標準簡介
科羅拉多州 AI 法案 是由 科羅拉多州 發布的現行有效標準，常用於科技、金融銀行、醫療健康、教育、服務業、政府等產業，並適用於美國等市場。
本頁整理了 科羅拉多州 AI 法案 的官方文件、目前狀態以及常見相關認證或評估機構，便於快速理解要求與落地路徑。
Algorithmic discrimination focus
The law targets known or reasonably foreseeable risks that high-risk AI systems could contribute to unlawful differential treatment.
Developer and deployer duties
Developers and deployers each have reasonable-care obligations, with deployers expected to manage impact assessments, notices, and risk controls.
US state-law signal
Colorado is an important indicator of how US state AI regulation may develop outside a single federal AI statute.
list_alt Operational Controls
- Inventory high-risk AI systems
- Define developer vs deployer responsibilities
- Conduct impact assessments for covered decisions
- Maintain risk management policies and documentation
- Provide consumer notices and appeal pathways where required
- Monitor for algorithmic discrimination and remediation needs
Who Needs to Comply?
Developers and deployers of high-risk AI systems doing business in Colorado or producing consequential decisions affecting Colorado consumers. Relevant areas include employment, lending, education, housing, insurance, healthcare, legal services, and government benefits.
Key Requirements
Determine high-risk scope
Identify AI systems that make or are a substantial factor in consequential decisions. Document why each system is or is not in scope.
Use reasonable care
Implement policies, testing, monitoring, and governance designed to protect consumers from algorithmic discrimination risks.
Run impact assessments
For deployers, assess purpose, intended use, benefits, known risks, data inputs, outputs, safeguards, and mitigation measures for high-risk systems.
Provide notices and controls
Prepare consumer-facing notices, adverse decision information, correction or appeal workflows, and internal incident escalation procedures where applicable.
Penalties & Enforcement
The Colorado Attorney General has enforcement authority. Violations may be treated as deceptive trade practices under Colorado consumer protection law, exposing companies to investigations, injunctive relief, civil penalties, and remediation obligations.