GRCLibrary.ai

Annex

Colorado AI and Automated Decision-Making Technology Regulatory Requirements

This annex gives the adopter a single per-regime view of Colorado's artificial-intelligence statute, the first US-state AI law of its kind. Colorado is a two-regime jurisdiction: the original Colorado Artificial Intelligence Act (Senate Bill 24-205, C.R.S. 6-1-1701 et seq.) was repealed and re-enacted with substantial amendments by Senate Bill 26-189 (Automated Decision-Making Technology), so an adopter must track both the outgoing SB24-205 framework and the incoming SB26-189 framework that governs consequential decisions made on or after 1 January 2027. This annex presents both regimes, flags the material differences between them, and frames which obligations land on the adopter as developer or deployer. It cites the enacted texts and cross-references the litigation status rather than restating it.

Type
Annex
Version
0.0.4
Date
2026-10-27
Owner
Chief Information Security Officer
Approving authority
Governance Library Maintainer
Classification
Public
Confidentiality
Public
Category
AI Governance
Review frequency
Annual and upon material change to the Colorado ADMT statute, its effective date, or the pending litigation
Licence
CC BY-SA 4.0

Read the full text on GitHub (opens in a new tab)

Outline

  • Purpose
  • Applicable law and regulatory authority
  • Transition timeline
  • Scope: covered actors and covered systems or decisions
  • Core obligations
  • Consumer rights
  • Enforcement
  • Relationship to the Colorado Privacy Act
  • Limitations
  • Framework alignment

Frameworks it maps to

Related documents