Home › Jurisdictions › Colorado
AI Laws in Colorado
As of 2026-08-12, AI Laws USA tracks 22 AI rules in Colorado: 13 state-level rules and 9 county or city rules. Federal AI protections apply statewide on top of these — see the federal page. Each entry links to its official source.
Colorado state-level AI rules (13)
-
Enacted (not yet in effect)
CO AI Act (SB 24-205)
CO · Effective 2027-01-01 · Colo. Rev. Stat. §§ 6-1-1701 to 6-1-1707; SB 24-205 (2024)
Colorado was the first state to enact a comprehensive AI law regulating high-risk AI used to make consequential decisions about Coloradans — including credit, insurance, employment, housing, healthcare, and government services. It requires risk management, bias audits, and consumer disclosure; deceptive AI practices are deemed unfair under the Colorado Consumer Protection Act.
-
Enacted (not yet in effect)
CO ADMT Act (SB 26-189, 2026)
Colorado · Effective 2027-01-01 · Colo. SB 26-189 (2026), signed May 14, 2026, eff. January 1, 2027
Colorado Governor Jared Polis signed SB 26-189 on May 14, 2026, repealing and replacing the original Colorado AI Act (SB 24-205) before it could take effect. The replacement law creates a disclosure-focused framework for 'Automated Decision-Making Technology' (ADMT) — a narrower category than the prior law's 'high-risk AI' — applicable to consequential decisions in employment, housing, healthcare, credit, education, insurance, and government services. The original Colorado AI Act had been blocked by a federal court on constitutional grounds days before the replacement was passed. The new ADMT Act takes effect January 1, 2027.
-
Enacted (not yet in effect)
SB 26-189 (Colorado ADMT Law)
Colorado · Effective 2027-01-01 · SB 26-189 (Colo. 2026)
Colorado's replacement AI law focuses on transparency rather than broad anti-discrimination duties. Starting January 1, 2027, companies using automated decision-making technology to materially influence consequential decisions (employment, housing, lending, insurance, healthcare) must notify consumers before use and provide post-decision disclosures; developers must give deployers technical documentation.
-
Proposed / pending
Colorado Attorney General Rulemaking for the Automated Decis
Colorado · Effective 2026-06-30 · Colorado Attorney General Rulemaking for the Automated Decision-Making Technology (ADMT) Act and Chatbot Safety Act
The Colorado Attorney General's Office opened pre-rulemaking to write rules implementing the state's Automated Decision-Making Technology Act (algorithmic-discrimination protections for high-risk AI) and the Chatbot Safety Act, taking public comment through July 13, 2026 ahead of the laws' January 1, 2027 effective date.
-
In effect
CO AG Weiser
CO · Effective 2026-04-27 · CO AG Weiser — Suspension of Colorado AI Act Rulemaking and Enforcement (x.AI v. Weiser) (2026-04-27)
AG entered joint motion to stay enforcement of SB 24-205 in xAI Corp. v. Weiser, No. 1:26-cv-01515-DDD-CYC (D. Colo.; Chief Judge Daniel D. Domenico; Magistrate Judge Cyrus Y. Chung). DOJ intervened on xAI's side April 24, 2026; federal court entered enforcement stay April 27, 2026. Colorado enacted SB 26-189 (signed May 14, 2026) to repeal and replace SB 24-205; enforcement suspended until rulemaking under new ADMT law by December 31, 2026.
-
In effect
CO Intimate Digital Depictions Act (SB25-288)
Colorado · Effective 2025-08-06 · Colo. SB 25-288 (2025); see also Colo. Rev. Stat. Secs. 18-6-403, 13-21-1401 et seq.
Colorado expanded its sexual exploitation of a child statute so that realistic computer-generated or digitally created depictions of an identifiable child count as child sexually exploitative material, even when no real child was photographed. The same act creates a civil cause of action allowing a person to sue someone who discloses, or threatens to disclose, a nonconsensual intimate digital depiction (including AI-generated or edited imagery). Courts can grant restraining orders and injunctive relief, and prevailing plaintiffs can recover substantial damages.
