WHAT THIS BILL REGULATES · 8 REQUIREMENT TYPES
How Is This Bill Enforced
Verbatim statutory text on the left; plain-language analysis and a per-section checklist on the right. Numbered markers cross-link to the matching checklist row.
(1) 1 On and after October 1, 2026, a developer of a high-risk artificial intelligence systemHigh-risk artificial intelligence systemAs defined in the underlying Colorado AI Act (SB 24-205). The bill does not redefine the term; it uses the term throughout §§ 6-1-1702 and 6-1-1703 without modification.C.R.S. § 6-1-1702 shall use reasonable care to protect consumers from any known or reasonably foreseeable risks of algorithmic discriminationAlgorithmic discriminationAs defined in the underlying Colorado AI Act (SB 24-205). Used throughout §§ 6-1-1702 and 6-1-1703 to describe the harm developers and deployers must use reasonable care to prevent.C.R.S. § 6-1-1702 arising from the intended and contracted uses of the high-risk artificial intelligence systemHigh-risk artificial intelligence systemAs defined in the underlying Colorado AI Act (SB 24-205). The bill does not redefine the term; it uses the term throughout §§ 6-1-1702 and 6-1-1703 without modification.C.R.S. § 6-1-1702. In any enforcement action brought on or after October 1, 2026, by the attorney general pursuant to section 6-1-1706, there is a rebuttable presumption that a developerDeveloperA developer of a high-risk artificial intelligence system (as used throughout C.R.S. §§ 6-1-1702 et seq.). The bill does not redefine the term; the definition in the underlying Colorado AI Act (SB 24-205) controls.C.R.S. § 6-1-1702 used reasonable care as required under this section if the developerDeveloperA developer of a high-risk artificial intelligence system (as used throughout C.R.S. §§ 6-1-1702 et seq.). The bill does not redefine the term; the definition in the underlying Colorado AI Act (SB 24-205) controls.C.R.S. § 6-1-1702 complied with this section and any additional requirements or obligations as set forth in rules adopted by the attorney general pursuant to section 6-1-1707.
(2) 2 On and after October 1, 2026, and except as provided in subsection (6) of this section, a developer of a high-risk artificial intelligence systemHigh-risk artificial intelligence systemAs defined in the underlying Colorado AI Act (SB 24-205). The bill does not redefine the term; it uses the term throughout §§ 6-1-1702 and 6-1-1703 without modification.C.R.S. § 6-1-1702 shall make available to the deployerDeployerA deployer of a high-risk artificial intelligence system (as used throughout C.R.S. §§ 6-1-1703 et seq.). The bill does not redefine the term; the definition in the underlying Colorado AI Act (SB 24-205) controls.C.R.S. § 6-1-1703 or other developer of the high-risk artificial intelligence systemHigh-risk artificial intelligence systemAs defined in the underlying Colorado AI Act (SB 24-205). The bill does not redefine the term; it uses the term throughout §§ 6-1-1702 and 6-1-1703 without modification.C.R.S. § 6-1-1702:
(3)(a) 3 Except as provided in subsection (6) of this section, a developerDeveloperA developer of a high-risk artificial intelligence system (as used throughout C.R.S. §§ 6-1-1702 et seq.). The bill does not redefine the term; the definition in the underlying Colorado AI Act (SB 24-205) controls.C.R.S. § 6-1-1702 that offers, sells, leases, licenses, gives, or otherwise makes available to a deployerDeployerA deployer of a high-risk artificial intelligence system (as used throughout C.R.S. §§ 6-1-1703 et seq.). The bill does not redefine the term; the definition in the underlying Colorado AI Act (SB 24-205) controls.C.R.S. § 6-1-1703 or other developerDeveloperA developer of a high-risk artificial intelligence system (as used throughout C.R.S. §§ 6-1-1702 et seq.). The bill does not redefine the term; the definition in the underlying Colorado AI Act (SB 24-205) controls.C.R.S. § 6-1-1702 a high-risk artificial intelligence systemHigh-risk artificial intelligence systemAs defined in the underlying Colorado AI Act (SB 24-205). The bill does not redefine the term; it uses the term throughout §§ 6-1-1702 and 6-1-1703 without modification.C.R.S. § 6-1-1702 on or after October 1, 2026, shall make available to the deployerDeployerA deployer of a high-risk artificial intelligence system (as used throughout C.R.S. §§ 6-1-1703 et seq.). The bill does not redefine the term; the definition in the underlying Colorado AI Act (SB 24-205) controls.C.R.S. § 6-1-1703 or other developerDeveloperA developer of a high-risk artificial intelligence system (as used throughout C.R.S. §§ 6-1-1702 et seq.). The bill does not redefine the term; the definition in the underlying Colorado AI Act (SB 24-205) controls.C.R.S. § 6-1-1702, to the extent feasible, the documentation and information, through artifacts such as model cards, dataset cards, or other impact assessmentsImpact assessmentAs defined and described in the underlying Colorado AI Act (SB 24-205), § 6-1-1703(3). A documented assessment of a high-risk AI system's potential discriminatory impact, required before deployment and at least annually thereafter.C.R.S. § 6-1-1703(3), necessary for a deployerDeployerA deployer of a high-risk artificial intelligence system (as used throughout C.R.S. §§ 6-1-1703 et seq.). The bill does not redefine the term; the definition in the underlying Colorado AI Act (SB 24-205) controls.C.R.S. § 6-1-1703, or for a third party contracted by a deployerDeployerA deployer of a high-risk artificial intelligence system (as used throughout C.R.S. §§ 6-1-1703 et seq.). The bill does not redefine the term; the definition in the underlying Colorado AI Act (SB 24-205) controls.C.R.S. § 6-1-1703, to complete an impact assessmentImpact assessmentAs defined and described in the underlying Colorado AI Act (SB 24-205), § 6-1-1703(3). A documented assessment of a high-risk AI system's potential discriminatory impact, required before deployment and at least annually thereafter.C.R.S. § 6-1-1703(3) pursuant to section 6-1-1703 (3).
(4)(a) 4 On and after October 1, 2026, a developerDeveloperA developer of a high-risk artificial intelligence system (as used throughout C.R.S. §§ 6-1-1702 et seq.). The bill does not redefine the term; the definition in the underlying Colorado AI Act (SB 24-205) controls.C.R.S. § 6-1-1702 shall make available, in a manner that is clear and readily available on the developerDeveloperA developer of a high-risk artificial intelligence system (as used throughout C.R.S. §§ 6-1-1702 et seq.). The bill does not redefine the term; the definition in the underlying Colorado AI Act (SB 24-205) controls.C.R.S. § 6-1-1702's website or in a public use case inventory, a statement summarizing:
(5) 5 On and after October 1, 2026, a developer of a high-risk artificial intelligence systemHigh-risk artificial intelligence systemAs defined in the underlying Colorado AI Act (SB 24-205). The bill does not redefine the term; it uses the term throughout §§ 6-1-1702 and 6-1-1703 without modification.C.R.S. § 6-1-1702 shall disclose to the attorney general, in a form and manner prescribed by the attorney general, and to all known deployersDeployerA deployer of a high-risk artificial intelligence system (as used throughout C.R.S. §§ 6-1-1703 et seq.). The bill does not redefine the term; the definition in the underlying Colorado AI Act (SB 24-205) controls.C.R.S. § 6-1-1703 or other developers of the high-risk artificial intelligence systemHigh-risk artificial intelligence systemAs defined in the underlying Colorado AI Act (SB 24-205). The bill does not redefine the term; it uses the term throughout §§ 6-1-1702 and 6-1-1703 without modification.C.R.S. § 6-1-1702, any known or reasonably foreseeable risks of algorithmic discriminationAlgorithmic discriminationAs defined in the underlying Colorado AI Act (SB 24-205). Used throughout §§ 6-1-1702 and 6-1-1703 to describe the harm developers and deployers must use reasonable care to prevent.C.R.S. § 6-1-1702 arising from the intended uses of the high-risk artificial intelligence systemHigh-risk artificial intelligence systemAs defined in the underlying Colorado AI Act (SB 24-205). The bill does not redefine the term; it uses the term throughout §§ 6-1-1702 and 6-1-1703 without modification.C.R.S. § 6-1-1702 without unreasonable delay but no later than ninety days after the date on which:
