In 2024, Colorado became the first U.S. state to enact comprehensive legislation regulating artificial intelligence with the passage of Senate Bill 24-205, known as the Colorado AI Act (or Consumer Protections for Artificial Intelligence). The law initially focused on “high-risk” AI systems used in consequential decisions—such as employment, housing, credit, education, and healthcare—aiming to prevent algorithmic discrimination through duties of reasonable care, impact assessments, risk management, and consumer disclosures.
However, the law faced significant industry pushback regarding its compliance burden. This led to multiple adjustments: a delay of the effective date to June 30, 2026, followed by a substantial rewrite. On May 14, 2026, Governor Jared Polis signed Senate Bill 26-189, which repeals and replaces much of the original framework with a more targeted, transparency-focused approach centered on Automated Decision-Making Technology (ADMT).
Key Features of the Revised Law
• Narrower Scope: Shifts emphasis from broad risk management and bias audits to transparency, notice requirements, recordkeeping, and consumer rights (e.g., notice before use, adverse action explanations, and meaningful human review).
• Effective Date: January 1, 2027, giving businesses additional time to prepare.
• Business-Friendly Adjustments: Removes several original obligations, such as mandatory governance frameworks and certain reporting requirements, while maintaining protections against unfair automated decisions.
This evolution reflects Colorado’s effort to balance consumer protection with innovation and economic growth. The revised law is expected to be signed and implemented, providing clearer guidelines for organizations deploying AI in the state.
Businesses operating in Colorado should monitor Attorney General rulemaking and begin assessing their ADMT usage in preparation for 2027 compliance.
Stay tuned for updates as regulations develop.