On Nov. 8, the California Privacy Protection Agency Board voted to adopt new rules for data brokers, or businesses that collect and sell personal consumer data to third parties, and advance a raft of proposed rules for privacy risk assessments, cybersecurity audits and the regulation of artificial intelligence technologies such as automated decision-making technology.

ADMT, according to the CPPA, refers to “any system, software, or process—including one derived from machine-learning, statistics, or other data-processing or artificial intelligence—that processes personal information and uses computation as whole or part of a system to make or execute a decision or facilitate human decision-making.” ADMT can be used by businesses to engage in the practice of "profiling," or evaluating and predicting consumer traits such as their work performance, health or economic situation based on their personal data.