(7) 6 On and after October 1, 2026, the attorney general may require that a developerDeveloperA developer of a high-risk artificial intelligence system (as used throughout C.R.S. §§ 6-1-1702 et seq.). The bill does not redefine the term; the definition in the underlying Colorado AI Act (SB 24-205) controls.C.R.S. § 6-1-1702 disclose to the attorney general, no later than ninety days after the request and in a form and manner prescribed by the attorney general, the statement or documentation described in subsection (2) of this section. The attorney general may evaluate such statement or documentation to ensure compliance with this part 17, and the statement or documentation is not subject to disclosure under the "Colorado Open Records Act", part 2 of article 72 of title 24. In a disclosure pursuant to this subsection (7), a developerDeveloperA developer of a high-risk artificial intelligence system (as used throughout C.R.S. §§ 6-1-1702 et seq.). The bill does not redefine the term; the definition in the underlying Colorado AI Act (SB 24-205) controls.C.R.S. § 6-1-1702 may designate the statement or documentation as including proprietary information or a trade secret. To the extent that any information contained in the statement or documentation includes information subject to attorney-client privilege or work-product protection, the disclosure does not constitute a waiver of the privilege or protection.
This section amends the developer obligations in the Colorado AI Act by shifting all operative dates from February 1, 2026 to October 1, 2026. The substantive duties remain unchanged: developers of high-risk AI systems must use reasonable care to protect consumers from algorithmic discrimination, make documentation available to deployers, publish public use case summaries, disclose discrimination risks to the attorney general and known deployers, and produce documentation to the attorney general on request.
The rebuttable presumption of reasonable care — triggered by compliance with this section and any rules adopted by the attorney general — is preserved. The terminology change from 'promulgated' to 'adopted' for attorney general rulemaking is a conforming edit with no substantive effect.
(1) 7 On and after October 1, 2026, a deployer of a high-risk artificial intelligence systemHigh-risk artificial intelligence systemAs defined in the underlying Colorado AI Act (SB 24-205). The bill does not redefine the term; it uses the term throughout §§ 6-1-1702 and 6-1-1703 without modification.C.R.S. § 6-1-1702 shall use reasonable care to protect consumers from any known or reasonably foreseeable risks of algorithmic discriminationAlgorithmic discriminationAs defined in the underlying Colorado AI Act (SB 24-205). Used throughout §§ 6-1-1702 and 6-1-1703 to describe the harm developers and deployers must use reasonable care to prevent.C.R.S. § 6-1-1702. In any enforcement action brought on or after October 1, 2026, by the attorney general pursuant to section 6-1-1706, there is a rebuttable presumption that a deployer of a high-risk artificial intelligence systemHigh-risk artificial intelligence systemAs defined in the underlying Colorado AI Act (SB 24-205). The bill does not redefine the term; it uses the term throughout §§ 6-1-1702 and 6-1-1703 without modification.C.R.S. § 6-1-1702 used reasonable care as required under this section if the deployerDeployerA deployer of a high-risk artificial intelligence system (as used throughout C.R.S. §§ 6-1-1703 et seq.). The bill does not redefine the term; the definition in the underlying Colorado AI Act (SB 24-205) controls.C.R.S. § 6-1-1703 complied with this section and any additional requirements or obligations as set forth in rules adopted by the attorney general pursuant to section 6-1-1707.
