Colorado AI Regulations
Colorado's AI Act (SB 205) is the most comprehensive AI-specific statute enacted by a US state, with duties of reasonable care for both developers and deployers.
Colorado's SB 205 is the reference point for state-level AI regulation in the US — a comprehensive statute rather than a patchwork of amendments to existing law, built around a duty of reasonable care owed by both developers and deployers of "high-risk" AI systems, defined by reference to consequential decisions in employment, lending, housing, healthcare, insurance, education, and legal services.
The law has been amended more than once since passage, mostly affecting the effective date and scope of exemptions rather than the core duty-of-care obligations, which have stayed consistent through each round.
Recently updated
regulations us colorado
Colorado AI Act (SB 205)
Frequently asked questions
- What is a "consequential decision" under Colorado's AI Act?
- A decision that has a material legal or similarly significant effect on a consumer's access to, cost of, or terms of employment, education, lending, housing, healthcare, insurance, or legal services — the statute's high-risk classification is built around this category, not around the underlying AI technology itself.
- Who owes obligations under the law — the AI vendor or the company using it?
- Both, with different duties. Developers of high-risk systems owe a duty of reasonable care to protect consumers from algorithmic discrimination and must give deployers the information needed for an impact assessment. Deployers owe the same duty of care and must complete and maintain annual impact assessments, plus give consumers notice before a high-risk system is used to make a consequential decision about them.