Colorado enacted the first comprehensive US state AI law as SB 24-205 (2024). Before its obligations ever took effect it was repealed and reenacted by SB 26-189 (signed 14 May 2026) — a narrower framework governing automated decision-making technology (ADMT) in consequential decisions, built on developer documentation duties and consumer notice/disclosure rather than SB 24-205's impact-assessment and risk-management-program model. SB 26-189 carries a 3-year record-retention duty for developers and deployers.
Developers and deployers of automated decision-making technology used in consequential decisions affecting Colorado consumers (areas such as employment, education, financial services, healthcare, housing, insurance, and government services).
Enforced by the Colorado Attorney General. SB 26-189 drops SB 24-205's affirmative-defense mechanism; enforcement details are subject to AG rulemaking (due January 1, 2027) and the pending federal litigation.
Get started with these essential steps. For a full automated assessment, start your free trial.
Register your AI systems and get automated risk classification, gap analysis, and audit-ready documentation for Colorado AI Act.
Start Free Trial