Colorado AI Act Takes Effect for High-Risk Systems

Colorado's Consumer Protections for Artificial Intelligence Act (SB 24-205) took effect June 30, 2026, imposing duties of reasonable care, disclosure, documentation, risk management, and consumer notice on developers and deployers of high-risk AI systems in hiring, lending, housing, healthcare, education, and legal services. Enforcement falls to the Colorado Attorney General, and a revised framework (SB 26-189) takes effect January 1, 2027.

For AI teams shipping into hiring, lending, housing, healthcare, education, or legal services, Colorado just moved compliance from theory to obligation. As of June 30, 2026, Colorado's Consumer Protections for Artificial Intelligence Act SB 24-205 is in force, making it the first comprehensive US state law governing high-risk AI systems. The statute imposes a duty of reasonable care on both developers and deployers to guard consumers against algorithmic discrimination, plus disclosure, documentation, risk-management, and consumer-notice requirements. Enforcement sits with the Colorado Attorney General. The practical takeaway: any model that substantially influences a consequential decision now carries documentation and impact-assessment expectations, not just accuracy targets. Colorado has already passed SB 26-189 to revise the framework effective January 1, 2027, so teams face a moving target, but the core obligations are live today.