Technology and data
22 upcoming changes, soonest first.
November 2026 2
FCC adds FM radio channel 258A at Whitehall, Michigan, replacing vacant channel 248A
FM channel 258A is added to the allotment table for Whitehall, Michigan, after the local station's license was cancelled. The FCC has not yet opened a window for broadcasters to apply for it.
FCC deletes vacant FM radio channel 288A at Selmer, Tennessee
Vacant FM channel 288A comes off the allotment table for Selmer, Tennessee, because it sits too close to station WVNA-FM and no other channel fits the spacing rules.
December 2026 2
Carriers that send emergency alerts must support a map of the alert area on phones
Wireless carriers that take part in Wireless Emergency Alerts must support showing a map with alerts aimed at a circle or polygon, marking that area and the user's location when location services are on. The rule's multilingual alert templates and carrier availability filings remain delayed.
Chip designers get more time to apply for approved designer status under export rules
The Commerce Department's export agency extends by about eight months the deadline for applying to become an approved integrated circuit designer, and the cutoff tied to authorized designer status, for advanced logic chip exports. Applicants may then count as authorized designers for 180 days.
January 2027 15
Big platforms must show users whether content carries AI or camera provenance data
Large online platforms with over 2 million monthly users must detect provenance data on content and let users see whether it was made or altered by AI. AI hosting sites can't knowingly offer AI systems that skip required disclosures.
Big social media platforms owe set damages for negligently injuring children
Social media platforms with over $100 million in yearly revenue that injure a child under 18 through lack of ordinary care owe the larger of $5,000 per violation, capped at $1 million per child, or three times actual damages. Cases already pending are excluded.
Device age signals cover all users, and no one may ask for one without legal need
The state's device age-signal law now covers the primary user of any device with account setup, not only children, and operating systems must send the age bracket to app stores and app developers. No one may request an age signal unless a law requires it.
Digital replicas count as a person's voice or likeness in publicity and impersonation laws
The law spells out that using an AI digital replica of someone's voice or likeness without consent falls under the state's right-of-publicity lawsuit rule, and counts as false impersonation in criminal cases. It also ends a legal presumption that protected employers using workers' photos in ads.
Nucleic acid synthesis machine makers and suppliers must follow federal screening rules
Makers of benchtop nucleic acid synthesis machines and sellers of synthetic nucleic acids may produce or sell in California only if they follow the federal synthesis screening framework, attest to it and post that attestation online. Civil penalties reach $5,000 a day.
Online platforms can't give users under 16 addictive feeds or autoplay
Websites and apps where addictive feeds or autoplay are a significant part of the service may not offer those features to users under 16 and must check ages first. Knowing violations carry penalties up to $50,000 per affected minor, enforced by state and local prosecutors.
Online services likely used by children must take reasonable steps to prevent harm to them
A new law replaces the state's Age-Appropriate Design Code. Sites and apps likely used by kids under 18 must set high privacy defaults and take reasonable steps against foreseeable harm, and a child can void contract terms agreed to because of a design feature.
Only the Attorney General can sue websites and apps over pen register tracking claims
Private people can no longer sue a business under the state's pen register and trap and trace law for conduct on websites or apps; only the Attorney General can. The limit also applies to pending claims in cases filed within the prior two years.
Operating systems and apps can't undo a user's privacy settings without consent
Operating systems and apps may not reverse privacy settings a user chose without the user's consent, unless a law, court order or subpoena requires it. Companies may still drop services or privacy options if protections stay the same or improve.
Phones and computers must ask a user's age at setup and pass an age signal to apps
Operating system makers must ask for the user's birth date or age at account setup and send apps an age-range signal. App developers must request the signal when their app is downloaded and launched, and the Attorney General enforces civil penalties.
Platforms must offer a visible abuse-image reporting tool and human review of reports
Social media platforms' reporting tool for child sexual abuse material must be clear and conspicuous, cover intimate images of identifiable minors and take reports from anyone, not just the person shown. Reports with no known hash match need human review; penalties reach $250,000 a day.
Porn sites must take care to keep off nonconsensual and child sexual content
Sites that post user-uploaded sexually explicit content must use ordinary care to keep off material showing minors or people who did not consent, and uploaders must certify age and consent under penalty of perjury. Victims can sue for actual damages or up to $75,000 per violation, plus punitive damages.
Social media platforms must show black box mental health warnings to users
Covered social media platforms must show a black box mental health warning when a user first opens them each day, and a 30-second warning that can't be skipped after three hours of use, then hourly. Users reasonably found to be over 17 are exempt.
Student privacy law covers more ed tech and bans training AI on student data
K-12 and preschool privacy rules now reach operators that know their product is used for school and was designed or marketed for it, not only those used primarily for school. Operators may not use student data to train AI, and harmed students may sue.
Web browsers must include a setting that tells websites not to sell or share user data
Companies that make web browsers must include an easy-to-find setting that sends an opt-out preference signal, telling businesses not to sell or share the user's personal information, and must explain how it works. Browser makers aren't liable for privacy violations by businesses receiving it.
July 2027 2
Companion chatbot companies must assess child safety risks before launching chatbots
Before releasing a new or substantially changed companion chatbot in California, operators must run and document a child safety risk assessment. Those that let children use it must set crisis protocols and limit ads and data use, and harmed children may sue.
Exam proctoring companies serving K-12 schools must use end-to-end encryption
Companies that proctor classroom or course exams for school districts, county offices of education or charter schools must use end-to-end encryption, so no one but the sender and recipient, including the company, can read the data.
June 2028 1
Emergency phone alerts get preset templates in 14 languages and American Sign Language
Carriers in Wireless Emergency Alerts must support preinstalled templates for the most common urgent alerts in English, the 13 next most spoken languages and American Sign Language. Phones must show the English version alongside, and templates carry the sender, place, time and an optional link.