WHAT THIS BILL REGULATES · 8 REQUIREMENT TYPES
How Is This Bill Enforced
Verbatim statutory text on the left; plain-language analysis and a per-section checklist on the right. Numbered markers cross-link to the matching checklist row.
(1) 1 On and after June 30, 2026, a developer of a high-risk artificial intelligence systemHigh-risk artificial intelligence systemDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701 shall use reasonable care to protect consumers from any known or reasonably foreseeable risks of algorithmic discrimination arising from the intended and contracted uses of the high-risk artificial intelligence systemHigh-risk artificial intelligence systemDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701. In any enforcement action brought on or after June 30, 2026, by the attorney general pursuant to section 6-1-1706, there is a rebuttable presumption that a developerDeveloperDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). A developer of a high-risk artificial intelligence system. Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701 used reasonable care as required under this section if the developerDeveloperDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). A developer of a high-risk artificial intelligence system. Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701 complied with this section and any additional requirements or obligations as set forth in rules adopted by the attorney general pursuant to section 6-1-1707.
(2) 2 On and after June 30, 2026, and except as provided in subsection (6) of this section, a developer of a high-risk artificial intelligence systemHigh-risk artificial intelligence systemDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701 shall make available to the deployerDeployerDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). A deployer of a high-risk artificial intelligence system. Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701 or other developer of the high-risk artificial intelligence systemHigh-risk artificial intelligence systemDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701:
(3)(a) 3 Except as provided in subsection (6) of this section, a developerDeveloperDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). A developer of a high-risk artificial intelligence system. Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701 that offers, sells, leases, licenses, gives, or otherwise makes available to a deployerDeployerDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). A deployer of a high-risk artificial intelligence system. Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701 or other developerDeveloperDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). A developer of a high-risk artificial intelligence system. Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701 a high-risk artificial intelligence systemHigh-risk artificial intelligence systemDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701 on or after June 30, 2026, shall make available to the deployerDeployerDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). A deployer of a high-risk artificial intelligence system. Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701 or other developerDeveloperDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). A developer of a high-risk artificial intelligence system. Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701, to the extent feasible, the documentation and information, through artifacts such as model cards, dataset cards, or other impact assessments, necessary for a deployerDeployerDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). A deployer of a high-risk artificial intelligence system. Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701, or for a third party contracted by a deployerDeployerDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). A deployer of a high-risk artificial intelligence system. Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701, to complete an impact assessment pursuant to section 6-1-1703 (3).
(4)(a) 4 On and after June 30, 2026, a developerDeveloperDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). A developer of a high-risk artificial intelligence system. Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701 shall make available, in a manner that is clear and readily available on the developerDeveloperDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). A developer of a high-risk artificial intelligence system. Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701's website or in a public use case inventory, a statement summarizing:
(5) 5 On and after June 30, 2026, a developer of a high-risk artificial intelligence systemHigh-risk artificial intelligence systemDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701 shall disclose to the attorney general, in a form and manner prescribed by the attorney general, and to all known deployersDeployerDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). A deployer of a high-risk artificial intelligence system. Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701 or other developers of the high-risk artificial intelligence systemHigh-risk artificial intelligence systemDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701, any known or reasonably foreseeable risks of algorithmic discrimination arising from the intended uses of the high-risk artificial intelligence systemHigh-risk artificial intelligence systemDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701 without unreasonable delay but no later than ninety days after the date on which:
(7) 6 On and after June 30, 2026, the attorney general may require that a developerDeveloperDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). A developer of a high-risk artificial intelligence system. Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701 disclose to the attorney general, no later than ninety days after the request and in a form and manner prescribed by the attorney general, the statement or documentation described in subsection (2) of this section. The attorney general may evaluate such statement or documentation to ensure compliance with this part 17, and the statement or documentation is not subject to disclosure under the "Colorado Open Records Act", part 2 of article 72 of title 24. In a disclosure made pursuant to this subsection (7), a developerDeveloperDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). A developer of a high-risk artificial intelligence system. Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701 may designate the statement or documentation as including proprietary information or a trade secret. To the extent that any information contained in the statement or documentation includes information subject to attorney-client privilege or work-product protection, the disclosure does not constitute a waiver of the privilege or protection.
Section 1 of SB 25B-004 amends five subsections of the developer duty provision. The sole substantive change is replacing every instance of February 1, 2026 with June 30, 2026, extending the compliance deadline by approximately five months. A conforming edit replaces "promulgated" with "adopted" to describe the attorney general's rulemaking authority. The underlying obligations — reasonable care to avoid algorithmic discrimination, documentation and model-card availability to deployers, public use-case inventory disclosure, discrimination-risk reporting to the AG and deployers, and on-demand document production — remain unchanged.
