Comply · United States
California ADMT / CCPA-CPRA regulations
California automated decision-making technology rules.
California's ADMT regulations under the CCPA/CPRA govern automated decision-making technology that makes significant decisions about consumers. They grant rights to pre-use notice, to opt out of certain automated decisions, and to access information about the logic and outcomes, and require risk assessments for high-risk processing.
Who it applies to
Businesses subject to the CCPA/CPRA that use ADMT for significant decisions about California consumers.
Key obligations
- Provide pre-use notice of automated decision-making
- Honor consumer opt-out and access rights
- Conduct risk assessments for significant ADMT
- Explain the logic and outcomes on request
How Maetra maps agents to California ADMT
Maetra identifies agents performing automated decisions, records the risk assessments and controls in Comply, and provides the audit trail to answer consumer access and opt-out requests.
In practice, Maetra:
- Scans and fingerprints each agent. Discover reads the agent’s code — its tools, data access and sensitivity, actions, model, and environment — into an evidence-backed profile tied to the exact file and commit.
- Decides what applies. That profile determines whether California ADMT is in scope for the agent and which of its requirements apply.
- Auto-detects controls and surfaces gaps. Controls your code already satisfies are detected automatically from the scan; the rest become a clear list of gaps, each tied to the requirement and the evidence it still needs.
- Proves it and keeps it current. Close gaps with linked evidence or generated documents — reused across every framework the same control supports — and Maetra re-checks on each rescan and flags evidence that has gone stale.
Related frameworks
Prove California ADMT compliance with Maetra
Classify your AI agents once and Maetra maps them to California ADMT and every other framework it supports — generating the evidence and documentation, tracking gaps and deadlines, and sealing every decision in an immutable audit trail.