Back
comprehensive documentation and transparency requirements
webRelevant to AI governance discussions as Colorado's law represents an early U.S. state-level regulatory framework for high-risk AI, establishing documentation and transparency norms that may influence broader policy development.
Metadata
Importance: 55/100news articlenews
Summary
An overview of Colorado's AI Act, one of the first U.S. state-level laws governing high-risk artificial intelligence systems, focusing on developer and deployer obligations including documentation, transparency, and bias mitigation requirements. The article explains key compliance requirements for organizations developing or using AI systems that make consequential decisions affecting Colorado residents.
Key Points
- •Colorado's AI Act targets 'high-risk AI systems' used in consequential decisions such as employment, housing, education, and financial services
- •Developers must provide detailed documentation including intended uses, known limitations, and risk mitigation measures to deployers
- •Deployers are required to conduct impact assessments, implement risk management programs, and disclose AI use to consumers
- •The law establishes consumer rights including the right to know when AI is used and to appeal automated decisions
- •Enforcement falls under the Colorado Attorney General, with the law taking effect February 1, 2026
Cited by 1 page
| Page | Type | Quality |
|---|---|---|
| Colorado Artificial Intelligence Act | Policy | 53.0 |
Cached Content Preview
HTTP 200Fetched Mar 20, 202621 KB
Published21 May 2024
[Subscribe to IAPP Newsletters](https://iapp.org/news/subscriptions)
* * *
### Contributors:
Cobun Zweifel-Keegan
CIPP/US, CIPM
Managing Director, D.C.
IAPP
Andrew Folks
CIPP/E, CIPP/US, CIPM, FIP
Privacy & Data Attorney
Frankfurt, Kurnit, Klein & Selz
April showers brought May consumer protections in the Centennial State this year. In fact, Colorado collected a bouquet of new privacy and artificial intelligence laws as its legislative session wrapped up, including tweaks to the state's consumer privacy law.
The most groundbreaking legislative vehicle among them is the [Colorado AI Act](https://leg.colorado.gov/bills/SB24-205%22HYPERLINK%20%22https://leg.colorado.gov/bills/SB24-205), a cross-sectoral AI governance law covering the public sector — the first of its kind in the U.S.
Gov. Jared Polis signed the new [law](https://cogov.my.salesforce-sites.com/TFA/) Friday 17 May, though he simultaneously released a [signing statement](https://www.dwt.com/blogs/artificial-intelligence-law-advisor/2024/05/colorado-enacts-first-risk-based-ai-regulation-law) contextualizing his approval of the bill. Most of the act's major provisions enter into effect 1 Feb. 2026, though the Colorado legislature reportedly intends to study and possibly revise the bill before that time.
The final framework reflects trends from numerous state bills over the past two years, which were brought together in Connecticut's similar [Senate Bill 2](https://www.cga.ct.gov/asp/cgabillstatus/cgabillstatus.asp?selBillType=Bill&bill_num=SB00002&which_year=2024). But where Connecticut's bill withered on the vine following the governor's veto threat, the Colorado AI Act is now a signed law.
#### **A substantial factor in a consequential decision**
Like many other U.S. AI governance proposals, the Colorado AI Act focuses on automated decision-making systems. The law defines a covered high-risk AI system as one that "when deployed, makes, or is a substantial factor in making a consequential decision."
This "substantial factor" standard notably deviates from requirements in similar automated decision-making legislation. To qualify as a substantial factor, the AI-generated component of the decision must "assist in making a consequential decision" and be "capable of altering the outcome of a consequential decision." These impact and materiality requirements help refine and clarify the scope of covered systems.
A decision is consequential if it has a "material legal or similarly significant effect on the provision or denial to any consumer of, or the cost or terms of: education enrollment or opportunity, employment or an employment opportunity, a financial or lending service, an essential government service, healthcare services, housing, insurance, or legal service." The only defined term in the list is "health care services," which points to a U.S. code [definition](https://www.law.cornell.edu/uscode/text/42/234): "any services provided by a health care
... (truncated, 21 KB total)Resource ID:
8043aa268070571b | Stable ID: NDE1Y2I0Y2