Colorado Automated Decision-Making Technology Act (SB 26-189)

Signed 14 May 2026, repealing and replacing the 2024 Colorado AI Act with a narrower transparency and disclosure regime for automated decision-making technology that materially influences consequential decisions in education, employment, housing, financial services, insurance, healthcare and essential government services.

JurisdictionColorado
CategoryAI Regulations
StatusUpcoming
Effective date
Latest development

Analysis

The Colorado Automated Decision-Making Technology Act (SB 26-189) was signed on May 14, 2026 and is the current Colorado AI-law framework replacing the earlier 2024 act; the bill text and legislative page both indicate the law takes effect on January 1, 2027.https://leg.colorado.gov/bills/sb26-189https://leg.colorado.gov/bill_files/116432/download

Because I do not have live web access in this turn, I can only ground the analysis in the official Colorado legislative materials surfaced earlier plus the secondary legal analyses that were retrieved. I’ve still organized the answer in the structure you requested and included clickable source links for each major point.

Key Requirements

Compliance Challenges

Implementation Best Practices

Recent Updates

Related Regulations

Recent developments

  • — Official Colorado General Assembly page for SB 26-189 detailing the **Colorado Automated Decision-Making Technology Act**, including its scope over “covered ADMT,” consumer notice obligations, developer documentation duties, and the **effective date of January 1, 2027**.[1] (source)
  • — Revised bill text clarifying that, starting **2027-01-01**, developers of covered ADMT must provide technical documentation (intended uses, training data categories, limitations, human review instructions) to deployers and retain compliance records for at least three years.[2][7] (source)
  • — Employment law analysis explaining how SB 26-189 **repeals and reenacts** Colorado’s prior AI Act, substantially **altering obligations for employers** that use AI/ADMT in employment decisions, including new notice, review, and recordkeeping requirements.[3] (source)
  • — Practice guide overview highlighting that the new Colorado law **delays enforcement to 2027-01-01** and shifts regulatory focus from “High‑Risk AI Systems” to **Covered ADMT**, summarizing emerging compliance expectations for AI and ADMT deployers in Colorado.[14] (source)
  • — Legal insight describing how Colorado has **rewritten its AI law**, replacing the 2024 AI Act with SB 26-189, shifting focus from “high‑risk AI systems” to **covered ADMT** and noting that enforcement is already subject to legal challenge, leaving the framework effectively **on hold**.[4] (source)
  • — Client alert reporting that Governor Polis **signed SB 189** (SB 26-189) on 2026-05-14, significantly amending Colorado’s AI regime by narrowing coverage to ADMT that materially influences **consequential decisions** (e.g., education, employment, finance, insurance, healthcare, government services) and delaying effectiveness to **2027-01-01**.[5] (source)
  • — Analysis emphasizing that Colorado’s amended AI law **substantially reduces employer obligations** compared to the prior AI Act and delays the effective date to **2027-01-01**, requiring clear notices to individuals, adverse action procedures with meaningful human review, and three‑year record retention for covered ADMT.[9] (source)
  • — Compliance-focused industry page outlining SB 26-189’s **core operational impacts**: mandatory pre-use consumer notices when ADMT is used in consequential decisions, 30-day adverse outcome explanations and meaningful human review, plus detailed developer documentation obligations, emphasizing the law’s role as a **key AI/ADMT compliance driver** effective 2027-01-01.[11] (source)
  • — Law firm commentary explaining that Colorado’s legislature **repeals and replaces** its earlier AI Act with SB 26-189, introduces comprehensive governance for ADMT in **consequential consumer decisions**, and pushes key compliance and enforcement obligations back to **2027**, giving industry additional implementation time.[8] (source)
  • — Policy-focused blog describing legislative debates around SB 26-189, including **criticisms from stakeholders** seeking stronger transparency, shorter cure periods (currently extending to 2030), and a private right of action, illustrating mixed industry and advocacy reactions to the revised framework.[15] (source)

Related regulations

Put it into practice

Browse all regulations · Compliance deadlines · Latest updates