Binding law — not yet in force or stayed
Adverse ADMT outcomes require a 30-day plain-language explanation
When covered ADMT materially influences a consequential decision that results in an adverse outcome, the deployer must, within 30 days, give a plain-language description of the decision and the ADMT's role, instructions to request more information (ADMT name/version/developer, data categories), and an explanation of consumer rights. Detect an adverse-outcome path with no explanation artifact.
co-sb26-189.adverse-outcome-explanation · C.R.S. 6-1-1704(3) · official source · applies from 2027-01-01 · jurisdictions: US-CO
Binding law — not yet in force or stayed
Deployers must give point-of-interaction notice when covered ADMT influences a consequential decision
Before a deployer uses covered automated decision-making technology (ADMT) to materially influence a consequential decision, it must give the consumer a clear and conspicuous notice that ADMT was/will be used, plus instructions to obtain more information. Detect a consequential-decision path invoking ADMT with no consumer-notice step.
co-sb26-189.consumer-notice-consequential-decision · C.R.S. 6-1-1704(1) · official source · applies from 2027-01-01 · jurisdictions: US-CO
Binding law — not yet in force or stayed
Developers of covered ADMT must document intended uses, training data, and limitations for deployers
Developers of covered ADMT must make available to each deployer documentation covering intended and harmful uses, categories of training data (incl. personal data), known limitations and risks, human-review instructions, and information the deployer needs to meet its own disclosure duties. Detect a covered-ADMT codebase with no deployer-facing documentation artifact.
co-sb26-189.developer-documentation-to-deployers · C.R.S. 6-1-1702(1) · official source · applies from 2027-01-01 · jurisdictions: US-CO
Binding law — not yet in force or stayed
Consumers can request human review and data correction after an adverse ADMT decision
After an adverse outcome from a covered-ADMT-influenced consequential decision, the deployer must, on request, provide a way to access and correct factually inaccurate personal data and an opportunity for meaningful human review and reconsideration (to the extent commercially reasonable). Detect an adverse-outcome ADMT path with no correction or human-review affordance.
co-sb26-189.human-review-and-data-correction · C.R.S. 6-1-1705(1) · official source · applies from 2027-01-01 · jurisdictions: US-CO