LexLint.ioBeta

Know the law your code answers to.

Law / United States / Colorado

HB 24-1147, Candidate Election Deepfake Disclosures

C.R.S. 1-46-103

In force since .

An AI transparency rule binding public and private bodies.

How the hook was established
express
What makes it apply
Place of effect
Obligation class
Content labelling, Prohibition
Audit expectation
none
Setting the rule reaches
Elections

What it requires

  • Carry a clear and conspicuous disclosure that the communication has been edited and falsely appears authentic, when you distribute, publish, broadcast, or display a communication about a candidate that includes a deepfake
  • The windows are 60 days before a primary and 90 days before a general election
  • This binds any distributing party, not only the provider or deployer of the AI system

These lines are LexLint's reading of the law's text.

In the frameworks

NIST AI RMF
  • MEASURE 2.8Risks associated with transparency and accountability – as identified in the MAP function – are examined and documented.
NIST AI 600-1
OWASP Agentic Top 10
  • ASI09Human-Agent Trust Exploitation
MIT mitigations Draft
  • 2.4Content Safety Controls
  • 4.6User Rights & Recourse

Our reading of where this law's duties sit in each framework. It never says that running a control meets the law. How we read a framework against the law

Who enforces it

Settledness

As of
Open questions
When does an edit made with generative artificial intelligence stop being minimal and start to alter the meaning or significance of content for a reasonable person under section 1-46-102(1), so that the content is AI-generated content and a deepfake under section 1-46-102(3)?

What it makes you log

Logging duty

Section 1-46-103 requires a compliant disclosure to accompany a covered communication, and where the disclosure meets the format rules in subsection (2)(b), its metadata must include the disclosure statement, the identity of the tool used to create the deepfake, and the date and time of creation. That is a labeling requirement built into the communication a distributor sends, not a duty to create, keep, or later produce a separate compliance record. The section states no such record-keeping duty.

Kind
None
As of

What this law does

Drafted with AI

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made

Research summary

Legal information, not legal advice. This is LexLint's own research summary of a public legal source, and it creates no attorney-client relationship. For decisions that matter, consult qualified counsel in the relevant jurisdiction. About LexLint

No person may distribute, publish, broadcast, or display a communication about a candidate for elective office that includes a deepfake within 60 days of a primary or 90 days of a general election, unless the communication carries a specified clear and conspicuous disclosure that it has been edited and falsely appears authentic. This binds any distributing party, not only the AI system's provider or deployer, and is unaffected by the litigation and repeal touching SB 24-205 and SB 26-189.

When LexLint raises it

When your app profile says your app generates audio with AI, generates images with AI or generates video with AI.

Back to the example  ·  Lint your app

Page updated .