1. Home
  2. Control Map
  3. United States
  4. Colorado

Control Map · US state · updated Nov 8, 2026

SI safety in Colorado

Colorado's 2024 AI Act was a broad algorithmic discrimination law rather than a frontier SI safety law. Its start was delayed to June 30, 2026, enforcement was paused by a stipulated order in a federal suit brought by xAI and joined by the US government, and the state repealed and replaced it with SB 26-189, a narrower disclosure law for automated decision technology effective January 1, 2027.

Measures
2
Strongest
Passed
In force
0
Next date
Jan 1, 2027

The measures

2 measures, status and dates

Every SI safety measure the Control Map tracks for Colorado, with what it requires, its penalties and its sources.

Stalled or withdrawn

SB 24-205

Colorado Artificial Intelligence Act (SB 24-205)

Key dates

Introduced
n/a
Signed or adopted
n/a
Effective
n/a
Next step
None scheduled

Scope

Developers and deployers of high-risk SI systems used in consequential decisions.

Penalties

No penalties: this measure has no binding enforcement.

What it requires

  • Duty of reasonable care against algorithmic discrimination
  • Deployer risk management programs and annual impact assessments
  • Start date delayed to June 30, 2026 by SB25B-004, signed August 28, 2025
  • Enforcement paused by a stipulated order in X.AI LLC v. Weiser on April 27, 2026, then repealed and replaced by SB 26-189

Sources

  1. Colorado Delays AI Act to June 2026; Businesses Get Breathing Room PYMNTS · Sep 10, 2025
  2. Federal AI Preemption: DOJ Task Force vs. State AI Laws (2026 Guide) AI Laws by State · Nov 4, 2026
Passed, not yet in force

SB 26-189

SB 26-189 (repeal and reenactment of the Colorado AI Act)

Key dates

Introduced
n/a
Signed or adopted
May 14, 2026
Effective
Jan 1, 2027

Scope

Developers and deployers of automated decision-making technology used in consequential decisions; it does not address frontier model safety.

Penalties

Violations are deceptive trade practices enforced only by the Attorney General, with a 60 day cure period until January 1, 2030.

What it requires

  • Developers give deployers documentation on intended uses, known harmful uses and limitations
  • Deployers notify consumers before use and explain adverse outcomes afterward
  • Consumers may correct data and request human review where commercially reasonable
  • Keep records for at least three years

Sources

  1. Colorado Governor Signs SB 189 Holland & Knight · May 18, 2026
  2. Federal AI Preemption Fight: Where It Stands CASRAI · Sep 20, 2026

The Control Map

Every other jurisdiction

43 measures in 22 jurisdictions. See them all on the world map.

European Union 3United States (federal) 6California 3New York 1Illinois 1Texas 1China 4United Kingdom 2Japan 1South Korea 1Canada 2Brazil 1India 1Australia 3Singapore 1Council of Europe 1United Nations 2G7 1International summit series 4United States and China (bilateral) 1Global civil society 1

Enter RSI

Laws on one side, incidents on the other

The Rogue Incident Database logs what SI systems have actually done. The RSI Clock weighs both.

Back to the map Incident Database The RSI Clock