-
In effect
Colorado Roadmap for AI in K-12 Education
Colorado Department of Education · Effective 2024-08-01 · Colorado Roadmap for AI in K-12 Education
Colorado's education department (with the Colorado Education Initiative) published a statewide roadmap providing K-12 districts practical strategies and resources for integrating AI into teaching and learning.
-
In effect
CO Candidate Deepfake Disclosure Law
Colorado · Effective 2024-07-01 · Colo. Rev. Stat. Secs. 1-45-111.5 to -111.7, 1-46-101 to -106 (HB 24-1147)
Colorado restricts distributing AI-generated deepfakes that falsely depict a candidate for elective office within set windows before a primary or general election, when the distributor knows or recklessly disregards that the depiction is false. A communication is shielded from liability if it carries a clear and conspicuous disclaimer stating the media has been edited and falsely depicts speech or conduct. Complaints can be filed with the Secretary of State, and affected candidates have a private right of action.
-
In effect
Colorado Privacy Act (CPA)
Colorado · Effective 2023-07-01 · Colo. Rev. Stat. Sec. 6-1-1301 et seq. (SB 21-190)
The Colorado Privacy Act gives state residents the right to opt out of having their personal data used for profiling when that profiling drives decisions that produce legal or similarly significant effects, such as decisions about credit, housing, employment, or services. Businesses that engage in higher-risk processing, including certain profiling, must conduct and document a data protection assessment weighing the benefits against the risks. The Colorado Attorney General enforces the law, and since January 1, 2025 may bring actions without first offering a chance to cure.
-
In effect
CO Insurance Algorithmic Discrimination Law
Colorado · Effective 2021-07-06 · Colo. Rev. Stat. Sec. 10-3-1104.9 (SB 21-169)
Colorado prohibits insurers from using outside consumer data, algorithms, or predictive models in ways that unfairly discriminate against people based on protected characteristics such as race, sex, religion, sexual orientation, disability, or gender identity. The law directs the state Insurance Commissioner to write rules that require insurers to test their data and models and show they do not produce discriminatory outcomes. Insurers must also maintain a risk-management framework to monitor for unfair discrimination. Coverage was later expanded to additional lines such as private passenger auto and health benefit plans.
-
In effect
CO SB 17-213 (AV statute)
Colorado · Effective 2017-06-01 · Colo. Rev. Stat. § 42-4-242
Colorado authorized automated driving systems, allowing AVs that can comply with all traffic laws to operate without a separate state authorization — but if the ADS cannot fully comply, the operator must coordinate with CDOT and the State Patrol before deployment.
-
Repealed / replaced
Colorado AI Act (repealed)
Colorado · SB 24-205, Colo. Rev. Stat. § 6-1-1701 et seq. (repealed/replaced 2026)
The first comprehensive US state AI law would have required developers and deployers of 'high-risk' AI systems to use reasonable care to prevent algorithmic discrimination in decisions about jobs, housing, lending, insurance, education, and healthcare. After repeated delays, it was repealed and replaced in May 2026 by a narrower transparency-focused law (SB 26-189) before it ever took effect.
-
Repealed / replaced
CO SB24-205 (original)
CO · Effective 2026-02-01 · Colo. SB 24-205 (2024) — substantially superseded by SB 26-189 (May 14, 2026)
Colorado SB24-205 was the first U.S. comprehensive high-risk AI statute (2024). The original framework was substantially rewritten by SB 26-189 after the 2026 special session — this entry is the historical record of the original law.
County and city AI rules in Colorado (9)
-
In effect
Broomfield CO 18-month data center moratorium, Ord. 2313 (eff. July 7, 2026)
Broomfield, CO · Effective 2026-07-07 · City and County of Broomfield, CO Ordinance 2313 (July 7, 2026), 18-month >=10MW data center moratorium
Broomfield, Colorado (a combined city and county) passed Ordinance 2313 on July 7, 2026, temporarily banning new data center construction for 18 months, through December 2027. The ban applies to larger data centers — those using 10 megawatts of power or more — while the city studies how to regulate them.
