I see item 8 as giving permission. The AI Agent is the service controlled by business. The collected data would be provided as training to improve, upgrade or enhance the service.
Item six allows advertising, mainly limiting aggregating personal information taken from other entities that aren't the business. I can see Amazon designing an advertising platform compliant with item 6 and using existing Alexa devices to eavesdrop on all communications.
Reading the argument for section SB690 [https://calmatters.digitaldemocracy.org/bills/ca_202520260sb...] list the main argument as CCPA governs online business. The opposition points out that the CCPA specifically specifies that conflicting laws providing greater protections should apply.
The rest of the arguments cite CIPA as enabling frivolous lawsuits. There are already remedies for frivolous lawsuits. Attorneys can be disbarred and vexatious litigant laws would apply.
In multiple places you state there are 'probably' other laws that apply. That law is 'probably' the federal wiretap law. I'm not sure if you are aware, but California is an all party consent state. The federal wiretap law is single party consent. SB690 would effectively turn California into a single party consent state for anyone with an appropriate business purpose.
The majority of the business purposes listed as acceptable are not what I would call nicely pinned down. I would only be ok with item 2.
I can almost guarantee allowing business to collect this data will lead to use that doesn't fall under the legitimate business purposes. Uncollected data can't be mishandled.
Lastly to me the greatest reason to oppose is that the laws pretty much all cover intentional unauthorized access. CIPA as it is exempts pretty much the only businesses I would want granted the access to intentionally access unauthorized communications. Everyone else can ask me for permission, if I refuse they don't have to do business with me.