Colorado enacted Senate Bill 26-189 in May 2026, repealing and reenacting the automated decision-making technology provisions first introduced by SB 24-205. The law is signed and final; it takes effect January 1, 2027. It governs developers and deployers of AI systems that make or materially influence consequential decisions affecting Colorado consumers across sectors including employment, education, financial services, housing, and healthcare.
SB 24-205, signed in 2024 and effective February 1, 2026, required developers of high-risk AI systems to use reasonable care to protect consumers from algorithmic discrimination and required deployers to publish risk management statements. SB 26-189 replaces those provisions with revised obligations. The Colorado Attorney General holds rulemaking authority under the new statute and has opened a rulemaking proceeding to define compliance standards, including the definitions of 'automated decision-making technology' and 'consequential decision.'
Businesses that deploy AI in hiring, performance evaluation, credit decisioning, insurance underwriting, or housing eligibility determinations for Colorado residents must meet the revised obligations by January 1, 2027. The law binds both the AI system developer, who must use reasonable care to limit known risks of algorithmic discrimination, and the deployer, who must conduct impact assessments and publish a public summary of AI systems deployed. Technology vendors supplying AI systems to Colorado-based deployers carry developer obligations and cannot disclaim them by contract alone.
Final implementing rules have not yet issued from the Colorado Attorney General's office, leaving the precise scope of compliance obligations open to interpretation. At least a dozen other US states have introduced comparable automated decision-making bills in 2025 and 2026, creating overlapping and partially inconsistent obligations. Companies operating nationally must track each state's effective date, scope definitions, and exemption carve-outs individually.
Licentium advises on AI governance and algorithmic accountability requirements across US and international regulatory regimes and coordinates with US-qualified counsel through our partner network. To discuss SB 26-189 compliance planning, contact us. Work we undertake includes: AI regulatory compliance, automated decision-making impact assessments, employment AI audits, state AI statute gap analysis, and multi-jurisdictional regulatory strategy.