Colorado's landmark artificial intelligence statute never regulated anyone. Signed in May 2024 as the nation's first comprehensive state AI law, Senate Bill 24-205 was postponed twice, sued by Elon Musk's xAI with the U.S. Justice Department intervening alongside it, and finally repealed by the legislature that wrote it — all before a single obligation ever attached to a single company.
On May 14, 2026, Governor Jared Polis signed Senate Bill 26-189, replacing the Colorado AI Act with a narrower transparency regime effective January 1, 2027. Introduced May 1 by Senate Majority Leader Robert Rodriguez, the Denver Democrat who sponsored the original, it cleared the House 57-6 and the Senate 34-1 on May 12.
“Everybody lost and everybody won,” Rodriguez said after the vote. “We still have consumer protections. It's not as much as I would have liked. We're still the only state in the country to pass this legislation.”
What the 2024 law would have done
SB 24-205 grafted a European-style risk framework onto American civil rights law. It covered high-risk artificial intelligence systems — those playing a substantial factor in consequential decisions about employment, housing, lending, insurance, health care and education. Developers and deployers owed a duty of reasonable care against algorithmic discrimination. Deployers had to build risk management programs and conduct impact assessments, and firms that found discriminatory outcomes had to notify the attorney general, who held exclusive enforcement power.
Polis signed it with reservations, then worked to undo it. In a June 12, 2024 letter, Polis, Rodriguez and Attorney General Phil Weiser pledged to revisit the law, citing industry concerns about compliance costs and vague statutory terms. Amendment attempts collapsed in the 2025 regular session and again in an August special session; lawmakers instead passed SB 25B-004, signed August 28, 2025, pushing the effective date from February 1 to June 30, 2026.
The lawsuit that changed the math
On April 9, 2026, xAI sued Weiser in federal court in Colorado, arguing the AI Act violated the First Amendment, the Commerce Clause and the Fourteenth Amendment — the theory being that its anti-discrimination duties would force developers to encode a state-mandated viewpoint into models like Grok. On April 24, the Justice Department intervened — the first federal entry into litigation against a state AI law — under President Trump's December executive order directing DOJ to create an AI Litigation Task Force.
Three days later, Magistrate Judge Cyrus Y. Chung approved a stipulated order under which Weiser agreed not to enforce the AI Act, or any successor legislation, until well after a ruling on a preliminary injunction. Colorado's AI law was frozen before it ever turned on.
What survives
SB 26-189 retires high-risk artificial intelligence system in favor of automated decision-making technology that materially influences a consequential decision. Gone are the duty of care, impact assessments, risk management programs, the reporting duty and the rebuttable presumption for firms following the NIST AI Risk Management Framework.
What remains is disclosure. From 2027, deployers must notify consumers before an automated system is used in a consequential decision and explain it afterward; developers must give deployers technical documentation. Consumers get limited rights to correct inaccurate data and, sometimes, to human review. A sixty-day cure period sunsets in 2030. The attorney general keeps sole enforcement authority, must finish rulemaking first, and broad exemptions carve out many industries.
Industry called it workable. Brittany Morris Saunders, president and CEO of the Colorado Technology Association, said it “represents meaningful progress for Colorado and a more balanced path forward” and “moves Colorado toward a more workable approach for startups, small businesses, employers, and technology leaders across our state.”
Labor did not object. Kjersten Forseth, legislative director for the Colorado AFL-CIO and spokesperson for the People's Alliance for Responsible Technology, called it “a good first step to protect the interests of everyday Coloradans from some of the negative consequences of AI,” while adding that “there's still work to be done.”
The sharpest criticism came from inside the yes column. Rep. Javier Mabrey, a Denver Democrat, voted for the bill, then attacked it. “These black boxes are deciding who gets hired, who gets housing, who gets to go to their dream school,” he said. “I find it incredibly alarming that it took six months to get to this bill — a bill that does nowhere near enough to protect the people of Colorado when AI is making decisions that could make or break our lives.”
Analysis: a preview of the preemption fight
Colorado was the control experiment for whether states can regulate AI substantively. The answer: even a first-mover state with a Democratic trifecta could not hold a duty-of-care regime against industry lobbying, a governor who never wanted the bill, a federal litigation task force, and no other state passing a matching law.
The vote counts are the tell. A bill dismantling the country's most ambitious AI law passed 57-6 and 34-1 — not a partisan defeat but a consensus that the 2024 framework was unbuildable as drafted. Polis had publicly backed a proposed ten-year federal moratorium on state AI regulation, putting him at odds with Weiser, who joined 40 attorneys general opposing preemption.
Both critiques have force. Industry's vagueness objection was real: substantial factor and algorithmic discrimination were defined loosely enough that cost estimates varied wildly. So is the civil-rights objection, pressed by groups including the Electronic Privacy Information Center: a notice regime tells you a machine decided your case, not whether it decided fairly, and with no private right of action the only remedy runs through one elected official's office.
What to watch
Weiser's rulemaking comes first; the statute's reach depends on how he defines materially influences and applies the exemptions. Then the litigation: SB 26-189 removed most provisions xAI's complaint targeted, potentially mooting the claims, though DOJ wants a broader ruling. And Mabrey has vowed to drag the legislature back, naming a private right of action as the next fight.
“Everybody lost and everybody won. We still have consumer protections. It's not as much as I would have liked. We're still the only state in the country to pass this legislation.”— Robert Rodriguez, Colorado Senate Majority Leader, sponsor of both bills