Colorado House Bill 1147

• Authority: Colorado
• Parent authority: State governments
• Jurisdiction: United States
• Collections: U.S. state and local documents
• Most recent activity: Enacted
• Most recent activity date: 2024-05-24

Risk subdomain coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the risk subdomain are explicitly described.

• False or misleading information
• Disinformation, surveillance, and influence at scale
• Fraud, scams, and targeted manipulation

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.

• Pollution of information ecosystem
• Overreliance and unsafe use

All other risk subdomains had no coverage in this document.

Risk Coverage Summary

The document primarily addresses risks related to malicious actors (4.1, 4.3) and misinformation (3.1, 3.2), with specific focus on deepfakes used for disinformation and fraud in electoral contexts. It also touches on human-computer interaction risks (5.1) regarding overreliance on AI-generated content authenticity.

Sector coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.

• Information
• Public Administration (excl. National Security)

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the sector are described.

• Professional & Technical Services
• Arts, Entertainment & Recreation

All other sectors had no coverage in this document.

Sectors Summary

The document primarily governs the Information sector (broadcasting, telecommunications, internet services, publishing) and aspects of Professional and Technical Services (political consulting, campaign services). It also touches on Public Administration through its regulation of electoral communications.

Legislative Status

Hard Law

Legislative Status Summary

This is a binding state statute enacted by the Colorado General Assembly with mandatory requirements, civil penalties, enforcement mechanisms through the Secretary of State, and private rights of action for candidates.

Actors

Proposer

• Entity Types: AI_Governance_Actor
• Summary: The document is a state legislative bill enacted by the Colorado General Assembly, which is the state legislative body proposing and enacting this governance measure.

Target

• Entity Types: AI_Developer, AI_Deployer, AI_User
• Summary: The law targets any person who distributes deepfake communications about candidates, with specific provisions addressing broadcasters, publishers, and technology providers. The broad definition of 'person' encompasses individuals and organizations that create or distribute AI-generated content.

Enforcer

• Entity Types: AI_Governance_Actor
• Summary: The Secretary of State has primary enforcement authority through administrative complaint processes and rulemaking. Hearing officers impose civil penalties. District courts provide injunctive relief through private actions by candidates.

Monitor

• Entity Types: AI_Governance_Actor, Affected_Stakeholder
• Summary: The Secretary of State's office monitors compliance through its complaint review process. Candidates themselves serve as monitors by having the right to file complaints and civil actions. Any person can file complaints alleging violations.

AI Lifecycle Stages

Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems

• Deploy
• Operate and Monitor

AI Lifecycle Summary

The document primarily addresses the Deploy and Operate and Monitor stages of the AI lifecycle, focusing on the distribution and use of AI-generated deepfakes in electoral communications. It does not substantively cover earlier stages like planning, data collection, or model building.

Technical Scope

Terms relating to technical scope that are mentioned or implicitly referenced in the document

• AI Systems
• Generative AI

Technical Scope Summary

The document explicitly defines and regulates generative AI systems and AI-generated content, specifically deepfakes. It does not distinguish between frontier AI, general purpose AI, or task-specific AI, nor does it reference compute thresholds or open-weight models. The focus is on generative AI capabilities for creating image, video, audio, and multimedia content.