Colorado SB26-189 (Automated Decision-Making Technology)

Regulates Automated Decision-Making Technologies (ADMT) in consequential decisions affecting areas like education, employment, housing, and financial services within Colorado. Requires developers to document intended uses, limitations, and data categories used for ADMTs. Mandates deployers to disclose ADMT usage to consumers and provide post-adverse outcome details if a decision materially impacts them. Empowers the Attorney General to enforce these provisions under the Colorado Consumer Protection Act, with rule-making to clarify disclosure requirements. Prohibits indemnification clauses for unlawful discrimination resulting from ADMT decisions, aligning with anti-discrimination laws. Stipulates specific exemptions for certain technologies, including those used for cybersecurity, healthcare compliance, and under federal oversight. Establishes consumer rights for data correction and requests for human review. Clarifies that the Act does not create new private rights of action or excuse noncompliance with existing laws. Effective January 1, 2027, with some provisions effective upon passage.