State AI law
Colorado
AI laws
We track 20 artificial-intelligence bills and regulations in Colorado. 14 have been signed or enacted.
Last updated Oct 12, 2026 · How we collect and check bills
Where Colorado’s bills stand
20 bills- Introduced
- 0
- In committee
- 0
- Passed a chamber
- 0
- Signed or enacted
- 14
- Dead or vetoed
- 6
Overview
How Colorado regulates AI
Colorado has 20 published AI-related bills in our register, 14 of them signed or enacted. Every bill below links to its own page with the status, dates and a plain-English summary.
Industries these bills touch
Colorado AI law guides
For reporters
As of October 16, 2026, Colorado has enacted 14 AI laws, according to AI Laws by State. That is the 9th most among the 50 states and D.C.
Free to quote and reuse with credit to AI Laws by State. Cite as: AI Laws by State, “Colorado AI laws,” ailawsbystate.com/state/CO, accessed October 16, 2026.
Deepfake Laws in Colorado
Colorado has enacted deepfake legislation. See how it compares with other states, including penalties, scope and enforcement.
Colorado AI bills
RSS feed for ColoradoPsychotherapy Artificial Intelligence Restrictions
Colorado's HB 26-1195 limits how licensed mental health professionals and others lawfully providing psychotherapy use AI. They may use it for administrative and supplementary support (e.g. scheduling, billing) if they stay responsible for reviewing its outputs, but may not let AI engage in therapeutic communication with clients without their synchronous, real-time participation or generate therapeutic recommendations or treatment plans without their approval. AI recording or transcription of sessions needs advance written notice and consent. No one may present AI as psychotherapy, therapist-equivalent or therapist-confidential. Signed June 3, 2026 (Chapter 358); effective August 12, 2026.
Prohibit Surveillance Price & Wage Setting
Colorado's HB 26-1210 would have banned individualized price and wage setting: using an algorithm that applies statistical modeling, data analytics, AI or similar techniques to surveillance data about a person's characteristics, online behavior or biometrics, as more than a de minimis factor in the price offered to a consumer or the wage offered to a worker. Cost-based, supply-and-demand, public-discount, loyalty and need-based pricing, consumer-report credit refusals, and wages based solely on seniority or hired-for tasks and performance with plain-language disclosure, would have been allowed. Violations would have been deceptive trade practices. Vetoed by the Governor on June 2, 2026.
Use of Artificial Intelligence in Health Care
Colorado's HB 26-1139 regulates AI in utilization review. Insurers, PBMs, utilization review organizations, behavioral health administrative services organizations and managed care entities that use it must ensure the AI relies on the individual's clinical information, not solely group data, does not unlawfully discriminate, keeps audit logs and is periodically reviewed, and must disclose their AI use and human oversight to regulators. A medical-necessity denial may not rest solely on AI output without a competent clinician's review and approval. Health plans, Medicaid and CHP+ may not pay for psychotherapy conducted by AI. Signed June 2, 2026 (Chapter 325); effective January 1, 2027.
Sunset Public Utilities Commission
Colorado HB26-1326 continues the Public Utilities Commission to 2033 and changes many utility and carrier rules. Its AI-relevant provision is Section 23: a transportation network company (TNC) must run periodic checks using facial recognition software, or equally or more effective technology approved by the commission, to prevent driver impersonation, under commission rules. TNCs that mainly serve schools or government and meet at least 90% of the school-contract safety rules are exempt. Impersonating a TNC driver becomes a class 2 misdemeanor, or a class 6 felony during a felony. Signed May 29, 2026.
Conversational Artificial Intelligence Service Operator Requirements
Colorado's HB 26-1263 regulates operators of conversational AI services: public AI systems that mainly simulate human conversation (customer-service, business and other listed uses excluded). From January 1, 2027, operators must tell users the service is AI (daily, every three hours or persistently, and when asked), run a suicide and self-harm protocol with crisis referrals, and not claim outputs come from or are endorsed by licensed health, legal or mental health professionals. For known minors they must also guard against sexual content and simulated romance, avoid unpredictable engagement rewards and offer privacy tools. Signed May 29, 2026 (Chapter 208); act effective August 12, 2026.
