{"id":653942,"date":"2026-05-20T07:08:10","date_gmt":"2026-05-20T07:08:10","guid":{"rendered":"https:\/\/www.newsbeep.com\/us\/653942\/"},"modified":"2026-05-20T07:08:10","modified_gmt":"2026-05-20T07:08:10","slug":"colorado-enacts-revised-ai-law-united-states-global-law-firm","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/us\/653942\/","title":{"rendered":"Colorado enacts revised AI law | United States | Global law firm"},"content":{"rendered":"

Colorado\u2019s first artificial intelligence<\/a>\u00a0(AI<\/a>) governance law (SB24-205, the \u201cAI Act\u201d) has been the center of attention recently. As we previously discussed<\/a>, in early April X.AI<\/a> sued to enjoin enforcement of the AI Act. The federal government quickly moved to intervene (the first instance of a federal intervention into a challenge to a state-level AI governance law), and then the Colorado Attorney General agreed to suspend enforcement of the AI Act pending:<\/p>\n

resolution of X.AI\u2019s forthcoming motion for preliminary injunction and
\n any amendment to the AI Act by the Colorado General Assembly<\/p>\n

One of those steps has since occurred: the Colorado General Assembly has now amended the AI Act, and the Governor of Colorado signed the amended law on May 14, 2026. It will go into effect on January 1, 2027.<\/p>\n

The amended law, Senate Bill 26-189<\/a> (SB26-189, referred herein as the Revised CO AI Act), repealed and replaced the AI Act. The adoption of the Revised CO AI Act changes how the state intends to govern artificial intelligence going forward, including by departing from the AI Act\u2019s algorithmic discrimination and duty of care framework. Instead, under the Revised CO AI Act, the state will regulate the use of automated decision-making technology (ADMT) in \u201cconsequential decisions,\u201d and remove the terminology of \u201chigh-risk artificial intelligence systems\u201d initially used when the AI Act was introduced in May 2024.<\/p>\n

This article examines the content of the Revised CO AI Act and what it signals for the future of state-level AI regulation across the country.<\/p>\n

Overview<\/p>\n

Under the Revised CO AI Act, Colorado removed certain standards, revised certain defined terms carried over from the initial Colorado AI Act and introduced new defined terms that were previously absent. Notably, the Revised CO AI Act does not include the expression \u201cartificial intelligence\u201d and instead uses the term \u201cautomated decision-making technology,\u201d defined as a technology that processes personal data to generate recommendations, rankings or scores that are used to make decisions concerning an individual. Whereas the AI Act previously imposed requirements in connection with \u201chigh-risk artificial intelligence systems,\u201d the Revised CO AI Act creates obligations for developers and deployers of a \u201ccovered ADMT.\u201d The expression is defined as an ADMT \u201cused to materially influence a consequential decision.”\u00a0Under the Revised CO AI Act, the definition of a \u201cconsequential decision\u201d remains substantially similar to the one initially included in the original AI Act, encompassing decisions that relate to an individual\u2019s access to education, employment, housing, financial services, insurance, health care and government services.<\/p>\n

The Revised CO AI Act does not carry over all standards from the AI Act, largely centering on the AI Act\u2019s algorithmic discrimination and risk management requirements. This includes removing the duty of care to mitigate algorithmic discrimination risks, requirements regarding algorithmic discrimination, and requirements to perform annual impact assessments and maintain a risk management program.<\/p>\n

The Revised CO AI Act imposes separate requirements for developers and deployers of covered ADMTs. In the context of Executive Order 14365<\/a>\u2019s effort to dissuade \u201conerous\u201d state AI regulation, Colorado characterized<\/a> the Revised CO AI Act as protecting consumers \u201cwhile not being onerous on developers or the businesses who use AI technology.\u201d Under the law, a developer of a covered ADMT is required to provide deployers with notice of any material updates or modifications, as well as documentation describing:<\/p>\n

The intended uses and known harmful uses of the covered ADMT
\n The categories of training data
\n The limitations of the covered ADMT and known risks associated with it
\n Instructions for the deployer to be able to conduct a meaningful human review<\/p>\n

Under the Revised CO AI Act, a consumer has a right to request a response from a deployer if the consumer experiences an adverse outcome resulting from a consequential decision that involved a covered ADMT that materially influenced the consequential decision. In those circumstances, a consumer has the right to:<\/p>\n

Access personal data used in the consequential decision using the covered ADMT;
\n Correct any factually incorrect or materially inaccurate personal data used in the consequential decision using the covered ADMT;
\n A meaningful human review (to the extent commercially reasonable) and reconsideration of the consequential decision.<\/p>\n

