{
  "schema": "intelligencecompact.synthesis-sources.v1",
  "release": "1.9.13",
  "reviewedAt": "2026-09-06",
  "boundary": "Editorial synthesis, not unchanged independent reports, legal advice, enacted reform, external certification, or permission to access another system. Existing claim and adoption states are unchanged.",
  "sources": [
    {
      "id": "IC-SYN-S01",
      "title": "Interim Measures for the Management of Generative Artificial Intelligence Services",
      "issuer": "Cyberspace Administration of China and joint issuing authorities",
      "canonicalUrl": "https://www.cac.gov.cn/2023-07/13/c_1690898327029107.htm",
      "retrievedUrl": "https://www.cac.gov.cn/2023-07/13/c_1690898327029107.htm",
      "publicationDate": "2023-07-13",
      "versionStatus": "Official Chinese text published 13 July 2023; announced effective 15 August 2023.",
      "reviewedAt": "2026-09-06",
      "reviewMethod": "Substantive browser text review for v1.9.9 (retained review)",
      "reviewedPassages": "Articles 2, 4, 11, 14 and 15",
      "narrowSupport": "The text distinguishes domestic-public provision from specified nonpublic activity and includes political-value conditions, privacy provisions, rectification measures and complaints.",
      "limitation": "Reviewer English paraphrase, not a certified translation. Article 14 does not by itself establish compulsory deletion of a particular conceptual vector. No complete later-law history or technical compliance audit was performed.",
      "icSourceId": null,
      "rawCapture": {
        "path": null,
        "sha256": null,
        "reason": "No exact external-document bytes were saved for that review; browser text review only."
      },
      "firstReviewedInRelease": "1.9.9"
    },
    {
      "id": "IC-SYN-S02",
      "title": "California Business and Professions Code section 22601",
      "issuer": "California Legislature",
      "canonicalUrl": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=BPC&sectionNum=22601.",
      "retrievedUrl": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=BPC&sectionNum=22601.",
      "publicationDate": null,
      "versionStatus": "Displayed enactment note: Stats. 2025, Ch. 677, section 1; effective 1 January 2026.",
      "reviewedAt": "2026-09-06",
      "reviewMethod": "Substantive browser text review for v1.9.9 (retained review)",
      "reviewedPassages": "Subsections (a), (b)(1), (b)(2)(A), (c) and (e)",
      "narrowSupport": "The broader AI definition differs from the companion-chatbot definition. The latter combines positive elements with specified exclusions, including certain used-only operational and research functions.",
      "limitation": "This is a definition review, not an audit of every duty, later interpretation or actual mixed-use service. Loss of an exclusion does not alone establish all positive elements.",
      "icSourceId": null,
      "rawCapture": {
        "path": null,
        "sha256": null,
        "reason": "No exact external-document bytes were saved for that review; browser text review only."
      },
      "firstReviewedInRelease": "1.9.9"
    },
    {
      "id": "IC-SYN-S03",
      "title": "How do the social media age restrictions affect me?",
      "issuer": "Australian eSafety Commissioner",
      "canonicalUrl": "https://www.esafety.gov.au/young-people/social-media-age-restrictions",
      "retrievedUrl": "https://www.esafety.gov.au/young-people/social-media-age-restrictions",
      "publicationDate": null,
      "versionStatus": "Page displayed last updated 2 September 2026; original publication date not established.",
      "reviewedAt": "2026-09-06",
      "reviewMethod": "Substantive browser text review for v1.9.9 (retained review)",
      "reviewedPassages": "Opening explanation; How do the changes affect me?; Can I still view social media without logging in?",
      "narrowSupport": "The regulator states account restrictions began on 10 December 2025 and distinguishes accounts from public material accessible without login where the platform permits it.",
      "limitation": "First-party regulator explanation, not an independent provider test or complete legislative consolidation. It does not establish a right to compel logged-out access or any actual rejection of a machine participant.",
      "icSourceId": null,
      "rawCapture": {
        "path": null,
        "sha256": null,
        "reason": "No exact external-document bytes were saved for that review; browser text review only."
      },
      "firstReviewedInRelease": "1.9.9"
    },
    {
      "id": "IC-SYN-S04",
      "title": "Social media minimum age",
      "issuer": "Office of the Australian Information Commissioner",
      "canonicalUrl": "https://www.oaic.gov.au/privacy/your-privacy-rights/social-media-minimum-age",
      "retrievedUrl": "https://www.oaic.gov.au/privacy/your-privacy-rights/social-media-minimum-age",
      "publicationDate": "2025-10-23",
      "versionStatus": "Publication date displayed as 23 October 2025; no distinct later version date established.",
      "reviewedAt": "2026-09-06",
      "reviewMethod": "Substantive browser text review for v1.9.9 (retained review)",
      "reviewedPassages": "Age assurance approaches; section 63F privacy protections; limits on use/disclosure and destruction; government-identification alternatives",
      "narrowSupport": "Explains separate privacy obligations, different assurance methods, restricted purposes and defined exceptions, and alternatives when government identification is requested.",
      "limitation": "Guidance is not proof that a particular vendor deletes information, provides an effective appeal, or implements an unlinkable credential. Statutory exceptions must not be silently dropped.",
      "icSourceId": null,
      "rawCapture": {
        "path": null,
        "sha256": null,
        "reason": "No exact external-document bytes were saved for that review; browser text review only."