(2)(a) 8 On and after October 1, 2026, and except as provided in subsection (6) of this section, a deployer of a high-risk artificial intelligence systemHigh-risk artificial intelligence systemAs defined in the underlying Colorado AI Act (SB 24-205). The bill does not redefine the term; it uses the term throughout §§ 6-1-1702 and 6-1-1703 without modification.C.R.S. § 6-1-1702 shall implement a risk management policy and program to govern the deployerDeployerA deployer of a high-risk artificial intelligence system (as used throughout C.R.S. §§ 6-1-1703 et seq.). The bill does not redefine the term; the definition in the underlying Colorado AI Act (SB 24-205) controls.C.R.S. § 6-1-1703's deployment of the high-risk artificial intelligence systemHigh-risk artificial intelligence systemAs defined in the underlying Colorado AI Act (SB 24-205). The bill does not redefine the term; it uses the term throughout §§ 6-1-1702 and 6-1-1703 without modification.C.R.S. § 6-1-1702. The risk management policy and program must specify and incorporate the principles, processes, and personnel that the deployerDeployerA deployer of a high-risk artificial intelligence system (as used throughout C.R.S. §§ 6-1-1703 et seq.). The bill does not redefine the term; the definition in the underlying Colorado AI Act (SB 24-205) controls.C.R.S. § 6-1-1703 uses to identify, document, and mitigate known or reasonably foreseeable risks of algorithmic discriminationAlgorithmic discriminationAs defined in the underlying Colorado AI Act (SB 24-205). Used throughout §§ 6-1-1702 and 6-1-1703 to describe the harm developers and deployers must use reasonable care to prevent.C.R.S. § 6-1-1702. The risk management policy and program must be an iterative process planned, implemented, and regularly and systematically reviewed and updated over the life cycle of a high-risk artificial intelligence systemHigh-risk artificial intelligence systemAs defined in the underlying Colorado AI Act (SB 24-205). The bill does not redefine the term; it uses the term throughout §§ 6-1-1702 and 6-1-1703 without modification.C.R.S. § 6-1-1702, requiring regular, systematic review and updates. A risk management policy and program implemented and maintained pursuant to this subsection (2) must be reasonable considering:
(3)(a)(I)–(II) 9 A deployerDeployerA deployer of a high-risk artificial intelligence system (as used throughout C.R.S. §§ 6-1-1703 et seq.). The bill does not redefine the term; the definition in the underlying Colorado AI Act (SB 24-205) controls.C.R.S. § 6-1-1703, or a third party contracted by the deployerDeployerA deployer of a high-risk artificial intelligence system (as used throughout C.R.S. §§ 6-1-1703 et seq.). The bill does not redefine the term; the definition in the underlying Colorado AI Act (SB 24-205) controls.C.R.S. § 6-1-1703, that deploys a high-risk artificial intelligence systemHigh-risk artificial intelligence systemAs defined in the underlying Colorado AI Act (SB 24-205). The bill does not redefine the term; it uses the term throughout §§ 6-1-1702 and 6-1-1703 without modification.C.R.S. § 6-1-1702 on or after October 1, 2026, shall complete an impact assessmentImpact assessmentAs defined and described in the underlying Colorado AI Act (SB 24-205), § 6-1-1703(3). A documented assessment of a high-risk AI system's potential discriminatory impact, required before deployment and at least annually thereafter.C.R.S. § 6-1-1703(3) for the high-risk artificial