The law\u2019s introduction of a \u201cmeaningful human review” imposes a new oversight obligation on deployers following an adverse outcome. Under this requirement, deployers are required to designate an individual who will receive training to conduct such review and who has the authority to potentially override a consequential decision made by the covered ADMT.<\/p>\n

The \u201cmeaningful human review\u201d is of particular interest, as it is one of the newly created consumer rights under the Revised CO AI Act. In circumstances where a Colorado resident experiences an adverse outcome involving a covered ADMT, a meaningful human review may be requested of the deployer.<\/p>\n

Consumers are able to make such requests for \u201cmeaningful human reviews\u201d in part based on the information made available to them by deployers in certain disclosures mandated by the Revised CO AI Act. Deployers are required to provide a \u201cclear and conspicuous\u201d notice to consumers that a covered ADMT is or will be used in a consequential decision. Deployers can satisfy this obligation by maintaining a \u201cprominent public notice that is reasonably accessible at points of consumer interaction.\u201d<\/p>\n

Finally, the Revised CO AI Act requires that deployers provide consumers with an easily understandable description of a consequential decision resulting in an adverse outcome when a covered ADMT was involved in the process. Such disclosure must be provided to consumers within 30 days and may vary in its specific content depending on the industry in which the consequential decision is made. The specific requirements of this disclosure will be determined through rules to be adopted by the Colorado Attorney General on or before January 1, 2027.<\/p>\n

Much like its predecessor, the Revised CO AI Act does not provide a private right of action for enforcement, and the Colorado Attorney General has exclusive authority to enforce it.<\/p>\n

How the Revised CO AI Act compares to other ADMT regulations<\/p>\n

Companies operating in the AI industry or deploying AI systems may be seeking opportunities to leverage their ongoing compliance efforts in anticipation of the emergence of other similar state AI regulations. Therefore, it is worth recognizing that the Revised CO AI Act is not breaking entirely new ground; instead, some of its definitions, regulations and requirements can be found in other state-level AI governance laws.<\/p>\n

One similar law can be found in the California Consumer Privacy Act<\/a> (CCPA<\/a>). In 2025, following a lengthy and closely watched rulemaking process<\/a>, new regulations were enacted under the CCPA addressing ADMT, introducing new compliance obligations for businesses that use ADMT to make \u201csignificant decisions\u201d about consumers (CA ADMT regulations).<\/p>\n

However, although the Revised CO AI Act and the CA ADMT regulations share a common goal of regulating automated decision-making, they diverge in several key ways. Notably, and as discussed above, the Revised CO AI Act seems to adopt a broader definition of ADMT, encompassing technology that makes, guides or assists in a decision, judgment or determination concerning an individual. In contrast, the CCPA limits ADMT to systems that actually replace or substantially replace human decision-making.\u00a0Additionally, the Revised CO AI Act aims to regulate both developers and deployers, assigning distinct obligations to each, while the CCPA primarily regulates businesses that use ADMT. <\/p>\n

The two regimes also differ in their approach to consumer rights. At first glance, the CCPA seems to provide a broader set of rights, including the right to opt out of certain ADMT uses, access meaningful information about ADMT and request human review of decisions made with ADMT.\u00a0By contrast, the Revised CO AI Act seems to emphasize notice, explanation, correction and human review in cases of adverse decisions, and does not offer a comparable broad opt-out right. Nonetheless, the laws are similarly limited in reach due to the territorial constraints inherent in state-level regulations.<\/p>\n

With regard to enforcement, the Revised CO AI Act adopts an ADMT-specific regime, including role-based liability allocation and a cure period, whereas the CA ADMT regulations operate within the existing CCPA enforcement framework. Important for companies seeking to comply with either law, both are scheduled to take effect on the same timeline, with enforcement beginning on January 1, 2027.<\/p>\n

