Skip to main content
Effective: January 1, 2027 — Signed May 14, 2026

Colorado ADMT Act (SB 26-189) Compliance

Colorado's law governing covered automated decision-making technology (ADMT) used in consequential decisions. Understand requirements for developers and deployers affecting employment, education, finance, healthcare, housing, insurance, and essential government services.

Effective: January 1, 2027 — SB 26-189 was signed May 14, 2026, repealing and reenacting the prior SB 24-205 framework. Colorado AG implementing rules filed August 11, 2026 remain proposed and not final.

Colorado is a supplemental regulatory pack. HAIEC maps regulatory requirements to evidence concepts. Implementing rules remain proposed. Outputs are informational/evidence-oriented. No certification or legal-advice claim.

Covered ADMT Categories

Colorado ADMT Act applies to automated decision-making technology that materially influences consequential decisions

Employment Decisions

Hiring, promotion, termination, or work assignment decisions

Resume screening AIInterview assessment toolsPerformance evaluation systems

Education & Vocational Training

Access to educational institutions or vocational training programs

Admissions AIScholarship allocationStudent assessment tools

Financial Services

Credit, insurance, or financial service eligibility

Loan approval AIInsurance underwritingCredit scoring systems

Essential Services

Access to healthcare, housing, utilities, or government services

Healthcare triage AIHousing applicationsBenefits eligibility

Compliance Requirements

What developers and deployers of covered ADMT must do

Technical Documentation

Developers must provide deployers with technical documentation describing intended uses, training data categories, known limitations, and instructions for appropriate use and human review

Before deployment

Consumer Notice

Deployers must provide clear and conspicuous notice at the point of interaction with covered ADMT

At point of interaction

Post-Adverse-Outcome Disclosure

Deployers must provide plain language description of the covered ADMT system and its role in the adverse outcome within 30 days

Within 30 days of adverse outcome

Consumer Rights

Consumers can request data access, correction of inaccurate information, and meaningful human review of covered ADMT decisions

Must be available

Penalties & Enforcement

Enforced by Colorado Attorney General — enforcement metadata only, not a scorable evidence requirement

Per Violation

$20,000

Maximum civil penalty per violation under the Colorado Consumer Protection Act

Cure Period

60 days

Before January 1, 2030, the AG must provide 60 days' notice and an opportunity to cure violations capable of cure

Enforcement

AG

Enforced by the Colorado Attorney General as a deceptive trade practice

Cure Period Available Before January 1, 2030

SB 26-189 includes a 60-day cure period for violations where a cure is possible, available before January 1, 2030. If you receive notice from the AG, you have 60 days to fix the issue. This makes early compliance assessment critical.

Not sure if you're ready for enforcement?

Free 2-minute check. No sign-up required. Identify potential gaps before regulators find them.

Free Enforcement Readiness Check

Colorado ADMT Act (SB 26-189)

Effective January 1, 2027. Colorado is a supplemental regulatory pack. HAIEC maps regulatory requirements to evidence concepts for when the pack is reactivated.

Explore HAIEC Platform

Informational overview — no certification or legal-advice claim