US AI Law
Colorado AI Act
Colorado residents; deployers operating in CO · effective 2026-06-30 · enforced by Colorado Attorney General
What this law does
Colorado residents; deployers operating in CO.
Obligations by role
If you are a deployer
P1
Risk management program
Document and operate a program to identify and reduce algorithmic discrimination risk.
Sec. 6-1-1703(2). A deployer shall use reasonable care to protect consumers from any known or reasonably foreseeable risks of algorithmic discrimination.Read the statute
P1
Annual impact assessment
Conduct and document an impact assessment for each high-risk AI system annually.
Sec. 6-1-1703(3)(b). Annual impact assessments required.Read the statute
P1
Consumer notice before decision
Notify consumers before an AI system makes a consequential decision about them.
Sec. 6-1-1704(1)(a).Read the statute
P1
Appeal right for adverse decisions
Give consumers a right to appeal adverse AI decisions to a human reviewer.
Sec. 6-1-1704(3).Read the statute
If you are a developer
P1
Documentation package for deployers
Provide deployers with information sufficient to comply with CAIA.
Sec. 6-1-1702(2)(a).Read the statute
P1
Harm disclosure to Attorney General
Notify the CO AG within 90 days of discovering algorithmic discrimination risk.
Sec. 6-1-1702(5).Read the statute
Penalty range
$2,000 – $20,000 per violation.
Enforcement
Small-business exemption
Applies if
- no high risk ai deployment
- training data transparency maintained
Amendments
- SB 25-318pending — exemption_clarification
See if this law applies to you
Run the full matrix to see every other US law that applies to your operations.
Run the matrix