Not sure where to start? Answer 3 questions and get a tailored compliance action plan.
What applies to me? →California AI Auditor Registration Act (AB 1405)
Issued by
State of California
- September 30, 2026 · Correction — Corrected the registry timing (opens by 1 January 2029, no 2027 registration), the agency (Government Operations Agency), and the retention rules (fact-check finding). (Cody Maxwell)
- October 1, 2026 · Correction — Rewrote the practical steps, newsletter hook, search description, and audience fields to match the entry's corrected content. (Cody Maxwell)
AB 1405 creates California’s first registry for independent AI auditors. Auditors must register with the Government Operations Agency and disclose their credentials and methods. They must also follow recognized independence standards. From January 1, 2029, only registered auditors may perform covered audits in California.
Applies To
Overview
AB 1405 takes effect on 1 January 2027 and requires the Government Operations Agency to open an AI Auditor Registry by 1 January 2029. Enrollment requires disclosing credentials, methods, and any conflicts of interest, and adhering to independence standards set by the agency. From January 1, 2029, performing a covered audit without a state registration number becomes unlawful. The agency will publish registrant information, issue a unique registration number to each auditor, and keep misconduct reports for as long as the auditor stays registered, plus 10 years. Auditors must keep audit documentation for at least 10 years. It can also share misconduct reports with other state agencies for enforcement purposes. The bill pairs with SB 813 to give California both a certified-verifier system and a registered-auditor system for AI compliance work.
Key Requirements
- •Requires the Government Operations Agency to open an AI Auditor Registry by 1 January 2029.
- •Bars anyone without a state registration number from performing a covered AI audit starting January 1, 2029.
- •Requires enrolled auditors to disclose credentials, methodology, and conflicts of interest, and to remain independent of the companies they audit.
- •Directs the agency to issue a unique registration number to each auditor and publish registrant information.
- •Auditors keep audit documentation for at least 10 years; the agency keeps misconduct reports while an auditor is registered, plus 10 years.
- •Allows the agency to share reports of auditor misconduct with other state agencies for enforcement.
What Your Organization Must Do
- →Map which of your AI audits would count as covered audits in California.
- →Plan to check an auditor's state registration number once the registry opens.
- →Ask auditors for written disclosure of credentials, methods and conflicts of interest.
- →Require auditors to keep audit documentation for at least 10 years.
- →Confirm whether a licensed accountant following professional standards meets the registration test.
- →Track how AB 1405 and SB 813 together shape your choice of AI assurance providers.
Playbook Guidance
Step-by-step implementation guidance for compliance teams.
Frequently Asked Questions
- When do AI auditors need to register under California AB 1405?
- The registry opens by 1 January 2029, and from then offering or conducting a covered AI audit without registration is unlawful. Licensed accountants following professional standards are deemed to comply.
- What information must an AI auditor disclose to enroll in the California AB 1405 registry?
- Applicants must disclose their credentials, auditing methodology, and any conflicts of interest with the companies they audit. Enrolled auditors must also maintain independence from the organizations whose AI systems they review, consistent with standards the agency sets.
- How long must AI audit reports be retained under AB 1405?
- Auditors must keep documentation supporting their audit results for at least 10 years. The agency keeps misconduct reports for as long as the auditor stays registered, plus 10 years.
- How does AB 1405 differ from California SB 813?
- AB 1405 creates a state registry for independent AI auditors, focusing on who is qualified to conduct covered audits. SB 813 complements it by establishing a certified-verifier system, giving California parallel regulatory tracks for AI compliance oversight.
- What are the penalties for performing a covered AI audit in California without registration after 2029?
- AB 1405 makes conducting a covered audit without a state registration number unlawful starting January 1, 2029. The agency can also share misconduct reports with other state agencies, which may trigger additional enforcement actions beyond the bill's own penalties.
- How should companies verify that an AI auditor they hire is compliant with AB 1405?
- Once the registry opens by 2029, check the auditor's registration number against the public registry. Ask for written disclosure of methodology and conflicts of interest.