Colorado’s Artificial Intelligence Act takes effect on June 1, 2026, making it the first comprehensive state-level AI regulation in the United States. The law requires companies that deploy high-risk AI systems to conduct algorithmic impact assessments, provide consumer notifications when AI influences significant decisions, and implement procedures to detect and mitigate algorithmic bias.
What the Colorado AI Act Requires
- Algorithmic impact assessments for AI used in employment, lending, housing, insurance, and education decisions
- Consumer notification when AI plays a substantial role in decisions affecting them
- Bias testing and mitigation procedures, with documentation of results
- Annual reporting to the Colorado Attorney General for companies deploying high-risk AI
- Right for consumers to appeal AI-influenced decisions and request human review
Which AI Systems Are Covered
The law defines high-risk AI broadly. Any AI system that makes or substantially contributes to consequential decisions about individuals falls under the regulation. This includes AI used for hiring, credit scoring, insurance underwriting, housing applications, educational admissions, and criminal justice decisions. Purely internal analytics tools that do not directly affect individual outcomes are generally excluded.
Colorado’s AI Act creates the first mandatory bias testing and consumer notification requirements for AI systems used in employment, lending, housing, and other high-impact decisions in the United States.
The definition of substantial contribution is deliberately broad. If AI-generated analysis, scores, or recommendations influence a decision, even if a human makes the final call, the system falls under the Act’s requirements.
Compliance Challenges for Businesses
Many companies that deploy AI in Colorado will need to build new compliance processes from scratch. Algorithmic impact assessments require technical expertise that most human resources, lending, and insurance teams do not currently have. Companies must document how their AI systems work, what data they use, what biases exist, and what steps they take to mitigate those biases.
The annual reporting requirement adds an ongoing compliance burden. Companies must submit reports to the Attorney General detailing the AI systems they deploy, the impact assessments they have conducted, and any bias incidents they have identified and remediated.
National Implications of the Colorado AI Act
Colorado’s law is expected to influence AI regulation nationwide. California, New York, and Illinois have pending AI bills that reference Colorado’s framework. If the federal AI Policy Framework’s preemption provisions do not pass Congress before these state laws take effect, companies will face a patchwork of varying requirements across states.
For businesses that operate nationally, the practical approach is to comply with Colorado’s standards across all states. This simplifies compliance and positions companies well regardless of which additional states adopt similar regulations.
