Colorado AI Act
2026-02-26 | Resource
Colorado AI Act
In May 2024, Colorado became the first state to enact a comprehensive, risk-based AI law addressing the real-world risks of automated decision-making. Known as the Colorado Artificial Intelligence Act, it establishes guardrails to reduce algorithmic discrimination while still encouraging responsible innovation. For HR and Legal leaders, the Act makes AI governance part of everyday risk management and organizational oversight.
Colorado AI Act FAQs
What is the Colorado AI Act?
The Colorado Artificial Intelligence Act (officially Senate Bill 24-205) is a state law that regulates the development and use of high-risk artificial intelligence systems, with the goal of protecting Colorado residents from harmful outcomes such as discriminatory decisions driven by AI. It places obligations on both developers (those who build or modify AI systems) and deployers (those who use them) to manage risks like algorithmic discrimination.
What does “high-risk AI system” mean under the Act?
A high-risk AI system is one that makes or substantially contributes to a “consequential decision” that materially impacts people’s lives — such as decisions involving:
- employment or hiring
- education opportunities
- financial services or lending
- healthcare
- housing or insurance
- government services or legal outcomes
These decisions are considered significant because they can materially affect a person’s rights or access to essential services.
What obligations does the Act impose?
The law requires developers and deployers of high-risk AI systems to do things like:
- Use “reasonable care” to protect consumers from known or reasonably foreseeable risks of algorithmic discrimination.
- Conduct risk assessments and impact evaluations to identify and mitigate discriminatory effects.
- Provide consumer disclosures when interacting with AI, especially for consequential decisions.
- Maintain transparency, including publicly available summaries of risk management practices and system uses.
Developers also must share risk information with deployers and, in some cases, with the Colorado Attorney General.
Who enforces the Colorado AI Act?
Enforcement authority generally lies with the Colorado Attorney General. The law does not create a private right of action for individuals — meaning that consumers typically cannot sue on their own under this statute, but enforcement actions can be brought by the state.
When does the Colorado AI Act take effect?
Although originally scheduled to take effect February 1, 2026, the implementation has been delayed to January 1, 2027, as part of legislative amendments aimed at giving regulators and stakeholders more time to prepare compliance guidance.
Where can I read the full text of the law?
The official bill text and legislative history for the Colorado AI Act (SB 24-205) are available on the Colorado General Assembly website. This includes definitions, detailed obligations for developers and deployers, and legal language
Why is the Colorado AI Act in the news?
The Colorado AI Act has drawn national attention for being one of the first comprehensive AI regulations in the U.S., setting a possible template for other states. News coverage discusses:
- Colorado’s leadership in AI governance.
- Delay of its implementation to give time for refinement and stakeholder input.
- Its influence on other state proposals like transparency or consumer protection AI bills.
How does the act compare to other AI laws?
Colorado’s approach has similarities to the European Union AI Act in its risk-based framework, focusing on “high-risk” systems and structured obligations. However, it is narrower in scope and tailored to consumer protection and discrimination risk rather than broad generative AI content regulation.