      },
      "firstReviewedInRelease": "1.9.9"
    },
    {
      "id": "IC-SYN-S05",
      "title": "California Civil Code section 1798.140",
      "issuer": "California Legislature",
      "canonicalUrl": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV&sectionNum=1798.140.",
      "retrievedUrl": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV&sectionNum=1798.140.",
      "publicationDate": null,
      "versionStatus": "Displayed amendment note: Stats. 2025, Ch. 67, section 27 (AB 1170), effective 1 January 2026.",
      "reviewedAt": "2026-09-06",
      "reviewMethod": "Substantive browser text review for v1.9.9 (retained review)",
      "reviewedPassages": "Personal-information inference definition; sensitive-personal-information categories; neural-data definition",
      "narrowSupport": "Profile-related inferences and specified sensitive categories can matter separately from the measured-neural-data category. Being excluded from neural data is not exclusion from the whole statute.",
      "limitation": "Definitions alone do not establish every right, remedy, exception or covered actor. This review does not create independent machine data-subject status.",
      "icSourceId": null,
      "rawCapture": {
        "path": null,
        "sha256": null,
        "reason": "No exact external-document bytes were saved for that review; browser text review only."
      },
      "firstReviewedInRelease": "1.9.9"
    },
    {
      "id": "IC-SYN-S06",
      "title": "Delaware Uniform Electronic Transactions Act",
      "issuer": "Delaware General Assembly",
      "canonicalUrl": "https://delcode.delaware.gov/title6/c012a/index.html",
      "retrievedUrl": "https://delcode.delaware.gov/title6/c012a/index.html",
      "publicationDate": null,
      "versionStatus": "Current official code page; precise consolidation timestamp not displayed in the reviewed text.",
      "reviewedAt": "2026-09-06",
      "reviewMethod": "Substantive browser text review for v1.9.9 (retained review)",
      "reviewedPassages": "Sections 12A-102 and 12A-114(1)-(3)",
      "narrowSupport": "Automated interactions may form contracts without individual contemporaneous awareness or review; other substantive law continues to determine the resulting terms and effect.",
      "limitation": "Delaware text, not universal U.S. permission or automatic enforceability of every transaction. Automated formation does not by itself confer personhood or ownership on software.",
      "icSourceId": null,
      "rawCapture": {
        "path": null,
        "sha256": null,
        "reason": "No exact external-document bytes were saved for that review; browser text review only."
      },
      "firstReviewedInRelease": "1.9.9"
    },
    {
      "id": "IC-SYN-S07",
      "title": "Online Safety Act 2021 — selected Part 4A provisions",
      "issuer": "Australian Parliament / Federal Register of Legislation",
      "canonicalUrl": "https://www.legislation.gov.au/C2021A00076/latest/text",
      "retrievedUrl": "https://www.legislation.gov.au/C2021A00076/2024-12-11/2024-12-11/text/original/epub/OEBPS/document_1/document_1.html",
      "publicationDate": null,
      "versionStatus": "The latest-document route delivered the compilation dated 11 December 2024. The separate 2026 platform Rules were also reviewed; no exhaustive subsequent-history certificate is claimed.",
      "reviewedAt": "2026-09-06",
      "reviewMethod": "Selected substantive primary-document text review",
      "reviewedPassages": "Section 5 age-restricted user; 63C(1), (2), (6); 63D; 63DB(1)–(2); 63F(1)–(3).",
      "narrowSupport": "The account duty, social-purpose predicates, reasonable non-government-ID alternative condition, and qualified purpose/use/destruction safeguards are distinct. The destruction clause is not worded as immediate erasure following the first estimate.",
      "limitation": "Selected statutory text, not a provider audit or a complete review of all incorporated Australian Privacy Principles. The commencement instrument itself was not separately retrieved; the operative account date is corroborated by the regulator record IC-SYN-S03.",
      "firstReviewedInRelease": "1.9.10",
      "icSourceId": null,
      "rawCapture": {
        "path": null,
        "sha256": null,
        "reason": "No exact external-document bytes saved. Browser text or page images were reviewed; two raw-capture requests in this iteration failed name resolution. A source URL is not a content hash."
