{"slug": "colorado-builds-the-agent-obligation-playbook-while-federal-enforcement-stays-on", "title": "Colorado Builds the Agent-Obligation Playbook While Federal Enforcement Stays on the Shelf", "summary": "The Colorado Department of Law released interim redline rules on October 6 for the Automated Decision-Making Technology Act (SB 26-189), setting documentation duties on AI agent developers and notice, adverse-outcome disclosure and independent human review obligations on deployers, with obligations taking effect January 1, 2027 and a formal rulemaking hearing scheduled for October 26 in Denver. The framework requires deployers to disclose an adverse decision within 30 days through two communication methods and to complete an independent human review within 45 days of a consumer request, with the ADMT itself barred from assisting in that review. Colorado's Attorney General holds exclusive enforcement authority with a 60-day cure period for actions initiated before January 1, 2030, as federal efforts stall: the Warner AI AGENT Act (S. 5051), introduced July 21, has not received markup, and the Hawley-Murphy AI Agent Accountability Act, announced October 1, has not advanced to committee action.", "body_md": "Colorado’s interim redline rules for the Automated Decision-Making Technology Act lay out the most detailed framework yet for holding AI agent builders and deployers accountable.\n\nReleased by the Colorado Department of Law on October 6, the draft fills a gap that federal agencies have left open.\n\nA formal rulemaking hearing is scheduled for October 26 in Denver, with a public comment deadline closing at 11:59 PM MST that same day.\n\nThe obligations kick in January 1, 2027.\n\n### What the interim redline requires\n\nUnder [SB 26-189](https://leg.colorado.gov/bills/sb26-189), any automated decision-making technology that materially influences a consequential decision about a Colorado consumer, employee, or job applicant falls within scope.\n\nThat includes autonomous AI agents operating in employment, financial services, healthcare, housing, insurance, education, government services, and legal services.\n\nProposed Rule 5 imposes detailed documentation duties on developers.\n\nThey must provide deployers with intended uses, training data categories, known limitations, known harmful uses, instructions for monitoring and meaningful human review, and methods to control or instruct the ADMT to mitigate risk.\n\nDevelopers must also notify deployers of material updates and intentional modifications.\n\nDeployers face a separate set of obligations that are operationally heavier.\n\nBefore a consequential decision, they must give consumers clear and conspicuous notice that a covered ADMT will materially influence the outcome.\n\nAfter an adverse outcome, they have 30 days to disclose via two communication methods: a plain-language description of the decision and the ADMT’s role, the principal reasons for the outcome, the ADMT’s name, version, developer, and the categories of personal data used.\n\nDeployers must also tell consumers how to request additional information and human review.\n\nThe human review requirement is the framework’s sharpest tool.\n\nDeployers must complete a meaningful review within 45 days of the consumer’s request.\n\nThe reviewer must be independent, possess relevant expertise, and hold genuine authority to override the ADMT’s decision.\n\nCritically, the ADMT itself may not assist in the review, a provision that closes the loop on AI-supervising-AI arrangements.\n\n### Enforcement with teeth\n\nThe Colorado Attorney General holds exclusive enforcement authority.\n\nA 60-day cure period applies to actions initiated before January 1, 2030, giving covered entities a defined window to remedy violations.\n\nThe rules also void contractual indemnification for an entity’s own ADMT-related anti-discrimination violations as against public policy, a provision that prevents companies from shifting liability downstream.\n\n### Federal gap\n\nColorado’s state-level action arrives as federal enforcement remains fragmented.\n\nBloomberg Law reported in October that Attorney General Todd Blanche signaled in September that the DOJ will not pursue standalone AI enforcement through prosecution, a posture consistent with the hands-off approach described in a Bloomberg Law analysis tracing DOJ policy to an April 2025 crypto memorandum.\n\nFederal legislative efforts remain stalled: the [Warner AI AGENT Act](https://www.congress.gov/bill/119th-congress/senate-bill/5051) (S. 5051), introduced July 21, has not received markup, and the [Hawley-Murphy AI Agent Accountability Act](https://forkast.news/hawley-murphy-bill-would-make-agent-developers-criminally-liable-for-hacking-failures/), announced October 1, has not advanced to committee action.\n\nThe result is a regulatory vacuum at the federal level that state frameworks like Colorado’s are filling by default.\n\n### Open questions\n\nThe Colorado AG is soliciting public input on three open questions: the precise definition of the material influence standard, how obligations apply when a deployer relies on a third-party vendor to operate covered ADMT, and additional developer-obligation clarifications.\n\nThese questions will shape the final rules and determine how broadly the framework reaches into agent supply chains.\n\n### What to watch\n\nThe October 26 hearing will set the trajectory for the final rules.\n\nThe January 1, 2027, effective date is statutory and cannot be moved by rulemaking alone.\n\nAgent builders operating in or selling into Colorado face a choice: begin mapping agent decision chains to the interim redline’s documentation and disclosure requirements now, or scramble to comply after the rules take effect.\n\nThe first enforceable agent-liability framework in the United States is no longer hypothetical.", "url": "https://wpnews.pro/news/colorado-builds-the-agent-obligation-playbook-while-federal-enforcement-stays-on", "canonical_source": "https://forkast.news/colorado-builds-the-agent-obligation-playbook-while-federal-enforcement-stays-on-the-shelf/", "published_at": "2026-10-17 06:28:06+00:00", "updated_at": "2026-10-17 07:01:12.211732+00:00", "lang": "en", "topics": ["ai-policy", "ai-agents", "ai-safety", "artificial-intelligence"], "entities": ["Colorado Department of Law", "Colorado Attorney General", "SB 26-189", "Warner AI AGENT Act", "Hawley-Murphy AI Agent Accountability Act", "Todd Blanche", "Department of Justice", "Bloomberg Law"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/colorado-builds-the-agent-obligation-playbook-while-federal-enforcement-stays-on", "markdown": "https://wpnews.pro/news/colorado-builds-the-agent-obligation-playbook-while-federal-enforcement-stays-on.md", "text": "https://wpnews.pro/news/colorado-builds-the-agent-obligation-playbook-while-federal-enforcement-stays-on.txt", "jsonld": "https://wpnews.pro/news/colorado-builds-the-agent-obligation-playbook-while-federal-enforcement-stays-on.jsonld"}}