Holding / Framework
FIRST COMPREHENSIVE STATE AI CONSUMER PROTECTION LAW with broad scope (Colorado is the second US state to enact major AI consumer-protection legislation; the first is the subject of jurisdictional debate among practitioners). Establishes the STATE-LEVEL HIGH-RISK AI FRAMEWORK: risk categorization, mandatory impact assessments, consumer notification rights, and appeal mechanisms for algorithmic decisions affecting employment, housing, financial services, education, and other consequential domains. Influential template for subsequent state AI legislation. Notable for the multi-step delayed effective date (originally Feb 2026, extended to June 30 2026), reflecting industry compliance-readiness concerns.
Triggering Conduct
Enacted in response to growing legislative concern over algorithmic discrimination in consequential consumer-facing AI decisions (employment, housing, insurance, education, financial services). Modeled in part on EU AI Act risk-categorization approach.
Sanctions / Disposition
Enforcement by Colorado Attorney General; civil penalties for violations. Specific penalty schedule subject to AG rulemaking under the Anti-Discrimination in AI rulemaking authority.
Disclosure Requirement
Requires developers and deployers of high-risk AI systems to use reasonable care to protect consumers from known or reasonably foreseeable risks of algorithmic discrimination. Specific obligations include implementing a risk management policy, completing impact assessments, conducting annual deployment reviews, providing consumer notification of AI use in consequential decisions, and providing appeal opportunities. Effective date originally Feb. 1, 2026; extended to June 30, 2026 by SB25B-004.
Primary Source
https://leg.colorado.gov/bills/sb24-205 · court_website
Tags
state_legislation, colorado, consumer_protection, algorithmic_discrimination, high_risk_ai, foundational_state_law, eu_ai_act_inspired, polis_administration