intelligence systemHigh-risk artificial intelligence systemAs defined in the underlying Colorado AI Act (SB 24-205). The bill does not redefine the term; it uses the term throughout §§ 6-1-1702 and 6-1-1703 without modification.C.R.S. § 6-1-1702; and (II) On and after October 1, 2026, a deployerDeployerA deployer of a high-risk artificial intelligence system (as used throughout C.R.S. §§ 6-1-1703 et seq.). The bill does not redefine the term; the definition in the underlying Colorado AI Act (SB 24-205) controls.C.R.S. § 6-1-1703, or a third party contracted by the deployerDeployerA deployer of a high-risk artificial intelligence system (as used throughout C.R.S. §§ 6-1-1703 et seq.). The bill does not redefine the term; the definition in the underlying Colorado AI Act (SB 24-205) controls.C.R.S. § 6-1-1703, shall complete an impact assessmentImpact assessmentAs defined and described in the underlying Colorado AI Act (SB 24-205), § 6-1-1703(3). A documented assessment of a high-risk AI system's potential discriminatory impact, required before deployment and at least annually thereafter.C.R.S. § 6-1-1703(3) for a deployed high-risk artificial intelligence systemHigh-risk artificial intelligence systemAs defined in the underlying Colorado AI Act (SB 24-205). The bill does not redefine the term; it uses the term throughout §§ 6-1-1702 and 6-1-1703 without modification.C.R.S. § 6-1-1702 at least annually and within ninety days after any intentional and substantial modification to the high-risk artificial intelligence systemHigh-risk artificial intelligence systemAs defined in the underlying Colorado AI Act (SB 24-205). The bill does not redefine the term; it uses the term throughout §§ 6-1-1702 and 6-1-1703 without modification.C.R.S. § 6-1-1702 is made available.
(3)(c) 9 In addition to the information required under subsection (3)(b) of this section, an impact assessmentImpact assessmentAs defined and described in the underlying Colorado AI Act (SB 24-205), § 6-1-1703(3). A documented assessment of a high-risk AI system's potential discriminatory impact, required before deployment and at least annually thereafter.C.R.S. § 6-1-1703(3) completed pursuant to this subsection (3) following an intentional and substantial modification to a high-risk artificial intelligence systemHigh-risk artificial intelligence systemAs defined in the underlying Colorado AI Act (SB 24-205). The bill does not redefine the term; it uses the term throughout §§ 6-1-1702 and 6-1-1703 without modification.C.R.S. § 6-1-1702 on or after October 1, 2026, must include a statement disclosing the extent to which the high-risk artificial intelligence systemHigh-risk artificial intelligence systemAs defined in the underlying Colorado AI Act (SB 24-205). The bill does not redefine the term; it uses the term throughout §§ 6-1-1702 and 6-1-1703 without modification.C.R.S. § 6-1-1702 was used in a manner that was consistent with, or varied from, the developerDeveloperA developer of a high-risk artificial intelligence system (as used throughout C.R.S. §§ 6-1-1702 et seq.). The bill does not redefine the term; the definition in the underlying Colorado AI Act (SB 24-205) controls.C.R.S. § 6-1-1702's intended uses of the high-risk artificial intelligence systemHigh-risk artificial intelligence systemAs defined in the underlying Colorado AI Act (SB 24-205). The bill does not redefine the term; it uses the term throughout §§ 6-1-1702 and 6-1-1703 without modification.C.R.S. § 6-1-1702.
