Colorado
AI behavior law: bot and agent disclosure, crawler and training-data rules, automated-agent transactions, and algorithmic decision-making.
Summary
Colorado was the first US state to enact a comprehensive AI accountability law (SB 24-205, 2024), targeting high-risk AI systems used in consequential decisions. The original law was never put into force: it was twice delayed — first by the 2025 special-session AI Sunshine Act (SB 25B-004), then effectively repealed and replaced by SB 26-189 (signed May 2026), which narrows the framework to a notice-and-disclosure regime effective January 1, 2027. Separately, HB 26-1263 (signed May 2026) creates the state's first chatbot-specific safety and disclosure rules, also effective January 1, 2027. Colorado has no enacted bot-crawler or AI-training data law; the two 2027-effective statutes together form the current operative corpus.
Enacted law
Government obligations
| Instrument | Category | Effective | Source |
|---|---|---|---|
| Colorado AI Sunshine Act (SB 25B-004) (Colo. SB 25B-004 (75th General Assembly, 2025 Special Session B)) | Automated decision-making, Bot / agent disclosure | 2025-08-28 | Colorado General Assembly official bill page; Akin Gump and Baker Botts analyses; Bazelon Center fact sheet |
| Colorado Automated Decision-Making Technology Act (SB 26-189) (Colo. SB 26-189 (75th General Assembly, 2026 Regular Session)) | Automated decision-making, Bot / agent disclosure | 2027-01-01 | Colorado General Assembly official bill page; analysis via Norton Rose Fulbright, Finnegan, and Ogletree Deakins |
Private sector obligations
| Instrument | Category | Effective | Source |
|---|---|---|---|
| Colorado AI Sunshine Act (SB 25B-004) (Colo. SB 25B-004 (75th General Assembly, 2025 Special Session B)) | Automated decision-making, Bot / agent disclosure | 2025-08-28 | Colorado General Assembly official bill page; Akin Gump and Baker Botts analyses; Bazelon Center fact sheet |
| Colorado Automated Decision-Making Technology Act (SB 26-189) (Colo. SB 26-189 (75th General Assembly, 2026 Regular Session)) | Automated decision-making, Bot / agent disclosure | 2027-01-01 | Colorado General Assembly official bill page; analysis via Norton Rose Fulbright, Finnegan, and Ogletree Deakins |
| Colorado Conversational AI Safety Act (HB 26-1263) (Colo. HB 26-1263 (75th General Assembly, 2026 Regular Session)) | Bot / agent disclosure | 2027-01-01 | Colorado General Assembly official bill page; Healthier Colorado press release; Colorado Newsline 2026-05-18 |
Drafted & in discussion
| Instrument | Status | Applies to | Category | Source |
|---|---|---|---|---|
| Colorado AI Act — Original (SB 24-205) (Colo. SB 24-205 (74th General Assembly, 2024 Regular Session)) | Dead / withdrawn | Both | Automated decision-making, Bot / agent disclosure | Colorado General Assembly official bill page; American Bar Association Business Law Today (July 2024) |
Automated-access legality
Carried forward from the crawler-law index. Governs whether automated clients may access public websites in this jurisdiction.
| Dimension | Value |
|---|---|
| Authorization test | without permission |
| Public-page carve-out | yes |
| Terms-of-service browsewrap enforceable | notice dependent |
| Terms-of-service clickwrap enforceable | yes |
| Copyright exception model | fair use |
| Text and data mining — commercial status | unsettled |
| Text and data mining — opt-out mechanism | none |
| robots.txt legal weight | non binding notice |
| AI training-specific law | none |
| Privacy regime | CPA |
| Trespass to chattels | requires harm |
Last reviewed: 2026-05-24. Confidence: high. Not legal advice.