The rewrite eliminates several obligations from the original statute, including impact assessments, risk-management programs, annual reviews, and broad public disclosures. What remains: developers of covered automated decision-making technology must provide deployers with technical documentation on intended uses, training data, limitations, and human-review protocols; deployers must notify consumers at the point of interaction and explain adverse consequential decisions in plain language; both must retain compliance records for three years. The Colorado Attorney General retains enforcement authority, and no private right of action exists.
Colorado enacted the original AI law in 2024 with a February 1, 2026 effective date, making it the nation's first comprehensive algorithmic discrimination statute. After intense business and tech industry opposition, the legislature delayed implementation and pursued a rewrite during the 2026 session. The compressed timeline—passage and gubernatorial signature occurring less than two months before the prior law took effect on June 30—created interim uncertainty for employers now resolved by the amendment.
Employers using automated decision-making in hiring, credit, housing, and other consequential decisions should audit their current compliance posture against the narrower 2027 requirements. The shift signals legislative receptiveness to industry pressure and may influence how other states approach AI regulation. Practitioners should monitor whether the Colorado Attorney General issues guidance on the transition and what "consequential decision" encompasses under the amended statute.