Colorado's AI Enforcement Framework Effectively Reset — January 2027 Now the Real Deadline

Colorado's original AI Act (SB 24-205), which had been scheduled to take effect June 30, 2026, was superseded by Governor Polis's signature on SB 26-189 on May 14 — a replacement law that takes effect January 1, 2027 with a substantially narrowed scope. The original law imposed comprehensive duties on deployers of high-risk AI in consequential decisions (employment, housing, healthcare, insurance, and legal services): risk management programs, impact assessments, algorithmic discrimination protections, and consumer correction rights. The replacement statute is transparency-focused rather than risk-based, eliminating the deployer duty of care and mandatory impact assessments in favor of disclosure obligations and consumer rights.

For legal tech vendors and law firms deploying AI in client-facing decisions, this legislative rollback provides interim relief but not resolution. Colorado, California, Texas, and Connecticut now represent the core state AI compliance matrix for US operations, with the Trump Administration simultaneously pursuing federal preemption through the December 2025 Executive Order and its AI Litigation Task Force. The operational advice remains: map which state laws touch your AI deployments and treat Colorado's January 2027 deadline as the revised planning date — not an invitation to defer compliance infrastructure investment.