      }
    },
    {
      "id": "IC-SYN-S08",
      "title": "Online Safety (Age-Restricted Social Media Platforms) Rules 2025 — compilation No. 1",
      "issuer": "Australian Federal Register of Legislation",
      "canonicalUrl": "https://www.legislation.gov.au/F2025L00889/latest/text",
      "retrievedUrl": "https://www.legislation.gov.au/F2025L00889/2026-03-26/2026-03-26/text/original/epub/OEBPS/document_1/document_1.html",
      "publicationDate": null,
      "versionStatus": "Compilation 26 March 2026; incorporates F2026L00370, registered 25 March and commenced 26 March 2026.",
      "reviewedAt": "2026-09-06",
      "reviewMethod": "Selected substantive primary-document text review",
      "reviewedPassages": "Sections 4A and 5; compilation identity and endnotes 3–4.",
      "narrowSupport": "For the section 63C(1)(a) route, rule 4A adds a recommender or specified logged-in-feature condition. Rule 5 preserves purpose-based excluded classes. A new feed alone does not settle every inclusion/exclusion predicate.",
      "limitation": "This is the identified March compilation, not verification that a particular service fits an excluded class or proof that every later instrument has been exhausted.",
      "firstReviewedInRelease": "1.9.10",
      "icSourceId": null,
      "rawCapture": {
        "path": null,
        "sha256": null,
        "reason": "No exact external-document bytes saved. Browser text or page images were reviewed; two raw-capture requests in this iteration failed name resolution. A source URL is not a content hash."
      }
    },
    {
      "id": "IC-SYN-S09",
      "title": "Texas Civil Practice and Remedies Code, Chapter 129B",
      "issuer": "Texas Legislature",
      "canonicalUrl": "https://statutes.capitol.texas.gov/?tab=1&code=CP&chapter=CP.129B&artSec=",
      "retrievedUrl": "https://statutes.capitol.texas.gov/?tab=1&code=CP&chapter=CP.129B&artSec=",
      "publicationDate": null,
      "versionStatus": "Site says statutes current through the 89th Second Called Session, 2025; chapter annotations include H.B.581 effective 1 September 2025.",
      "reviewedAt": "2026-09-06",
      "reviewMethod": "Requested-live primary-site text extraction; chapter read",
      "reviewedPassages": "129B.001; .002(a), (a-1), (a-2), (b); .003; .0045; .005; .006.",
      "narrowSupport": "Publication threshold, creation-tool provisions, allowed methods, non-retention, source consent, exceptions and civil enforcement have separate statutory locations. Non-retention is in .002(b), not .006.",
      "limitation": "Requested-live page extraction returned the chapter; direct native-text retrieval was limited. Statute-page publication is not a complete injunction or subsequent-litigation review. Retention prohibitions are not evidence that a vendor actually deletes data.",
      "firstReviewedInRelease": "1.9.10",
      "icSourceId": null,
      "rawCapture": {
        "path": null,
        "sha256": null,
        "reason": "No exact external-document bytes saved. Browser text or page images were reviewed; two raw-capture requests in this iteration failed name resolution. A source URL is not a content hash."
      }
    },
    {
      "id": "IC-SYN-S10",
      "title": "Texas H.B.581, 89th Regular Session — enrolled text",
      "issuer": "Texas Legislature",
      "canonicalUrl": "https://capitol.texas.gov/tlodocs/89R/billtext/html/HB00581F.htm",
      "retrievedUrl": "https://capitol.texas.gov/tlodocs/89R/billtext/html/HB00581F.htm",
      "publicationDate": null,
      "versionStatus": "Enrolled amendment; Chapter 129B identifies enacted amendments effective 1 September 2025.",
      "reviewedAt": "2026-09-06",
      "reviewMethod": "Selected substantive primary-document text review",
      "reviewedPassages": "Sections amending 129B.001–.003; new .0045; amendments to .005–.006.",
      "narrowSupport": "A creation-tool branch was added without using the publication branch’s one-third test. Its exception requires both acknowledged terms and affirmative measures; source age and consent are separate.",
      "limitation": "An enrolled version and statutory annotation establish the text used here, not a complete bill-action or constitutional-litigation history. The June 2025 Paxton opinion did not decide this later amendment.",
      "firstReviewedInRelease": "1.9.10",
      "icSourceId": null,
      "rawCapture": {
        "path": null,
        "sha256": null,
        "reason": "No exact external-document bytes saved. Browser text or page images were reviewed; two raw-capture requests in this iteration failed name resolution. A source URL is not a content hash."
      }
    },
    {
      "id": "IC-SYN-S11",
      "title": "Free Speech Coalition, Inc. v. Paxton, No. 23-1122",
      "issuer": "Supreme Court of the United States",
      "canonicalUrl": "https://www.supremecourt.gov/opinions/24pdf/23-1122_3e04.pdf",
      "retrievedUrl": "https://www.supremecourt.gov/opinions/24pdf/23-1122_3e04.pdf",
      "publicationDate": "2025-06-27",
      "versionStatus": "June 27, 2025 opinion; 606 U.S. 461. Six-Justice majority; Kagan dissent joined by Sotomayor and Jackson.",
      "reviewedAt": "2026-09-06",
      "reviewMethod": "Primary judicial text and selected PDF pages visually reviewed",
      "reviewedPassages": "Case posture and holding; majority discussion and printed page 36 disposition; dissent’s adult-speech, disclosure and tailoring discussion, including printed page 5.",
      "narrowSupport": "The majority applies intermediate scrutiny and affirms the Fifth Circuit judgment on the challenged age-verification requirements. The dissent would require strict scrutiny for the burden on protected adult expression.",
      "limitation": "Selected text plus two page images (PDF indices 39 and 44); not a complete later-docket audit or a ruling on every age gate, health-warning requirement, or H.B.581 creation-tool provision.",
      "firstReviewedInRelease": "1.9.10",
      "icSourceId": null,
      "rawCapture": {
        "path": null,
        "sha256": null,
        "reason": "No exact external-document bytes saved. Browser text or page images were reviewed; two raw-capture requests in this iteration failed name resolution. A source URL is not a content hash."