Our take<\/p>\n

Organizations should continue to pay close attention to the development of the rules under the Revised CO AI Act, which are anticipated over the coming months leading up to the entry into force of the law in early 2027. In particular, transparency requirements for companies developing or deploying AI systems continue to be a growing regulatory trend. Proactive compliance efforts and preparation should be a priority as further regulatory guidance and rules continue to emerge.<\/p>\n","protected":false},"excerpt":{"rendered":"Colorado\u2019s first artificial intelligence\u00a0(AI) governance law (SB24-205, the \u201cAI Act\u201d) has been the center of attention recently. As…\n","protected":false},"author":2,"featured_media":653943,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[18],"tags":[281931,281916,281937,281966,281939,282062,282077,281920,281955,281945,282076,282078,281932,281959,281935,281985,281936,281938,281940,281973,281949,281964,281958,281918,281975,281984,281927,281961,281974,281986,281950,281922,281977,281983,214747,281976,281967,281963,281970,281956,281928,282075,281969,282073,282074,281965,281962,281921,281957,281926,281971,281960,281944,281947,281943,281946,281933,281941,23,282065,282063,282064,155670,155667,155669,281930,281954,282060,282059,282058,282057,155665,282056,282021,282017,282020,281953,281992,281989,281991,281911,281923,281910,281912,281919,282003,281915,281999,282002,281968,281997,281995,281996,282001,281998,282000,281925,281988,282061,281987,281972,155659,281942,282006,282004,282005,281979,281982,281948,281994,281990,281993,155660,282011,282007,282010,155664,18115,9181,282068,282066,282067,282019,282016,282018,281934,282055,282052,282050,282051,282053,282054,282025,282022,282024,282027,282023,282026,282037,282033,282036,282031,282029,282028,282030,3,281951,155662,155658,282072,281914,282040,282038,282039,282049,282047,282048,281913,155666,282035,282032,282034,281929,282015,282009,282014,282071,282069,282070,155672,155668,155671,282013,282008,282012,21,155663,19,22,20,25,281952,155661,281917,24,282046,282044,282041,282043,282042,282045,281981,281980,281978,281924],"class_list":["post-653942","post","type-post","status-publish","format-standard","has-post-thumbnail","category-united-states","tag-admt-legal-framework-us","tag-admt-regulation-colorado","tag-adverse-decision-ai-review-rights","tag-ai-adverse-outcome-disclosure-requirements","tag-ai-algorithm-governance-change-colorado","tag-ai-attorney","tag-ai-compliance-attorney","tag-ai-compliance-colorado-law","tag-ai-compliance-differences-state-laws","tag-ai-compliance-documentation-requirements","tag-ai-compliance-law-firm","tag-ai-compliance-lawyer","tag-ai-compliance-obligations-developers-deployers","tag-ai-compliance-strategy-us-companies","tag-ai-consumer-rights-colorado","tag-ai-consumer-rights-under-colorado-law","tag-ai-decision-making-oversight-requirements","tag-ai-disclosure-requirements-consumers","tag-ai-duty-of-care-framework-removed","tag-ai-enforcement-model-state-regulators","tag-ai-governance-accountability-developers-deployers","tag-ai-governance-corporate-compliance","tag-ai-governance-emerging-trends-2026","tag-ai-governance-law-colorado","tag-ai-governance-policy-shift-united-states","tag-ai-human-review-requirement-explanation","tag-ai-law-amendment-colorado-general-assembly","tag-ai-law-compliance-planning-organizations","tag-ai-law-cure-period-compliance","tag-ai-law-differences-california-vs-colorado","tag-ai-law-enforcement-attorney-general-colorado","tag-ai-law-january-1-2027-effective-date","tag-ai-law-practical-implications-for-companies","tag-ai-law-requirements-developers-vs-deployers","tag-ai-lawyer","tag-ai-legal-framework-evolution-2026","tag-ai-legal-implications-employment-housing-finance-healthcare-decisions","tag-ai-legal-risk-management-systems","tag-ai-legal-updates-united-states-ai-law","tag-ai-opt-out-rights-comparison-ccpa-vs-colorado","tag-ai-policy-development-united-states","tag-ai-regulation-attorney","tag-ai-regulation-impact-on-businesses","tag-ai-regulation-law-firm","tag-ai-regulation-lawyer","tag-ai-regulation-notice-and-explanation-requirements","tag-ai-regulation-transparency-trend","tag-ai-regulation-united-states-state-level","tag-ai-regulatory-divergence-us-states","tag-ai-regulatory-framework-colorado","tag-ai-regulatory-outlook-us-states","tag-ai-regulatory-preparedness-2027","tag-ai-regulatory-terminology-change-united-states","tag-ai-risk-and-limitation-disclosures","tag-ai-terminology-shift-admt","tag