Public postsecondary education: generative artificial intelligence systems: procurement standards: training.
Assembly Bill 2392 (Chapter 855), authored by Fong and signed September 30, 2026, adds Article 14 (Sections 66098–66098.3) to the Education Code, establishing requirements for California's public postsecondary institutions regarding generative artificial intelligence (GenAI) procurement and training. The California Community Colleges Chancellor's office and the California State University are mandated to comply, while the University of California is requested to participate. Under Section 66098.1, the three segments must jointly convene an intersegmental working group—including privacy experts, student advocates, academic senates, labor organizations, and civil society groups—to develop responsible GenAI procurement standards and training protocols. Procurement standards must ensure any GenAI system has undergone a documented risk assessment covering harms, bias, and misuse; does not prioritize engagement over accuracy through excessive sycophancy; includes vendor safety monitoring for self-harm or harm to others with escalation to authorities in imminent-threat cases; has transparent incident reporting; is governed by written data use and retention policies; collects only data necessary for educational purposes subject to regular audits; discloses all training data sources including use of copyrighted content or student-generated data; and is not provided by vendors with unlawful privacy violations or exploitative labor practices. Required training must cover systemwide policies including academic integrity, privacy policies for user data and prompts, and limitations of GenAI systems. Recommendations must be submitted to system leaders by January 1, 2028. Under Section 66098.2, each segment must review the training at least once per academic year, update it as necessary, and maintain training records for each recipient for a minimum of four years. Under Section 66098.3, until procurement standards are adopted, each segment must submit a written report to the Legislature within 60 days of executing a systemwide GenAI contract, detailing the vendor and intended use, the evaluation and selection process, training plans, and the vendor's data and privacy practices.
Status history
Current status as of 2026-09-30
Enacted
2026-09-30
observed 2026-10-03
Enrolled
2026-08-26
observed 2026-08-27
Engrossed
2026-05-26
observed 2026-08-27
Impact areas
- Enterprise Adoption
- Quality Assurance
- AI Policy
- Privacy & Data Protection
- Safety & Harms
- Education