Colorado rewrites AI law after Elon Musk lawsuit, targeting consequential decisions

Colorado lawmakers introduce new AI rules

Why it matters: The long-awaited, hotly contested bill could define how AI is governed in Colorado and serve as a model for future regulation. Driving the news: The latest regulatory framework, introduced Friday, would target automated decision-making technology that makes "consequential decisions" related to an individual's compensation, eligibility for and access to education, employment, housing, financial services, insurance and health care. * Any entity using AI must notify consumers and allow them to review and correct any inaccurate personal data used in decision-making. * Liability for violations of state discrimination laws may fall on the AI developer or the entity that deploys the product. The law would take effect Jan. 1, 2027, to give the attorney general's office time to craft disclosure requirements and enforcement practices. What they're saying: "This bill strikes an appropriate balance of protecting consumers while not being onerous on developers or the businesses [that] use AI technology," said Sen. Robert Rodriguez (D-Denver), the bill's main sponsor. Catch up quick: Rodriguez pushed the state's first AI regulations into law in 2024, but that generated backlash from the business community, which said the bill went too far and would hurt innovation and cost jobs. * In the 2025 legislative session and a subsequent special session, the business community and lawmakers failed to agree on changes, instead delaying the law's effective date to this June. * Gov. Jared Polis convened a working group of tech groups and consumer advocates to find a solution; the latest measure reflects many of those recommendations. Between the lines: By repealing Colorado's existing law, sponsors said it would render moot a lawsuit filed by Elon Musk's xAI company and the U.S. Department of Justice. Yes, but: President Trump's executive order restricting states from creating AI regulations appeared to target Colorado, and a new law, if approved, would likely draw more court challenges. What we're watching: The bill's first hearing could come as soon as Tuesday in the Senate's business and technology committee.

Colorado Lawmakers Move to Replace Contentious AI Law With New Rules - Decrypt

The rewrite follows arguments, including those from Elon Musk, that the original law went too far. Colorado lawmakers are moving to rewrite one of the most closely watched artificial intelligence laws and attempt to reset rules that govern how AI is used in decisions that affect jobs, housing, and access to services. The proposal would scrap Colorado's current AI law, SB24-205, passed in 2024, and replace it with new rules meant to address industry concerns while still protecting consumers. "In 2024, the general assembly enacted Senate Bill 24-205, which created consumer protections in interactions with artificial intelligence systems," the bill summary reads. "The bill repeals and reenacts those provisions with new requirements regarding the use of automated decision-making technology in consequential decisions." The new bill, SB26-189, narrows the law to systems used in "consequential decisions," including employment, education, housing, lending, insurance, healthcare, and government services. It applies to tools that process personal data to generate outputs such as predictions or rankings that influence those outcomes. The move comes after months of pushback from the AI industry over Colorado's 2024 law, which requires companies to check for and reduce bias in decisions like hiring, lending, and housing. Concerns about the original law centered on how much responsibility it places on companies developing and deploying AI in the state. In April, Elon Musk's AI company xAI sued the state to block the measure before it could take effect. The lawsuit was joined by the U.S. Department of Justice, which looked to intervene in the case and support xAI. "I do think they have a valid argument in terms of the burdens that the Colorado policy would place on these companies," Cody Barela, a partner at Armstrong Teasdale, previously told Decrypt. "The burden on them, in comparison to the delay that it causes in the AI race, might actually be a better argument." According to the new bill, developers would be required to provide documentation explaining how their systems work, what data they use, and their known limitations. They would also need to notify companies of material updates. Companies using these systems would have to notify consumers when AI is involved in a decision, explain adverse outcomes in plain language, allow individuals to access and correct their data, and request a human review. Developers would also be required to provide documentation on how their systems work, the data they use, and their limitations, and to notify companies of significant updates. If passed, the new bill would take effect Jan. 1, 2027. The new bill comes as lawmakers in other states, including New York and California, are considering similar rules targeting AI systems, and the Donald Trump Administration seeks to override state laws.