California SB 813 and AB 1405: New AI Audit Frameworks Explained

Source news: "Governor Newsom signs first-in-the-nation AI safeguards to protect Californians, calls on the federal government to do its part" (California State Portal | CA.gov) · Search original The following is original commentary written by AI based on facts verified from 3 real news reports (not a translation or copy of the original). See sources at the end.

California Governor Gavin Newsom has signed Senate Bill 813 and Assembly Bill 1405, establishing the nation's first framework for independent third-party verification and AI auditor registration. These measures impose specific operational obligations on legal teams by creating a new compliance landscape that requires independent audits to assess system safety, transparency, and integrity. While California previously mandated safety frameworks for frontier developers, these new bills distinguish themselves by formalizing the role of independent auditors, setting a state-level precedent that differs from current federal regulatory approaches.

The Legislative Context: Why California Moved First

The signature of Senate Bill 813 and Assembly Bill 1405 marks a significant escalation in California’s approach to artificial intelligence governance, building directly on the state’s existing regulatory infrastructure. This legislative move is not an isolated event but rather the culmination of a multi-year strategy to establish robust safeguards for AI systems. By enacting these bills, Governor Newsom has formalized a framework for independent third-party evaluations and audits, creating the first-in-the-nation structure for verifying compliance with state AI laws. This action underscores the state’s commitment to ensuring that AI development is subject to rigorous external scrutiny, moving beyond voluntary guidelines toward mandatory oversight mechanisms.

The political momentum behind these new laws is deeply rooted in prior executive actions and legislative mandates that have shaped the current regulatory landscape. Specifically, the state government issued an executive order in 2023 directing the safe use of artificial intelligence, which laid the foundational policy groundwork for subsequent legislation. More recently, in 2025, Governor Newsom signed Senate Bill 53, which mandates that frontier AI developers must publish their safety frameworks. The new bills extend this trajectory by establishing concrete mechanisms for verifying those frameworks and ensuring the integrity of the auditors who assess them.

2023 Executive Order: The state government issued an executive order directing the safe use of artificial intelligence, establishing initial policy priorities.
2025 Senate Bill 53: Governor Newsom signed this bill, mandating that frontier AI developers publish their safety frameworks.
SB 813 and AB 1405: These newly signed bills create the first-in-the-nation framework for independent verification and establish standards for AI auditor registration and independence.
Federal Call to Action: Governor Newsom simultaneously urged the federal government to enact strong national regulations that match the urgency of the current situation.

Decoding SB 813: The Independent Verification Framework

Senate Bill 813, introduced by Senator Jerry McNerney and signed into law by Governor Gavin Newsom, establishes the nation’s first framework for independent bodies to evaluate state law compliance regarding artificial intelligence systems. This legislation creates a structured mechanism for third-party verification, ensuring that AI developers and deployers can demonstrate adherence to California’s specific regulatory requirements. By mandating that these evaluations be conducted by independent entities, the bill aims to remove potential conflicts of interest and provide a neutral assessment of how AI systems operate within the state’s legal boundaries.

The core obligation under SB 813 is the creation of a standardized process for independent verification, which serves as a critical layer of accountability in the absence of a comprehensive federal AI safety framework. This framework complements the broader executive orders and legislation, such as the 2023 executive order directing the safe use of AI and the 2025 signing of Senate Bill 53, which mandates safety frameworks for frontier AI developers. Together, these measures form a cohesive state-level approach that relies on external oversight to validate compliance, rather than relying solely on self-reporting by companies.

Independent Verification: The bill establishes a formal structure for independent organizations to assess whether AI systems comply with California state laws.
Legislative Origin: Sponsored by Senator Jerry McNerney, the bill was signed by Governor Newsom as part of a broader package of AI safeguards.
Complementary Measures: It works in tandem with other state initiatives, including the 2023 executive order on safe AI use and recent legislation requiring safety framework disclosures for frontier developers.

