Colorado AI Act (SB24-205) — Consumer Protections for Artificial Intelligence

The colorado-ai-act-sb24-205 establishes comprehensive consumer protections for artificial intelligence systems in Colorado, becoming the first U.S. state law to regulate AI systems directly. The act creates a regulatory framework for high-risk AI systems that focuses on preventing algorithmic-discrimination in consequential decisions affecting consumers.

The law imposes dual obligations on both developers and deployers of high-risk AI systems, requiring them to use reasonable care to protect consumers from algorithmic discrimination. Key requirements include impact assessments, risk management policies, consumer notification and appeal rights, and mandatory disclosure of discrimination incidents to the colorado-attorney-general.

The act provides safe harbor provisions for entities complying with recognized AI risk management frameworks and includes specific exemptions for regulated financial institutions and insurers already subject to federal oversight. Enforcement authority rests exclusively with the Colorado Attorney General, with violations treated as deceptive trade practices under existing consumer protection law.

The legislation represents a significant development in state-level AI regulation, establishing precedent for algorithmic accountability requirements while attempting to balance innovation concerns through framework-based compliance pathways and sectoral exemptions.