Colorado AI Act Readiness Module
Applicability: Conditional - for organizations with operations in Colorado or serving Colorado residents Effective Date: June 30, 2026 (extended from February 1, 2026 via SB 25B-004)
Overview
This module provides guidance for compliance with Colorado Senate Bill 24-205 (the "Colorado Artificial Intelligence Act"), a comprehensive state-level AI regulation focused on preventing algorithmic discrimination in high-risk AI systems.
IMPORTANT: This module is optional and conditional. Only implement if your organization: - Operates in Colorado - Serves Colorado residents - Uses AI systems that make consequential decisions (housing, lending, employment, education, healthcare)
Quick Reference
| Requirement | Deadline | Owner | Related Control |
|---|---|---|---|
| Impact Assessment (Initial) | June 30, 2026 | AI Governance Lead | 2.6 (Model Risk) |
| Discrimination Monitoring | June 30, 2026 | Compliance + Analytics | 2.11 (Bias Testing) |
| Pre-Decision Notices | June 30, 2026 | Legal + Product | 3.3 (Reporting) |
| Adverse-Decision Notices | June 30, 2026 | Legal + Product | 3.3 (Reporting) |
| Public Disclosures | June 30, 2026 | Communications | 3.3 (Reporting) |
What the Law Requires
For "Developers" (AI vendors/creators)
- Implement reasonable care to prevent discrimination
- Provide technical documentation
- Publish public statements on AI system design
- Issue notice to "Deployers" on or after June 30, 2026
For "Deployers" (organizations using AI)
- Conduct impact assessments before deployment
- Perform annual impact assessments for high-risk systems
- Implement discrimination monitoring and prevention
- Provide pre-decision notices to consumers (when applicable)
- Provide adverse-decision notices to consumers
- Create and maintain public-facing disclosures
- Maintain documentation for compliance verification
Implementation Template
Use the Colorado AI Impact Assessment template to document your compliance approach for each high-risk AI system.
Key Dates
- June 30, 2026: Effective date for all requirements (extended from February 1, 2026 via SB 25B-004)
- Before June 30: Assess all high-risk AI systems
- On or after June 30: All requirements become mandatory
Related Controls
- Control 2.6: Model Risk Management - Impact assessment procedures
- Control 2.11: Bias Testing and Fairness - Discrimination monitoring
- Control 3.3: Compliance and Regulatory Reporting - Public disclosures
Additional Resources
Status: Optional module Updated: January 2026 Applicability: Colorado operations only