Colorado became the first US state to enforce a comprehensive artificial intelligence consumer protection law on June 30, 2026, when Senate Bill 24-205 — the Consumer Protections for Artificial Intelligence Act — took effect after a previously delayed rollout.
What the law requires
The act targets “high-risk” AI systems, defined as those that make or substantially influence consequential decisions in employment, education, financial services, healthcare, housing, insurance, legal services, and government benefits.
Developers of such systems must document their systems’ purpose, known limitations, and discrimination risks, and must notify Colorado’s attorney general within 90 days of discovering potential algorithmic discrimination.
Deployers — organisations that put high-risk AI to work in their operations — must establish risk management policies, conduct annual impact assessments, and notify affected consumers when AI has substantially influenced a decision about them. Consumers are entitled to an explanation of adverse decisions, the opportunity to correct inaccurate personal data used in the decision, and, where feasible, access to a human review.
Background
Governor Jared Polis signed SB24-205 into law in May 2024, making Colorado the first state to enact a comprehensive AI consumer protection statute. An initial enforcement date of February 1, 2026 was pushed back to June 30 during a special legislative session in August 2025, giving developers and deployers additional time to build compliance programs.
The law exempts small businesses with fewer than 50 full-time employees, systems performing narrow procedural tasks, and anti-fraud and cybersecurity tools. Violations are treated as deceptive trade practices under Colorado’s Consumer Protection Act, carrying fines of up to $20,000 per violation. Enforcement authority rests exclusively with the Colorado attorney general — the law creates no private right of action.
Why it matters
Colorado’s law is the first state-level AI consumer protection measure in the United States to move from statute into active enforcement, arriving as federal AI legislation remains stalled in Congress. Legal experts and compliance professionals expect it to influence similar bills in other states and to serve as a working reference for companies building AI governance frameworks in anticipation of eventual federal action.