(1) 7 On and after June 30, 2026, a deployer of a high-risk artificial intelligence systemHigh-risk artificial intelligence systemDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701 shall use reasonable care to protect consumers from any known or reasonably foreseeable risks of algorithmic discrimination. In any enforcement action brought on or after June 30, 2026, by the attorney general pursuant to section 6-1-1706, there is a rebuttable presumption that a deployer of a high-risk artificial intelligence systemHigh-risk artificial intelligence systemDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701 used reasonable care as required under this section if the deployerDeployerDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). A deployer of a high-risk artificial intelligence system. Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701 complied with this section and any additional requirements or obligations as set forth in rules adopted by the attorney general pursuant to section 6-1-1707.
(2)(a) 8 On and after June 30, 2026, and except as provided in subsection (6) of this section, a deployer of a high-risk artificial intelligence systemHigh-risk artificial intelligence systemDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701 shall implement a risk management policy and program to govern the deployerDeployerDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). A deployer of a high-risk artificial intelligence system. Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701's deployment of the high-risk artificial intelligence systemHigh-risk artificial intelligence systemDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701. The risk management policy and program must specify and incorporate the principles, processes, and personnel that the deployerDeployerDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). A deployer of a high-risk artificial intelligence system. Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701 uses to identify, document, and mitigate known or reasonably foreseeable risks of algorithmic discrimination. The risk management policy and program must be an iterative process planned, implemented, and regularly and systematically reviewed and updated over the life cycle of a high-risk artificial intelligence systemHigh-risk artificial intelligence systemDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701, requiring regular, systematic review and updates. A risk management policy and program implemented and maintained pursuant to this subsection (2) must be reasonable considering:
(3)(a)(I)–(II) 9 A deployerDeployerDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). A deployer of a high-risk artificial intelligence system. Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701, or a third party contracted by the deployerDeployerDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). A deployer of a high-risk artificial intelligence system. Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701, that deploys a high-risk artificial intelligence systemHigh-risk artificial intelligence systemDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701 on or after June 30, 2026, shall complete an impact assessment for the high-risk artificial intelligence systemHigh-risk artificial intelligence systemDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701; and (II) On and after June 30, 2026, a deployerDeployerDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). A deployer of a high-risk artificial intelligence system. Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701, or a third party contracted by the deployerDeployerDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). A deployer of a high-risk artificial intelligence system. Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701, shall complete an impact assessment for a deployed high-risk artificial intelligence systemHigh-risk artificial intelligence systemDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701 at least annually and within ninety days after any intentional and substantial modification to the high-risk artificial intelligence systemHigh-risk artificial intelligence systemDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701 is made available.
(3)(c) 10 In addition to the information required under subsection (3)(b) of this section, an impact assessment completed pursuant to this subsection (3) following an intentional and substantial modification to a high-risk artificial intelligence systemHigh-risk artificial intelligence systemDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701 on or after June 30, 2026, must include a statement disclosing the extent to which the high-risk artificial intelligence systemHigh-risk artificial intelligence systemDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701 was used in a manner that was consistent with, or varied from, the developerDeveloperDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). A developer of a high-risk artificial intelligence system. Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701's intended uses of the high-risk artificial intelligence systemHigh-risk artificial intelligence systemDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701.
(3)(g) 11 On or before June 30, 2026, and at least annually thereafter, a deployerDeployerDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). A deployer of a high-risk artificial intelligence system. Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701, or a third party contracted by the deployerDeployerDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). A deployer of a high-risk artificial intelligence system. Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701, must review the deployment of each high-risk artificial intelligence systemHigh-risk artificial intelligence systemDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701 deployed by the deployerDeployerDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). A deployer of a high-risk artificial intelligence system. Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701 to ensure that the high-risk artificial intelligence systemHigh-risk artificial intelligence systemDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701 is not causing algorithmic discrimination.
