California AI Order’s Procurement Play Is a Regulation Shake-up

Regulators have argued about how to oversee artificial intelligence since before many lawyers knew what a large language model was. Almost a decade after the White House’s Office of Science and Technology Policy issued the policy report, “Preparing for the Future of Artificial Intelligence,” regulators are no closer to reining in the unstoppable force of AI.

California Gov. Gavin Newsom (D) stopped waiting on others. By signing Executive Order N-5-26 on March 30, he leveraged a player nobody saw coming: procurement.

Noting that “public procurement represents one of the most powerful tools available to governments to shape market behavior and encourage responsible innovation,” the executive order has finally given AI guardrails teeth.

Executive Order’s Mandates

Executive Order N-5-26 builds on California’s 2023 AI order and moves in opposition to the Trump administration’s rollback of federal AI protections. The order gives California agencies 120 days to roll out new AI procurement certification requirements for vendors seeking California state contracts.

The certifications must address three risk areas: illegal content including child sexual abuse material and non-consensual intimate imagery; harmful bias and lack of bias governance; and civil rights violations including free speech, voting, human autonomy, unlawful discrimination, detention, and surveillance.

The order further mandates state agencies to implement watermarking for AI-generated or significantly manipulated content to curb misinformation and deepfakes. It directs California’s chief information security officer to independently review the supply chain risk designations and bypass any deemed “improper.”

It also requires that the Government Operations Agency recommend reforms to contractor suspension and ineligibility authorities that would allow California to bar vendors judicially determined to have unlawfully undermined privacy or civil liberties.

More Powerful Governance

Executive Order N-5-26 is a genuinely different approach to the AI arms race. Instead of countering AI with words, California chose to wield something more powerful—the purchase order. This shift to a procurement mechanism makes the order faster than legislation and harder to unwind than policy.

On July 28, 2026, these standards will start gating access to the fourth largest economy in the world. That timeline won’t for clarity, alignment, or federal harmonization. You can’t lobby a certification requirement before it takes effect. You can’t send your government affairs team to soften it in committee. You can’t file an amicus brief arguing it violates the commerce clause and expect to win before the 120-day deadline.

AI vendors must meet the standard or lose access to a market that they can’t afford to walk away from. Those that want state contracts must play by California rules—no legislation needed.

Two-Front War

The most consequential clause in the order isn’t the certification requirements or even the expansion of AI use. It’s the quiet inversion of federal supply chain power.

The Department of Defense used procurement as a punishment when it flagged Anthropic PBC as a supply chain risk after the company refused to support certain surveillance and weapons use cases. The California executive order just flipped that same mechanism by empowering the state’s chief information security officer to bypass such federal designations.

One government uses procurement to shut a vendor out. Another uses it to pull that vendor back in. That changes the calculus for every AI vendor operating in both federal and state markets. The certification you build to satisfy California may conflict with the access terms the federal government demands.

A New Patchwork

For years, AI governance has been a document problem. Publish the policy, brief the board, add the clause, rinse, repeat. California just made it an operations problem with a hard expiration date.

AI vendors now need to be honest about whether their bias of governance, civil rights impact assessment, and content protocols can survive deep scrutiny by two governments on opposite ends of the AI spectrum.

Procurement power isn’t unique to California. Any government with a budget and an AI vendor relationship has the same backdoor available. What Newsom did was publish the mechanism’s blueprint. For now, it is just California. Soon it may be 50 states with 50 procurement standards pulling in different directions.

California changed the game. It didn’t end it.

This article does not necessarily reflect the opinion of Bloomberg Industry Group, Inc., the publisher of Bloomberg Law, Bloomberg Tax, and Bloomberg Government, or its owners.

Author Information

Cat Casey is partner at Masters AI Legal and advises law firms, legal departments, and technology companies on AI strategy, adoption, and workflow modernization.

Write for Us: Author Guidelines