AI and data laws

311 moving · 704 enacted

ColoradoColorado

16 on file · 13 became law · 0 still moving · 0 moved in 30 days

HB 26-1195

Psychotherapy Artificial Intelligence Restrictions

Bars licensed mental health professionals from using AI to provide therapy without real-time professional oversight and restricts deceptive marketing of AI mental health services.

In force
HB 26-1139

Use of Artificial Intelligence in Health Care

Requires AI tools used in health insurance utilization review to consider individual clinical data and keeps coverage denials under human professional review.

Enacted
SB 26-189

Automated Decision-Making Technology

Repeals and replaces the 2024 Colorado AI Act with notice, explanation, human review and correction rights for consumers affected by automated decision-making technology in consequential decisions.

Enacted
SB 25-086

Protections for Users of Social Media

Would have required social media companies to publish policies, respond to reported content violations and cooperate with law enforcement; the governor vetoed it and the veto was not overridden.

Vetoed
HB 24-1130

Privacy of Biometric Identifiers and Data

Amends the Colorado Privacy Act to require written policies, notice and consent before collecting biometric identifiers, with retention and deletion rules.

In force
SB 24-041

Privacy Protections for Children's Online Data

Amends the Colorado Privacy Act to add heightened duties for online services that process the personal data of minors, including limits on targeted advertising, data sales and retention.

In force
HB 24-1147

Candidate Election Deepfake Disclosures

Requires disclosure statements on political communications that contain deepfakes of candidates and creates civil penalties and a private right of action for affected candidates.

In force
SB 21-190

Colorado Privacy Act (Protect Personal Data Privacy)

Creates a comprehensive consumer data privacy law giving Colorado residents rights to access, correct, delete and opt out of the sale and targeted advertising use of their personal data.

In force