SB 26-189 (Colorado ADMT Law)

SB 26-189 (Ch. 131, 2026; Sen. Rodriguez & Coleman, Reps. Duran & Bacon) repeals and reenacts the SB 24-205 provisions as an Automated Decision-Making Technology (ADMT) framework. The act took effect on signature (May 14, 2026); substantive duties apply from Jan. 1, 2027: developers give deployers technical documentation (intended uses, training-data categories, known limitations, usage instructions) and notice of material updates; deployers give clear and conspicuous notice at the point of interaction and, within 30 days of an adverse outcome, a plain-language description of the ADMT's role; consumers may request their personal data, correction of factually incorrect data, and meaningful human review/reconsideration after an adverse decision; developers and deployers keep records 3 years. AG enforces via the Colorado Consumer Protection Act (deceptive trade practice), with a 60-day notice-and-cure requirement before Jan. 1, 2030; no new private right of action; allocates fault between developers and deployers in discrimination suits. AG must adopt post-adverse-outcome disclosure rules by Jan. 1, 2027. Votes: Senate 34-1 (May 7, 2026; repassed 34-1 May 12); House 57-6-2 (May 9, 2026).