On Sunday the California AI Transparency Act becomes operative, and the first state-level content-provenance mandate in the United States stops being theoretical. It was supposed to bind on January 1. AB 853, signed by Governor Gavin Newsom on October 13, 2025, moved the date to August 2, 2026 — not to give anyone a break, but to line California up with the EU AI Act rather than with Washington.
It reaches “covered providers”: anyone producing a generative AI system with more than one million monthly visitors or users that is publicly accessible in California. Four obligations attach. Publish a free, public detection tool that lets anyone check whether a piece of content came out of your system. Offer users a manifest disclosure — a visible label on the output. Embed a latent disclosure, machine-readable provenance carried inside the file itself. And write terms into your licensing agreements so downstream licensees cannot strip any of it out.
Then read the scope line carefully. The statute’s definition of a generative AI system mentions text. The word was removed from the operative provisions. As Troutman Pepper Locke noted in its analysis of the amendments, the obligations apply only to image, video and audio. The most common thing people do with AI — generate written words — sits entirely outside a law written to fight deception.
Our take: Price the enforcement before you price the compliance. The penalty is $5,000 per violation, collectible by the Attorney General, any city attorney, or any county counsel — and each day out of compliance is a discrete violation. A year of quiet non-compliance on one obligation clears $1.8 million, and a prevailing plaintiff collects fees on top. Three sets of lawyers with concurrent authority and a per-day clock is a structure built to be used. But the text carve-out tells you what this actually is: not an AI honesty law, a photo-and-video provenance law. It will make synthetic images traceable and do nothing about the synthetic paragraph in your inbox. The compliance question that matters is not whether you are covered on Sunday. It is whether you are covered on January 1.
The dates after Sunday
- January 1, 2027 — large online platforms. Any public-facing social platform, file-sharing service, mass messaging app or standalone search engine that reached more than two million unique monthly users over the preceding 12 months must detect provenance data in what it carries, surface it in the interface, and let users inspect it. That is Instagram and X, plus many smaller services that never considered themselves regulated.
- January 1, 2027 — GenAI hosting platforms. Any site that makes model weights or source code available for download to a California resident may not knowingly host a system lacking those disclosures. This is the provision with real teeth for open weights, and nobody has explained how a weights repository is supposed to police it.
- January 1, 2028 — capture devices. Cameras, phones and voice recorders sold in California must embed device, date and time disclosures in captured content by default. Provenance stops being an AI feature and becomes a hardware default.
What to watch
- Whether the detectors work. A free public tool that returns false negatives on your own model’s output is worse than none — it launders fakes as authentic. No accuracy floor has been published.
- The open-weights answer. The 2027 hosting rule could push repositories toward geoblocking California rather than complying.
- Federal preemption. There is still no comprehensive federal AI statute, so binding duties sit in state law — a patchwork the labs themselves are split on. A preemption push aimed at California is the obvious countermove.
- Whether text comes back. Restoring one word to the operative provisions would expand this law by an order of magnitude. Somebody will try.
California keeps writing the rules Washington has not, and keeps timing them to Brussels — the same pull that shapes Europe’s compute agenda. If you ship AI-generated media, Sunday is a hard date. For everyone else it is the last quiet weekend before proving what is real becomes the publisher’s job, not the reader’s. Until the tooling catches up, verifying it yourself is the only control that actually ships.