-
In effect
Denver Data Center Moratorium
Denver, CO · Effective 2026-05-19 · City and County of Denver, data center moratorium ordinance (adopted May 19, 2026)
Denver City Council voted 13-0 on May 19, 2026 to impose a one-year moratorium on new large data center development while the city drafts permanent zoning and land-use rules. The freeze covers new facilities above a megawatt threshold while officials study impacts on Denver's electricity grid, water supply, and neighborhood character.
-
In effect
Adams County CO Data Center Zoning Standards
Adams County, CO · Effective 2026-01-21 · Adams County Development Standards amendment (2026) (2026-01-21)
Adams County added data-center use standards requiring conditional-use approval, water-resource demonstration, noise study, and substation siting plan; responsive to multiple north-metro Denver data-center proposals.
-
In effect
Boulder County CO Generative AI Use Policy
Boulder County, CO · Effective 2025-05-13 · Boulder County Administrative Policy (2025) (2025-05-13)
Boulder County adopted generative AI use policy: requires staff training, prohibits entry of confidential or PII data into public LLMs, requires disclosure when AI is used in resident-facing communications, and bans AI-only decisions on benefits or enforcement.
-
In effect
Lochbuie CO data center moratorium (2026)
Lochbuie, CO · Town of Lochbuie, Colo. Ordinance No. 2026-720
Ordinance No. 2026-720 imposes a temporary moratorium on the submission, acceptance, processing, review and approval of all applications for any Town permit, license, land use approval or other approval for any data center within the Town of Lochbuie, and directs staff to refuse to accept for filing and to stop processing pending applications during the moratorium. It defines 'Data Center' broadly as any facility housing networked servers and IT equipment for off-site or on-site digital services; any facility whose primary use is storage, processing, management or transmission of digital data or support for cloud computing or AI services; or any computing or data-storage facility with electrical demand of 1 MW or greater, potable or non-potable water service exceeding 1% of the average-day capacity of the Town's water treatment plant, or wastewater discharge at or above 1% of the average-day capacity of its wastewater treatment plant. Continued operation of existing data centers is excluded, but expansions are subject to the moratorium.
-
In effect
Denver Public Schools AI Handbook
Denver, CO · Effective 2025-04-01 · Denver Public Schools AI Handbook (2025-04-01)
Effective April 2025, DPS authorized MagicSchool, Gemini, and NotebookLM on district devices with output monitoring and data safeguards; 1,200 teachers trained; launching a student AI advisory council.
-
In effect
Jefferson County CO Public Schools (Jeffco)
Golden, CO · Effective 2024-08-22 · Jefferson County CO Public Schools (Jeffco) — Guidelines for the Use of Generative AI (2024-08-22)
Districtwide guidelines: enterprise tools (Google Gemini for Education, Microsoft Copilot) authorized; bar on staff entering student data into consumer AI products; AI disclosure expectations for instructional materials; required AI literacy PD for staff.
-
In effect
Cheyenne Mountain SD 12 Verkada AI Facial-Recognition Camera
Cheyenne Mountain School District 12, CO · Effective 2022-08-01 · Cheyenne Mountain SD 12 Verkada AI Facial-Recognition Camera Surveillance System
Cheyenne Mountain SD 12 (Colorado Springs) deployed nearly 400 Verkada AI-enabled cameras with facial recognition to identify 'persons of interest,' installed before Colorado's 2022 statewide facial-recognition moratorium and allowed to continue under the grandfather provision.
-
Expired
Denver ends Flock Safety ALPR contract and replaces vendor a
Denver, CO · Denver ends Flock Safety ALPR contract and replaces vendor amid data-sharing concerns
After Denver ended its Flock contract over privacy and federal data-sharing concerns, the City Council voted on March 31, 2026 to approve a smaller replacement ALPR contract with Axon, with several members demanding an ALPR-regulating ordinance first.
Colorado city guides
Browse the full directory · Browse by topic · Submit a correction