Mandatory impact assessments for high-risk AI systems before and during deployment. Here is what Colorado businesses need to know in 2026.
Colorado's AI Act (SB 24-205) is the most comprehensive US state AI law. As amended by SB 26-189 (2026) it now takes effect January 1, 2027 and centers on transparency and disclosure for consequential automated decisions; the original algorithmic-discrimination duty of care was repealed. Attorney General rulemaking is underway to define the specific obligations — no final rules have been published yet.
State law does not replace federal law — you must comply with both. These federal rules apply to ai risk assessment nationwide:
It depends on the thresholds written into the specific statute, and those are not comparable across laws — some key on employee count or revenue, others on user volume or on the kind of system you deploy. We do not publish a generic small-business exemption for Colorado, because stating one the statute does not contain would be worse than stating none. Read the primary source linked from our Colorado law page to confirm whether you are in scope.
The key deadline in Colorado is January 1, 2027. The law is enacted and compliance is required by the deadline above.
Colorado penalties for AI non-compliance: AG-enforced under the Colorado Consumer Protection Act (up to ~$20,000 per violation). Who enforces, and how, varies by statute — check the primary source linked from our Colorado law page for the enforcement authority and process that actually applies to you.
Federal law does not currently preempt state AI law. Colorado's AI statutes apply independently of federal rules, and federal laws like ECOA, FCRA, and HIPAA apply alongside them — so you must comply with both.
Best practice: document all AI systems used, conduct an internal audit, implement required disclosures, and keep records for at least 3 years. For high-risk uses like ai risk assessment, consider hiring an independent third-party auditor to validate compliance.
Take the free 4-question risk snapshot. See which laws apply, your risk level, and the first actions to take — no signup required.
Take the Free Assessment →