On May 14, 2026, Colorado's Governor signed Senate Bill 26-189, repealing and replacing the state's original Colorado AI Act. The legislation marks a significant pivot in how Colorado regulates artificial intelligence, moving away from the framework that defined the original statute and adopting a new approach centered on automated decision-making technology. Businesses operating in Colorado, or deploying AI tools that affect Colorado residents, should begin reassessing their compliance programs now to align with the restructured regime before it takes effect.
The amended law abandons the prior algorithmic discrimination and duty of care framework that characterized the original Colorado AI Act. In doing so, it eliminates the previously central terminology of high-risk artificial intelligence systems, which had served as the trigger for many of the statute's substantive obligations. The legislature's decision to discard this terminology represents more than a semantic adjustment; it reflects a fundamental rethinking of which AI use cases warrant regulatory attention and how those use cases should be defined for compliance purposes.
In place of the high-risk framework, Senate Bill 26-189 focuses compliance obligations on the use of automated decision-making technology (ADMT) in what the statute terms consequential decisions. This shift will require businesses to revisit how they have catalogued their AI deployments. Tools previously classified under the high-risk rubric may or may not constitute ADMT used in consequential decisions, and conversely, certain systems that escaped scrutiny under the original framework may now fall within scope. Mapping current and planned deployments against the new statutory categories should be an early priority.
Practical preparation should include updating AI governance policies, documentation practices, and risk-management procedures to reflect the ADMT-centered approach. Organizations should review vendor contracts, internal model inventories, and impact-assessment templates to ensure they capture the information needed under the new regime. Cross-functional coordination among legal, compliance, technology, and human resources teams will be essential, particularly where AI tools influence employment, consumer, financial, or other decisions that may qualify as consequential under the amended law.
This update is provided for general informational purposes and does not constitute legal advice. Clients should consult counsel for guidance tailored to their specific circumstances and AI deployments.