(3)(g) 10 On or before October 1, 2026, and at least annually thereafter, a deployerDeployerA deployer of a high-risk artificial intelligence system (as used throughout C.R.S. §§ 6-1-1703 et seq.). The bill does not redefine the term; the definition in the underlying Colorado AI Act (SB 24-205) controls.C.R.S. § 6-1-1703, or a third party contracted by the deployerDeployerA deployer of a high-risk artificial intelligence system (as used throughout C.R.S. §§ 6-1-1703 et seq.). The bill does not redefine the term; the definition in the underlying Colorado AI Act (SB 24-205) controls.C.R.S. § 6-1-1703, must review the deployment of each high-risk artificial intelligence systemHigh-risk artificial intelligence systemAs defined in the underlying Colorado AI Act (SB 24-205). The bill does not redefine the term; it uses the term throughout §§ 6-1-1702 and 6-1-1703 without modification.C.R.S. § 6-1-1702 deployed by the deployerDeployerA deployer of a high-risk artificial intelligence system (as used throughout C.R.S. §§ 6-1-1703 et seq.). The bill does not redefine the term; the definition in the underlying Colorado AI Act (SB 24-205) controls.C.R.S. § 6-1-1703 to ensure that the high-risk artificial intelligence systemHigh-risk artificial intelligence systemAs defined in the underlying Colorado AI Act (SB 24-205). The bill does not redefine the term; it uses the term throughout §§ 6-1-1702 and 6-1-1703 without modification.C.R.S. § 6-1-1702 is not causing algorithmic discriminationAlgorithmic discriminationAs defined in the underlying Colorado AI Act (SB 24-205). Used throughout §§ 6-1-1702 and 6-1-1703 to describe the harm developers and deployers must use reasonable care to prevent.C.R.S. § 6-1-1702.
(4)(a) 11 On and after October 1, 2026, and no later than the time that a deployerDeployerA deployer of a high-risk artificial intelligence system (as used throughout C.R.S. §§ 6-1-1703 et seq.). The bill does not redefine the term; the definition in the underlying Colorado AI Act (SB 24-205) controls.C.R.S. § 6-1-1703 deploys a high-risk artificial intelligence systemHigh-risk artificial intelligence systemAs defined in the underlying Colorado AI Act (SB 24-205). The bill does not redefine the term; it uses the term throughout §§ 6-1-1702 and 6-1-1703 without modification.C.R.S. § 6-1-1702 to make, or be a substantial factor in making, a consequential decisionConsequential decisionAs defined in the underlying Colorado AI Act (SB 24-205). Used in § 6-1-1703(4) to describe the decisions that trigger deployer disclosure obligations to consumers.C.R.S. § 6-1-1703(4) concerning a consumer, the deployerDeployerA deployer of a high-risk artificial intelligence system (as used throughout C.R.S. §§ 6-1-1703 et seq.). The bill does not redefine the term; the definition in the underlying Colorado AI Act (SB 24-205) controls.C.R.S. § 6-1-1703 shall:
(4)(b) 12 On and after October 1, 2026, a deployerDeployerA deployer of a high-risk artificial intelligence system (as used throughout C.R.S. §§ 6-1-1703 et seq.). The bill does not redefine the term; the definition in the underlying Colorado AI Act (SB 24-205) controls.C.R.S. § 6-1-1703 that has deployed a high-risk artificial intelligence systemHigh-risk artificial intelligence systemAs defined in the underlying Colorado AI Act (SB 24-205). The bill does not redefine the term; it uses the term throughout §§ 6-1-1702 and 6-1-1703 without modification.C.R.S. § 6-1-1702 to make, or be a substantial factor in making, a consequential decisionConsequential decisionAs defined in the underlying Colorado AI Act (SB 24-205). Used in § 6-1-1703(4) to describe the decisions that trigger deployer disclosure obligations to consumers.C.R.S. § 6-1-1703(4) concerning a consumer shall, if the consequential decisionConsequential decisionAs defined in the underlying Colorado AI Act (SB 24-205). Used in § 6-1-1703(4) to describe the decisions that trigger deployer disclosure obligations to consumers.C.R.S. § 6-1-1703(4) is adverse to the consumer, provide to the consumer:
(5)(a) 13 On and after October 1, 2026, and except as provided in subsection (6) of this section, a deployerDeployerA deployer of a high-risk artificial intelligence system (as used throughout C.R.S. §§ 6-1-1703 et seq.). The bill does not redefine the term; the definition in the underlying Colorado AI Act (SB 24-205) controls.C.R.S. § 6-1-1703 shall make available, in a manner that is clear and readily available on the deployerDeployerA deployer of a high-risk artificial intelligence system (as used throughout C.R.S. §§ 6-1-1703 et seq.). The bill does not redefine the term; the definition in the underlying Colorado AI Act (SB 24-205) controls.C.R.S. § 6-1-1703's website, a statement summarizing:
