What happened
On May 14, 2026, Colorado Governor Jared Polis signed Senate Bill 26-189, which fully repeals and replaces the original Colorado AI Act (SB 24-205, signed May 2024). The replacement law, effective January 1, 2027, abandons the original risk-based, high-risk AI regime (which required duty of care, risk-management programs, and impact assessments). The new law regulates 'automated decision-making technology' (ADMT) used to 'materially influence' a 'consequential decision' in employment, housing, financial services, insurance, healthcare, and education. Compliance requires: (1) consumer-facing notices disclosing ADMT use and data categories processed; (2) mechanism for consumers to opt out of ADMT use; (3) right to receive meaningful explanation of adverse consequential decisions and appeal rights. Developers must provide deployers with information sufficient for compliance. Enforcement is by the Colorado Attorney General as an unfair trade practice, with a cure period through end of 2027 and no private right of action. The original SB 24-205 was challenged in federal court by xAI in April 2026; the Trump DOJ intervened on April 24, 2026 to block the law; enforcement was stayed on April 27, 2026, pending litigation.
Why it matters
This represents a major deregulatory reset of state AI governance. The original SB 24-205 was architecturally similar to the EU AI Act (risk-based, mandatory impact assessments, duty of care). The replacement SB 26-189 is architecturally closer to consumer-protection law (notice, opt-out, explanation rights). This shift signals: (1) federal preemption pressure (Trump DOJ intervention, xAI lawsuit); (2) weakness of risk-based approaches in US litigation context; (3) shift toward transparency/consumer-rights frameworks as politically viable alternative to duty-of-care regimes. The law still applies to ADMT in consequential decisions but imposes lighter compliance burden. Colorado retains state regulatory power but within narrowed scope. The effective date (January 1, 2027) provides implementation runway, but enforcement is contingent on Attorney General completing rulemaking (not yet initiated as of June 18, 2026).
Action needed
Organizations using ADMT in Colorado for consequential decisions (hiring, lending, housing, insurance, education, healthcare) must: (1) identify all ADMT systems that 'materially influence' consequential decisions (threshold is material influence, not mere involvement); (2) implement consumer-facing notices by January 1, 2027 disclosing ADMT use and data categories; (3) establish opt-out mechanisms for ADMT-based decisions; (4) document explanation and appeal processes for adverse outcomes. Monitor Colorado Attorney General rulemaking (expected 2026-Q4/2027-Q1) for clarifying guidance on notice format, opt-out mechanics, and 'material influence' threshold. Litigation over SB 26-189 may continue; track federal court proceedings challenging the law's constitutionality.