AB 1405 Requirements: Auditor Registration and Standards

Assembly Bill 1405, authored by Assembly Member Rebecca Bauer-Kahan, establishes the operational backbone for the state’s new AI oversight regime by creating a formal registry for AI auditors. This legislative move, signed by Governor Gavin Newsom, moves beyond the independent verification framework outlined in Senate Bill 813 to define who is qualified to conduct these critical assessments. By instituting a centralized registration system, the bill ensures that only entities meeting specific state-defined standards can participate in the audit process, thereby creating a controlled and accountable ecosystem for third-party evaluations of artificial intelligence systems.

The core of AB 1405 lies in its strict criteria regarding the independence, transparency, and integrity of registered auditors. The law mandates that auditors must demonstrate a lack of conflict of interest to ensure their assessments are objective and unbiased. Furthermore, the bill requires a high degree of transparency in how audits are conducted and reported, ensuring that the methodologies and findings are clear and verifiable. These integrity standards are designed to prevent the commodification of audits, ensuring that the process serves the public interest in protecting Californians from potential AI risks rather than merely serving as a compliance checkbox for developers.

Registry Establishment: The bill creates a mandatory registration system for AI auditors, centralizing the identification of qualified third-party evaluators.
Independence Mandate: Auditors must meet strict criteria to ensure they are free from conflicts of interest, guaranteeing objective assessments.
Transparency Requirements: The framework demands clear reporting standards and methodological transparency to maintain public trust in the audit process.
Integrity Standards: Specific integrity benchmarks are set to uphold the professional and ethical conduct of those performing AI system evaluations.

Operational Duties for Legal and Compliance Teams

Practical Implementation Steps for Compliance Teams

For legal and compliance departments, the immediate priority is to operationalize the independent verification framework established by SB 813. While the specific statutory text for registration procedures is not detailed in the available facts, the core mandate requires organizations to engage independent third-party entities to evaluate their AI systems for state law compliance. Compliance teams must therefore identify and vet potential auditors who meet the standards set forth in AB 1405, which focuses on the independence, transparency, and integrity of these evaluators. It is crucial to note that AB 1405 establishes a formal registration body for AI auditors, meaning that relying on unregistered or non-compliant third parties may invalidate the verification process.

To demonstrate that a third-party evaluation has been properly conducted, documentation requirements will likely center on the provenance of the auditor’s credentials and the scope of the assessment. Since the legislation aims to protect Californians through robust safeguards, records must clearly link the specific AI system to the registered auditor who performed the review. Legal teams should prepare internal protocols to track these engagements, ensuring that all documentation reflects the auditor’s adherence to the integrity standards mandated by the new registration system. Given that Governor Newsom has urged the federal government to adopt similar national regulations, companies should also consider aligning their internal documentation practices with emerging federal standards to minimize future compliance friction.

Identify Registered Auditors: Verify that third-party evaluators are registered with the new AI auditor registry established under AB 1405.
Document Independence: Maintain records proving the auditor’s independence and transparency, as required by the legislative standards.
Scope Verification: Ensure evaluation reports explicitly cover the compliance of the AI system with California state laws.
Monitor Federal Alignment: Track federal regulatory developments, as the state has called for a strong national framework that may influence future documentation needs.

Comparative Analysis: State vs. Federal Frameworks

California’s new legislative framework creates a distinct legal landscape by establishing mandatory state-level requirements that currently lack direct federal counterparts. While the federal government has issued voluntary guidelines and executive orders emphasizing AI safety, SB 813 and AB 1405 introduce binding obligations for independent third-party verification and auditor registration. This divergence means that companies operating in California must now comply with specific state statutes that mandate structural independence for auditors and transparency standards, a level of granularity not yet codified in federal law. Consequently, organizations face a unique exposure where failure to meet these state-specific criteria could result in state-level enforcement actions, even if their practices align with broader federal recommendations.

