California Governor Gavin Newsom signed Executive Order N-5-26 on March 30, 2026, expanding the state’s artificial intelligence governance framework initiated by Executive Order N-12-23 in September 2023. This new directive mandates state agencies to devise and implement measures that ensure Generative Artificial Intelligence (GenAI) is utilized responsibly within state operations. The order emphasizes the use of public procurement to shape market conduct and promote ethical AI innovation while safeguarding privacy and civil liberties.
While the executive order does not impose enforceable legal obligations on companies, it mandates various state agencies to take actions that effectively bind GenAI operators in California. Most of these measures are required to be addressed within a 120-day timeframe, culminating on July 28, 2026. As such, companies operating in the state need to be aware of the implications and proactive measures they may need to take.
The order includes several key provisions. Notably, it introduces new certification requirements for contractors engaging with the state. The Department of General Services (DGS) and the Department of Technology (CDT) are tasked with submitting recommendations for these certifications, which will require companies to disclose their policies regarding the prevention of illicit content distribution, governance of bias, and the protection of civil rights. This includes safeguarding against unlawful discrimination and ensuring respect for free speech and human autonomy.
Another significant aspect of the order is the directive for the CDT’s Chief Information Security Officer (CISO) to review federal supply chain risk designations. If deemed inappropriate, the CISO, along with DGS, will provide guidance ensuring state agencies can continue procurement from those companies. This move signals California’s intention to diverge from federal designations that it views as problematic, offering a potential lifeline for companies facing federal procurement restrictions.
Furthermore, the Government Operations Agency (GovOps) is required to propose reforms to contractor responsibility measures within a similar timeframe. These reforms aim to prevent the state from contracting with entities that have been judicially found to undermine privacy or civil liberties. This stipulation highlights the importance of compliance programs for companies, particularly those in the AI sector, as they may now face suspension or ineligibility from state contracts if found in violation.
The order also addresses employee access to GenAI tools, instructing multiple agencies to facilitate access to verified tools with appropriate privacy safeguards. In addition, it calls for state agencies to collaborate on best practices and training related to responsible AI use, fostering a community of practice to address emerging technology challenges.
Implications for the Industry
Companies that provide AI products or services to California state agencies must prepare for these new certification requirements. They will likely need to reassess and document their content moderation policies, bias governance practices, and civil liberties protections. This proactive approach could involve revising internal governance policies to ensure compliance with upcoming regulations.
The proposed data minimization toolkit will likely reshape future state contracts, pushing companies that handle sensitive data to adhere to stricter guidelines regarding data collection and usage. As the order establishes standards for data minimization, it may also serve as a reference point for future regulatory actions aimed at the industry.
Companies involved in producing AI-generated visual content should familiarize themselves with California Business & Professional Code §§ 22757.2 and 22757.3, as the order calls for forthcoming guidance on watermarking AI-generated images. While directed at state agencies, this requirement may set broader expectations for private sector compliance.
The emphasis on collaboration with industry and the establishment of pilot programs suggests new opportunities for AI companies to engage constructively with state governments. Participation in the AI Community of Practice and related initiatives could allow companies to help shape procurement standards rather than simply respond to obligations after they are established.
In conclusion, Executive Order N-5-26 signals a substantial expansion of California’s AI governance framework, bolstered by the state’s procurement power. As the order prompts a series of rulemaking processes within a tight timeline, companies that operate in the AI space in California should remain vigilant and prepare for the impending new standards. The potential for California to independently evaluate federal designations further underscores the state’s commitment to responsible AI deployment.
See also
Korean Government Launches AI Initiative to Transform Chronic Disease Management Framework
Malaysia Launches AI Recruitment System to Cut Costs and Enhance Labor Transparency
Awingobit Urges Dialogue Over Calls to Suspend Publican AI System Amid Port Concerns
OpenAI’s Leopold Aschenbrenner Warns AI Could Outpace Graduates by 2026
AI Regulations Fail to Address Environmental Impact, Urgent Changes Needed