Automated Decision-Making Technology
Colorado's SB 26-189 repeals and reenacts the 2024 AI Act as rules for automated decision-making technology (ADMT) that materially influences consequential decisions such as hiring, lending, housing and health care. Developers must document covered ADMT for deployers; deployers must give notice before use, explain adverse outcomes within 30 days and, on request, give correction steps and, where commercially reasonable, human review. Signed May 14, 2026 (Chapter 131); applies from January 1, 2027. A stipulated April 27, 2026 order in X. AI LLC v. Weiser bars AG enforcement of 2026 laws replacing SB 24-205 for violations through 14 days after a ruling on xAI's planned injunction motion.
Use of Surveillance Technology by Law Enforcement
Colorado's SB26-071, the Surveillance Accountability and Freedom Ensured (SAFE) Act, would have set rules for law enforcement surveillance technology, including facial recognition systems, which could be used only after a warrant or in exigent circumstances with an imminent public-safety threat. The requirements would apply from July 1, 2027. The Senate Judiciary Committee postponed it indefinitely 6-1 on May 6, 2026; it is dead.
Protections for Youth on Social Media
Colorado's HB 26-1148 as introduced would add minor-protection duties for online gaming businesses (default privacy settings, an account-deletion tool, limits on using a minor's data to recommend media, a 5% fee on minors' add-on purchases) and would require social media platforms to disclose their algorithmic recommendation systems and bar using them to distribute illicit substances to minors. House Judiciary postponed it indefinitely 8-3 on April 7, 2026; it did not pass.
Prohibit Use of Personally Identifying Feature
Colorado's HB26-1049 would have made it a crime to use another person's fingerprint, voiceprint, retina or iris scan, or facial map in an advertisement, deepfake, image, video, voice recording, or other digital depiction without permission: a class 5 felony, or a class 4 felony if done to intentionally harm that person. A harmed person could sue for damages and attorney fees. The House committee postponed it indefinitely February 12, 2026; it is dead.
Increase Transparency for Algorithmic Systems
Colorado's SB 25B-004, passed in the August 2025 special session, replaced every February 1, 2026 start date in the Colorado AI Act (SB 24-205, C.R.S. 6-1-1702 to 6-1-1704) with June 30, 2026. That moved developers' and deployers' reasonable-care, documentation, risk-program, impact-assessment, notice and reporting duties and the AI-interaction disclosure. It adds no new duties. Signed August 28, 2025 (Chapter 3, 2025 First Extraordinary Session); effective November 25, 2025. SB 26-189 repeals and reenacts Part 17 effective January 1, 2027.
Artificial Intelligence Systems
Not law. Colorado's HB 25B-1009, introduced in the August 2025 extraordinary session, would have amended the Colorado AI Act (SB 24-205). It would have narrowed 'consequential decision' to employment and public safety decisions, delayed the effective date from February 1, 2026 to August 1, 2027, and exempted businesses with fewer than 250 employees or under $5 million in annual revenue and local governments with fewer than 100,000 residents. The House Business Affairs & Labor Committee postponed it indefinitely 8-4 on August 21, 2025.
Concerning preventing certain disclosures of intimate depictions, and, in connection therewith, creating a cause of action for nonconsensual…
Colorado SB 25-288 enacts the Preventing Unauthorized Disclosure of Intimate Digital Depictions Act. A digital depiction is a highly realistic image falsely appearing authentic that was created, altered or produced by generative AI, image editing software or computer-generated means. A person who discloses or threatens to disclose an intimate digital depiction without signed consent can be sued for actual damages or $150,000, exemplary damages, fees and injunctions; a disclaimer is no defense. It also extends sexual exploitation of a child to realistic computer-generated depictions of an identifiable child and updates the private-image offenses.
Public Safety Protections Artificial Intelligence
Not law. Colorado's HB 25-1212, as introduced, would have protected workers at developers that trained a foundation AI model costing at least $100 million in compute. Developers could not prevent or retaliate against workers who disclose information they have reasonable cause to believe shows a legal violation, a substantial public safety or security risk, or false or misleading statements about such risks, and would have had to notify workers and offer an anonymous internal disclosure process. Workers could sue for reinstatement, the greater of $10,000 or lost pay, and attorney fees. House Judiciary amended it; it never passed the House and its status is Lost.
