Colorado Artificial Intelligence Act
Compliance reference — obligations, penalties, applicability, and primary sources.
Last verified May 8, 2026
Summary
The Colorado Artificial Intelligence Act regulates developers and deployers of "high-risk artificial intelligence systems" — defined as AI systems that make or are a substantial factor in making a consequential decision affecting Colorado consumers in housing, employment, education, financial services, healthcare, government services, insurance, or legal services.
The Act imposes duties of reasonable care to avoid algorithmic discrimination, requires annual impact assessments by deployers, mandates consumer disclosures when AI is used in consequential decisions, and creates a notification regime for the Colorado Attorney General when discrimination is discovered.
The Act was enacted in 2024 with a February 1, 2026 implementation date, but Colorado SB25B-004 extended the effective date of the SB 24-205 requirements to June 30, 2026. Implementation discussions and possible legislative adjustments remain active; check the Colorado Attorney General's resources and General Assembly bill pages for current guidance before treating any obligation as enforceable.
Violations are enforced by the Colorado Attorney General as deceptive trade practices under the Colorado Consumer Protection Act, with civil penalties up to $20,000 per violation under C.R.S. § 6-1-112.
Key obligations
Specific compliance requirements derived from the primary source. Each item links to the relevant statutory section where applicable.
- Risk assessmentRole: deployerC.R.S. § 6-1-1703(3)
Complete an annual impact assessment of each high-risk AI system, addressing purpose, intended outputs, performance metrics, transparency measures, post-deployment monitoring, and risks of algorithmic discrimination.
Deadlineannually
- DocumentationRole: developerC.R.S. § 6-1-1702
Provide deployers with documentation including intended uses, harmful or inappropriate uses, data summaries, performance evaluations, mitigation measures, and information necessary for deployers to complete their impact assessments.
Deadlinebefore_deployment
- DisclosureRole: deployerC.R.S. § 6-1-1703(4)
Disclose to consumers when a high-risk AI system is being used to make a consequential decision affecting them, including the system's purpose, the nature of the consequential decision, contact information, and the right to opt out where required.
Deadlinebefore_decision
- Consumer rightRole: deployerC.R.S. § 6-1-1703(4)
Provide consumers with a right to correct incorrect personal data and a right to appeal adverse consequential decisions to a human reviewer where technically feasible.
Deadlineongoing
Sources
Every fact above is sourced from the official primary source. Independent verification recommended before acting on the information.
- Officialleg.colorado.gov — C.R.S. § 6-1-1701 to § 6-1-1707
- leg.colorado.gov
- coag.gov
- leg.colorado.gov
- leg.colorado.gov
Last verified May 8, 2026
We may receive referral commissions from recommended compliance tools. Recommendations are based on product fit and not on commission size. Links marked “partner link” include a tracked redirect.