Colorado - Artificial Intelligence Act (SB 24-205) (2024)

Signed on 17 May 2024, the Colorado Artificial Intelligence Act is the first comprehensive US statute governing high-risk artificial-intelligence systems. It applies to developers and deployers of high-risk AI systems, meaning systems that make, or are a substantial factor in making, a consequential decision affecting a consumer in enumerated areas including employment, education, financial or lending services, essential government services, health care, housing, insurance and legal services. Both developers and deployers owe a duty of reasonable care to protect consumers from algorithmic discrimination, with a rebuttable presumption of reasonable care where specified steps are met.

Deployers must implement a risk-management program, complete impact assessments, provide consumers with notice that a high-risk AI system is used, disclose the right to correct data and to appeal to human review, and publish a statement of the high-risk systems they deploy. Developers must supply documentation to deployers about intended uses, known risks and training-data summaries, and both must notify the Attorney General within 90 days of discovering algorithmic discrimination. The original effective date of 1 February 2026 was moved to 30 June 2026 by SB 25B-004. Enforcement is exclusively by the Colorado Attorney General, with no private right of action.