(7) 14 If a deployerDeployerA deployer of a high-risk artificial intelligence system (as used throughout C.R.S. §§ 6-1-1703 et seq.). The bill does not redefine the term; the definition in the underlying Colorado AI Act (SB 24-205) controls.C.R.S. § 6-1-1703 deploys a high-risk artificial intelligence systemHigh-risk artificial intelligence systemAs defined in the underlying Colorado AI Act (SB 24-205). The bill does not redefine the term; it uses the term throughout §§ 6-1-1702 and 6-1-1703 without modification.C.R.S. § 6-1-1702 on or after October 1, 2026, and subsequently discovers that the high-risk artificial intelligence systemHigh-risk artificial intelligence systemAs defined in the underlying Colorado AI Act (SB 24-205). The bill does not redefine the term; it uses the term throughout §§ 6-1-1702 and 6-1-1703 without modification.C.R.S. § 6-1-1702 has caused algorithmic discriminationAlgorithmic discriminationAs defined in the underlying Colorado AI Act (SB 24-205). Used throughout §§ 6-1-1702 and 6-1-1703 to describe the harm developers and deployers must use reasonable care to prevent.C.R.S. § 6-1-1702, the deployerDeployerA deployer of a high-risk artificial intelligence system (as used throughout C.R.S. §§ 6-1-1703 et seq.). The bill does not redefine the term; the definition in the underlying Colorado AI Act (SB 24-205) controls.C.R.S. § 6-1-1703, without unreasonable delay, but no later than ninety days after the date of the discovery, shall send to the attorney general, in a form and manner prescribed by the attorney general, a notice disclosing the discovery.
(9) 15 On and after October 1, 2026, the attorney general may require that a deployerDeployerA deployer of a high-risk artificial intelligence system (as used throughout C.R.S. §§ 6-1-1703 et seq.). The bill does not redefine the term; the definition in the underlying Colorado AI Act (SB 24-205) controls.C.R.S. § 6-1-1703, or a third party contracted by the deployerDeployerA deployer of a high-risk artificial intelligence system (as used throughout C.R.S. §§ 6-1-1703 et seq.). The bill does not redefine the term; the definition in the underlying Colorado AI Act (SB 24-205) controls.C.R.S. § 6-1-1703, disclose to the attorney general, no later than ninety days after the request and in a form and manner prescribed by the attorney general, the risk management policy implemented pursuant to subsection (2) of this section, the impact assessmentImpact assessmentAs defined and described in the underlying Colorado AI Act (SB 24-205), § 6-1-1703(3). A documented assessment of a high-risk AI system's potential discriminatory impact, required before deployment and at least annually thereafter.C.R.S. § 6-1-1703(3) completed pursuant to subsection (3) of this section, or the records maintained pursuant to subsection (3)(f) of this section. The attorney general may evaluate the risk management policy, impact assessmentImpact assessmentAs defined and described in the underlying Colorado AI Act (SB 24-205), § 6-1-1703(3). A documented assessment of a high-risk AI system's potential discriminatory impact, required before deployment and at least annually thereafter.C.R.S. § 6-1-1703(3), or records to ensure compliance with this part 17, and the risk management policy, impact assessmentImpact assessmentAs defined and described in the underlying Colorado AI Act (SB 24-205), § 6-1-1703(3). A documented assessment of a high-risk AI system's potential discriminatory impact, required before deployment and at least annually thereafter.C.R.S. § 6-1-1703(3), and records are not subject to disclosure under the "Colorado Open Records Act", part 2 of article 72 of title 24. In a disclosure pursuant to this subsection (9), a deployerDeployerA deployer of a high-risk artificial intelligence system (as used throughout C.R.S. §§ 6-1-1703 et seq.). The bill does not redefine the term; the definition in the underlying Colorado AI Act (SB 24-205) controls.C.R.S. § 6-1-1703 may designate the statement or documentation as including proprietary information or a trade secret. To the extent that any information contained in the risk management policy, impact assessmentImpact assessmentAs defined and described in the underlying Colorado AI Act (SB 24-205), § 6-1-1703(3). A documented assessment of a high-risk AI system's potential discriminatory impact, required before deployment and at least annually thereafter.C.R.S. § 6-1-1703(3), or records includes information subject to attorney-client privilege or work-product protection, the disclosure does not constitute a waiver of the privilege or protection.