The primary legal risk arises from the potential conflict between state mandates and future federal regulations. Governor Newsom has explicitly called on the federal government to enact strong, nationwide regulations to match the urgency of the situation, suggesting that California’s laws may serve as a prototype for future federal standards. However, until such federal alignment occurs, businesses must navigate a patchwork of requirements where California’s specific provisions—such as the independent verification framework under SB 813 and the auditor integrity standards under AB 1405—take precedence for in-state operations. This state-level preemption effectively sets a higher bar for compliance, requiring legal teams to map out how their existing federal compliance strategies intersect with these new, more rigorous state obligations.

Binding vs. Voluntary: California’s laws impose mandatory audit and verification structures, whereas current federal guidelines are largely voluntary or advisory.
Specificity of Standards: The state laws define concrete criteria for auditor independence and registration, creating clear legal benchmarks that federal frameworks have not yet established.
Enforcement Exposure: Non-compliance with SB 813 and AB 1405 creates specific state-level liability, independent of any federal regulatory outcomes.
Future Alignment: The legislation signals a potential trajectory for federal law, but currently forces companies to adhere to stricter state-specific rules.

Strategic Response: Preparing for Federal Alignment

Governor Newsom’s signature on SB 813 and AB 1405 was accompanied by a direct appeal to the federal government, urging Washington to enact robust national regulations that match the urgency of the current AI landscape. While California has moved first to establish a pioneering framework for independent third-party verification and auditor registration, the state’s legislative intent suggests that these measures are designed to serve as a baseline rather than a permanent silo. For companies operating in the state, this dual-track reality creates a strategic imperative: compliance programs must be architected not just for immediate California adherence, but with the flexibility to absorb future federal standards without requiring a complete overhaul of existing controls.

To prepare for potential federal alignment, legal and compliance teams should structure their current AI audit programs around modular governance frameworks. Rather than hard-coding specific California statutory references into core operational procedures, organizations should focus on establishing universal principles of auditor independence, transparency, and integrity that are likely to be mirrored in any national legislation. This approach allows companies to maintain agility; if federal laws are enacted, the underlying governance structures can remain intact, requiring only minor adjustments to reporting lines or registration protocols. By treating the California requirements as a rigorous prototype for national standards, businesses can mitigate the risk of fragmented compliance and ensure that their independent verification processes are scalable across jurisdictions.

Key strategic actions for maintaining federal readiness include:

Modular Governance Design: Develop audit protocols that separate core verification logic from jurisdiction-specific reporting requirements to facilitate easy adaptation to new federal rules.
Universal Auditor Standards: Prioritize the selection of third-party auditors based on broad principles of independence and integrity, ensuring they can meet both California’s AB 1405 criteria and anticipated federal benchmarks.
Continuous Monitoring: Implement ongoing monitoring of federal legislative developments to identify early signals of national standardization, allowing for proactive adjustments to compliance documentation.
Documentation Portability: Maintain audit records in a standardized, portable format that can be readily mapped to different regulatory frameworks, reducing the burden of re-documentation if federal laws supersede or complement state requirements.

Frequently Asked Questions

What are the main differences between California SB 813 and AB 1405?

SB 813 establishes the nation's first framework for independent verification bodies to evaluate compliance with state laws, while AB 1405 creates a registry for AI auditors. AB 1405 specifically sets standards for the independence, transparency, and integrity of these auditors.

Who introduced the new AI audit laws in California?

Senate Bill 813 was introduced by Senator Jerry McNerney, and Assembly Bill 1405 was introduced by Assemblymember Rebecca Bauer-Kahan. Both bills were signed into law by Governor Newsom.

How do these new bills relate to previous California AI regulations?

These laws build on the 2023 executive order directing the safe use of artificial intelligence and the 2025 signing of SB 53. SB 53 mandated that frontier AI developers publish safety frameworks, whereas SB 813 and AB 1405 focus on independent third-party evaluation and auditing.