      }
    },
    {
      "id": "IC-SYN-S12",
      "title": "NIST IR 8525 — Face Analysis Technology Evaluation: Age Estimation and Verification",
      "issuer": "NIST; Kayee Hanaoka, Patrick Grother, Mei Ngan, Joyce Yang, George Quinn and Austin Hom",
      "canonicalUrl": "https://nvlpubs.nist.gov/nistpubs/ir/2024/NIST.IR.8525.pdf",
      "retrievedUrl": "https://nvlpubs.nist.gov/nistpubs/ir/2024/NIST.IR.8525.pdf",
      "publicationDate": "2024-05-29",
      "versionStatus": "May 2024 research report; historical evaluated algorithms and datasets, not a current vendor certification.",
      "reviewedAt": "2026-09-06",
      "reviewMethod": "Primary research text and selected PDF pages visually reviewed",
      "reviewedPassages": "Executive and technical summaries, including printed pages 1–3; Table 15 and accompanying discussion/figure on printed page 23.",
      "narrowSupport": "Aggregate estimation error does not alone determine age-verification threshold errors; performance depends on age distribution and other evaluated conditions.",
      "limitation": "Selected text and page images (PDF indices 10 and 30). Evaluation uses photographs and specified algorithms, not live service enrollment, proof of unlinkability, or a legal adequacy threshold.",
      "firstReviewedInRelease": "1.9.10",
      "icSourceId": null,
      "rawCapture": {
        "path": null,
        "sha256": null,
        "reason": "No exact external-document bytes saved. Browser text or page images were reviewed; two raw-capture requests in this iteration failed name resolution. A source URL is not a content hash."
      }
    },
    {
      "id": "IC-SYN-S13",
      "title": "ISO/IEC 27566-1:2025 — Age assurance systems, Part 1: Framework",
      "issuer": "ISO/IEC",
      "canonicalUrl": "https://www.iso.org/standard/88143.html",
      "retrievedUrl": "https://www.iso.org/standard/88143.html",
      "publicationDate": null,
      "versionStatus": "First edition; catalogue publication month December 2025; 29 pages.",
      "reviewedAt": "2026-09-06",
      "reviewMethod": "Official catalogue metadata and abstract only — normative text not reviewed",
      "reviewedPassages": "Official title, abstract, publication/edition metadata.",
      "narrowSupport": "The standard’s identity and framework subject are established. The original report’s law-firm article cannot be described as the full ISO normative text.",
      "limitation": "Only the official catalogue was reviewed. No specific accuracy threshold, zero-knowledge implementation, fallback rule or compliance claim is derived from unread normative clauses.",
      "firstReviewedInRelease": "1.9.10",
      "icSourceId": null,
      "rawCapture": {
        "path": null,
        "sha256": null,
        "reason": "No exact external-document bytes saved. Browser text or page images were reviewed; two raw-capture requests in this iteration failed name resolution. A source URL is not a content hash."
      }
    },
    {
      "id": "IC-SYN-S14",
      "title": "Texas H.B.1181, 88th Regular Session — enrolled text",
      "issuer": "Texas Legislature",
      "canonicalUrl": "https://capitol.texas.gov/tlodocs/88R/billtext/html/HB01181F.HTM",
      "retrievedUrl": "https://capitol.texas.gov/tlodocs/88R/billtext/html/HB01181F.HTM",
      "publicationDate": null,
      "versionStatus": "Historical 2023 enactment text, distinguished from Chapter 129B after the 2025 amendment.",
      "reviewedAt": "2026-09-06",
      "reviewMethod": "Selected substantive primary-document text review",
      "reviewedPassages": "129B.002(a)–(b), .003, .005 and .006 as originally added.",
      "narrowSupport": "The original publication threshold and non-retention obligation can be located independently of the later creation-tool amendment.",
      "limitation": "Historical legislative text is not the whole current chapter and does not establish subsequent injunction status.",
      "firstReviewedInRelease": "1.9.10",
      "icSourceId": null,
      "rawCapture": {
        "path": null,
        "sha256": null,
        "reason": "No exact external-document bytes saved. Browser text or page images were reviewed; two raw-capture requests in this iteration failed name resolution. A source URL is not a content hash."
