Editorial referenceUpdated 16 October 2026
SB942.com

SB 942 · §§ 22757.2, 22757.3(b)

The disclosure verification tool and licensee duties

Updated 16 October 2026. Bus. & Prof. Code, Chapter 25 (§ 22757 et seq.), as amended by AB 853, SB 1000 and AB 2713. Last change: SB 1000 and AB 2713 signed, 30 September 2026.

§ 22757.2

The disclosure verification tool

A free tool anyone can use to check whether content came from your system. Or point users to a compliant third-party tool.

Checks the contentWas it created or altered by your system?
Shows provenanceOutputs any provenance data found
Protects personal dataNone shown without express consent
Open to the publicReasonable limits allowed against misuse
Upload or URLEither input works
Has an APIUsable without visiting your website
Statute wording§ 22757.2, as amended by SB 1000

A covered provider must make available, at no cost to the user, a disclosure verification tool (called the "AI detection tool" before SB 1000). The tool must let a user assess whether image, video or audio content was created or altered, except by minor modification, by the provider's system; output any system provenance data detected in the content; and not output personal information unless the person it pertains to expressly consents. It must be publicly accessible, though reasonable access limits are allowed to address security or integrity risks or misuse, allow upload of content or a URL, and support an application programming interface or similar means that lets a user invoke it without visiting the provider's website. The provider must collect user feedback on the tool's efficacy, and must not collect, use, retain or sell personal information beyond what is strictly necessary.

§ 22757.2(e): third-party tool

A provider may meet this section by directing users to a third-party disclosure verification tool that complies with the section, is compatible with the latent disclosures in the provider's content, and is clearly and conspicuously accessible through the provider's generative AI user interface.

§ 22757.3(b)

Licensees

License your system and you must tell the licensee its obligations. If a licensee breaks compliance, two clocks run.

  1. 0 hProvider finds outA known licensee modified it out of compliance
  2. 72 hProvider actsTerminate the licence, or notify the licensee
  3. +96 hLicensee fixesWithin 96 h of the notice: comply or stop using it, and report
  4. AGOtherwiseProvider reports to the Attorney General

No duty to monitor licensees.

Statute wording§ 22757.3(b), as amended by SB 1000

A covered provider that licenses its system to a third party must notify the licensee of its obligations. If the provider knows that an identifiable licensee has modified the system so that it no longer complies, the provider must, within 72 hours of discovering it, either terminate the licence or notify the licensee of the noncompliance and of its duty to report. The licensee then has 96 hours from the notice to bring the system into compliance or stop using it, and to report; if it does not, the provider must report to the Attorney General. The provider has no duty to monitor or investigate its licensees.

Questions

Common questions

Does a provider have to build its own SB 942 detection tool?

No. Under § 22757.2(e), as amended by SB 1000, a provider may direct users to a third-party disclosure verification tool that complies with the section, is compatible with the latent disclosures in its content, and is clearly and conspicuously accessible through its generative AI user interface.

Can access to the verification tool be limited?

The tool must be publicly accessible and free to the user, but reasonable access limits are allowed to address security or integrity risks or misuse.

What is the SB 942 licensee deadline?

If a provider knows an identifiable licensee has modified the system so it no longer complies, it has 72 hours from discovering it to terminate the licence or notify the licensee. The licensee then has 96 hours from the notice to comply or stop using the system, and to report; otherwise the provider reports to the Attorney General.

More on SB 942