Regulatory Watch  /  Jurisdictions  /  United States (federal)  /  Colorado

COLORADO

Regulators: Colorado Attorney General

⚖️ Latest developments 🌐 Jurisdictions 📚 Law library
Laws that apply here
Colorado AI Act (SB 26-189, replacing SB 24-205) AI Takes effect Jan 1, 2027 Colorado Privacy Act Privacy In force since Jul 2023
Also applies: United States (federal)
42 CFR Part 2 Health Date not recorded CAN-SPAM Act Communications In force since Jan 2004 Children's Online Privacy Protection Act Children In force since Apr 2000 Electronic Communications Privacy Act Communications Date not recorded Fair Credit Reporting Act Financial In force since Apr 1971 Family Educational Rights and Privacy Act Education In force since Aug 1974 FCC CPNI / privacy rules Communications Date not recorded FTC Act Section 5 Privacy Date not recorded FTC Safeguards Rule Security Date not recorded Genetic Information Nondiscrimination Act Genetic In force since Nov 2009 Gramm-Leach-Bliley Act Financial Date not recorded HIPAA Privacy, Security and Breach Notification Rules Health In force since Apr 2003 HITECH Act Health Date not recorded SEC Cybersecurity Disclosure Rules Cyber In force since Dec 2023 Telephone Consumer Protection Act Communications In force since Dec 1991 Video Privacy Protection Act Privacy In force since Nov 1988
Developments
Moderate New law Signed Colorado · Aug 17, 2026 · effective Jan 1, 2027
Colorado governor signs SB 26-189, revising AI Act to regulate ADMT in employment
On May 14, 2026, Colorado Governor signed SB 26-189, repealing and replacing the 2024 Artificial Intelligence Act. The new law, effective January 1, 2027, targets automated decision‑making technology (ADMT) that materially influences…
DE DOJ · Delaware Personal Data Privacy Act
Coming up
Jan 2027
1
Colorado governor signs SB 26-189, revising AI Act to regulate ADMT in employment
Colorado · effective
Jan 2027
1
Colorado AI Act (SB 26-189, replacing SB 24-205)
Colorado · law takes effect