Colorado's AI Act came into force on June 30. Here's what it actually requires

1 July 2026 · 4 min read

The Colorado Artificial Intelligence Act took effect on June 30, 2026, becoming the first comprehensive state-level AI law in the United States to actually go live. The law, passed in 2025 and since amended, places obligations on companies that develop or deploy "high-risk AI systems" used to make consequential decisions affecting Colorado residents.

Note: the original Colorado AI Act was repealed and replaced in May 2026 by SB 26-189, a narrower statute focused specifically on automated decision-making technology (ADMT) that materially influences consequential decisions. The replacement is slightly less sweeping than the original but still covers a meaningful range of AI applications.

What counts as a high-risk AI system

The law targets AI used in consequential contexts: employment decisions, credit and financial services, housing, education, healthcare access, and government benefits. If your AI system materially influences a decision in one of those areas affecting a Colorado resident, the law applies, regardless of where your company is based.

What it requires

Companies covered by the law must take reasonable care to avoid algorithmic discrimination, develop and maintain a risk management policy and programme for their AI systems, provide notices to consumers when AI is used in consequential decisions, and conduct impact assessments for high-risk systems. Consumers also have the right to request human review of a decision made with AI assistance and to contest decisions they believe were discriminatory.

What it doesn't do

Colorado's law isn't a blanket AI regulation. It doesn't cover general-purpose AI tools used internally, creative applications, research tools, or low-stakes uses. The focus is specifically on automated systems that affect real people's access to significant life opportunities. A company using AI to write marketing copy isn't covered. One using AI to screen job applications probably is.

Why it matters beyond Colorado

Colorado is the first US state to get a comprehensive AI law past the enforcement date. Several other states have legislation moving through their legislatures. The Colorado framework, even in its revised narrower form, sets a template for what AI accountability legislation looks like in practice. Companies operating across the US should expect more states to follow, and designing AI governance with Colorado-style requirements in mind is cheaper than retrofitting compliance state by state.