recipe for model legislation.
Other states are already moving in the same direction
- New York: In March 2025, the New York State Department of Labor added a question to its WARN filing system asking whether “technological innovation or automation” contributed to a layoff (Hunton Andrews Kurth). Senate Bill S8928 would put a similar AI-layoff disclosure into the WARN statute itself. This is the same concept as California’s SB 951.
- Illinois: HB 3773 (Public Act 103-0804), in effect since January 1, 2026, makes discriminatory use of AI in employment decisions a civil rights violation and requires employers to give notice when they use AI (Gibson Dunn).
- Massachusetts, Vermont and Washington: The UC Berkeley Labor Center reports that Massachusetts’ FAIR Act and similar bills in Vermont and Washington would put guardrails on algorithmic management. It also notes that none of them had been enacted as of its review (UC Berkeley Labor Center).
- Colorado: SB 26-189, signed May 14, 2026, repeals and replaces the 2024 Colorado AI Act; its obligations for consequential decisions, including employment, generally begin January 1, 2027 (Colorado General Assembly).
- Connecticut: Public Act 26-15 requires employers filing federal WARN notices with the state to indicate whether layoffs relate to AI or other technological change (King & Spalding).
- A growing patchwork: Morgan Lewis writes that California “joins jurisdictions including Colorado, Connecticut, Illinois, and New York City” in regulating AI used in employment decisions (Morgan Lewis).
- Federal attention: CNBC reports that Senators Ed Markey and Brian Schatz introduced federal legislation with the same “No Robot Bosses” name (CNBC).
California sets templates
California’s privacy laws influenced privacy legislation in other states, and its workplace AI laws come with ready-made definitions, notice content and enforcement models. We expect drafters elsewhere to borrow from them. We don’t expect identical copies. Seyfarth notes that SB 947 is already narrower than comparable laws in Colorado and the EU. That variation is exactly why multi-site organizations should build one adaptable program now, instead of reacting to each state separately.
What This Means for Regulated, Multi-Site Organizations
The laws reach further than most teams expect. Covered tools include video systems, time tracking, geolocation, productivity dashboards, and contact-center analytics that score agent “sentiment” or “engagement.” In BTI’s experience, these capabilities often sit inside platforms owned by IT, security, facilities and operations, and nobody has a single inventory of them.
Seyfarth recommends three practical steps: “identify covered tools and decisions, assign responsibility, and put the required controls and notices in place.” Here is how we would turn that into a technical program:
- Inventory every monitoring and analytics feature, including AI analytics in video surveillance and access control, wellness and wearable tools, and quality-management or speech-analytics features in your contact center.
- Turn off or reconfigure prohibited functions, such as emotion, stress, fatigue or attentiveness inference, before January 1, 2027, and document any exception you rely on.
- Build human-in-the-loop workflows for any automated score that feeds into discipline or termination, and keep the output, the underlying data, who reviewed it, and the final decision.
- Govern data access and retention so you can produce “a meaningful, objective description” of the employee data an ADS used when someone asks for it.
- Design for multiple states, so policies and configurations can be adjusted by location as other states act.
Employer Technology Checklist for 2027
Use this list with your employment counsel. It covers the technology side of these laws.
- Video surveillance and VMS analytics: find and turn off any emotion, stress, fatigue or sentiment inference features; document any safety exception you rely on.
- Camera and sensor placement: confirm no surveillance tools cover workplace bathrooms, and review restroom, locker room and changing room areas under AB 1331 and Labor Code 435.
- Access control and badge data: list where badge, door and location data feeds reports about individual employees.
- Contact center: review speech analytics, quality scoring and sentiment or engagement scoring of agents.
- Productivity and time tracking: list dashboards, keystroke or activity tools and geolocation apps.
- Wearables and wellness tools: check for neural or emotion-related data collection.
- HR and performance scoring: identify any automated score, ranking or recommendation that can feed discipline or termination.
- Human review workflow: name who corroborates ADS output, what evidence they review, and how the decision is recorded.
- Post-use notice: assign an owner for the written notice and for employee data requests under SB 947.
- Records: keep ADS data and decision records for at least 4 years (Civil Rights Council rules).
- Vendors: review contracts for data access, settings control and audit support.
- Multi-state settings: configure policies and features by location as other states act.