This section amends deployer obligations by shifting all operative dates from February 1, 2026 to October 1, 2026. The substantive framework remains intact: deployers must use reasonable care to prevent algorithmic discrimination, implement an iterative risk management policy and program, complete impact assessments before deployment and annually thereafter, notify consumers about AI-driven consequential decisions, publish public transparency statements, report discovered discrimination to the attorney general, and produce documentation to the attorney general on request.
The rebuttable presumption of reasonable care for compliant deployers mirrors the developer provision. The impact assessment must be updated within ninety days of any intentional and substantial modification and must disclose how the system's actual use compared to the developer's intended uses.
(1) 16 On and after October 1, 2026, and except as provided in subsection (2) of this section, a deployerDeployerA deployer of a high-risk artificial intelligence system (as used throughout C.R.S. §§ 6-1-1703 et seq.). The bill does not redefine the term; the definition in the underlying Colorado AI Act (SB 24-205) controls.C.R.S. § 6-1-1703 or other developerDeveloperA developer of a high-risk artificial intelligence system (as used throughout C.R.S. §§ 6-1-1702 et seq.). The bill does not redefine the term; the definition in the underlying Colorado AI Act (SB 24-205) controls.C.R.S. § 6-1-1702 that deploys, offers, sells, leases, licenses, gives, or otherwise makes available an artificial intelligence systemArtificial intelligence systemAs defined in the underlying Colorado AI Act (SB 24-205). The bill uses this broader term in § 6-1-1704 covering AI disclosure obligations to consumers.C.R.S. § 6-1-1704 that is intended to interact with consumers shall ensure the disclosure to each consumer who interacts with the artificial intelligence systemArtificial intelligence systemAs defined in the underlying Colorado AI Act (SB 24-205). The bill uses this broader term in § 6-1-1704 covering AI disclosure obligations to consumers.C.R.S. § 6-1-1704 that the consumer is interacting with an artificial intelligence systemArtificial intelligence systemAs defined in the underlying Colorado AI Act (SB 24-205). The bill uses this broader term in § 6-1-1704 covering AI disclosure obligations to consumers.C.R.S. § 6-1-1704.
This section amends the AI interaction disclosure obligation by shifting its operative date from February 1, 2026 to October 1, 2026. The substantive requirement is unchanged: deployers and developers that make available an AI system intended to interact with consumers must disclose to each interacting consumer that they are interacting with an AI system, not a human. This obligation applies to all AI systems — not only high-risk systems — and covers deployers as well as developers who directly make such systems available.
This act takes effect at 12:01 a.m. on the day following the expiration of the ninety-day period after final adjournment of the general assembly; except that, if a referendum petition is filed pursuant to section 1 (3) of article V of the state constitution against this act or an item, section, or part of this act within such period, then the act, item, section, or part will not take effect unless approved by the people at the general election to be held in November 2026 and, in such case, will take effect on the date of the official declaration of the vote thereon by the governor.
This section establishes the act's effective date as 12:01 a.m. on the day following the expiration of the ninety-day referendum petition period after final adjournment of the general assembly. If a referendum petition is filed, the act does not take effect unless approved by voters at the November 2026 general election.