Law / United States / 
Colorado
SB 26-189 (2026), Automated Decision-Making Technology Act
An AI transparency rule binding private bodies.
- How the hook was established
- express
- What makes it apply
- Operator establishment, Place of effect, Data subject residence
- Audit expectation
- none
What it requires
- Give clear and conspicuous notice before using covered automated decision-making technology that materially influences a consequential decision
- A prominent public notice at the points where consumers interact with you satisfies that notice duty
- Where the technology produces an adverse outcome for a consumer, give the consumer, within 30 days after making the decision, a plain-language description of the decision and the technology's role in it, plus an explanation of the consumer's rights
- Consequential decisions here are education, employment, housing, financial or lending services, insurance, health care, and essential government services
- The consumer disclosure duty takes effect
These lines are LexLint's reading of the law's text.
In the frameworks
- NIST AI RMF
- MEASURE 2.8Risks associated with transparency and accountability – as identified in the MAP function – are examined and documented.
Our reading of where this law's duties sit in each framework. It never says that running a control meets the law. How we read a framework against the law
Who enforces it
Settledness
The Attorney General's rules implementing this section are proposed and have not been adopted.
- As of
- Open questions
- When is a use of covered ADMT an "incidental, trivial, or clerical" use that does not "materially influence" a consequential decision under C.R.S. 6-1-1701(13)(b)?
What it makes you log
Logging duty
Section 6-1-1704 states the deployer's point-of-interaction notice and post-adverse-outcome disclosure duties toward a consumer. It states no duty for a deployer to create, keep, or produce a record of giving that notice. Deployer record-keeping for compliance with this Part 17, including this section's disclosures, is a separate duty stated at Section 6-1-1703, and a developer's parallel duty is stated at Section 6-1-1702(4); neither is part of this section's own text.
- Kind
- None
- As of
What this law does
Prior to using a covered automated decision-making technology that materially influences a consequential decision (education, employment, housing, financial or lending services, insurance, health care, or essential government services), a deployer must provide a clear and conspicuous notice that it used or will use covered ADMT in that decision, satisfiable by a prominent public notice at points of consumer interaction.
If the ADMT produces an adverse outcome, the deployer must, within 30 days, provide a plain-language description of the decision and the technology's role, plus an explanation of the consumer's rights. Signed . The consumer disclosure duty itself takes effect . The Colorado General Assembly's own bill status page confirms the signature date.
When LexLint raises it
When your app profile says your app makes credit decisions, makes education decisions, makes employment decisions, makes health care decisions, makes housing decisions, makes insurance decisions or makes public services decisions.
Back to the example · Lint your app
Page updated .