The Colorado Artificial Intelligence Act takes effect on June 30, 2026, ushering in one of the most significant state-level frameworks governing the use of high-risk artificial intelligence systems in the United States. The statute imposes affirmative obligations on both developers and deployers of high-risk AI systems to use reasonable care to protect consumers from algorithmic discrimination. Businesses with operations that touch Colorado residents should treat the effective date as a near-term deadline rather than a distant compliance milestone.

At the heart of the Act is a duty of reasonable care. Developers of high-risk AI systems are expected to implement measures designed to identify and mitigate the risk that their tools will produce discriminatory outcomes when used as intended. Deployers, including businesses that integrate third-party AI tools into their own operations, carry parallel responsibilities to assess, monitor, and document the use of those systems. The Act applies to any covered business operating in or otherwise affecting Colorado residents, which means that geographic location alone will not insulate a company from its requirements.

Employers are particularly exposed. Organizations that use high-risk AI to support hiring, promotion, compensation, discipline, or similar employment decisions must implement appropriate safeguards to avoid discriminatory results. This includes evaluating vendor-supplied tools, understanding how decisions are produced, and maintaining processes that allow for human oversight and accountability. Reliance on a vendor's representations alone is unlikely to satisfy the deployer's independent duty of care.

Given the broad sweep of the Act and the limited runway before its effective date, covered businesses should begin readiness assessments now. Practical first steps include inventorying AI systems currently in use, classifying which qualify as high-risk under the statute, reviewing contracts with AI vendors, and updating internal governance, documentation, and impact assessment practices. Employers should also coordinate among legal, human resources, information technology, and procurement functions to ensure consistent oversight of AI-driven decision-making.

Companies that move early will be better positioned to demonstrate reasonable care when the Act becomes enforceable. Those that delay risk both regulatory exposure and the operational disruption of last-minute remediation.

This alert is provided for general informational purposes only and does not constitute legal advice. Clients should consult counsel for guidance tailored to their specific circumstances.


Authors