Colorado Artificial Intelligence Act (SB 24-205, rewritten by SB 26-189)
Colorado · C.R.S. § 6-1-1701 et seq. as amended by SB 26-189 (signed May 14, 2026) · effective 2027-01-01 · Delayed twice (from Feb 1, 2026 to June 30, 2026, then to Jan 1, 2027) and narrowed to automated decision-making technology. AG rulemaking due by Jan 1, 2027; a 60-day cure right lasts until Jan 1, 2030.
Summary
Developers and deployers of automated decision-making technology that affects consequential decisions (employment, housing, lending, insurance, health care, education, essential government services) must give consumers targeted disclosures, explain adverse decisions, offer correction rights and meaningful human review, and keep records for three years. The 2024 version also required deployers to tell consumers when they were interacting with an AI system unless obvious; confirm how that duty is carried forward in the AG's rules.
Who must comply
Businesses whose AI makes or substantially influences consequential decisions about Colorado residents.
What you must disclose
Pre-decision notice that ADMT is used, post-adverse-decision explanation, and how to correct data or request human review.
When: Before the decision and after any adverse outcome.
Other duties
- Three-year record retention.
- Meaningful human review process.
Exemptions
- AI that does not affect consequential decisions.
Penalties
Colorado Consumer Protection Act penalties (up to $20,000 per violation); 60-day cure period through 2029.
Enforced by: Colorado Attorney General only.
Triggered by
Sources
Last reviewed 2026-09-09. Not legal advice.
Does this apply to your bot?
Answer six questions and BotNotice maps every statute to your situation, then installs a compliant notice with the right timing.