Small Business AI
Three AI Rules Small Businesses Can Borrow From California's New Law
California's new rules for lawyers using generative AI offer three useful guardrails any small business can adapt: protect confidential data, verify important output, and keep a human responsible.
By Kindloom Labs · October 2, 2026
What changed
California has enacted SB 574, setting specific requirements around how lawyers and arbitrators use generative AI. Among other things, lawyers cannot delegate the practice of law to AI, must personally verify court filings and AI-generated citations, must take reasonable steps to check AI output, and face restrictions around entering confidential or nonpublic information into certain systems.
The law is written for the legal profession, not for every small business. What makes it broadly useful is how concrete the rules are. Instead of saying “use AI responsibly,” it turns responsibility into actions people can actually follow.
The honest nuance
A bakery, design studio, ecommerce shop, or consulting firm is not suddenly subject to California's lawyer-specific AI duties just because this law exists. Lawyers also operate under professional obligations that do not map directly onto ordinary businesses.
The useful takeaway is therefore not legal compliance. It is the structure: confidential information gets special treatment, consequential output gets checked, and a human remains accountable for the final work.
Why it matters for your business
Small teams are already using AI to draft customer emails, summarize contracts, research vendors, prepare marketing, build spreadsheets, and handle admin. Many have never decided what information employees may paste into an AI system or which outputs need a second look.
That ambiguity is where avoidable problems happen. A short operating rule is more useful than a thirty-page AI policy nobody reads.
What to actually do
Start with three rules. First, do not put confidential customer or business information into an AI tool unless your company has approved that tool for that information. Second, verify facts, numbers, citations, contractual language, and other consequential output before using it. Third, name a human who remains responsible for anything the AI produces or does on the company's behalf.
Those three rules will not solve every AI risk, but they create a practical baseline that a small team can actually remember.
From Kindloom Labs
If you're deciding where AI belongs in your business, the free Quick Read Small Business AI Checklist helps you map the workflow, data, access, and review points before you automate more of it.
Stay in the loop
Get notified about new releases, content, and blog updates from Kindloom. No spam, unsubscribe anytime.