Rules · Colorado

Colorado’s AI law to take effect on 1 Jan 2027

Colorado AI Act, repealed and reenacted as the automated decision-making technology law. Developers and deployers of automated decision-making technology that materially influences consequential decisions, such as in employment, lending and housing, must give documentation and notices. After an adverse decision, a consumer can ask for human review. The start date moved twice before the 2026 law replaced the 2024 one.

SB24-205, delayed by SB25B-004, repealed and reenacted by SB26-189 · enacted; developer duties start January 1, 2027

Every date

in date order · as of 12 Nov 2026

1 Feb 2026 take effect · replaced, moved 334 days later, to 1 Jan 2027 The first start date of SB24-205's duties of reasonable care against algorithmic discrimination. SB25B-004 moved it to June 30, 2026. For: developers and deployers of high-risk AI systems. On and after February 1, 2026, the act requires a developer of a high-risk artificial intelligence system (high-risk system) to use reasonable care to protect consumers from any known or reasonably foreseeable risks of algorithmic discrimination — SB24-205, Consumer Protections for Artificial Intelligence: the General Assembly's bill page
30 Jun 2026 take effect · replaced, moved 185 days later, to 1 Jan 2027 The second start date of SB24-205's duties. SB26-189 then repealed and reenacted the law. Its developer duties start January 1, 2027. For: developers and deployers of high-risk AI systems. The act extends the effective date of the requirements of Senate Bill 24-205 to June 30, 2026. — SB25B-004, Increase Transparency for Algorithmic Systems: the General Assembly's bill page
1 Jan 2027 take effect The reenacted law starts. A developer of a covered ADMT must give each deployer documentation of its intended uses, categories of training data, known limitations, and instructions for appropriate use and human review. For: developers of automated decision-making technology. The act requires the developer of an ADMT (developer) that is used to materially influence a consequential decision (covered ADMT), starting January 1, 2027, to provide a deployer of a covered ADMT (deployer) with technical documentation — SB26-189, automated decision-making technology: the General Assembly's bill page
1 Jan 2027 require rules from the attorney general The Attorney General must adopt rules for the disclosure a deployer owes a consumer after an adverse outcome. For: Colorado Attorney General. The attorney general must adopt rules to clarify these post-adverse outcome disclosure requirements by January 1, 2027. — SB26-189, automated decision-making technology: the General Assembly's bill page
1 Jan 2030 end the notice-and-cure period before enforcement The Attorney General no longer must give 60 days' notice and a chance to cure before an enforcement action. For: developers and deployers. Before initiating an action before January 1, 2030, the attorney general must provide the developer or deployer with a 60-day notice and opportunity to cure the alleged violation, if a cure is deemed possible. — SB26-189, automated decision-making technology: the General Assembly's bill page

Sources

rules.csv rules.ics Every dataset → Status → Glossary →

Colorado General Assembly: SB24-205, Consumer Protections for Artificial Intelligence: the General Assembly's bill page (bill page, with the summary of the act as enacted), read 27 Oct 2026; the copy kept 27 Oct 2026 has sha256 bb484ba51ddc.
Colorado General Assembly: SB25B-004, Increase Transparency for Algorithmic Systems: the General Assembly's bill page (bill page, with the summary of the act as enacted), read 27 Oct 2026; the copy kept 27 Oct 2026 has sha256 5f4011934c5a.
Colorado General Assembly: SB26-189, automated decision-making technology: the General Assembly's bill page (bill page, with the summary of the act as enacted), read 27 Oct 2026; the copy kept 27 Oct 2026 has sha256 fff762ec640a.