Skip to content
Colorado AI law: what changed in 2026 and what it now means for hiring tools
Colorado’s original AI Act never took effect. A narrower law replaced it in May 2026 and is due to apply from January 2027. Here is where that leaves employers and HR-technology vendors.
Last reviewed: August 2026
A readiness review against Colorado’s SB 26-189 disclosure duties, so you are prepared ahead of the 1 January 2027 effective date. Covers one AI system.
Request a readiness reviewFixed fee, one system. Fees exclusive of VAT where applicable. Covering more than one US rule? Our combined US report does all four for $3,250.
The original Colorado AI Act (Senate Bill 24-205) never came into force. Enforcement was paused by a stipulated federal court order in April 2026, and the Act was repealed and replaced by Senate Bill 189, signed on 14 May 2026, before its duties took effect. The replacement is due to apply from 1 January 2027, though that date is not fully settled because of ongoing litigation (xAI v Weiser).
What the new law does and does not require
Senate Bill 189 replaced the original Act with a much lighter set of duties. The earlier obligations that would have created audit-style work were removed, and nothing of that kind currently applies in Colorado.
What remains is a narrower notice and transparency framework for automated decision-making technology that materially influences a consequential decision, which includes employment. Developers must give deployers documentation about a tool. Deployers must give people notice and, in limited cases, an explanation and a route to human review.
Enforcement rests with the Attorney General, who must make rules before the law applies. As of August 2026 that rulemaking had not been published, and the effective date is not fully locked because of the xAI litigation.
What it means in practice
Employers (deployers)
Give candidates notice that an automated tool is used, and in limited cases an explanation and a route to human review of an adverse decision.
Vendors (developers)
Give deployers documentation: intended and harmful uses, categories of training data, and instructions for oversight. Notify of material updates and keep records for three years.
No audit
There is no bias-audit or impact-assessment mandate in Colorado. The old duties that resembled an audit were removed.
A readiness review, not an audit
There is no Colorado audit to sell, because there is nothing yet to audit against.
What we offer is a readiness review against the Senate Bill 189 disclosure duties: mapping where you use automated decision-making in hiring, preparing the developer and deployer disclosures, and drafting candidate notice and human-review steps, so you are ready if and when the law applies.
This page is general information, not legal advice. AI employment law is moving quickly; confirm your position with qualified counsel before relying on it.
Not sure Colorado applies to you yet?
See how Colorado sits alongside New York City, Illinois and California, and where action is actually needed now.
Compare US jurisdictions