What is the Colorado AI Act?
- The Colorado AI Act is a broad, risk-based state law targeting high-risk AI and algorithmic discrimination.
- It places duties on developers (who build) and deployers (who use) high-risk AI systems.
- Core duties include reasonable care against discrimination, risk management, impact assessments, and transparency.
- It is an influential model nationally, and overlaps conceptually with the EU AI Act.
- Current as of June 2026. This is general information, not legal advice.
What the law targets
The Colorado AI Act centres on high-risk AI systems, broadly meaning AI that makes, or is a substantial factor in making, a consequential decision affecting a person, in areas such as employment, lending, housing, education, healthcare, insurance, and essential services. Its core concern is preventing algorithmic discrimination: the risk that an AI system produces unlawful differential treatment of people based on protected characteristics.
Who it applies to
The law distinguishes two roles, similar in spirit to the EU AI Act's provider and deployer:
- Developers: Those who build or substantially modify a high-risk AI system. They have duties around documentation and disclosure to deployers.
- Deployers: Those who use a high-risk AI system to make consequential decisions. They have duties around risk management, impact assessment, notice to affected individuals, and avoiding discrimination.
The core duties
At a high level, the law expects organisations to use reasonable care to protect people from algorithmic discrimination, and supports this with obligations such as risk management programmes, impact assessments for high-risk systems, transparency to consumers about the use of AI in consequential decisions, and disclosures between developers and deployers. The precise obligations differ by role.
Why it matters beyond Colorado
The Colorado AI Act matters nationally because it is an influential model. Its broad, risk-based, anti-discrimination approach is the kind of framework other states may follow, so understanding it helps organisations anticipate where US state AI regulation is heading. For organisations already preparing for the EU AI Act, the conceptual overlap, high-risk systems, risk management, impact assessments, transparency, means much of the groundwork transfers.
A note on timing and evolution
State AI laws are evolving quickly, and the Colorado AI Act's detailed requirements and effective dates have been the subject of ongoing legislative attention. Treat the specifics as subject to change and confirm the current position against official Colorado sources before relying on a particular date or detail. The direction, broad regulation of high-risk AI to prevent discrimination, is the stable part.
Key terms
- High-risk AI
- AI that is a substantial factor in consequential decisions about people.
- Algorithmic discrimination
- Unlawful differential treatment produced by an AI system.
- Developer
- An organisation that builds or substantially modifies a high-risk AI system.
- Deployer
- An organisation that uses a high-risk AI system to make consequential decisions.