Extend Prohibition on School Facial Recognition
Colorado's SB 25-143 keeps the SB 22-113 ban on schools signing facial recognition contracts by deleting its July 1, 2025 repeal date. Contracts in effect April 18, 2025 stay allowed. New exceptions cover vendor tools used with board-approved curricula, which need opt-in consent, and safety uses: an articulable and significant threat, a missing student, or a person ordered to stay off school property. Safety systems may identify only the people involved and only while such a situation is occurring. Biometric identifiers may be kept no longer than 18 months, and aggrieved parties may seek an injunction. Signed and effective April 18, 2025 (Chapter 86).
Artificial Intelligence & Biometric Technologies
Colorado's HB 24-1468 repealed and reenacted the facial recognition task force created by SB 22-113 as the Artificial Intelligence Impact Task Force. Membership grew from 15 to 26, and the focus widened from government use of facial recognition to protections for consumers and workers from AI and automated decision systems: definitions, transparency and disclosure rules, algorithmic discrimination, best practices and metrics, and facial recognition and biometric technology. It had to meet by September 1, 2024 and report by February 1, 2025, and is set to be repealed September 1, 2027. Signed June 6, 2024 (Chapter 467); effective on signature.
Online-Facilitated Misconduct & Remote Tracking
Colorado SB 24-011 closes the deepfake gap in the state's offenses of posting a private intimate image for harassment or for pecuniary gain. New subsection (2.5) of C.R.S. 18-7-107 and 18-7-108 states it is not a defense that the image is partially digitally created or altered or that the intimate parts were digitally created or altered, and both offenses now cover real or simulated intimate parts. The legislative declaration cites the rise of sexual deepfakes. Other parts of the act on online dating safety and remote tracking devices are not AI-related.
Candidate Election Deepfake Disclosures
Colorado's HB 24-1147 bars anyone from distributing a communication about a candidate (including federal candidates and incumbents) with a deepfake to the candidate's electorate in the 60 days before a primary or 90 before a general election, if they know or recklessly disregard that the candidate did not say or do what is shown, unless it clearly states: "This (image/audio/video/multimedia) has been edited and depicts speech or conduct that falsely appears to be authentic or truthful." Secretary of State complaints bring civil penalties; candidates may sue for injunctions and damages. Qualifying news, satire and parody are exempt. Signed May 24, 2024 (Chapter 250); effective July 1, 2024.
Colorado Artificial Intelligence Act
Colorado's SB 24-205 (the Colorado AI Act) covers high-risk AI that makes, or is a substantial factor in making, consequential decisions such as hiring, lending, housing, insurance and health care. Developers and deployers must use reasonable care against algorithmic discrimination; deployers need risk programs, impact assessments and notices. Signed May 17, 2024 (Chapter 198). Duties run from June 30, 2026 (SB 25B-004) until SB 26-189 replaces Part 17 on January 1, 2027. Under a stipulated April 27, 2026 order in X. AI LLC v. Weiser (D. Colo.), the Attorney General may not start enforcement over violations through 14 days after a ruling on xAI's planned preliminary-injunction motion.
Artificial Intelligence Facial Recognition
Colorado's SB 22-113 sets rules for facial recognition used by state agencies, local governments and state colleges: a notice of intent and public accountability report before use, vendor bias disclosures, testing and meaningful human review for decisions with legal or similarly significant effects, training and records. Police need a warrant or another listed basis for ongoing surveillance, real-time identification or tracking. It barred schools from new facial recognition contracts until July 1, 2025; SB 25-143 (2025) removed that end date. Its task force became the AI Impact Task Force (HB 24-1468), ending September 1, 2027. Signed June 8, 2022 (Chapter 463); effective August 10, 2022.
Concerning protecting consumers from unfair discrimination in insurance practices.
Colorado SB 21-169 bars insurers from unfairly discriminating based on race, color, national or ethnic origin, religion, sex, sexual orientation, disability, gender identity or gender expression in any insurance practice, and from using external consumer data and information sources, algorithms or predictive models that unfairly discriminate. An algorithm is a computational or machine learning process that informs human decision making in insurance practices. Commissioner rules, effective no earlier than 2023, require insurers to disclose data sources, maintain a risk-management framework, test outcomes and file attestations. Title insurance, surety and most commercial lines are exempt.
Get an email when Colorado AI bills change
We’ll email you when AI bills in Colorado are introduced or change status (at most one alert email a day), plus our weekly digest.
We’ll send a confirmation link first; nothing else is sent until you confirm. Unsubscribe anytime. Need alerts for specific bills only? Per-bill alerts come with Pro.