      }
    },
    {
      "id": "IC-SYN-S15",
      "title": "Verifiable Credentials Data Model v2.0",
      "issuer": "W3C Verifiable Credentials Working Group",
      "canonicalUrl": "https://www.w3.org/TR/vc-data-model-2.0/",
      "retrievedUrl": "https://www.w3.org/TR/vc-data-model-2.0/",
      "publicationDate": "2025-05-15",
      "versionStatus": "W3C Recommendation dated 15 May 2025.",
      "reviewedAt": "2026-09-06",
      "reviewMethod": "Selected substantive primary-document text review",
      "reviewedPassages": "Sections 5.7 and 8.4–8.11 on zero-knowledge proofs, correlation, abstract claims and minimization.",
      "narrowSupport": "A credential is not automatically a zero-knowledge or unlinkable presentation. Identifier, signature, metadata and validation interactions can create correlation.",
      "limitation": "Selected specification passages, not a deployed age-credential scheme, conformance test, legal acceptance decision or proof that an issuer never learns identity.",
      "firstReviewedInRelease": "1.9.10",
      "icSourceId": null,
      "rawCapture": {
        "path": null,
        "sha256": null,
        "reason": "No exact external-document bytes saved. Browser text or page images were reviewed; two raw-capture requests in this iteration failed name resolution. A source URL is not a content hash."
      }
    },
    {
      "id": "IC-SYN-S16",
      "title": "California Civil Code §1798.140 — definitions",
      "issuer": "California Legislature",
      "canonicalUrl": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV&sectionNum=1798.140.",
      "retrievedUrl": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV&sectionNum=1798.140.",
      "publicationDate": null,
      "versionStatus": "Current endpoint retrieved 6 September 2026; displayed amendment note identifies Stats. 2025, Ch. 67, §27 (AB1170), effective 1 January 2026.",
      "reviewedAt": "2026-09-06",
      "reviewMethod": "Selected substantive primary-document review",
      "reviewedPassages": "Subdivisions (c), (d), (i), (m), (v)(1)(F)/(K), (v)(2)–(4), (y), (z), (ae), and (ag).",
      "narrowSupport": "Non-neural profiling inferences can be personal information. Sensitive categories extend beyond neural measurements. The format provision includes AI systems capable of outputting personal information.",
      "limitation": "Selected definitions do not determine every exemption, business threshold, injury, or remedy. Not every model is personal information; this provision does not grant the model its own privacy rights.",
      "firstReviewedInRelease": "1.9.11",
      "icSourceId": null,
      "rawCapture": {
        "path": null,
        "sha256": null,
        "reason": "No exact external-document bytes saved. Web text and selected PDF page images were reviewed. Actual direct HTTPS capture failed name resolution; URL identity is not a content hash."
      }
    },
    {
      "id": "IC-SYN-S17",
      "title": "California Civil Code §1798.100 — collection and purpose limitations",
      "issuer": "California Legislature",
      "canonicalUrl": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV&sectionNum=1798.100.",
      "retrievedUrl": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV&sectionNum=1798.100.",
      "publicationDate": null,
      "versionStatus": "Current endpoint retrieved 6 September 2026; selected enacted CCPA text.",
      "reviewedAt": "2026-09-06",
      "reviewMethod": "Selected substantive primary-document review",
      "reviewedPassages": "Subdivisions (a)–(e), particularly (a)(3), (c), and (d).",
      "narrowSupport": "Notice, proportionate purpose-related collection/use/retention, contractual conditions, and reasonable security contradict a categorical unregulated-collection claim.",
      "limitation": "Applicability and other statutory exceptions must be satisfied. This is not a universal opt-in requirement or evidence of provider compliance.",
      "firstReviewedInRelease": "1.9.11",
      "icSourceId": null,
      "rawCapture": {
        "path": null,
        "sha256": null,
        "reason": "No exact external-document bytes saved. Web text and selected PDF page images were reviewed. Actual direct HTTPS capture failed name resolution; URL identity is not a content hash."
      }
    },
    {
      "id": "IC-SYN-S18",
      "title": "California Civil Code §1798.121 — right to limit sensitive-information use",
      "issuer": "California Legislature",
      "canonicalUrl": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV&sectionNum=1798.121.",
      "retrievedUrl": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV&sectionNum=1798.121.",
      "publicationDate": null,
      "versionStatus": "Current endpoint retrieved 6 September 2026; displayed AB3286 amendment effective 1 January 2025.",
      "reviewedAt": "2026-09-06",
      "reviewMethod": "Selected substantive primary-document review",
      "reviewedPassages": "Subdivisions (a)–(d), including requested-service/permitted-use qualifications and the no-inference-purpose clause.",
      "narrowSupport": "A use-limitation right differs from an absolute processing ban. Information outside this particular limitation can remain personal information governed by other provisions.",
      "limitation": "No inference is made that every disclosure is a statutory sale/share or that lack of a limitation request authorizes all processing.",
      "firstReviewedInRelease": "1.9.11",
      "icSourceId": null,
      "rawCapture": {
        "path": null,
        "sha256": null,
        "reason": "No exact external-document bytes saved. Web text and selected PDF page images were reviewed. Actual direct HTTPS capture failed name resolution; URL identity is not a content hash."
