Signal · Colorado Live
What does Colorado require
right now?
The current bills, deadlines, enforcement patterns, and what your district should actually be doing about it.
curated by Loop + Ledger
Active Legislation Updated Sat Jul 25, 2026 Next deadline Jan 01, 2027 · CO SB 26-189 (2026) Source leg.colorado.gov
Laws tracked
6
In this state
Enacted
4
On the books
In motion
1
Actively moving
Next deadline
Jan 01, 2027
CO SB 26-189 (2026)
Most recently enacted
What just became law?
Enacted
CO SB 26-189 (2026)Colorado AI Act (Replacement)
Mandates pre-use consumer notices before deploying automated decision-making technology in consequential decisions. Requires 30-day explanations for adverse AI outcomes, meaningful human review rights, and developer documentation for all ADM systems. Governs high-risk AI in employment, housing, education, healthcare, and financial services. Replaces SB 24-205.
— Colorado's replacement AI Act takes effect Jan 1, 2027 — businesses using AI in hiring, lending, or education decisions need to start building pre-use notice and human review infrastructure now.
Effective: Jan 01, 2027Source →
Effective
Jan 01
2027
Watch list
What's coming up?
01JAN
Effective CO SB 26-189 (2026)
Also on the books
What else is enacted?
Enacted
SB 25-143SB 143 — School Facial Recognition Conditional Authorization
Effective July 1, 2025 — conditionally lifted Colorado's prior broad moratorium on school facial recognition while imposing new statutory restrictions. Schools may use facial recognition only for board-approved educational purposes and narrow safety/security uses. Unauthorized uses remain prohibited. Colorado is the only state with detailed school-specific facial recognition restrictions codified in statute.
Effective: Jul 01, 2025Source →
Enacted
CO HB 24-1130 (2024)Biometric Data Privacy Act
Requires written informed consent before collecting biometric data including facial geometry, fingerprints, voiceprints, and iris scans from Colorado residents. Prohibits sale or disclosure of biometric data without consent. Mandates deletion protocols when data is no longer needed. Applies to all commercial entities operating in Colorado.
— Biometric consent is now mandatory in CO — any vendor using facial recognition, voice ID, or fingerprint tech for school access, attendance, or security must have consent protocols in place.
Effective: Jul 01, 2025Source →
Enacted
CO SB 21-190 / CRS § 6-1-1301 et seq.Colorado Privacy Act (CPA)
Comprehensive privacy law covering personal data of 100,000+ Colorado consumers or 25,000+ with 25%+ revenue from data sales. Consumer rights: access, correction, deletion, portability, opt-out. Requires universal opt-out mechanism compliance, Data Protection Impact Assessments, and detailed risk documentation. No cure period; active AG enforcement.
— Colorado's privacy law has no cure period — violations are enforced immediately. Any platform handling CO resident data needs a current DPA and documented opt-out mechanism.
Effective: Jul 01, 2023Source →
In motion
What's active right now?
ACTIVE
SB 24-205Colorado AI Act
Eff. Feb 1 2026. High-risk AI systems used in consequential decisions (including education) require impact assessments.
— Candidate for CO-specific drip variant.
For context
What didn't make it?
Bills that failed, died in committee, or were vetoed · they usually come back.
FAILED
CO SB 24-205 (2024)Colorado AI Act (Original — Repealed)
Required risk management programs, consumer disclosures, and discrimination mitigation for high-risk AI systems in consequential decision domains. Signed May 2024 but repealed by the legislature on May 14, 2026 before its implementation date. Replaced by SB 26-189.
— The original CO AI Act was repealed before taking effect — reference this record to understand the legislative history and how SB 26-189 differs in scope and requirements.
Book a working session
A 20-minute working session on Colorado compliance.
See clearly.
Act strategically.
Protect what matters.