CO HB1008

Artificial intelligence systems must comply with the Colorado Consumer Protection Act and Colorado Anti-discrimination Act, with the attorney general authorized to bring enforcement claims against developers and deployers.

Developers and deployers of high-risk AI systems must disclose to consumers when they are interacting with an AI system rather than a human, effective October 1, 2026.

Developers must use reasonable care to protect consumers from algorithmic discrimination, provide documentation to deployers, and disclose known discrimination risks within 90 days of discovery.

Deployers must implement risk management policies, complete impact assessments before and annually after deployment, and notify the attorney general within 90 days if an AI system causes algorithmic discrimination.

Public schools, state agencies, and other public entities must ensure AI contracts comply with consumer protection and anti-discrimination laws, and contractors must indemnify public entities for violations.