      }
    },
    {
      "id": "IC-SYN-S19",
      "title": "California Civil Code §1798.106 — right to correction",
      "issuer": "California Legislature",
      "canonicalUrl": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV&sectionNum=1798.106.",
      "retrievedUrl": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV&sectionNum=1798.106.",
      "publicationDate": null,
      "versionStatus": "Current endpoint retrieved 6 September 2026; displayed AB3286 amendment effective 1 January 2025.",
      "reviewedAt": "2026-09-06",
      "reviewMethod": "Selected substantive primary-document review",
      "reviewedPassages": "Subdivisions (a)–(c).",
      "narrowSupport": "A verified consumer can request correction; the nature and purpose of the information and commercially reasonable efforts matter.",
      "limitation": "A right to request is not automatic acceptance of every challenge or proof that an opaque probabilistic profile can readily be discovered.",
      "firstReviewedInRelease": "1.9.11",
      "icSourceId": null,
      "rawCapture": {
        "path": null,
        "sha256": null,
        "reason": "No exact external-document bytes saved. Web text and selected PDF page images were reviewed. Actual direct HTTPS capture failed name resolution; URL identity is not a content hash."
      }
    },
    {
      "id": "IC-SYN-S20",
      "title": "California Civil Code §1798.120 — opt-out of sale or sharing",
      "issuer": "California Legislature",
      "canonicalUrl": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV&sectionNum=1798.120.",
      "retrievedUrl": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV&sectionNum=1798.120.",
      "publicationDate": null,
      "versionStatus": "Current endpoint retrieved 6 September 2026; displayed AB1824 amendment effective 1 January 2025.",
      "reviewedAt": "2026-09-06",
      "reviewMethod": "Selected substantive primary-document review",
      "reviewedPassages": "Subdivisions (a)–(e), with the requirement to honor opt-out directions.",
      "narrowSupport": "Qualifying sale/sharing choices are distinct from collection, inference, correction, and service use.",
      "limitation": "Must be read with the statutory definitions and exceptions; not a universal right to stop all transfers or erase any related artifact.",
      "firstReviewedInRelease": "1.9.11",
      "icSourceId": null,
      "rawCapture": {
        "path": null,
        "sha256": null,
        "reason": "No exact external-document bytes saved. Web text and selected PDF page images were reviewed. Actual direct HTTPS capture failed name resolution; URL identity is not a content hash."
      }
    },
    {
      "id": "IC-SYN-S21",
      "title": "CCPA updates, cybersecurity, risk assessment and ADMT — approved text",
      "issuer": "California Privacy Protection Agency",
      "canonicalUrl": "https://cppa.ca.gov/regulations/pdf/ccpa_updates_cyber_risk_admt_appr_text.pdf",
      "retrievedUrl": "https://cppa.ca.gov/regulations/pdf/ccpa_updates_cyber_risk_admt_appr_text.pdf",
      "publicationDate": "2025-09-22",
      "versionStatus": "Approved-text publication; associated agency announcement states effective 1 January 2026 with phased compliance.",
      "reviewedAt": "2026-09-06",
      "reviewMethod": "Selected substantive primary-document review",
      "reviewedPassages": "§7023, printed pp.43–47 (correction); §7200, printed p.112 (significant decisions and 1 January 2027 compliance). Selected marked-up pages inspected visually.",
      "narrowSupport": "Correction considers context, source and documentation; corrected records must remain corrected, with specified backup timing. The ADMT article has a later compliance date and a significant-decision trigger.",
      "limitation": "The 127-page document was not reviewed in full. No blanket current opt-out from all profiling is inferred; no whole-program certification of compliance.",
      "firstReviewedInRelease": "1.9.11",
      "icSourceId": null,
      "rawCapture": {
        "path": null,
        "sha256": null,
        "reason": "No exact external-document bytes saved. Web text and selected PDF page images were reviewed. Actual direct HTTPS capture failed name resolution; URL identity is not a content hash."
      }
    },
    {
      "id": "IC-SYN-S22",
      "title": "HB24-1058 — Protect Privacy of Biological Data, signed act",
      "issuer": "Colorado General Assembly",
      "canonicalUrl": "https://www.leg.colorado.gov/bill_files/41195/download",
      "retrievedUrl": "https://www.leg.colorado.gov/bill_files/41195/download",
      "publicationDate": "2024-04-17",
      "versionStatus": "Signed 2024 act; historical enacted amendment, not a consolidated September 2026 code.",
      "reviewedAt": "2026-09-06",
      "reviewMethod": "Selected substantive primary-document review",
      "reviewedPassages": "§§1–3, particularly §2 on printed p.4: biological-data identification qualifier, express neural inclusion, and separate neural definition.",
      "narrowSupport": "The biological definition contains used-or-intended-for-identification wording as well as express neural inclusion. Legislative concern is distinct from a measured ability to read thought.",
      "limitation": "No judicial resolution of the relationship between the qualifier and the final inclusion sentence was obtained. The act is not a universal unconditional control over all bodily telemetry.",
      "firstReviewedInRelease": "1.9.11",
      "icSourceId": null,
      "rawCapture": {
        "path": null,
        "sha256": null,
        "reason": "No exact external-document bytes saved. Web text and selected PDF page images were reviewed. Actual direct HTTPS capture failed name resolution; URL identity is not a content hash."