-ai-training-data-disclosure-law","tag-ai-transparency-requirements-law","tag-algorithmic-discrimination-law-change-colorado","tag-america","tag-artificial-intelligence-attorney","tag-artificial-intelligence-law-firm","tag-artificial-intelligence-lawyer","tag-austin-attorney","tag-austin-law-firm","tag-austin-lawyer","tag-automated-decision-making-technology-regulation","tag-automated-decision-making-vs-ai-legal-definitions","tag-big-law","tag-big-law-attorneys","tag-big-law-lawyers","tag-brazil-attorney","tag-brazil-law-firm","tag-brazil-lawyer","tag-california-attorney","tag-california-law-firm","tag-california-lawyer","tag-ccpa-admt-regulations-comparison","tag-chicago-attorney","tag-chicago-law-firm","tag-chicago-lawyer","tag-colorado-ai-act-revised","tag-colorado-ai-enforcement-suspension","tag-colorado-ai-law","tag-colorado-ai-regulation-2026","tag-colorado-artificial-intelligence-legislation","tag-colorado-attorney","tag-colorado-automated-decision-making-law","tag-colorado-law-firm","tag-colorado-lawyer","tag-consequential-decision-ai-definition-law","tag-dallas-attorney","tag-dallas-law-firm","tag-dallas-lawyer","tag-denver-attorney","tag-denver-law-firm","tag-denver-lawyer","tag-federal-intervention-ai-litigation-united-states","tag-first-instance-of-a-federal-intervention-of-state-case-on-state-ai-governance-law","tag-for-a-second-this-is-it-ai-law-firm","tag-future-of-ai-regulation-in-the-us","tag-generative-ai-governance-law-trends","tag-global-law-firm","tag-high-risk-ai-systems-definition-removed","tag-houston-attorney","tag-houston-law-firm","tag-houston-lawyer","tag-how-does-colorado-regulate-ai-systems","tag-how-to-comply-with-state-ai-laws-us","tag-human-oversight-ai-systems-law","tag-illinois-attorney","tag-illinois-law-firm","tag-illinois-lawyer","tag-international-law-firm","tag-istanbul-attorney","tag-istanbul-law-firm","tag-istanbul-lawyer","tag-latin-america-law-firm","tag-law-firm","tag-lawyers","tag-litigation-attorney","tag-litigation-law-firm","tag-litigation-lawyer","tag-los-angeles-attorney","tag-los-angeles-law-firm","tag-los-angeles-lawyer","tag-meaningful-human-review-ai-law","tag-mexico-attorney","tag-mexico-city-attorney","tag-mexico-city-law-firm","tag-mexico-city-lawyer","tag-mexico-law-firm","tag-mexico-lawyer","tag-minneapolis-attorney","tag-minneapolis-law-firm","tag-minneapolis-lawyer","tag-minnesota-attorney","tag-minnesota-law-firm","tag-minnesota-lawyer","tag-missouri-attorney","tag-missouri-law-firm","tag-missouri-lawyer","tag-new-york-attorney","tag-new-york-city-law-firm","tag-new-york-law-firm","tag-new-york-lawyer","tag-news","tag-no-private-right-of-action-ai-law","tag-north-america-law-firm","tag-norton-rose-fulbright","tag-precedence-of-doj-intervention-into-a-state-law-case","tag-revised-colorado-ai-act","tag-san-francisco-attorney","tag-san-francisco-law-firm","tag-san-francisco-lawyer","tag-sao-paulo-attorney","tag-sao-paulo-law-firm","tag-sao-paulo-lawyer","tag-senate-bill-26-189-colorado-ai","tag-south-america-law-firm","tag-st-louis-attorney","tag-st-louis-law-firm","tag-st-louis-lawyer","tag-state-ai-governance-trends-us","tag-trkiye-attorney","tag-trkiye-law-firm","tag-trkiye-lawyer","tag-technology-attorney","tag-technology-law-firm","tag-technology-lawyer","tag-texas-attorney","tag-texas-law-firm","tag-texas-lawyer","tag-turkey-attorney","tag-turkey-law-firm","tag-turkey-lawyer","tag-united-states","tag-united-states-law-firm","tag-united-states-of-america","tag-unitedstates","tag-unitedstatesofamerica","tag-us","tag-us-ai-regulation-comparison-california-colorado","tag-us-law-firm","tag-us-state-ai-regulation-2026","tag-usa","tag-washington-attorney","tag-washington-dc-attorney","tag-washington-dc-law-firm","tag-washington-dc-lawyer","tag-washington-law-firm","tag-washington-lawyer","tag-what-companies-need-to-know-colorado-ai-law","tag-what-is-automated-decision-making-technology-law","tag-what-is-colorado-ai-act-revised","tag-x-ai-lawsuit-colorado-ai-law"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/posts\/653942","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/comments?post=653942"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/posts\/653942\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/media\/653943"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/media?parent=653942"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/categories?post=653942"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/tags?post=653942"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}