Colorado. AI / automated decisions. Act

Colorado AI law (SB 189)Colorado artificial intelligence consumer protection law (SB 26-189)

Enacted – not yet in force
Partly verifiedMedium confidence. Detailed obligations and penalties not confirmed.

§1Summary

Synopsis

Repeals and re-enacts Colorado's AI framework with a narrower, notice-based approach for consequential decisions made using AI systems.

Key themes
  • consequential decisions
  • AI notices
  • deployer duties
  • AG rulemaking
Unique features

Replaces risk-management and impact-assessment duties of SB 205 with lighter transparency obligations.

SaaS relevance

HR-tech, lending and other SaaS used for consequential decisions about Colorado residents will need notice capabilities for deployer customers.

§2Obligations

Extraterritorial
Yes
DPO
No
Cross-border transfers
None

§3Dates

Key dates
  • Adopted
  • In force
  • AG implementing rules due by 2027-01-01; federal AI preemption executive order (Dec 2025) and DOJ litigation task force target state AI laws.

§4Text and authority

Text
Authority
Colorado Attorney General

§5Where it applies

Domestic law of
Colorado

§6Sources and verification

Sources consulted
Verification

Medium confidence.

Partly verifiedMedium confidence. Detailed obligations and penalties not confirmed.