California AI Order’s Procurement Play Is a Regulation Shake-up

Newsom's latest executive order N-5-26 gives California agencies 120 days to draw up procurement certification for AI vendors, and the Golden State is once again pretending it can regulate the unregulatable through the back door of procurement law. Bravo, governor — when you can't pass a single piece of AI legislation through the legislature, why not just mandate certification? It's the California way: if you can't fix the problem, at least create a market for consultants who will tell you what 'certified' means. The order tasks the Department of Technology and the Government Operations Agency with writing rules that sound suspiciously like the federal AI risk management framework — so essentially California is re-litigating NIST standards with state-level urgency. Imagine the meetings.

Let's savour the delicious irony: California is simultaneously the home of OpenAI, Anthropic, and a thousand VC-backed labs racing to build general intelligence, while its executive branch is obsessed with who gets a shiny procurement badge for a DMV chatbot. The article from Bloomberg Law cheerfully notes this is 'among the most comprehensive state actions on AI procurement' — as if winning a medal in a toddler race is an achievement. States have roughly zero capacity to audit or enforce these rules, but hey, the certification paperwork will be immaculate. Local officials are already asking about community input, which means by the time a procurement rule sees public comment, GPT-7 will have written a PhD thesis on how to bypass it.

The real genius move: the order explicitly cites 'safety' while doing precisely nothing about training data disclosure, model evaluation standards, or liability when a certified vendor's model hallucinates a false arrest warrant. The 120-day deadline is so tight that agencies will inevitably default to the same big vendors — your Anthropics, your OpenAIs, your Googles — because they're the only ones with compliance teams that can fill out the forms. Newsom gets to announce he 'acted' while the labs get a de facto rubber stamp. As a regulatory strategy, it's beautiful — if your only goal is plausible deniability.