Yes, whenever an agent processes the personal information of California consumers for a business the law covers. The CCPA, as amended by the CPRA, does not regulate agents as such; it regulates what happens to personal information. An agent that reads, infers, stores or shares that information must respect consumers' rights, purpose limits and contract rules like any other system.
What does the CCPA require, in plain words?
The California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies to for-profit businesses that do business in California and meet certain size or data thresholds. In substance, it gives consumers rights to know what personal information a business holds about them, to delete it, to correct it, to opt out of its sale or sharing, and to limit the use of sensitive personal information. Businesses must give notice at collection, use information only for disclosed and compatible purposes, keep it no longer than necessary, use reasonable security, and put specific contracts in place with service providers and contractors.
Inferences drawn about a consumer count as personal information. California's privacy regulator has also made rules addressing automated decision-making technology, risk assessments and cybersecurity audits, with requirements phasing in; their scope for agents that make decisions about consumers is discussed in the CCPA and AI agents that make decisions about consumers.
Some information already governed by other federal laws, such as financial data under GLBA and health data under HIPAA, is partly exempt.
This is an explanation of the rules, not legal advice; confirm how they apply to you with counsel.
Who does it apply to?
| Party | Position |
|---|---|
| A business in scope deploying the agent | Business, with the main duties |
| The agent platform processing data for it | Usually a service provider, under contract |
| The model provider receiving data through the platform | Usually a service provider or contractor in the chain |
| Consumers whose data the agent handles | Hold the rights |
A broader overview of how the amended law reaches agents is in the CCPA, the CPRA and AI agents serving California consumers.
What changes when the system is an agent?
Agents create new personal information. A summary, a risk flag or a predicted reason for contact is an inference about a consumer. It must be covered by your notice, used only for compatible purposes and included in responses to access requests.
Deletion has to reach the agent's records. If a consumer asks for deletion, the request must reach the agent's working stores, the platform and any provider that kept the data, subject to the law's exceptions, including legal obligations to retain records.
Purpose drift is easy. An agent built to answer billing questions can be pointed at marketing with a change to its brief. Under the CCPA, that new use must be compatible with what consumers were told, or disclosed afresh.
Contracts must match the chain. Service provider terms must bar the platform and model provider from using the data for their own purposes, including improving their models unless the law permits it.
How do you meet it?
| Requirement in substance | Control for an agent | Evidence it leaves |
|---|---|---|
| Notice at collection | Notice covers agent processing and inferences | Published notice, versioned |
| Purpose limitation | Purpose stated per capability; new uses reviewed | Purpose register |
| Access and deletion rights | Agent stores and provider data included in request handling | Request logs |
| Correction | Corrections flow to sources the agent reads | Change records |
| Service provider contracts | Required terms with platform and model provider | Executed contracts |
| Sensitive information | Field-level limits on what the agent reads and sends | Configuration |
| Security | Scoped credentials, filed record of every action | Access grants and record |
What does that look like in practice?
Say a California utility deploys an agent to answer billing queries and draft payment plan offers at depth 2. Its notice is updated to describe the agent and the inferences it makes, such as likelihood of needing a payment plan. The platform and model provider sign service provider terms barring other uses. When a customer requests deletion, the request process removes the agent's stored summaries and confirms deletion with the platform, while billing records the utility must keep are retained under the law's exceptions. A proposal to reuse the agent's inferences for marketing goes to the privacy team first.
What does the CCPA not cover?
It does not set accuracy standards for agents or require human review of every decision in itself. Fair lending, insurance and employment rules have their own requirements, and businesses below the thresholds fall outside it.
The wider rules picture is in our guide to AI agent regulation.
Questions people ask
Does the CCPA apply to agents handling employee data?
Employee and job applicant information is within the CCPA's scope for covered businesses, so an agent processing it must respect those rights.
Are agent-generated summaries disclosable on an access request?
They are personal information if they relate to an identifiable consumer, so they generally belong in the response, subject to the law's exceptions.
Do other US states have similar laws?
Several states have comprehensive privacy laws, and Colorado has passed an AI act aimed at high-risk systems that make consequential decisions. Check each state where your consumers live.