How BTI Group Helps
Over 40 years in business. ISO 27001 compliant. Backed by a 24/7 NOC/SOC. BTI Group works with regulated, multi-site organizations from offices in Los Angeles, Chicagoland and Phoenix. Where these laws touch technology, we can help:
- AI governance and security: Our AI security, governance and risk services help you inventory AI tools, define human-review controls, and document decisions. Leadership teams can find more in our posts on CEO AI strategy and governance and the agentic organization AI gap, and our AI buyer’s guide walks through what to ask before you buy.
- Compliance and GRC: Our governance, risk and compliance, IT compliance and vCISO services turn legal requirements into policies, controls and evidence.
- Physical security, video and access control: We review analytics settings on video surveillance and access control systems so that security use cases stay in place and prohibited inference features stay off.
- Cybersecurity and managed IT: Our cybersecurity and managed IT services protect the sensitive employee data these laws put under scrutiny, with logging and retention that support audits.
- Communications: For Microsoft Teams and contact center environments, we help you review which AI analytics features score employees.
Find Out About BTI's Governed AI Services
BTI sets up AI with governance built in from day one. Each client runs in its own hosted Azure tenant, with human review, access controls and record keeping designed into every AI-assisted workflow, and BTI's engineers support it all.
Frequently Asked Questions
When do California’s new workplace AI laws take effect?
AB 1883 (AI emotion and neural data limits), AB 1331 (no surveillance tools in workplace bathrooms) and SB 951 (Cal/WARN AI layoff notices) take effect January 1, 2027. SB 947, the No Robo Bosses Act, applies from July 1, 2027. The CCPA ADMT rules also reach covered businesses on January 1, 2027.
Do these laws apply to employers not covered by the CCPA?
Yes. Seyfarth explains that the laws are separate from the CCPA ADMT rules and apply more broadly, including to public entities. Employers covered by both must comply with both.
Does AB 1883 ban video surveillance?
No. It prohibits using AI-enabled surveillance tools to infer an employee’s emotional state or to collect neural data. Video is listed as a covered tool type, so you should review AI analytics features on cameras.
What are the penalties?
Cal/WARN violations can bring civil penalties of up to $500 per day. AB 1883, AB 1331 and SB 947 allow penalties of up to $500 per violation, and AB 1883 and SB 947 also allow injunctions, punitive damages and attorneys’ fees, as summarized by Seyfarth and King & Spalding.
Will other states adopt similar laws?
That is BTI’s view. Colorado (SB 26-189), Illinois (HB 3773) and Connecticut (Public Act 26-15) have enacted related laws, New York added an AI question to WARN filings and has a pending bill (S8928), and Massachusetts, Vermont and Washington have proposals. Outcomes will vary by state, so multi-state employers should build adaptable programs.
Does AB 1331 ban security cameras?
No. According to King & Spalding, AB 1331 bars using workplace surveillance tools to monitor employees in workplace bathrooms, with limited exceptions. Labor Code 435 already bars recording in restrooms, locker rooms and changing rooms.
What is the difference between SB 947 and SB 7?
SB 7 was vetoed in October 2025. SB 947 is narrower: it covers discipline and termination, requires human corroboration when an employer primarily relies on an ADS, and requires a written post-use notice.
How do these laws relate to the CCPA ADMT rules and the Civil Rights Council ADS rules?
They are separate. The Civil Rights Council ADS regulations have applied California anti-discrimination law to automated-decision systems since October 1, 2025, and the CCPA ADMT rules apply to covered businesses from January 1, 2027. Employers covered by more than one must meet each.
Do these laws apply to small employers?
According to Paul Hastings, SB 947 applies to nearly all California employers. SB 951 follows Cal/WARN thresholds (a covered establishment with 75 or more employees). Check each law’s definitions with counsel.
Sources
- Office of the Governor, September 30, 2026
- SB 947 bill status (Chapter 859, Statutes of 2026)
- SB 951 bill text
- King & Spalding, October 13, 2026
- Paul Hastings, October 15, 2026
- Foley & Lardner, October 12, 2026
- CPPA ADMT regulations text
- Civil Rights Council ADS rulemaking
- Colorado SB26-189
- Seyfarth Shaw, October 9, 2026
- Hunton Andrews Kurth
- New York Senate Bill S8928
- Gibson Dunn
- UC Berkeley Labor Center
- Morgan Lewis
- CNBC, September 30, 2026
Source credit: Yana Komsitsky, “California Just Expanded Regulation of Workplace AI Beyond CCPA ADMT,” Seyfarth Shaw LLP, October 9, 2026. Quotes are reproduced with attribution. This post reflects BTI Group’s opinions and is not legal advice.
