AB979 – California Cybersecurity Integration Center: Artificial Intelligence

CALawState

Date Passed

10/3/2025

Effective Date

1/1/2027

Summary

Directs the California Cybersecurity Integration Center, working with the Office of Information Security and the Government Operations Agency, to publish by January 1, 2027 a California AI Cybersecurity Collaboration Playbook coordinating threat and vulnerability information-sharing across cyber and AI communities. Requires state AI contractors to share relevant threats with a designated state entity and protects shared indicators from disclosure under the California Public Records Act.

Healthcare Implications

Indirect but relevant: Because the California Health and Human Services Agency participates in the California Cybersecurity Integration Center, health agencies and hospital vendors on state-linked systems should align incident reporting and business associate agreement terms with the playbook’s sharing and confidentiality rules to manage AI-related cyber risk.

Impact Level

Low

Keywords

Safety & Risk; Privacy & Data

Stakeholders

Providers & Health Systems; Developers & Vendors; Regulators & Government