Colorado enacts new law regulating AI-driven decision systems

Webp 3r2l9nmmbri3huekmox6348shtyh
Alexandra Reeve Givens President & CEO at Center for Democracy & Technology | Official website

Colorado enacts new law regulating AI-driven decision systems

ORGANIZATIONS IN THIS STORY

On Friday, Colorado enacted Senate Bill 24-205 (SB 205), a new law aimed at enhancing transparency and accountability in AI-driven decision systems. This legislation requires companies to provide basic information and safeguards when using AI for high-stakes decisions affecting employment, credit, healthcare, and education. Currently, many companies make such decisions without informing the affected individuals, leading to potential errors and biases that undermine civil rights and consumer protection laws.

Despite opposition from industry groups who lobbied for a veto, Governor Jared Polis signed the bill but suggested it should be revised before its implementation in 2026. Advocates argue that weakening the bill would be a mistake as it is manageable for businesses and essential for consumer understanding of AI's impact.

SB 205 mandates that AI developers publish summaries of their systems and their bias-testing methods. Companies using AI for significant decisions must disclose its use to individuals, provide explanations for adverse outcomes, allow corrections of personal information, and offer appeals in certain cases. Additionally, all AI interactions with consumers must be disclosed upfront.

The law also requires annual impact assessments by companies deploying AI systems to identify risks of algorithmic discrimination. However, these assessments do not need third-party verification, which public interest advocates believe could lead to conflicts of interest.

Governor Polis's signing statement raised concerns about SB 205's interaction with existing civil rights laws. The statement suggested that the bill regulates outcomes rather than intentional discriminatory conduct. Critics argue this mischaracterization overlooks longstanding legal principles that consider disparate impacts in discrimination cases.

Industry groups have claimed that SB 205 imposes undue burdens on businesses, especially small ones. However, the bill’s requirements are described as straightforward due diligence practices already expected under civil rights laws. The law exempts small businesses from most obligations and includes broad trade secret protections.

Looking ahead, a task force will review potential changes to SB 205 before its effective date in February 2026. Consumer Reports has called for closing loopholes and updating provisions during Colorado’s next legislative session to strengthen enforcement and ensure comprehensive protections.

In summary, while SB 205 marks significant progress in regulating AI-driven decision-making processes, stakeholders emphasize the need for further refinements to fully realize its protective potential.

---

ORGANIZATIONS IN THIS STORY