An Act concerning consumer protections in interactions with artificial intelligence systems.

• Authority: Colorado
• Parent authority: State governments
• Jurisdiction: United States
• Collections: Editors' Picks;U.S. state and local documents
• Most recent activity: Enacted
• Most recent activity date: 2024-05-17

Risk subdomain coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the risk subdomain are explicitly described.

• Unfair discrimination and misrepresentation
• Unequal performance across groups
• Lack of capability or robustness
• Lack of transparency or interpretability

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.

• Compromise of privacy
• Loss of human agency and autonomy

All other risk subdomains had no coverage in this document.

Risk Coverage Summary

The document has good coverage of approximately 5-6 subdomains, with strong focus on unfair discrimination (1.1), unequal performance across groups (1.3), privacy compromise (2.1), lack of transparency (7.4), and lack of robustness (7.3). Coverage is concentrated in discrimination/toxicity and AI system safety domains, with minimal coverage of other risk areas.

Sector coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.

• Finance & Insurance
• Health Care & Social Assistance

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the sector are described.

• Real Estate, Rental & Leasing
• Professional & Technical Services
• Scientific Research & Development Services
• Management, Administrative & Support Services
• Educational Services
• Public Administration (excl. National Security)
• National Security

All other sectors had no coverage in this document.

Sectors Summary

The document governs AI use across multiple sectors through its definition of 'consequential decisions' which explicitly covers education, employment, financial services, government services, healthcare, housing, insurance, and legal services. The regulation applies horizontally across these sectors rather than being sector-specific.

Legislative Status

Hard Law

Legislative Status Summary

This is a binding state statute enacted by the Colorado General Assembly with mandatory obligations, enforcement mechanisms through the Attorney General, and penalties for non-compliance as an unfair trade practice.

Actors

Proposer

• Entity Types: AI_Governance_Actor
• Entities: Colorado General Assembly; Senator Rodriguez; Senator Cutter; Senator Michaelson Jenet; Senator Priola; Senator Winter F.; Senator Fenberg; Representative Titone; Representative Rutinel; Representative Duran
• Summary: The document is a Senate Bill proposed and enacted by the Colorado General Assembly, with specific senators and representatives listed as sponsors.

Target

• Entity Types: AI_Developer, AI_Deployer
• Summary: The Act explicitly targets developers and deployers of high-risk AI systems doing business in Colorado. Developers are defined as persons who develop or intentionally and substantially modify AI systems, while deployers are persons who use high-risk AI systems.

Enforcer

• Entity Types: AI_Governance_Actor
• Entities: Colorado Attorney General
• Summary: The Attorney General has exclusive authority to enforce this Act and can promulgate rules for implementation. Violations constitute unfair trade practices enforceable by the Attorney General.

Monitor

• Entity Types: AI_Governance_Actor
• Entities: Colorado Attorney General
• Summary: The Attorney General has monitoring authority to require developers and deployers to disclose documentation, impact assessments, and risk management policies for evaluation of compliance.

AI Lifecycle Stages

Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems

• Plan and Design
• Collect and Process Data
• Build and Use Model
• Verify and Validate
• Deploy
• Operate and Monitor

AI Lifecycle Summary

The document covers multiple AI lifecycle stages with primary focus on deployment and operational monitoring. It addresses planning through risk management requirements, model development through documentation of training data and evaluation, verification through impact assessments, deployment through notification requirements, and ongoing monitoring through annual reviews and post-deployment oversight.

Technical Scope

Terms relating to technical scope that are mentioned or implicitly referenced in the document

• AI Systems

Technical Scope Summary

The document explicitly defines and covers AI systems broadly, with specific focus on high-risk AI systems that make or substantially influence consequential decisions. It does not mention frontier AI, general purpose AI, foundation models, generative AI, predictive AI, open-weight models, or compute thresholds. The scope is defined functionally based on use case (consequential decisions) rather than technical characteristics.