Artificial Intelligence Training Data Transparency Act; transparency and disclosure requirements.

Consumer Data Protection Act; Artificial Intelligence Training Data Transparency Act. Allows consumers to authorize a third party, acting on the consumer's behalf, to opt out of the processing of the consumer's personal data. Such authorization may be made using technology that indicates the consumer's intent to opt out, including a browser setting, browser extension, global device setting, or other user-selected universal opt-out mechanism. Where a controller has actual knowledge or willfully disregards that a consumer is an adolescent, defined in the bill as at least 13 years of age but younger than 16 years of age, no controller shall process any personal data collected or collect precise geolocation data from such adolescent without obtaining consent from such adolescent. The bill provides that the Attorney General has discretion regarding whether to provide an opportunity to cure a violation to a controller or processor beginning January 1, 2026. The bill also revises the definitions of "sale of personal data," "sensitive data," and "biometric data." The bill requires a developer of a generative artificial intelligence system or service, defined in the bill, to disclose on the developer's website information about the generative artificial intelligence data set used to train such system or service. A developer shall keep detailed records of the generative artificial intelligence data set used to train a generative artificial intelligence system or service and provide clearly designated and publicly available mechanisms for submissions of Training Data Verification Requests, defined in the bill, and Training Data Deletion Requests, defined in the bill. The bill also prohibits nondisclosure or confidentiality agreements from concealing noncompliance with the bill. The bill allows the Attorney General to offer developers an opportunity to cure noncompliance that is noticed by the Attorney General and provides that a person or entity claiming to be injured due to a violation of such provisions shall be entitled to initiate an action for monetary damages or equitable relief. The provisions of the bill regarding such developers have a delayed effective date of July 1, 2026.