Colorado passed the first comprehensive US state AI law, SB 24-205, in 2024. It never took effect. After repeated delays and a special session, the legislature repealed and replaced it in May 2026 with SB 26-189, a narrower automated-decision law. The original duty of care against algorithmic discrimination, risk-management programs, and impact assessments are gone. The replacement focuses on disclosures and consumer rights around automated decision-making technology and takes effect January 1, 2027. Colorado was the only state named in the December 2025 federal preemption order.
The first comprehensive US state AI law. Imposed a duty of reasonable care to prevent algorithmic discrimination in consequential decisions. Repealed and replaced in 2026.
Regulates automated decision-making technology that materially influences consequential decisions. Requires pre-use notices, adverse-decision explanations, human review, and developer documentation.
Under the replacement, deployers and developers of ADMT that influences consequential decisions about Colorado residents, including employees and job applicants.
Up to $20,000 per violation; Attorney General enforcement; no private right of action.
Governor Polis signed a bill repealing the first comprehensive US state AI law before it ever took effect. The replacement drops the duty of care, risk programs, and impact assessments, and instead regulates automated decision-making technology through disclosures and consumer rights, effective January 1, 2027.
Artificial Intelligence Regulations, "AI Regulation in Colorado," reviewed July 15, 2026, https://artificialintelligenceregulations.com/jurisdictions/colorado.html.
Entries state the position as of the review date and link to the primary text for verification.