Colorado Senate Bill 24-205 - Consumer Protections for Artificial Intelligence Act (2024 Session Laws of Colorado, Effective 1 February 2026) - First US Comprehensive AI Law

What Colorado Senate Bill 24-205 - Consumer Protections for Artificial Intelligence Act (2024 Session Laws of Colorado, Effective 1 February 2026) - First US Comprehensive AI Law requires

Colorado Senate Bill 24-205, the 'Consumer Protections for Artificial Intelligence' act, signed by Governor Jared Polis on 17 May 2024 (2024 Session Laws of Colorado), is the first comprehensive United States artificial intelligence law and takes substantive effect on 1 February 2026. The act regulates 'high-risk artificial intelligence systems' (high-risk systems) by imposing distinct duties on two regulated parties: developers (entities that build, intentionally and substantially modify, or make available high-risk systems) and deployers (entities that use high-risk systems). The core duty for both is to use reasonable care to protect consumers from any known or reasonably foreseeable risks of algorithmic discrimination. The act creates a rebuttable presumption that reasonable care was used if the regulated party complies with enumerated provisions. For developers these include: (i) making available to deployers a statement disclosing specified information about the high-risk system; (ii) making available information and documentation necessary to complete an impact assessment; (iii) maintaining a publicly available statement summarising the types of high-risk systems developed or substantially modified and how risks are managed; (iv) disclosing to the Colorado Attorney General and known deployers/other developers any known or reasonably foreseeable risks of algorithmic discrimination within 90 days after discovery or receipt of a credible report. For deployers these include: (i) implementing a risk management policy and program; (ii) completing an impact assessment; (iii) annually reviewing each deployment to ensure the system is not causing algorithmic discrimination; (iv) notifying consumers of specified items where the system makes or is a substantial factor in making a consequential decision concerning the consumer; (v) providing consumers an opportunity to correct incorrect personal data processed in a consequential decision; (vi) providing consumers an opportunity to appeal - via human review where technically feasible - an adverse consequential decision; (vii) maintaining a publicly available statement summarising deployments and risk management; (viii) disclosing to the Attorney General any discovery of algorithmic discrimination caused by the high-risk system within 90 days. Any person doing business in Colorado that deploys or makes available an AI system intended to interact with consumers must disclose to each consumer that they are interacting with an AI system. The act provides specified exemptions (compliance with other laws; cooperation with investigations; protection of life or physical safety; research; product recall or technical-error repair) and an affirmative defense for parties in compliance with a nationally or internationally recognised AI risk management framework designated by the act or the Attorney General, provided they take specified discovery-and-correction measures. Insurers, fraternal benefit societies, banks, credit unions and their affiliates are deemed in full compliance under specified circumstances by virtue of existing prudential or insurance-commissioner regimes. Enforcement: the Colorado Attorney General has exclusive enforcement authority and rule-making authority; violations are deceptive trade practices under the Colorado Consumer Protection Act.

Pillar: AI Governance & Law · Authority: Colorado General Assembly (74th General Assembly, 2024 Regular Session) - signed by Governor Jared Polis 17 May 2024 - Session Laws of Colorado (2024); enforcement vested in the Colorado Attorney General · Version: 1.0.0 · Last updated: 2024-05-17

Primary source: https://leg.colorado.gov/bills/sb24-205

SHA-256 integrity: 963be066b0cde9a167504051a0f5402f2639e6290ae517256000cf6bf4b5b631

Primary Citations — 9 traced to source

• Colorado Senate Bill 24-205, Consumer Protections for Artificial Intelligence - Bill Summary, Colorado General Assembly (2024 Regular Session): substantive obligations apply on and after 1 February 2026; signed by Governor 17 May 2024
• SB24-205 Bill Summary: developer rebuttable-presumption obligations - (i) deployer statement with specified information about the high-risk system; (ii) information and documentation for deployer impact assessment; (iii) publicly available statement summarising types of high-risk systems and risk management; (iv) AG and deployer/developer disclosure of algorithmic discrimination risk within 90 days of discovery or credible report

+ 7 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.

Access

• Discovery (free): /api/v1/nodes/us-colorado-ai-act-sb24-205.json — 6-field metadata
• Vault (full node): /api/v1/vault/nodes/us-colorado-ai-act-sb24-205.json — full 13-key payload, $0.01 USDC (L402/Skyfire/Direct Base)
• Canonical URL: https://bidda.com/intelligence/us-colorado-ai-act-sb24-205
• Back to registry: Browse all 10,090 compliance nodes