CCPA for AI: How AB 1008 Changes Data Deletion Requests in 2025

Can an AI 'forget' personal data? AB 1008 says you better find a way. 🧠

The Right to be Forgotten in the Age of AI

The CCPA granted Californians the right to delete their personal data. AB 1008 extends this to data used to train AI models. This presents a massive technical challenge: Machine Unlearning.

The Challenge

Once a model is trained, the data is "baked in" to the weights. Simply deleting the database record doesn't remove the influence of that data on the model.

Compliance Strategies

• Retraining: Regularly retraining models from scratch without the deleted data (expensive).
• Machine Unlearning Algorithms: Emerging techniques to update model weights to "forget" specific samples.
• Filtering: Implementing output filters to prevent the model from regurgitating the deleted PII.

Conclusion

Data deletion is no longer just a database operation. It's an ML ops problem.