Colorado Senate Advances Bill to Narrow State’s AI Act
Colorado Senate passed SB 189 to repeal and replace the state's 2024 AI Act with targeted transparency rules.
Why it matters: This legislative pivot impacts how legal and compliance teams advise businesses deploying AI in key sectors. Colorado’s approach signals a shift toward transparency, emphasizing disclosure and documentation over broad AI controls.
- SB 189, passed May 7, 2026, repeals the 2024 AI Act and narrows regulatory scope.
- The bill centers on consumer notice, technical documentation, and record retention for three years.
- ‘Automated decision-making technology’ is strictly defined in relation to critical life decisions.
- Developer and deployer obligations are enforced under the Colorado Consumer Protection Act, without a private right of action.
The Colorado Senate passed Senate Bill 189 on May 7, 2026, setting a course to repeal and replace the state’s 2024 AI Act. Driven by concerns about implementation and overbreadth, SB 189 reorients Colorado’s AI law toward narrower, actionable requirements for companies using automated decision-making technology (ADMT).
- SB 189 covers technology processing personal data that influences access to education, jobs, housing, financial services, insurance, healthcare, or essential government benefits, per bill text.
- Developers must provide deployers with technical materials describing intended uses, training data sources, limitations, and guidance on proper deployment—including when to apply human review.
- Both developers and deployers must keep compliance records for at least three years.
- Deployers have to give clear notice to consumers at the point of ADMT use, and consumers can request data access, corrections, and a human review of adverse outcomes.
Enforcement falls to the Attorney General under the Colorado Consumer Protection Act; violations count as deceptive trade practices. SB 189 does not introduce a new private right of action but clarifies liability allocation between developers and deployers in discrimination suits.
Governor Jared Polis commented, “Under this proposal, Coloradans will receive an up-front notice when AI or ADMS is being used...and if the decision is adverse, then they will have access to more information about the decision, an opportunity to correct wrong information, and request that a human review the ultimate decision.”
Support bridges sectors: the ACLU of Colorado calls the bill “a path to hold developers and businesses using AI accountable,” while the Colorado Chamber of Commerce says lawmakers “have largely respected the working group’s consensus.”
The new framework—expected to take effect January 1, 2027—highlights a national trend toward state-level recalibration of AI regulation to focus on transparency and targeted consumer protections.
By the numbers:
- May 7, 2026 — SB 189 passed the Colorado Senate.
- Three years — Minimum retention period for compliance records under SB 189.
- January 1, 2027 — SB 189 slated to take effect.
Yes, but: SB 189 leaves enforcement solely to the Attorney General; no new private right of action exists for consumers.
What's next: SB 189 proceeds to the Colorado House for consideration ahead of its January 1, 2027, effective date.