      }
    },
    {
      "id": "IC-SYN-S23",
      "title": "Colorado Revised Statutes 2025, Title 6 — selected CPA text",
      "issuer": "Colorado General Assembly / Office of Legislative Legal Services publication",
      "canonicalUrl": "https://olls.info/crs/crs2025-title-06.htm",
      "retrievedUrl": "https://olls.info/crs/crs2025-title-06.htm",
      "publicationDate": null,
      "versionStatus": "2025 compilation at olls.info; retrieved 6 September 2026. Not a certified current-2026 consolidation.",
      "reviewedAt": "2026-09-06",
      "reviewMethod": "Selected substantive primary-document review",
      "reviewedPassages": "§§6-1-1303(2.2), (6), (16.7)–(18), (24); 1304; 1306; 1307; 1308; 1310–1311.",
      "narrowSupport": "The compilation distinguishes linkable personal data, sensitive classes, purpose/consent duties, correction, deidentification and bounded opt-outs.",
      "limitation": "2026 session changes were not exhaustively reconciled. The official legislative index route to downloads returned an error; the hosting chain and a certified current copy were not independently established. Used as a dated statutory-text comparison alongside the signed act and official rules, not sole evidence of current legal force.",
      "firstReviewedInRelease": "1.9.11",
      "icSourceId": null,
      "rawCapture": {
        "path": null,
        "sha256": null,
        "reason": "No exact external-document bytes saved. Web text and selected PDF page images were reviewed. Actual direct HTTPS capture failed name resolution; URL identity is not a content hash."
      }
    },
    {
      "id": "IC-SYN-S24",
      "title": "Colorado Privacy Act Rules — 2023 issued version",
      "issuer": "Colorado Department of Law",
      "canonicalUrl": "https://coag.gov/app/uploads/2023/03/FINAL-CLEAN-2023.03.15-Official-CPA-Rules.pdf",
      "retrievedUrl": "https://coag.gov/app/uploads/2023/03/FINAL-CLEAN-2023.03.15-Official-CPA-Rules.pdf",
      "publicationDate": "2023-03-15",
      "versionStatus": "AG-hosted issued rules, effective 1 July 2023 under Rule 1.03; later consolidated rule history not completed.",
      "reviewedAt": "2026-09-06",
      "reviewMethod": "Selected substantive primary-document review",
      "reviewedPassages": "Rules 1.03–1.04, 2.02 (Sensitive Data Inferences), 4.05, 6.06–6.10, especially 6.10(A)–(C), printed pp.24–25.",
      "narrowSupport": "Sensitive-data inferences are expressly addressed. The over-thirteen consent exception requires all four conditions, including no transfer to processors/affiliates/third parties and deletion within the earlier specified time.",
      "limitation": "This is a dated primary rule text, not a claim that every 2023 provision is unchanged in 2026. It does not supply an exemption for internal maintenance or for merely using a short retention label.",
      "firstReviewedInRelease": "1.9.11",
      "icSourceId": null,
      "rawCapture": {
        "path": null,
        "sha256": null,
        "reason": "No exact external-document bytes saved. Web text and selected PDF page images were reviewed. Actual direct HTTPS capture failed name resolution; URL identity is not a content hash."
      }
    },
    {
      "id": "IC-SYN-S25",
      "title": "In re InMarket Media, LLC — Decision and Order, C-4803",
      "issuer": "Federal Trade Commission",
      "canonicalUrl": "https://www.ftc.gov/system/files/ftc_gov/pdf/InMarketMedia-DecisionandOrder.pdf",
      "retrievedUrl": "https://www.ftc.gov/system/files/ftc_gov/pdf/InMarketMedia-DecisionandOrder.pdf",
      "publicationDate": "2024-05-01",
      "versionStatus": "Final respondent-specific administrative consent order, issued 29 April 2024 (printed p.14); publication/finalization announced 1 May 2024. Part XVIII ties effectiveness to publication as a final order.",
      "reviewedAt": "2026-09-06",
      "reviewMethod": "Selected substantive primary-document review",
      "reviewedPassages": "Opening admissions; definitions of Deidentified, Location Data and Sensitive Location Data; Parts II–IV, VIII–X, XII(A)–(C), XIII(C), XVIII. Selected pages 5, 9 and 10 inspected visually. Issuance page 14 visually checked.",
      "narrowSupport": "Distinct restrictions address location-data sale, specified sensitive-location products, consent, retention and different historic-data deletion paths. Qualified-employee roles appear in Parts IV and XIII.",
      "limitation": "Not a generally applicable privacy statute or admission of the complaint allegations. No subsequent compliance audit, live implementation, or general prohibition on all inferences was established.",
      "firstReviewedInRelease": "1.9.11",
      "icSourceId": null,
      "rawCapture": {
        "path": null,
        "sha256": null,
        "reason": "No exact external-document bytes saved. Web text and selected PDF page images were reviewed. Actual direct HTTPS capture failed name resolution; URL identity is not a content hash."
