Governor Jared Polis and the Colorado General Assembly enacted the law with enforcement authority vested in the Colorado Attorney General. The statute defines ADMT as technology that processes personal data to generate predictions, recommendations, classifications, rankings, scores, or similar outputs used to guide individual decisions. The practical compliance timeline includes a 30-day disclosure requirement after adverse outcomes and a 60-day cure period before enforcement action begins.
Attorneys advising employers, lenders, insurers, and other entities using AI in consequential decisions should treat January 1, 2027 as a hard deadline to audit their systems and implement the required transparency and human-review mechanisms. The shift from prescriptive risk assessment to case-by-case accountability reduces upfront compliance burden but increases exposure to post-deployment enforcement. The 60-day cure window provides limited remediation opportunity once the Attorney General identifies violations.