Back to Frameworks

Colorado Artificial Intelligence Act (proposed SB 24-205)

Colorado, United States
vproposed
5 domains
19 controls

The Colorado Artificial Intelligence Act (SB 24-205), enacted 17 May 2024 and codified at C.R.S. 6-1-1701 et seq, requires developers and deployers of high-risk AI systems to use reasonable care to protect consumers from algorithmic discrimination through documentation, risk-management programs, impact assessments, consumer notices and Attorney General disclosures. Effective date originally 1 February 2026, subsequently amended/delayed.

Verified

Framework summaries on this platform are AI-assisted interpretations for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.

Framework Domains (5)

Colorado AI Act: Consumer AI Disclosure (6-1-1704)

1 controls
Controls in the Colorado AI Act: Consumer AI Disclosure (6-1-1704) domain of Colorado Artificial Intelligence Act (proposed SB 24-205)1 controls
CodeTitle
CO-AIA-1704Disclosure of AI System to Consumers

Colorado AI Act: Defenses, Enforcement and Rules (6-1-1705 to 1707)

3 controls
Controls in the Colorado AI Act: Defenses, Enforcement and Rules (6-1-1705 to 1707) domain of Colorado Artificial Intelligence Act (proposed SB 24-205)3 controls
CodeTitle
CO-AIA-1705Affirmative Defense and Recognised Frameworks
CO-AIA-1706Enforcement by the Attorney General
CO-AIA-1707Attorney General Rulemaking

Colorado AI Act: Definitions and Scope (6-1-1701)

2 controls
Controls in the Colorado AI Act: Definitions and Scope (6-1-1701) domain of Colorado Artificial Intelligence Act (proposed SB 24-205)2 controls
CodeTitle
CO-AIA-1701-DISCRIMAlgorithmic Discrimination Definition
CO-AIA-1701-HIGHRISKHigh-Risk AI System and Consequential Decision Scope

Colorado AI Act: Deployer Duties (6-1-1703)

8 controls
Controls in the Colorado AI Act: Deployer Duties (6-1-1703) domain of Colorado Artificial Intelligence Act (proposed SB 24-205)8 controls
CodeTitle
CO-AIA-1703-1Deployer Duty of Reasonable Care
CO-AIA-1703-2Risk Management Policy and Program
CO-AIA-1703-3Impact Assessment
CO-AIA-1703-4Consumer Pre-Decision Notice
CO-AIA-1703-5Adverse Decision Explanation, Correction and Appeal
CO-AIA-1703-6Deployer Public Statement
CO-AIA-1703-7Deployer Disclosure of Algorithmic Discrimination to AG
CO-AIA-1703-8Small Deployer Exemption

Colorado AI Act: Developer Duties (6-1-1702)

5 controls
Controls in the Colorado AI Act: Developer Duties (6-1-1702) domain of Colorado Artificial Intelligence Act (proposed SB 24-205)5 controls
CodeTitle
CO-AIA-1702-1Developer Duty of Reasonable Care
CO-AIA-1702-2Developer Documentation and Disclosures to Deployers
CO-AIA-1702-3Impact-Assessment Support Artifacts
CO-AIA-1702-4Developer Public Statement
CO-AIA-1702-5Developer Disclosure of Algorithmic Discrimination

Your Compliance Coverage

If you comply with Colorado Artificial Intelligence Act (proposed SB 24-205), you already cover:

Maps to 4 other frameworks

19 total controls
OECD AI Principles
13 source controls mapped|6 target controls covered
68%
NIST AI Risk Management Framework (AI RMF 1.0)
6 source controls mapped|4 target controls covered
32%
ISO/IEC 23894:2023
1 source controls mapped|1 target controls covered
5%
NIST SP 800-53 Rev 5
1 source controls mapped|1 target controls covered
5%

Frequently Asked Questions

What is Colorado Artificial Intelligence Act (proposed SB 24-205)?

Colorado Artificial Intelligence Act (proposed SB 24-205) is a compliance framework from Colorado, United States with 5 domains and 19 controls. The Colorado Artificial Intelligence Act (SB 24-205), enacted 17 May 2024 and codified at C.R.S. 6-1-1701 et seq, requires developers and deployers of high-risk AI systems to use reasonable care to protect consumers from algorithmic discrimination through documentation, risk-management programs, impact assessments, consumer notices and Attorney General disclosures. Effective date originally 1 February 2026, subsequently amended/delayed. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.

How many controls does Colorado Artificial Intelligence Act (proposed SB 24-205) have?

Colorado Artificial Intelligence Act (proposed SB 24-205) has 19 controls organised across 5 domains. The largest domains are Colorado AI Act: Deployer Duties (6-1-1703) (8 controls), Colorado AI Act: Developer Duties (6-1-1702) (5 controls), Colorado AI Act: Defenses, Enforcement and Rules (6-1-1705 to 1707) (3 controls). Each control defines specific requirements that organisations must implement to achieve compliance.

What frameworks does Colorado Artificial Intelligence Act (proposed SB 24-205) map to?

Colorado Artificial Intelligence Act (proposed SB 24-205) maps to 4 other compliance frameworks. The top mapping partners are OECD AI Principles (68% coverage), NIST AI Risk Management Framework (AI RMF 1.0) (32% coverage), ISO/IEC 23894:2023 (5% coverage). Use our comparison tool to explore control-level mappings between frameworks.

How do I get started with Colorado Artificial Intelligence Act (proposed SB 24-205) compliance?

Start your Colorado Artificial Intelligence Act (proposed SB 24-205) compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about Colorado Artificial Intelligence Act (proposed SB 24-205) requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 19 controls and track your progress.

Start Your Compliance Journey

Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 718 frameworks.

Get Started Free →

Free forever — no credit card required