(4)(a) 12 On and after June 30, 2026, and no later than the time that a deployerDeployerDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). A deployer of a high-risk artificial intelligence system. Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701 deploys a high-risk artificial intelligence systemHigh-risk artificial intelligence systemDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701 to make, or be a substantial factor in making, a consequential decision concerning a consumer, the deployerDeployerDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). A deployer of a high-risk artificial intelligence system. Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701 shall:
(4)(b) 13 On and after June 30, 2026, a deployerDeployerDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). A deployer of a high-risk artificial intelligence system. Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701 that has deployed a high-risk artificial intelligence systemHigh-risk artificial intelligence systemDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701 to make, or be a substantial factor in making, a consequential decision concerning a consumer shall, if the consequential decision is adverse to the consumer, provide to the consumer:
(5)(a) 14 On and after June 30, 2026, and except as provided in subsection (6) of this section, a deployerDeployerDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). A deployer of a high-risk artificial intelligence system. Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701 shall make available, in a manner that is clear and readily available on the deployerDeployerDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). A deployer of a high-risk artificial intelligence system. Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701's website, a statement summarizing:
(7) 15 If a deployerDeployerDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). A deployer of a high-risk artificial intelligence system. Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701 deploys a high-risk artificial intelligence systemHigh-risk artificial intelligence systemDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701 on or after June 30, 2026, and subsequently discovers that the high-risk artificial intelligence systemHigh-risk artificial intelligence systemDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701 has caused algorithmic discrimination, the deployerDeployerDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). A deployer of a high-risk artificial intelligence system. Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701, without unreasonable delay, but no later than ninety days after the date of the discovery, shall send to the attorney general, in a form and manner prescribed by the attorney general, a notice disclosing the discovery.
(9) 16 On and after June 30, 2026, the attorney general may require that a deployerDeployerDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). A deployer of a high-risk artificial intelligence system. Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701, or a third party contracted by the deployerDeployerDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). A deployer of a high-risk artificial intelligence system. Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701, disclose to the attorney general, no later than ninety days after the request and in a form and manner prescribed by the attorney general, the risk management policy implemented pursuant to subsection (2) of this section, the impact assessment completed pursuant to subsection (3) of this section, or the records maintained pursuant to subsection (3)(f) of this section. The attorney general may evaluate the risk management policy, impact assessment, or records to ensure compliance with this part 17, and the risk management policy, impact assessment, and records are not subject to disclosure under the "Colorado Open Records Act", part 2 of article 72 of title 24. In a disclosure made pursuant to this subsection (9), a deployerDeployerDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). A deployer of a high-risk artificial intelligence system. Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701 may designate the statement or documentation as including proprietary information or a trade secret. To the extent that any information contained in the risk management policy, impact assessment, or records includes information subject to attorney-client privilege or work-product protection, the disclosure does not constitute a waiver of the privilege or protection.
Section 2 of SB 25B-004 amends nine subsections of the deployer duty provision. As with the developer section, the sole substantive change is replacing every instance of February 1, 2026 with June 30, 2026. The conforming "promulgated" to "adopted" edit also appears. The underlying deployer obligations — reasonable care, risk management program implementation, impact assessments (initial and annual), post-modification impact assessments, annual discrimination reviews, pre-deployment and adverse-decision consumer notices, public website transparency statements, discrimination-discovery reporting to the AG, and on-demand document production — all remain intact.
(1) 17 On and after June 30, 2026, and except as provided in subsection (2) of this section, a deployerDeployerDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). A deployer of a high-risk artificial intelligence system. Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701 or other developerDeveloperDefined in C.R.S. § 6-1-1701 (as enacted by SB 24-205). A developer of a high-risk artificial intelligence system. Full definition not restated in this amendatory bill.C.R.S. § 6-1-1701 that deploys, offers, sells, leases, licenses, gives, or otherwise makes available an artificial intelligence system that is intended to interact with consumers shall ensure the disclosure to each consumer who interacts with the artificial intelligence system that the consumer is interacting with an artificial intelligence system.
Section 3 of SB 25B-004 amends the AI disclosure provision by replacing February 1, 2026 with June 30, 2026. The underlying obligation — requiring deployers and other developers who make an AI system intended to interact with consumers available to ensure disclosure to the consumer that they are interacting with an AI system — remains unchanged.
This act takes effect at 12:01 a.m. on the day following the expiration of the ninety-day period after final adjournment of the general assembly; except that, if a referendum petition is filed pursuant to section 1 (3) of article V of the state constitution against this act or an item, section, or part of this act within such period, then the act, item, section, or part will not take effect unless approved by the people at the general election to be held in November 2026 and, in such case, will take effect on the date of the official declaration of the vote thereon by the governor.
Section 4 is the standard Colorado effective-date provision. The act takes effect 90 days after the final adjournment of the general assembly, subject to a potential referendum petition. If a referendum is filed, the act does not take effect unless approved at the November 2026 general election.