About

Colorado repeals and rewrites its AI law into a narrower 2027 framework

Published
Score
16

Why it matters

Colorado has repealed and replaced its groundbreaking artificial intelligence law with a narrower regime focused on "automated decision-making technology." Governor Jared Polis signed SB 26-189 on May 14, 2026, effective January 1, 2027. The new law abandons the prior risk-based compliance model in favor of transparency and notice requirements. Developers must document intended uses, inputs, limitations, and known risks. Deployers must notify users when ADMT drives consequential decisions and provide post-adverse-action notice in certain cases. The law preserves limited rights to correction and human review for adverse outcomes. Enforcement rests exclusively with the Colorado Attorney General under the state's consumer protection statute, with no private right of action.

The legislature had already delayed the original law's effective date before moving in May 2026 to repeal key portions. The specific compliance obligations for developers and deployers under the new regime remain subject to further regulatory guidance from the Attorney General's office.

Colorado was the first state to enact sweeping AI regulation. This rewrite signals a significant retreat from that model and will likely influence how other states approach AI legislation. For employers and businesses deploying automated systems in employment, lending, housing, insurance, healthcare, education, and government services, the change requires immediate reset of compliance strategies and documentation practices.

mail Subscribe to Artificial Intelligence email updates

Primary sources. No fluff. Straight to your inbox.

Also on LawSnap