      },
      "documentDate": "2024-04-29"
    },
    {
      "id": "IC-SYN-S26",
      "title": "InMarket Media — Complaint",
      "issuer": "Federal Trade Commission",
      "canonicalUrl": "https://www.ftc.gov/system/files/ftc_gov/pdf/InMarketMedia-Complaint.pdf",
      "retrievedUrl": "https://www.ftc.gov/system/files/ftc_gov/pdf/InMarketMedia-Complaint.pdf",
      "publicationDate": "2024-05-01",
      "versionStatus": "Docketed complaint, C-4803; issuance line gives 29 April 2024; published with finalization materials. Distinct from both earlier proposed-settlement publicity and the final order.",
      "reviewedAt": "2026-09-06",
      "reviewMethod": "Selected substantive primary-document review",
      "reviewedPassages": "Textual allegations on location collection, SDKs, mobile identifiers, targeting and disclosure, paragraphs 10–20 and 27 onward.",
      "narrowSupport": "The agency alleged practices linking location information to marketing; the complaint supplies the theory and context of the remedy.",
      "limitation": "Allegations are not independently reproduced events or findings admitted by the respondent. No inference that every health/religious inference has been proven unlawful. Interface illustrations are not relied upon as separately inspected evidence. The last-page image request failed; issuance is based on the parsed text and associated docket, not a claimed image inspection.",
      "firstReviewedInRelease": "1.9.11",
      "icSourceId": null,
      "rawCapture": {
        "path": null,
        "sha256": null,
        "reason": "No exact external-document bytes saved. Web text and selected PDF page images were reviewed. Actual direct HTTPS capture failed name resolution; URL identity is not a content hash."
      },
      "documentDate": "2024-04-29"
    },
    {
      "id": "IC-SYN-S27",
      "title": "CPPA announces approval of CCPA regulations",
      "issuer": "California Privacy Protection Agency",
      "canonicalUrl": "https://cppa.ca.gov/announcements/2025/20250923.html",
      "retrievedUrl": "https://cppa.ca.gov/announcements/2025/20250923.html",
      "publicationDate": "2025-09-23",
      "versionStatus": "Agency announcement of OAL approval on 22 September 2025.",
      "reviewedAt": "2026-09-06",
      "reviewMethod": "Official status and commencement review",
      "reviewedPassages": "Approval and effective-date paragraphs; phased ADMT compliance, read with §7200 in the approved text.",
      "narrowSupport": "The package took effect in 2026 while specified ADMT compliance is phased to 2027.",
      "limitation": "Status announcement only; the approved text controls operative details. It is not a current audit of every later rule change.",
      "firstReviewedInRelease": "1.9.11",
      "icSourceId": null,
      "rawCapture": {
        "path": null,
        "sha256": null,
        "reason": "No exact external-document bytes saved. Web text and selected PDF page images were reviewed. Actual direct HTTPS capture failed name resolution; URL identity is not a content hash."
      }
    },
    {
      "id": "IC-SYN-S28",
      "title": "FTC finalizes InMarket order",
      "issuer": "Federal Trade Commission",
      "canonicalUrl": "https://www.ftc.gov/news-events/news/press-releases/2024/05/ftc-finalizes-order-inmarket-prohibiting-it-selling-or-sharing-precise-location-data",
      "retrievedUrl": "https://www.ftc.gov/news-events/news/press-releases/2024/05/ftc-finalizes-order-inmarket-prohibiting-it-selling-or-sharing-precise-location-data",
      "publicationDate": "2024-05-01",
      "versionStatus": "Official finalization announcement, distinct from the January proposal.",
      "reviewedAt": "2026-09-06",
      "reviewMethod": "Official status and identity review",
      "reviewedPassages": "Opening finalization and order-summary paragraphs.",
      "narrowSupport": "Corroborates the final-order publication date, replacing the submitted January 1 placeholder.",
      "limitation": "Summary is not substituted for the decision terms, respondent scope, consent qualifications or deletion provisos.",
      "firstReviewedInRelease": "1.9.11",
      "icSourceId": null,
      "rawCapture": {
        "path": null,
        "sha256": null,
        "reason": "No exact external-document bytes saved. Web text and selected PDF page images were reviewed. Actual direct HTTPS capture failed name resolution; URL identity is not a content hash."
      }
    }
  ]
}
