Colorado repeals and rewrites its AI act
The governor signed SB 26-189: the 2024 high-risk system law was repealed and replaced with a narrower disclosure regime for automated decision-making technology, effective 1 January 2027.
Why it matters
The first broad US state AI law was withdrawn before it ever applied, so the American benchmark other states had been measuring themselves against no longer exists.
The bill was introduced on 1 May 2026, passed the House on third reading on 9 May and was signed by the governor on 14 May. The act repeals and reenacts the provisions enacted in 2024 as SB 24-205, replacing the high-risk system and algorithmic discrimination framework with a narrower regime built around automated decision-making technology that processes personal data and materially influences a consequential decision. Developer duties to supply deployers with technical documentation start on 1 January 2027, and the attorney general must adopt rules on post-adverse-outcome disclosure by the same date. A deployer must give the consumer a plain-language description of the technology's role within 30 days after a consequential decision that results in an adverse outcome. Compliance records are retained for at least three years. The bill page also lists the act's own effective date as the day of signature, while the substantive duties begin in 2027.