How to Draft a California AI Policy That Complies With the CPRA and Protects Trade Secrets
California businesses using AI must comply with the CPRA’s notice, purpose-limitation, and vendor-contract rules—especially when AI touches personal information and sensitive personal information. In practice, the highest risk comes from training, prompting, and sharing data with AI vendors in ways that expand “use” and “disclosure” beyond what was disclosed to consumers and employees. This article […]