Colorado HB 25B-1008 (Consumer Protections for Artificial Intelligence Interactions 2025)

• Authority: Colorado
• Parent authority: State governments
• Jurisdiction: United States
• Collections: U.S. state and local documents
• Most recent activity: Defunct
• Most recent activity date: 2025-08-21

Risk subdomain coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the risk subdomain are explicitly described.

• Unfair discrimination and misrepresentation
• Lack of transparency or interpretability

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.

• Unequal performance across groups
• Lack of capability or robustness

All other risk subdomains had no coverage in this document.

Risk Coverage Summary

The document has good coverage of approximately 3 subdomains, with strong focus on unfair discrimination (1.1), lack of transparency (7.4), and moderate coverage of lack of robustness (7.3). Coverage is concentrated in discrimination prevention, transparency requirements, and system failure mitigation through risk management and impact assessments.

Sector coverage

All other sectors had no coverage in this document.

Sectors Summary

This is cross-sectoral consumer protection legislation that applies to any organization (across all sectors) that develops or deploys high-risk AI systems to make consequential decisions about consumers. The law is sector-agnostic and does not specifically regulate AI use within particular industries, but rather establishes horizontal obligations for AI developers and deployers regardless of their industry.

Legislative Status

Hard Law

Legislative Status Summary

This is a binding state statute enacted by the Colorado General Assembly with mandatory obligations, enforcement authority granted to the attorney general, and specific compliance deadlines beginning October 1, 2026.

Actors

Proposer

• Entity Types: AI_Governance_Actor
• Entities: General Assembly of the State of Colorado
• Summary: This is a house bill enacted by the Colorado state legislature, as indicated in the opening enactment clause and the bill designation (HOUSE BILL 25B-1008).

Target

• Entity Types: AI_Developer, AI_Deployer
• Summary: The legislation explicitly targets two categories of entities: developers and deployers of high-risk artificial intelligence systems. Developers are those who create, offer, sell, or license AI systems, while deployers are those who use these systems to make consequential decisions about consumers.

Enforcer

• Entity Types: AI_Governance_Actor
• Entities: Attorney General of Colorado
• Summary: The attorney general is explicitly granted enforcement authority throughout the statute, including the power to bring enforcement actions, require disclosures, evaluate compliance, and prescribe forms and manners of reporting.

Monitor

• Entity Types: AI_Governance_Actor
• Entities: Attorney General of Colorado
• Summary: The attorney general monitors compliance through ongoing oversight authority, including the power to request and evaluate documentation, impact assessments, and risk management policies to ensure compliance with the statute.

AI Lifecycle Stages

Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems

• Plan and Design
• Collect and Process Data
• Build and Use Model
• Verify and Validate
• Deploy
• Operate and Monitor

AI Lifecycle Summary

The document primarily focuses on the Deploy and Operate and Monitor stages, with strong emphasis on deployment obligations, ongoing risk management, annual impact assessments, and continuous monitoring for algorithmic discrimination. It also covers Verify and Validate through mandatory impact assessment requirements, and implicitly addresses Plan and Design through risk management policy requirements.

Technical Scope

Terms relating to technical scope that are mentioned or implicitly referenced in the document

• AI Models
• AI Systems

Technical Scope Summary

The document extensively covers AI systems and high-risk artificial intelligence systems as its primary focus. It mentions AI models implicitly through references to model cards. There are no mentions of frontier AI, general-purpose AI, foundation models, generative AI, predictive AI, compute thresholds, or open-weight models.